$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db217d05-2151-337c-981c-de867fa6c103.roa File: db217d05-2151-337c-981c-de867fa6c103.roa (raw, json) Hash identifier: A8pJJNwkbh5y2I1Y9DGkpVWn54ReyCDiPU7FiQb02AM= Subject key identifier: 2C:B8:33:1C:17:22:8C:AE:5D:19:38:C8:2B:C3:3C:25:D4:97:E1:AE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849393E88B37B6E12B4AB0023A8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db217d05-2151-337c-981c-de867fa6c103.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 20940 IP address blocks: 104.120.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:88:b3:7b:6e:12:b4:ab:00:23:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=d29c42e8-2e9c-4288-9a67-b4809fcb9edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:61:42:e5:03:47:fe:48:a3:76:b5:63:08:72: 9d:81:05:b0:c8:de:47:6c:b6:3e:cf:4a:8c:bd:6a: 91:54:d1:4d:49:63:29:4b:44:b6:05:86:90:9d:9f: 98:04:8a:fa:e9:74:aa:1d:ad:e2:99:79:df:4e:ba: da:18:e4:c5:a0:98:24:82:37:92:e1:e0:98:18:27: d3:b1:22:a3:5b:87:74:1e:e2:aa:e4:94:16:93:59: 7f:5f:90:26:16:97:ad:a2:4f:5f:40:6b:b9:08:59: 4a:87:20:87:29:d2:19:93:e1:f1:0e:52:03:f5:c6: d1:f6:08:56:77:fd:7e:c6:a1:d6:bb:c8:da:2e:e2: d6:37:3c:a9:5b:5b:6b:de:1a:89:0f:dc:e6:25:77: 9b:e5:4c:d0:6f:6b:c2:35:9a:bc:a0:e1:49:d6:ba: 0c:34:a1:80:bb:a6:9c:f1:66:df:32:76:02:6e:bf: 6e:d2:6e:b3:49:94:18:5f:2a:07:2e:08:15:f7:5b: ff:18:99:3a:c0:09:0d:b9:04:a9:a5:13:7f:c4:a0: b1:49:92:32:a6:33:02:9e:31:58:f7:90:61:9d:a9: 71:6f:2a:a9:12:53:a3:4d:17:0d:2f:89:59:fa:2a: ba:34:35:39:54:01:a1:ec:bf:68:c0:5d:3c:cd:b5: b8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B8:33:1C:17:22:8C:AE:5D:19:38:C8:2B:C3:3C:25:D4:97:E1:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db217d05-2151-337c-981c-de867fa6c103.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.120.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:cf:e5:08:d7:27:87:27:9a:03:68:8c:d5:4c:b7:16:3b:08: 95:0f:f3:2c:4a:4f:9a:a7:2c:6a:06:20:e1:0c:54:44:40:ad: 75:b4:de:4b:2e:b2:d9:73:06:b7:90:92:12:14:29:0f:69:c4: 52:19:59:a0:8f:17:a9:ce:73:63:37:24:2c:e3:5e:2b:e2:92: d8:77:70:f8:c4:44:9b:f4:70:cd:a1:fc:2a:0f:ce:fa:97:0e: f3:b1:45:36:1b:36:81:c6:24:09:84:64:02:0b:01:95:b9:68: 8a:e8:67:41:bd:1b:d4:24:52:d4:28:1a:74:23:ca:0d:d7:6f: 10:26:24:5b:03:42:d9:ca:10:55:5b:08:61:f4:83:fb:dd:70: 55:13:46:da:9b:b0:bf:c1:17:d7:ae:70:8e:48:ff:43:23:e1: b8:6c:38:c3:12:11:a9:72:c5:ce:19:c3:9c:08:1a:e7:c0:85: 64:d7:42:69:7f:e7:f4:aa:7d:70:c0:f1:aa:33:13:b8:16:43: d5:7b:c6:b5:d6:d3:40:e6:9d:d6:87:b6:ec:4c:a9:c2:31:62: 7a:a1:74:7b:0e:66:4d:b9:93:b7:95:83:5a:4d:6c:f4:44:ec: b1:99:de:13:01:2a:1c:fb:c9:69:67:c7:9b:99:66:bc:d8:6e: 16:cc:5b:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5Poize24StKsAI6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk ZDI5YzQyZTgtMmU5Yy00Mjg4LTlhNjctYjQ4MDlmY2I5ZWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWFC5QNH/kijdrVjCHKdgQWwyN5HbLY+z0qM vWqRVNFNSWMpS0S2BYaQnZ+YBIr66XSqHa3imXnfTrraGOTFoJgkgjeS4eCYGCfT sSKjW4d0HuKq5JQWk1l/X5AmFpetok9fQGu5CFlKhyCHKdIZk+HxDlID9cbR9ghW d/1+xqHWu8jaLuLWNzypW1tr3hqJD9zmJXeb5UzQb2vCNZq8oOFJ1roMNKGAu6ac 8WbfMnYCbr9u0m6zSZQYXyoHLggV91v/GJk6wAkNuQSppRN/xKCxSZIypjMCnjFY 95BhnalxbyqpElOjTRcNL4lZ+iq6NDU5VAGh7L9owF08zbW4SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCy4MxwXIoyuXRk4yCvDPCXUl+GuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGIyMTdkMDUtMjE1MS0z MzdjLTk4MWMtZGU4NjdmYTZjMTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTP5QjXJ4cnmgNojNVMtxY7CJUP8yxKT5qnLGoGIOEMVERArXW03ksu stlzBreQkhIUKQ9pxFIZWaCPF6nOc2M3JCzjXivikth3cPjERJv0cM2h/CoPzvqX DvOxRTYbNoHGJAmEZAILAZW5aIroZ0G9G9QkUtQoGnQjyg3XbxAmJFsDQtnKEFVb CGH0g/vdcFUTRtqbsL/BF9eucI5I/0Mj4bhsOMMSEalyxc4Zw5wIGufAhWTXQml/ 5/SqfXDA8aozE7gWQ9V7xrXW00DmndaHtuxMqcIxYnqhdHsOZk25k7eVg1pNbPRE 7LGZ3hMBKhz7yWlnx5uZZrzYbhbMWwQ= -----END CERTIFICATE-----Generated at Sat Apr 5 10:56:02 2025 by rpki-client