$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4edaf82-cff8-3657-adaa-ec9b6b3b3a4b.roa File: e4edaf82-cff8-3657-adaa-ec9b6b3b3a4b.roa (raw, json) Hash identifier: zG7Wunv0F1/Tz9kYRN/PWlwGy7iO6gbxzoGR+gHMW38= Subject key identifier: EF:23:7D:F1:7B:09:3A:7F:86:5C:45:90:F1:54:9E:2C:E3:59:64:D8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848D0ABC0AA002FE92387086800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4edaf82-cff8-3657-adaa-ec9b6b3b3a4b.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 21342 IP address blocks: 104.117.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:c0:aa:00:2f:e9:23:87:08:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=66b999d5-416f-498f-b0eb-ffbf088defd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:65:e1:d1:c9:fb:a8:43:11:f7:97:82:68:bc: 22:67:5c:9d:e4:bc:20:ca:d3:cc:1d:b2:25:22:8f: 61:6e:d4:0e:e6:82:79:0a:a0:06:f9:6f:12:27:e6: 6d:d6:45:e2:a6:22:dc:76:77:d0:1f:c8:57:64:b7: 05:88:aa:06:a3:b3:25:11:d0:15:7a:58:36:74:87: f5:d6:97:84:d5:d4:3e:f0:8a:ec:5f:00:58:e3:cc: 81:1f:93:f0:c5:88:44:4d:09:f0:b9:c2:da:5a:79: 73:fe:23:64:81:51:5f:53:16:be:e5:b3:21:94:d1: 4b:9e:9f:eb:fa:81:15:71:82:3a:6b:62:65:e5:fc: 5b:ba:c6:a1:0e:78:4a:19:49:12:50:f4:8a:d4:f4: 7a:9f:67:ba:10:2f:10:21:9e:de:5d:59:b3:3a:94: b8:54:1a:91:6f:66:38:22:ce:05:21:ee:a0:25:3f: b3:28:88:ad:eb:94:20:2d:63:59:15:82:23:3b:c7: 5c:b6:c4:a9:6c:db:d0:48:50:f9:2e:b5:2f:86:7f: 9a:f2:1b:84:da:15:26:a6:4b:2e:eb:a6:e7:dc:c7: df:ef:26:42:5c:9c:a4:db:4d:20:ad:dd:69:61:00: ec:99:25:06:7a:cb:6c:5f:a2:bb:7f:44:0d:33:7f: 5f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:23:7D:F1:7B:09:3A:7F:86:5C:45:90:F1:54:9E:2C:E3:59:64:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4edaf82-cff8-3657-adaa-ec9b6b3b3a4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.117.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:9b:65:ab:d5:12:63:a0:c3:00:74:bc:93:c7:f4:f2:3e:fe: 8d:0e:5b:ec:b8:c6:a8:b9:cb:c4:25:be:a9:3f:ff:0b:20:84: 12:30:1c:ba:7d:73:8e:8f:5d:0c:a0:60:e8:f1:e0:76:30:dc: 2c:6c:77:19:69:de:95:26:01:f6:c3:0a:3d:d5:4d:ba:ad:75: 88:5e:58:1e:a9:9a:19:2d:2b:ad:7d:a6:57:a6:70:04:5a:a1: 62:ac:42:cc:d7:63:f4:29:6a:fa:8a:e3:02:c7:50:74:c0:a3: a9:a3:e3:0c:a9:08:4c:67:9d:80:d7:28:ff:94:c8:be:28:bf: ec:9c:3f:3b:13:36:31:ed:44:c4:61:b3:1c:f1:ba:38:fc:ab: ae:34:9c:7b:b4:f5:7e:20:5f:7e:a0:8b:bb:4c:8f:21:aa:47: be:17:d0:29:4e:a4:20:4c:88:90:fb:eb:34:b5:df:32:d4:71: f7:e2:c1:c0:d4:f3:12:a3:7c:22:b9:07:50:33:af:04:e5:67: a6:13:1f:e9:f9:17:ab:8a:26:a6:9c:73:d2:fd:2b:9e:12:13: 63:8e:b2:d9:9a:c1:d6:bf:13:06:b1:d4:8e:2c:3e:1a:62:37: b6:54:e4:c2:b6:0b:14:35:d8:d9:1a:23:39:c3:79:c2:75:4d: 0c:61:de:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq8CqAC/pI4cIaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk NjZiOTk5ZDUtNDE2Zi00OThmLWIwZWItZmZiZjA4OGRlZmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmXh0cn7qEMR95eCaLwiZ1yd5LwgytPMHbIl Io9hbtQO5oJ5CqAG+W8SJ+Zt1kXipiLcdnfQH8hXZLcFiKoGo7MlEdAVelg2dIf1 1peE1dQ+8IrsXwBY48yBH5PwxYhETQnwucLaWnlz/iNkgVFfUxa+5bMhlNFLnp/r +oEVcYI6a2Jl5fxbusahDnhKGUkSUPSK1PR6n2e6EC8QIZ7eXVmzOpS4VBqRb2Y4 Is4FIe6gJT+zKIit65QgLWNZFYIjO8dctsSpbNvQSFD5LrUvhn+a8huE2hUmpksu 66bn3Mff7yZCXJyk200grd1pYQDsmSUGestsX6K7f0QNM39fTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8jffF7CTp/hlxFkPFUnizjWWTYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTRlZGFmODItY2ZmOC0z NjU3LWFkYWEtZWM5YjZiM2IzYTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHW0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEybZavVEmOgwwB0vJPH9PI+/o0OW+y4xqi5y8Qlvqk//wsghBIwHLp9 c46PXQygYOjx4HYw3Cxsdxlp3pUmAfbDCj3VTbqtdYheWB6pmhktK619plemcARa oWKsQszXY/QpavqK4wLHUHTAo6mj4wypCExnnYDXKP+UyL4ov+ycPzsTNjHtRMRh sxzxujj8q640nHu09X4gX36gi7tMjyGqR74X0ClOpCBMiJD76zS13zLUcffiwcDU 8xKjfCK5B1AzrwTlZ6YTH+n5F6uKJqacc9L9K54SE2OOstmawda/Ewax1I4sPhpi N7ZU5MK2CxQ12NkaIznDecJ1TQxh3vY= -----END CERTIFICATE-----Generated at Tue Apr 8 17:09:33 2025 by rpki-client