$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5670cda-c14c-346f-a114-35981e6e548a.roa File: e5670cda-c14c-346f-a114-35981e6e548a.roa (raw, json) Hash identifier: eTd1j8vWRwZuU/OwXyaom4dn3ftACZ9duH4Ivoh6iS8= Subject key identifier: 20:87:8B:85:C9:7C:62:BE:57:F3:90:BC:CF:5C:E1:DA:59:4A:FC:06 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849350EBE01BB5E439333E365A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5670cda-c14c-346f-a114-35981e6e548a.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 104.80.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:be:01:bb:5e:43:93:33:e3:65:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=23f28794-cc6a-43fc-be37-64e6788f72c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a7:12:f1:f6:73:a8:30:92:07:35:2e:a5:db: db:d1:78:0d:a7:c3:31:ec:63:bc:91:85:d5:b2:01: b2:5f:8f:1f:4c:7f:f6:bd:26:37:18:fb:4f:b3:53: 2c:e9:8f:43:a7:fa:4b:99:cd:5d:02:2e:4a:cc:6b: ec:37:57:75:6b:bf:12:0c:1a:c3:bd:39:f3:67:aa: 16:4f:87:0e:68:52:ff:6d:5e:74:e1:b2:04:3b:e0: b3:58:4c:aa:79:8c:5a:e0:bb:9a:2f:7a:cd:de:5a: d2:a5:11:c9:73:c0:c1:4f:e6:26:aa:f7:33:ae:e0: 64:c6:44:47:23:bd:7f:61:3d:45:fc:6b:c0:00:2c: 81:64:0d:b8:d0:74:33:03:6e:ea:40:3d:00:0c:15: 36:b6:23:c0:b5:59:cf:d4:c1:c3:b7:d0:cd:df:62: 56:0e:a8:4a:89:cc:e1:af:3c:15:d8:70:6b:6a:06: ac:32:e9:b5:90:60:2e:d2:f9:02:20:ef:39:35:a5: 84:a8:43:40:31:16:62:80:a3:c6:bd:76:7e:15:36: 2e:ea:06:e7:8a:18:c2:bf:29:48:5c:46:65:b1:ca: d2:6e:be:13:25:15:62:4c:4d:5b:fd:7a:64:a6:ea: 72:f9:83:57:e2:04:02:ec:47:da:ea:a6:bf:7a:aa: cc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:87:8B:85:C9:7C:62:BE:57:F3:90:BC:CF:5C:E1:DA:59:4A:FC:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5670cda-c14c-346f-a114-35981e6e548a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.80.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:38:0c:9c:15:60:c3:53:a6:59:f7:a6:c7:61:75:3f:36:28: 8e:5c:d8:43:2e:6c:71:2a:1b:20:dc:70:d4:b1:ac:74:57:1e: e1:13:6a:cd:45:b5:5f:40:6f:dd:70:d6:fb:c0:da:76:eb:5f: f9:16:c9:60:a5:9a:70:89:64:e5:80:2f:c5:ba:6a:f2:4b:42: b4:20:da:24:63:75:92:5f:02:70:b7:0c:e2:cd:d5:9b:48:f9: fc:55:05:ff:d1:39:db:21:69:43:ed:ec:05:e6:94:ae:f9:76: 25:b6:c0:6a:c6:57:5c:8a:fd:c0:f8:d7:1e:c2:ac:0e:5a:24: 86:ad:f0:49:35:1f:6e:6b:13:0b:7a:5a:fd:52:f1:f0:4b:25: e3:6b:d5:b8:f9:e1:33:e5:3b:b3:fb:b9:8c:ee:3d:d6:3a:da: 7f:7c:47:c7:6f:ab:50:46:7a:5e:a6:7e:c1:83:43:89:6a:22: a0:70:54:e2:15:c9:dd:f0:70:02:bf:03:8c:cb:65:f6:33:98: 5c:f5:0a:5d:7a:b4:fb:60:89:fe:22:c0:64:50:0d:73:33:d0: 31:22:70:7b:4f:85:a5:04:4d:3f:b8:66:14:35:37:da:1c:63: 26:b1:ee:45:20:5f:a0:d8:7a:f5:f1:8a:ce:17:3d:98:5b:5d: b8:65:13:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Dr4Bu15DkzPjZaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk MjNmMjg3OTQtY2M2YS00M2ZjLWJlMzctNjRlNjc4OGY3MmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqcS8fZzqDCSBzUupdvb0XgNp8Mx7GO8kYXV sgGyX48fTH/2vSY3GPtPs1Ms6Y9Dp/pLmc1dAi5KzGvsN1d1a78SDBrDvTnzZ6oW T4cOaFL/bV504bIEO+CzWEyqeYxa4LuaL3rN3lrSpRHJc8DBT+YmqvczruBkxkRH I71/YT1F/GvAACyBZA240HQzA27qQD0ADBU2tiPAtVnP1MHDt9DN32JWDqhKiczh rzwV2HBragasMum1kGAu0vkCIO85NaWEqENAMRZigKPGvXZ+FTYu6gbnihjCvylI XEZlscrSbr4TJRViTE1b/Xpkpupy+YNX4gQC7Efa6qa/eqrMPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCHi4XJfGK+V/OQvM9c4dpZSvwGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTU2NzBjZGEtYzE0Yy0z NDZmLWExMTQtMzU5ODFlNmU1NDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaFDoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFM4DJwVYMNTpln3psdhdT82KI5c2EMubHEqGyDccNSxrHRXHuETas1F tV9Ab91w1vvA2nbrX/kWyWClmnCJZOWAL8W6avJLQrQg2iRjdZJfAnC3DOLN1ZtI +fxVBf/ROdshaUPt7AXmlK75diW2wGrGV1yK/cD41x7CrA5aJIat8Ek1H25rEwt6 Wv1S8fBLJeNr1bj54TPlO7P7uYzuPdY62n98R8dvq1BGel6mfsGDQ4lqIqBwVOIV yd3wcAK/A4zLZfYzmFz1Cl16tPtgif4iwGRQDXMz0DEicHtPhaUETT+4ZhQ1N9oc Yyax7kUgX6DYevXxis4XPZhbXbhlE/0= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:13 2025 by rpki-client