$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee379627-f396-37da-a628-ec2fe82e75f2.roa File: ee379627-f396-37da-a628-ec2fe82e75f2.roa (raw, json) Hash identifier: 0NRvFHzflfU+ww9Q90BhhlB3MMsFXFEeCgeSMBbqyiw= Subject key identifier: 8A:98:03:D6:44:7B:20:01:71:9E:21:91:1F:86:EB:D9:70:3F:E4:37 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849350EBFCF13E60A5192A56100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee379627-f396-37da-a628-ec2fe82e75f2.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 104.86.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:bf:cf:13:e6:0a:51:92:a5:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=59b90036-b564-41a3-95f5-6bf8280d5966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b6:6c:de:37:e3:b4:86:b1:1e:f7:68:0e:e2: 6d:a4:a9:e4:ad:02:b1:c9:05:e8:30:fa:81:61:26: 3a:28:86:e3:86:74:35:2a:6e:7d:1f:79:aa:86:f5: a1:2c:2e:1f:ab:8e:c5:5f:63:c8:dc:db:05:db:56: f5:9a:72:c3:af:ba:c0:7c:bc:23:7b:76:32:44:fa: 13:95:2e:55:54:aa:ab:86:2f:23:06:bb:b6:2a:11: 32:49:52:92:6c:f4:ac:b6:3e:04:a0:bd:9d:ad:0c: b3:57:07:d9:76:e1:06:55:e5:85:37:9c:16:82:88: 63:3d:f9:f0:0b:fa:cd:90:b3:02:56:7a:be:3f:50: 39:d7:80:92:33:25:76:cf:c2:28:e3:8f:99:66:df: a1:99:7d:1f:05:89:7f:41:29:c0:74:92:49:4e:1c: c5:ba:3c:04:bf:66:ac:92:7d:79:74:ce:35:63:9f: 9c:01:49:1f:0d:33:13:f0:2c:0a:79:a5:52:56:89: af:60:64:e8:5e:df:43:a8:b1:53:e8:8f:06:28:7c: 52:e2:46:d1:c8:3e:da:7e:0f:f8:a6:97:76:c6:16: 31:f3:b7:d1:c5:74:59:20:c7:79:0f:fa:fb:3d:39: dc:2d:f6:4b:a0:d6:4a:3f:6f:c4:d0:c7:30:ba:5e: 81:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:98:03:D6:44:7B:20:01:71:9E:21:91:1F:86:EB:D9:70:3F:E4:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee379627-f396-37da-a628-ec2fe82e75f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.86.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:f0:d0:bd:9b:01:a6:75:98:7c:de:64:19:a9:06:0a:62:03: 6c:be:89:ba:a7:cc:df:ad:50:1e:50:02:70:a1:29:88:51:da: 5a:d7:75:55:7e:7d:36:5e:45:b2:d2:2e:21:cb:f6:81:e4:db: e9:21:76:00:4e:82:c4:06:88:83:0e:bf:f4:5a:64:80:45:72: 48:be:70:36:24:18:1d:04:2a:70:3b:b9:f8:97:89:07:b9:93: 35:7b:a7:a8:a8:07:64:77:08:6a:fc:e2:fc:65:37:40:d6:2c: 46:20:e8:20:d3:0e:b6:06:6d:bc:f2:33:b4:bd:29:63:62:87: 4d:d5:78:d8:e4:ea:fb:70:e8:8a:d3:f1:85:d0:d6:c1:dc:5d: 06:1d:9c:93:c3:41:81:6e:9d:b6:a4:50:15:6c:aa:d0:73:11: 5e:0c:01:e2:5c:a6:39:ee:6b:9c:c0:c8:9e:68:45:c7:fc:47: 41:a0:df:0e:b1:d4:28:31:7b:67:f4:de:67:89:17:de:a9:aa: bb:af:56:75:8a:6e:3d:73:53:3e:fe:b5:e3:36:50:62:a7:cf: 3a:9b:98:95:c7:79:fc:5e:56:06:96:4c:74:7a:24:da:b0:1c: 83:f6:8a:1d:85:6f:59:f6:47:88:69:ad:5f:4b:df:79:87:79: c0:98:1a:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Dr/PE+YKUZKlYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk NTliOTAwMzYtYjU2NC00MWEzLTk1ZjUtNmJmODI4MGQ1OTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrZs3jfjtIaxHvdoDuJtpKnkrQKxyQXoMPqB YSY6KIbjhnQ1Km59H3mqhvWhLC4fq47FX2PI3NsF21b1mnLDr7rAfLwje3YyRPoT lS5VVKqrhi8jBru2KhEySVKSbPSstj4EoL2drQyzVwfZduEGVeWFN5wWgohjPfnw C/rNkLMCVnq+P1A514CSMyV2z8Io44+ZZt+hmX0fBYl/QSnAdJJJThzFujwEv2as kn15dM41Y5+cAUkfDTMT8CwKeaVSVomvYGToXt9DqLFT6I8GKHxS4kbRyD7afg/4 ppd2xhYx87fRxXRZIMd5D/r7PTncLfZLoNZKP2/E0Mcwul6BTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqYA9ZEeyABcZ4hkR+G69lwP+Q3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWUzNzk2MjctZjM5Ni0z N2RhLWE2MjgtZWMyZmU4MmU3NWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaFa8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjw0L2bAaZ1mHzeZBmpBgpiA2y+ibqnzN+tUB5QAnChKYhR2lrXdVV+ fTZeRbLSLiHL9oHk2+khdgBOgsQGiIMOv/RaZIBFcki+cDYkGB0EKnA7ufiXiQe5 kzV7p6ioB2R3CGr84vxlN0DWLEYg6CDTDrYGbbzyM7S9KWNih03VeNjk6vtw6IrT 8YXQ1sHcXQYdnJPDQYFunbakUBVsqtBzEV4MAeJcpjnua5zAyJ5oRcf8R0Gg3w6x 1Cgxe2f03meJF96pqruvVnWKbj1zUz7+teM2UGKnzzqbmJXHefxeVgaWTHR6JNqw HIP2ih2Fb1n2R4hprV9L33mHecCYGmc= -----END CERTIFICATE-----Generated at Sat Apr 5 14:14:16 2025 by rpki-client