$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8d1f784-2db3-30a3-a0be-8fe061020362.roa File: f8d1f784-2db3-30a3-a0be-8fe061020362.roa (raw, json) Hash identifier: /oTGvIwfWK1f6eDYng0dw0Fi3WJeAq1QSSzXq5dBZVk= Subject key identifier: D5:D2:76:C7:7E:22:5F:59:64:D5:08:2A:47:79:8C:7D:9E:DC:13:46 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849350EBCDCFDC52A5A87151A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8d1f784-2db3-30a3-a0be-8fe061020362.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 104.104.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:bc:dc:fd:c5:2a:5a:87:15:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=a184b289-29e1-4427-bc20-e1bc79500af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a9:76:be:78:69:f4:d1:11:f9:8b:a7:ec:3f: fe:85:fa:e6:b9:d7:0b:72:b0:45:dc:39:25:46:09: 6d:dc:17:1f:aa:d1:ea:58:18:1a:d4:bc:86:09:c4: 02:42:ee:59:f1:1d:bc:5f:ff:3c:33:79:7b:a3:77: bc:dd:b1:07:4d:7b:f3:d0:57:5c:20:69:25:5a:28: e1:61:1e:30:34:5b:88:f9:f2:d9:32:cc:e7:bd:ec: f5:64:28:97:1f:85:76:39:6f:22:c7:c3:cd:8b:5b: 8b:c6:9c:05:e0:99:ed:f9:4a:2e:f8:8d:7f:b6:f0: 13:df:4b:5c:c8:9c:d1:83:e1:7b:74:d6:d8:b3:e6: 8d:4c:9b:09:ba:c5:81:f0:08:a2:41:0a:66:bd:9b: 16:a3:86:ff:6e:00:27:5a:f2:85:72:9b:03:79:e4: ae:7d:ec:dd:77:65:b6:7f:21:18:61:cc:0b:75:54: 42:d1:51:37:78:dd:39:f9:44:f3:2d:16:41:e0:14: fc:ee:4d:86:ea:0b:19:2b:45:b2:36:0d:38:1b:99: 2e:83:2f:22:c3:a1:f4:12:cc:8f:fb:79:36:2f:cb: 4c:3d:19:3b:81:64:84:c2:f9:d0:90:e7:f3:f8:1d: d4:52:3e:d1:77:23:9e:dc:f6:e3:b0:8f:fd:5b:88: c3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D2:76:C7:7E:22:5F:59:64:D5:08:2A:47:79:8C:7D:9E:DC:13:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8d1f784-2db3-30a3-a0be-8fe061020362.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.104.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:47:ba:a3:8d:cb:37:61:b8:68:ca:7f:68:e3:f5:c8:cb:d6: b3:d0:8e:c1:36:25:2e:75:0c:47:5f:15:74:6f:5f:30:68:b8: 24:a0:ca:a4:9b:27:48:59:a9:db:6d:48:a9:7d:e5:66:13:d4: a7:81:52:2f:be:6e:9d:5c:60:f5:2f:3e:fe:04:6d:85:51:e9: 65:ec:14:da:e4:6e:61:63:47:9a:5d:1e:7d:0c:7a:12:27:8f: dd:77:fb:5c:44:7c:73:85:85:2f:b9:f1:c0:3d:4c:b6:0c:26: 0f:38:77:41:64:17:7c:bd:39:3e:02:fd:13:c5:67:38:79:07: 2b:e0:0d:48:9e:57:00:fb:c5:b5:b0:59:86:d8:f5:ef:a5:fd: 14:ab:2a:db:13:37:3b:1d:0c:28:97:6e:40:c8:6b:ca:d0:4a: e9:e2:2f:d9:15:d6:e4:c9:a8:eb:4b:bd:f7:85:96:54:1d:08: e0:55:74:dd:42:94:52:21:21:de:7f:6d:59:e2:ac:00:57:da: 81:24:ce:c8:0e:cd:60:6a:a5:5a:be:a8:41:1b:77:d1:01:ca: a3:e0:ea:7e:eb:7c:49:5e:4f:92:5b:62:9b:29:0f:8d:3c:22: 9c:18:a5:51:54:db:23:b9:b8:a0:70:10:fa:ea:8f:42:c2:e7: d6:8f:56:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Drzc/cUqWocVGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YTE4NGIyODktMjllMS00NDI3LWJjMjAtZTFiYzc5NTAwYWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApal2vnhp9NER+Yun7D/+hfrmudcLcrBF3Dkl Rglt3BcfqtHqWBga1LyGCcQCQu5Z8R28X/88M3l7o3e83bEHTXvz0FdcIGklWijh YR4wNFuI+fLZMsznvez1ZCiXH4V2OW8ix8PNi1uLxpwF4Jnt+Uou+I1/tvAT30tc yJzRg+F7dNbYs+aNTJsJusWB8AiiQQpmvZsWo4b/bgAnWvKFcpsDeeSufezdd2W2 fyEYYcwLdVRC0VE3eN05+UTzLRZB4BT87k2G6gsZK0WyNg04G5kugy8iw6H0EsyP +3k2L8tMPRk7gWSEwvnQkOfz+B3UUj7RdyOe3PbjsI/9W4jDfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXSdsd+Il9ZZNUIKkd5jH2e3BNGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjhkMWY3ODQtMmRiMy0z MGEzLWEwYmUtOGZlMDYxMDIwMzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGg8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElHuqONyzdhuGjKf2jj9cjL1rPQjsE2JS51DEdfFXRvXzBouCSgyqSb J0hZqdttSKl95WYT1KeBUi++bp1cYPUvPv4EbYVR6WXsFNrkbmFjR5pdHn0MehIn j913+1xEfHOFhS+58cA9TLYMJg84d0FkF3y9OT4C/RPFZzh5ByvgDUieVwD7xbWw WYbY9e+l/RSrKtsTNzsdDCiXbkDIa8rQSuniL9kV1uTJqOtLvfeFllQdCOBVdN1C lFIhId5/bVnirABX2oEkzsgOzWBqpVq+qEEbd9EByqPg6n7rfEleT5JbYpspD408 IpwYpVFU2yO5uKBwEPrqj0LC59aPVqw= -----END CERTIFICATE-----Generated at Sat Apr 5 11:03:43 2025 by rpki-client