$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9fa816cf-f742-38b8-abc3-b6e6cac0881f.roa File: 9fa816cf-f742-38b8-abc3-b6e6cac0881f.roa (raw, json) Hash identifier: kNg37t9+RLh4/64zkYCyv0j3OSjGKGuqcHLSu5bLPmY= Subject key identifier: 5B:E6:77:75:D3:E5:40:4F:D0:D1:C6:0A:E0:A3:7D:8D:57:00:2E:F5 Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F432858491ED6E71FD0094076F29914A0 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9fa816cf-f742-38b8-abc3-b6e6cac0881f.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 8014 IP address blocks: 104.166.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:e7:1f:d0:09:40:76:f2:99:14:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=b2f77a11-783d-4dbd-a013-bf68441dae84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9a:de:60:7b:0e:69:61:69:ab:7e:ff:73:96: a7:1b:f5:2c:c3:26:5f:3c:fe:47:e2:23:2a:21:aa: 07:6b:d3:24:5c:8c:8f:2c:61:67:7a:b3:ec:9d:24: 25:9b:12:e4:a4:ce:89:fa:f8:1c:39:1c:42:e6:31: 88:8e:4f:7b:8a:fe:2b:6b:72:f2:dd:83:11:5c:3c: 0d:b0:54:57:9a:12:6f:60:a2:7f:36:b8:2c:85:b0: be:f3:69:dd:02:eb:d5:f3:b8:ae:a1:5b:10:02:e4: 45:19:1d:26:37:63:65:6a:56:11:ef:10:c3:93:99: b9:f0:61:29:82:a0:db:73:4d:dd:24:29:2a:1c:4a: 99:e1:9b:1d:45:67:7e:c1:b3:84:47:0a:e7:6d:2f: 87:d5:a2:09:be:49:1e:ae:57:5a:d1:d9:1d:c9:6d: 33:b7:74:7b:9c:a1:41:aa:8b:35:72:3a:31:09:07: 95:3f:0e:70:a8:5a:bf:1f:02:b0:a3:8b:8b:54:e3: f5:a6:35:73:4f:3d:be:25:8f:5e:31:54:06:24:b2: 0a:1f:79:3f:3a:b1:c9:d0:43:a1:50:9e:71:de:e1: 8a:95:47:2e:9b:19:43:a5:b9:03:88:6a:0e:0b:c8: 11:22:5a:45:20:34:30:0f:1a:d0:f1:e5:34:c7:5c: b3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E6:77:75:D3:E5:40:4F:D0:D1:C6:0A:E0:A3:7D:8D:57:00:2E:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9fa816cf-f742-38b8-abc3-b6e6cac0881f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 104.166.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:47:ec:2c:09:a3:38:02:99:e1:2e:b1:07:fd:ee:d8:16:81: 2e:8d:5d:d5:13:46:f2:01:42:6e:20:99:4e:9a:4a:56:68:6c: 8b:dc:27:0a:76:fb:47:01:ff:d2:3c:44:d8:d1:74:ca:58:83: ed:69:34:88:b5:86:1c:8a:b6:87:ea:df:1d:44:83:bc:8e:6a: df:5b:f9:5c:83:76:56:05:06:4e:60:47:ec:4d:54:3c:1e:e4: 6d:60:04:89:5e:78:cf:40:9d:dd:70:56:7a:26:5e:9c:1b:38: 42:12:6f:93:b7:50:23:a4:b6:dc:ac:26:6c:53:63:c0:80:34: 1d:29:a4:e6:00:5e:d9:a8:7a:aa:1f:22:2f:62:67:0e:9f:63: b5:a2:1c:97:61:0b:72:dc:ac:36:0d:d5:84:e7:e4:de:89:de: b8:26:ab:cb:fd:3c:07:6c:eb:ca:b7:30:53:62:bc:d6:9c:7b: 98:e1:a0:32:5e:ee:de:89:16:91:73:92:26:5a:cf:f9:cd:c0: 4b:5f:da:df:62:03:a6:c8:ba:75:ed:2e:cc:fa:4f:34:5f:60: fc:07:ee:2f:21:82:84:ca:cf:91:35:87:0d:a4:8c:0a:d0:01: 7a:dd:f7:c6:72:ad:02:e0:78:fa:be:f3:ab:91:f2:13:a8:c4: ac:51:6e:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1ucf0AlAdvKZFKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk YjJmNzdhMTEtNzgzZC00ZGJkLWEwMTMtYmY2ODQ0MWRhZTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppreYHsOaWFpq37/c5anG/UswyZfPP5H4iMq IaoHa9MkXIyPLGFnerPsnSQlmxLkpM6J+vgcORxC5jGIjk97iv4ra3Ly3YMRXDwN sFRXmhJvYKJ/NrgshbC+82ndAuvV87iuoVsQAuRFGR0mN2NlalYR7xDDk5m58GEp gqDbc03dJCkqHEqZ4ZsdRWd+wbOERwrnbS+H1aIJvkkerlda0dkdyW0zt3R7nKFB qos1cjoxCQeVPw5wqFq/HwKwo4uLVOP1pjVzTz2+JY9eMVQGJLIKH3k/OrHJ0EOh UJ5x3uGKlUcumxlDpbkDiGoOC8gRIlpFIDQwDxrQ8eU0x1yz1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvmd3XT5UBP0NHGCuCjfY1XAC71MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvOWZhODE2Y2YtZjc0Mi0z OGI4LWFiYzMtYjZlNmNhYzA4ODFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaKYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9H7CwJozgCmeEusQf97tgWgS6NXdUTRvIBQm4gmU6aSlZobIvcJwp2 +0cB/9I8RNjRdMpYg+1pNIi1hhyKtofq3x1Eg7yOat9b+VyDdlYFBk5gR+xNVDwe 5G1gBIleeM9And1wVnomXpwbOEISb5O3UCOkttysJmxTY8CANB0ppOYAXtmoeqof Ii9iZw6fY7WiHJdhC3LcrDYN1YTn5N6J3rgmq8v9PAds68q3MFNivNace5jhoDJe 7t6JFpFzkiZaz/nNwEtf2t9iA6bIunXtLsz6TzRfYPwH7i8hgoTKz5E1hw2kjArQ AXrd98ZyrQLgePq+86uR8hOoxKxRblw= -----END CERTIFICATE-----Generated at Sun Apr 6 23:54:18 2025 by rpki-client