$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ab76dd7-ae28-3c92-b3e1-dbfc7d275d1b.roa File: 0ab76dd7-ae28-3c92-b3e1-dbfc7d275d1b.roa (raw, json) Hash identifier: lVtL5mGnj1vWacv3/MqIyOLNlFL7Fz97EU9icFxHS1g= Subject key identifier: 66:49:54:17:61:AB:D7:E0:9B:C4:A7:3E:DF:59:B8:57:56:11:69:74 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849B149F94C88DB0DB9E68F3900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ab76dd7-ae28-3c92-b3e1-dbfc7d275d1b.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 21342 IP address blocks: 104.104.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:f9:4c:88:db:0d:b9:e6:8f:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=4ca0e727-4384-4830-b898-aed526caf72d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0f:58:3f:50:8a:98:e3:92:21:77:57:4f:8d: 9f:61:fe:c0:0f:47:d3:b1:d9:15:a4:d6:64:4e:df: 8b:13:ef:2c:54:de:03:98:36:77:79:91:67:d6:d5: 5c:2b:f3:74:b3:31:fb:d3:a2:8e:06:e5:0d:7d:a6: f8:95:e1:42:78:b4:2c:27:fa:92:b7:94:38:6c:1a: 20:61:9e:55:93:00:25:8c:a5:a4:ed:4b:0f:b4:44: cf:17:c9:6a:99:0c:07:f5:05:79:12:4a:34:d5:1e: 7f:ad:5a:0c:77:7a:2c:98:2d:17:04:f8:ea:9b:c9: 50:f6:9a:cd:ed:75:44:84:32:98:95:df:40:69:8f: 46:97:58:de:9c:bb:93:77:33:07:fd:94:ee:e6:d5: c4:9b:87:b2:0f:ba:6f:b9:e4:5c:6b:7b:3e:5d:0b: 6b:4e:10:85:d8:27:04:c5:fd:d5:d0:d4:33:10:93: ef:32:e2:9e:63:7f:8c:5f:01:ec:94:65:49:47:25: 4d:02:6d:eb:5d:04:6b:8d:c2:d9:93:43:05:90:ce: 99:89:f0:16:e6:bf:a2:c9:68:f7:32:0e:c4:e6:e6: fe:58:6e:a5:cc:df:05:12:27:8b:ac:49:c2:0b:54: ab:49:18:0b:f6:48:1c:3a:ca:0e:58:7b:94:48:35: a0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:49:54:17:61:AB:D7:E0:9B:C4:A7:3E:DF:59:B8:57:56:11:69:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ab76dd7-ae28-3c92-b3e1-dbfc7d275d1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.104.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:72:5f:b6:9a:44:14:64:f4:08:62:50:d1:58:7d:20:6d:7a: 27:6e:92:af:2d:8e:bb:ab:01:e8:bb:fa:3c:d0:6a:f1:cd:ee: c3:87:4a:63:ae:bf:f9:dc:a3:a5:22:2e:67:d4:a6:bc:f3:44: 7a:dc:da:ec:91:98:68:b3:38:30:53:0a:ce:b7:10:1a:24:b0: 8e:a5:17:10:69:ed:fc:58:39:46:fe:59:af:db:02:70:19:db: c5:bd:09:d5:b5:90:9f:75:23:c8:a7:b1:51:d9:77:e0:9e:34: a2:d9:61:55:f8:c6:07:0a:7b:7b:62:b0:fd:98:4c:a0:12:b4: 52:38:e1:a2:97:48:e5:fd:cf:e5:d1:0d:b8:bc:ad:ae:a2:2a: 5c:b5:ab:52:a5:f2:e6:13:4a:72:bb:aa:a2:f5:7d:33:9b:9f: 26:e0:ea:12:86:85:f9:a0:b2:53:a0:b9:0f:76:e0:ab:00:da: e2:dc:84:42:4d:fd:07:ee:08:ff:8d:88:43:af:47:2c:43:22: 35:75:99:78:b8:13:4c:e1:90:3d:f4:12:14:a9:44:e6:96:dc: 1d:45:49:fa:b1:87:fd:7b:57:27:0d:c8:82:30:63:10:b4:1b: 60:ad:ac:00:c6:c5:b8:71:90:57:9c:39:2a:39:96:f6:37:6f: db:a6:07:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSflMiNsNueaPOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NGNhMGU3MjctNDM4NC00ODMwLWI4OTgtYWVkNTI2Y2FmNzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ9YP1CKmOOSIXdXT42fYf7AD0fTsdkVpNZk Tt+LE+8sVN4DmDZ3eZFn1tVcK/N0szH706KOBuUNfab4leFCeLQsJ/qSt5Q4bBog YZ5VkwAljKWk7UsPtETPF8lqmQwH9QV5Eko01R5/rVoMd3osmC0XBPjqm8lQ9prN 7XVEhDKYld9AaY9Gl1jenLuTdzMH/ZTu5tXEm4eyD7pvueRca3s+XQtrThCF2CcE xf3V0NQzEJPvMuKeY3+MXwHslGVJRyVNAm3rXQRrjcLZk0MFkM6ZifAW5r+iyWj3 Mg7E5ub+WG6lzN8FEieLrEnCC1SrSRgL9kgcOsoOWHuUSDWg2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZJVBdhq9fgm8SnPt9ZuFdWEWl0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGFiNzZkZDctYWUyOC0z YzkyLWIzZTEtZGJmYzdkMjc1ZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGg6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxyX7aaRBRk9AhiUNFYfSBteidukq8tjrurAei7+jzQavHN7sOHSmOu v/nco6UiLmfUprzzRHrc2uyRmGizODBTCs63EBoksI6lFxBp7fxYOUb+Wa/bAnAZ 28W9CdW1kJ91I8insVHZd+CeNKLZYVX4xgcKe3tisP2YTKAStFI44aKXSOX9z+XR Dbi8ra6iKly1q1Kl8uYTSnK7qqL1fTObnybg6hKGhfmgslOguQ924KsA2uLchEJN /QfuCP+NiEOvRyxDIjV1mXi4E0zhkD30EhSpROaW3B1FSfqxh/17VycNyIIwYxC0 G2CtrADGxbhxkFecOSo5lvY3b9umB9k= -----END CERTIFICATE-----Generated at Wed May 7 00:54:44 2025 by rpki-client