$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11be2762-4380-313d-b99d-4010cd8f4820.roa File: 11be2762-4380-313d-b99d-4010cd8f4820.roa (raw, json) Hash identifier: mHJznERr59FFiZCFRDYBUopAYtEx4EQyTlomGFUXE0s= Subject key identifier: BA:6F:3E:BA:0D:86:71:F9:EE:DB:E2:69:A3:06:19:07:5D:53:0C:AA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584925B3B18BDA9A563D85CF0D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11be2762-4380-313d-b99d-4010cd8f4820.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 16625 IP address blocks: 104.103.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:b1:8b:da:9a:56:3d:85:cf:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=2bedd9de-634c-4be3-899b-5240fd85ac0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c7:c2:60:1e:9c:2a:9a:b3:57:68:ce:d1:ea: 1f:73:97:05:b3:cb:93:a6:93:bf:cc:cd:c0:97:7a: 7d:f8:c3:e2:50:63:6c:29:98:6a:83:1f:23:60:3b: 9d:c4:95:23:ea:bc:0e:22:36:01:16:8c:87:6c:99: 52:f8:8c:7f:0f:56:d9:0b:7e:31:92:7a:f6:df:1d: 72:a5:79:38:05:1b:d5:ba:10:be:c9:76:57:39:fd: 82:1d:bb:00:02:5a:71:17:f6:46:69:f2:24:6e:fc: c7:0a:68:38:d3:24:49:9c:c0:2d:74:92:e6:7d:3e: 68:ba:55:c9:b6:a7:d9:b4:b8:74:7e:2f:f3:70:e5: c3:2e:ca:33:b9:53:7e:61:0f:f3:83:4a:5b:a5:91: 56:5e:f3:77:2a:e6:a5:12:1e:b6:7c:3f:cf:66:02: 9a:40:40:b1:21:7e:be:35:61:cf:a3:f7:e5:73:ac: 4d:14:13:18:62:37:e5:80:d7:ed:f5:16:cb:5a:92: 18:60:25:96:e6:41:ef:5f:a4:d0:b9:34:cb:fa:82: a7:ea:79:bc:ca:6e:4f:64:0a:69:bd:bd:22:dc:8b: 25:30:db:42:52:80:0a:53:d5:db:3e:64:e3:c4:41: 75:c0:5f:78:67:59:4a:2d:dc:07:62:4b:bb:73:a9: 8d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6F:3E:BA:0D:86:71:F9:EE:DB:E2:69:A3:06:19:07:5D:53:0C:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11be2762-4380-313d-b99d-4010cd8f4820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.103.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:ac:cc:13:48:bc:3f:06:d3:49:ea:5d:0b:3c:7b:06:69:ad: 09:1d:62:a8:60:56:64:46:01:d6:84:8a:cb:98:7f:5e:60:5e: fd:7f:6f:5d:a8:10:79:73:f2:65:24:37:2d:b5:cc:f6:b0:68: f4:57:6a:1c:9c:4e:1f:e7:fd:ce:3c:2e:7f:16:e0:b1:6e:b7: 72:d4:f0:82:88:71:6b:fc:05:86:b6:52:7e:74:7c:d9:a3:b2: aa:19:fb:99:ae:94:af:c8:b2:be:59:4b:f3:6a:15:14:28:f5: de:65:ab:eb:f2:44:e5:9e:31:0c:dc:49:0c:f4:cb:4f:e3:77: 4c:5c:f4:c6:7a:5c:f4:d9:c7:4d:30:8f:77:5b:13:8f:8c:22: 3e:9f:02:75:c6:75:a5:97:2e:37:ba:aa:5a:ef:b5:f1:e7:72: e9:c6:9a:8b:bb:43:43:b6:4f:68:eb:ac:89:05:63:f7:af:5f: 03:3f:da:ea:ce:93:9b:cc:8d:4b:e0:64:c6:4b:37:c1:a7:38: f0:12:d0:7e:a3:72:ee:c6:e0:e1:48:e3:ee:35:3a:fa:7e:3a: 99:fa:b9:6c:77:57:30:63:f6:22:2b:9b:fd:65:5e:f9:0a:c4: 57:ff:2f:5a:2b:09:04:34:18:c4:29:de:20:a4:d6:cd:c3:8a: f4:96:1d:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkls7GL2ppWPYXPDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk MmJlZGQ5ZGUtNjM0Yy00YmUzLTg5OWItNTI0MGZkODVhYzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcfCYB6cKpqzV2jO0eofc5cFs8uTppO/zM3A l3p9+MPiUGNsKZhqgx8jYDudxJUj6rwOIjYBFoyHbJlS+Ix/D1bZC34xknr23x1y pXk4BRvVuhC+yXZXOf2CHbsAAlpxF/ZGafIkbvzHCmg40yRJnMAtdJLmfT5oulXJ tqfZtLh0fi/zcOXDLsozuVN+YQ/zg0pbpZFWXvN3KualEh62fD/PZgKaQECxIX6+ NWHPo/flc6xNFBMYYjflgNft9RbLWpIYYCWW5kHvX6TQuTTL+oKn6nm8ym5PZApp vb0i3IslMNtCUoAKU9XbPmTjxEF1wF94Z1lKLdwHYku7c6mNZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpvProNhnH57tviaaMGGQddUwyqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTFiZTI3NjItNDM4MC0z MTNkLWI5OWQtNDAxMGNkOGY0ODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaGfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOszBNIvD8G00nqXQs8ewZprQkdYqhgVmRGAdaEisuYf15gXv1/b12o EHlz8mUkNy21zPawaPRXahycTh/n/c48Ln8W4LFut3LU8IKIcWv8BYa2Un50fNmj sqoZ+5mulK/Isr5ZS/NqFRQo9d5lq+vyROWeMQzcSQz0y0/jd0xc9MZ6XPTZx00w j3dbE4+MIj6fAnXGdaWXLje6qlrvtfHncunGmou7Q0O2T2jrrIkFY/evXwM/2urO k5vMjUvgZMZLN8GnOPAS0H6jcu7G4OFI4+41Ovp+Opn6uWx3VzBj9iIrm/1lXvkK xFf/L1orCQQ0GMQp3iCk1s3DivSWHTI= -----END CERTIFICATE-----Generated at Mon May 5 07:33:14 2025 by rpki-client