$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c071458-d62e-319c-a981-5c002a7803e3.roa File: 5c071458-d62e-319c-a981-5c002a7803e3.roa (raw, json) Hash identifier: jFLsPhLheTwSwwq74Akr1rjYWVXKOthI506uIwJ3TlI= Subject key identifier: 0C:E8:42:E3:09:FC:E2:CC:9E:5C:52:10:4A:CF:D4:A5:DC:34:58:CE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849393E86782025A61EB763D480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c071458-d62e-319c-a981-5c002a7803e3.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 2519 IP address blocks: 104.115.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:86:78:20:25:a6:1e:b7:63:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=7c8433a0-7d3c-46d1-9708-e076605992ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:b8:f3:d8:78:f9:3e:ae:fd:b0:c8:a9:46: a4:8d:9a:33:57:ae:61:dd:29:86:a5:51:24:37:8e: 85:bc:7d:ed:98:0d:ea:bc:27:ea:f1:e5:38:8e:25: 7b:30:c0:2a:92:34:38:52:cb:04:4f:fd:3a:09:54: 51:fd:fd:9f:a2:29:0f:03:dd:e5:a1:cc:12:a7:71: f2:1e:bc:ee:e6:85:34:90:b6:5f:65:46:06:0a:4a: 59:74:5a:6d:13:8b:6d:0f:5a:97:a2:e8:57:ba:25: 89:46:51:d7:04:6d:14:ec:64:26:e9:06:9e:89:4b: 18:f3:08:04:38:8a:22:59:8d:37:f3:4c:ef:50:2c: 96:0b:5f:53:a4:8b:d6:7d:f2:e5:46:b0:6d:57:aa: dd:6b:7c:6d:10:ee:52:5b:36:fa:dd:17:66:6c:70: b6:e5:aa:1c:50:8f:f6:ef:92:55:90:51:37:34:db: bd:cb:2f:8c:10:46:a3:6c:13:f2:8f:bf:ec:31:ff: f4:fe:61:ed:b3:1c:0e:b5:30:8a:78:b6:cc:77:81: 5a:7a:f2:54:79:28:d9:cd:73:42:14:25:b9:fc:07: 62:3d:af:d1:32:6e:23:e3:16:ca:17:76:de:31:0a: a1:02:f0:81:c5:f3:31:11:ed:ab:39:aa:76:3a:1b: 3e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E8:42:E3:09:FC:E2:CC:9E:5C:52:10:4A:CF:D4:A5:DC:34:58:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c071458-d62e-319c-a981-5c002a7803e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.115.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:cb:27:01:2b:a9:bd:d9:d2:a2:64:bb:5b:46:03:57:b2:d7: e6:3b:dd:40:98:f3:2f:69:c9:5b:50:23:7c:f0:13:6e:9d:5f: f0:ee:bd:69:45:af:6c:be:23:12:b8:23:2b:a7:96:4e:4f:a3: 29:b4:01:61:3c:07:8d:64:79:30:15:b6:6b:ee:ef:6c:2c:ea: 51:fe:cd:23:04:3a:1a:c9:f3:cd:09:f0:bd:9d:80:f4:fb:e5: 91:bf:1b:3f:5e:ae:54:cf:25:26:9c:f7:6b:bc:02:0a:c0:d3: bf:c7:50:e5:dd:de:db:5d:bf:3b:eb:12:a5:25:21:bd:8c:69: f8:0c:bf:d2:3b:a6:44:58:45:86:26:ef:d7:fa:d6:15:ec:76: a0:43:5b:e5:43:6b:bc:8c:54:93:3d:e5:df:9c:0e:96:fd:34: 74:d6:f5:51:ad:5c:e5:cc:93:f4:bd:f9:07:e0:52:2f:37:2c: b3:c7:35:2e:bf:65:ca:f1:9e:f6:fc:d5:15:47:93:eb:e5:a9: 08:4c:e7:5c:cf:d5:5b:b3:e5:58:31:23:d3:da:04:9e:62:ca: 86:ff:ec:04:4c:ac:b1:83:f4:93:d5:45:bd:3d:83:36:0f:07: a2:84:49:01:c4:55:78:e6:e0:8e:05:74:e1:3c:11:95:5d:10: 6d:ff:a2:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PoZ4ICWmHrdj1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk N2M4NDMzYTAtN2QzYy00NmQxLTk3MDgtZTA3NjYwNTk5MmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviS489h4+T6u/bDIqUakjZozV65h3SmGpVEk N46FvH3tmA3qvCfq8eU4jiV7MMAqkjQ4UssET/06CVRR/f2foikPA93locwSp3Hy Hrzu5oU0kLZfZUYGCkpZdFptE4ttD1qXouhXuiWJRlHXBG0U7GQm6QaeiUsY8wgE OIoiWY0380zvUCyWC19TpIvWffLlRrBtV6rda3xtEO5SWzb63RdmbHC25aocUI/2 75JVkFE3NNu9yy+MEEajbBPyj7/sMf/0/mHtsxwOtTCKeLbMd4FaevJUeSjZzXNC FCW5/AdiPa/RMm4j4xbKF3beMQqhAvCBxfMxEe2rOap2Ohs+hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzoQuMJ/OLMnlxSEErP1KXcNFjOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWMwNzE0NTgtZDYyZS0z MTljLWE5ODEtNWMwMDJhNzgwM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHOkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7LJwErqb3Z0qJku1tGA1ey1+Y73UCY8y9pyVtQI3zwE26dX/DuvWlF r2y+IxK4Iyunlk5Poym0AWE8B41keTAVtmvu72ws6lH+zSMEOhrJ880J8L2dgPT7 5ZG/Gz9erlTPJSac92u8AgrA07/HUOXd3ttdvzvrEqUlIb2MafgMv9I7pkRYRYYm 79f61hXsdqBDW+VDa7yMVJM95d+cDpb9NHTW9VGtXOXMk/S9+QfgUi83LLPHNS6/ Zcrxnvb81RVHk+vlqQhM51zP1Vuz5VgxI9PaBJ5iyob/7ARMrLGD9JPVRb09gzYP B6KESQHEVXjm4I4FdOE8EZVdEG3/okE= -----END CERTIFICATE-----Generated at Wed May 7 04:19:03 2025 by rpki-client