$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90c8b7a6-5624-3fab-ad68-b7316de9a866.roa File: 90c8b7a6-5624-3fab-ad68-b7316de9a866.roa (raw, json) Hash identifier: +mClEEke9xOOt9SYH2MZI/HdDmbooMdfuVCNi41wVb4= Subject key identifier: D3:FC:AC:8D:40:6C:03:F9:10:7F:7D:88:B8:1C:E7:BE:E2:2D:87:42 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849350EBAC7105975B039DB1480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90c8b7a6-5624-3fab-ad68-b7316de9a866.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 577 IP address blocks: 104.98.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:ba:c7:10:59:75:b0:39:db:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=650885b5-5186-4f6d-a4d1-b6e91313c05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cd:4b:a9:d6:e1:52:15:63:61:06:7d:66:b3: e6:47:9d:c9:5e:b1:68:e9:dc:3c:31:13:80:7d:36: 1c:23:7e:9c:23:35:2c:7a:88:0b:bf:5f:e0:68:43: 33:3a:f3:08:80:9d:ea:4b:69:31:94:55:aa:f9:e9: 8c:31:65:50:b7:74:3e:ab:43:89:f9:2b:e0:9b:30: 69:7d:1b:9d:c4:19:15:c1:77:69:b6:26:cf:95:75: fe:a1:c3:ca:17:4f:ca:ae:7b:74:91:e7:be:3d:39: 72:bb:30:5d:a9:73:2d:6e:20:44:82:83:4e:e6:15: e4:1e:18:9b:9e:7c:ff:3a:a6:f8:86:0a:b5:8b:38: 0b:78:69:11:0c:41:fa:87:b2:70:65:ef:0b:40:05: 57:59:7a:86:26:65:dd:00:54:47:4b:1a:bc:fa:6d: 53:7e:03:2c:ee:a7:d6:11:93:53:13:f8:aa:50:13: 00:29:fb:69:42:d2:a2:d2:b8:97:ad:28:71:3d:86: 2b:ac:65:e5:67:de:0b:37:b8:e6:f1:ca:d2:d8:80: 0f:fa:fd:6e:df:72:9e:df:e0:02:ee:67:ae:70:aa: 43:98:62:79:4b:63:99:39:56:86:c8:70:85:86:17: 22:28:78:a1:70:5d:b8:9c:e4:59:cd:42:be:77:da: 8d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FC:AC:8D:40:6C:03:F9:10:7F:7D:88:B8:1C:E7:BE:E2:2D:87:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90c8b7a6-5624-3fab-ad68-b7316de9a866.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.98.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:92:36:32:c8:d3:06:61:81:3f:33:36:ca:93:17:03:68:9f: a6:e8:21:81:35:c3:6b:c0:57:63:2e:08:63:ee:c9:68:2c:e1: d3:3f:4c:99:e0:da:3a:3b:30:6a:22:9f:50:67:33:4a:7e:bc: 33:ed:44:8d:8a:cf:24:18:f1:f7:8b:9d:c5:28:85:85:15:67: f0:f6:7d:51:84:a5:f1:1a:f3:6b:b6:95:e3:58:1a:1d:a0:ca: 6b:b6:ca:54:98:30:d5:17:7e:4d:59:63:eb:df:db:07:5c:68: 99:0b:64:64:58:ee:f6:68:cf:ac:51:74:4a:6d:24:f4:6c:04: e1:90:b9:a9:61:0c:27:d1:9f:e0:76:32:92:a9:36:28:42:4b: b1:74:ae:39:43:1f:eb:50:1a:9c:9b:49:77:f5:2e:65:12:9e: f6:f7:32:63:53:08:e6:66:d1:04:6e:6c:b7:37:88:4d:6f:55: 41:1a:f7:7d:72:2b:3f:76:0d:50:e2:61:02:71:16:ca:cb:f5: 38:eb:76:68:d8:e1:75:51:b0:3d:50:a7:ee:84:ee:9f:42:a8: d6:39:d7:cc:4e:97:ae:a8:42:9d:e6:76:8c:e3:e2:86:79:67: 22:31:ed:0e:7d:a3:29:7f:f1:ca:11:14:04:fe:29:d8:f1:46: 0c:f5:2a:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DrrHEFl1sDnbFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk NjUwODg1YjUtNTE4Ni00ZjZkLWE0ZDEtYjZlOTEzMTNjMDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6c1LqdbhUhVjYQZ9ZrPmR53JXrFo6dw8MROA fTYcI36cIzUseogLv1/gaEMzOvMIgJ3qS2kxlFWq+emMMWVQt3Q+q0OJ+SvgmzBp fRudxBkVwXdptibPlXX+ocPKF0/Krnt0kee+PTlyuzBdqXMtbiBEgoNO5hXkHhib nnz/Oqb4hgq1izgLeGkRDEH6h7JwZe8LQAVXWXqGJmXdAFRHSxq8+m1TfgMs7qfW EZNTE/iqUBMAKftpQtKi0riXrShxPYYrrGXlZ94LN7jm8crS2IAP+v1u33Ke3+AC 7meucKpDmGJ5S2OZOVaGyHCFhhciKHihcF24nORZzUK+d9qNZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNP8rI1AbAP5EH99iLgc577iLYdCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTBjOGI3YTYtNTYyNC0z ZmFiLWFkNjgtYjczMTZkZTlhODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGLEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOSNjLI0wZhgT8zNsqTFwNon6boIYE1w2vAV2MuCGPuyWgs4dM/TJng 2jo7MGoin1BnM0p+vDPtRI2KzyQY8feLncUohYUVZ/D2fVGEpfEa82u2leNYGh2g ymu2ylSYMNUXfk1ZY+vf2wdcaJkLZGRY7vZoz6xRdEptJPRsBOGQualhDCfRn+B2 MpKpNihCS7F0rjlDH+tQGpybSXf1LmUSnvb3MmNTCOZm0QRubLc3iE1vVUEa931y Kz92DVDiYQJxFsrL9TjrdmjY4XVRsD1Qp+6E7p9CqNY518xOl66oQp3mdozj4oZ5 ZyIx7Q59oyl/8coRFAT+KdjxRgz1Klk= -----END CERTIFICATE-----Generated at Mon May 5 02:24:06 2025 by rpki-client