$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4ab79fa-48c2-346c-b817-52e7b2cc8fd0.roa File: d4ab79fa-48c2-346c-b817-52e7b2cc8fd0.roa (raw, json) Hash identifier: WNSboG8bYfhWZ5/pzU1VTBzF8ybXCYWBDkDS5M3plbA= Subject key identifier: 7F:55:E4:EE:58:C0:D5:6A:62:1C:6D:A8:2A:B0:C0:9F:35:6B:D5:52 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858493243E7E747FA424FB0C87500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4ab79fa-48c2-346c-b817-52e7b2cc8fd0.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 104.68.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:e7:e7:47:fa:42:4f:b0:c8:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=19d606d1-552d-468a-96b1-e20fd348f744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:01:36:e1:9d:ee:19:96:aa:77:ac:d5:04:0b: f6:1c:43:f1:f8:be:72:78:c0:b7:bc:df:01:01:4b: cb:75:9f:fb:69:1a:f5:ff:76:c9:c4:cd:7d:67:bb: 2b:1c:f6:55:ca:6c:03:dc:c3:c0:ff:39:e8:64:6d: e5:eb:53:67:91:d1:7d:4f:e6:59:5b:79:b2:d7:e4: de:5f:71:02:1b:5f:a2:27:f9:44:c5:85:d8:6f:10: 9f:2b:99:61:f1:71:26:6f:ab:48:c7:4b:c5:e0:2c: 73:01:57:cd:b2:a0:ca:2a:fb:98:11:db:38:bf:2a: 8b:d5:10:21:e4:8d:88:24:17:c6:db:4f:5d:39:d2: b5:8f:3f:5b:f0:4c:be:c4:4b:bf:cb:7f:fb:98:40: 52:75:be:14:d6:48:9a:c5:67:c0:4a:e3:5f:49:1e: 01:3a:96:d5:ff:3e:e2:b4:23:d2:7b:9c:d5:2b:3e: 82:a3:17:5e:d2:fb:6b:ec:7c:b0:b3:0e:57:ac:74: 22:a9:61:74:e1:0a:f7:0f:2f:1a:63:da:6d:ec:17: 7a:41:b4:c7:f5:e8:5a:9e:0d:fb:ed:e5:a5:c5:ca: 79:18:40:ff:c4:6b:c0:a4:4a:99:4c:c7:a1:04:2e: 6b:ca:be:da:8a:42:ef:09:e3:79:68:32:c0:26:93: b8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:55:E4:EE:58:C0:D5:6A:62:1C:6D:A8:2A:B0:C0:9F:35:6B:D5:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4ab79fa-48c2-346c-b817-52e7b2cc8fd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.68.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:2e:90:86:2c:14:c3:24:1a:26:98:14:1e:9f:37:2c:20:3d: 83:07:e9:dc:30:0e:67:d8:b7:f3:dd:70:a8:30:b1:2e:c0:14: 63:8d:2c:7e:ee:71:51:05:48:fc:fd:6e:23:44:b3:01:89:b9: af:2a:14:05:6f:8f:06:93:98:98:03:63:b2:95:9c:ca:90:5c: 47:fa:ba:09:0c:1e:d5:4a:da:fc:ca:04:93:39:b7:d4:cd:1e: f1:aa:b4:e9:b5:47:cf:5e:bc:c1:3d:9a:87:55:f9:ec:51:b9: 9e:ff:4a:f4:0d:fc:08:14:0f:b8:8c:25:df:75:52:e7:f5:52: ab:0d:7a:f9:c3:33:65:6a:cb:a7:87:49:15:e4:9f:b4:9b:c3: 46:d9:9d:31:ba:e3:f9:09:db:7d:24:05:5a:64:46:a1:c5:3d: a5:8c:e1:02:26:5c:9d:9a:dd:ad:9b:c1:e7:68:f0:39:74:47: eb:eb:14:d4:39:5c:40:c7:4b:4c:81:fe:c7:3a:ae:4c:9b:19: a8:c7:78:b0:a8:84:41:c3:9a:07:86:84:d8:de:e7:43:4d:d1: 84:a5:ee:09:ac:32:84:d3:1f:d4:2c:4a:40:87:d8:95:e2:38: 1a:02:a5:ad:e0:4a:bf:51:c9:34:b1:35:77:cf:7b:fa:e2:99: 3b:da:4f:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ+fnR/pCT7DIdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk MTlkNjA2ZDEtNTUyZC00NjhhLTk2YjEtZTIwZmQzNDhmNzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQE24Z3uGZaqd6zVBAv2HEPx+L5yeMC3vN8B AUvLdZ/7aRr1/3bJxM19Z7srHPZVymwD3MPA/znoZG3l61NnkdF9T+ZZW3my1+Te X3ECG1+iJ/lExYXYbxCfK5lh8XEmb6tIx0vF4CxzAVfNsqDKKvuYEds4vyqL1RAh 5I2IJBfG209dOdK1jz9b8Ey+xEu/y3/7mEBSdb4U1kiaxWfASuNfSR4BOpbV/z7i tCPSe5zVKz6Coxde0vtr7Hywsw5XrHQiqWF04Qr3Dy8aY9pt7Bd6QbTH9ehang37 7eWlxcp5GED/xGvApEqZTMehBC5ryr7aikLvCeN5aDLAJpO4jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9V5O5YwNVqYhxtqCqwwJ81a9VSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDRhYjc5ZmEtNDhjMi0z NDZjLWI4MTctNTJlN2IyY2M4ZmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgukIYsFMMkGiaYFB6fNywgPYMH6dwwDmfYt/PdcKgwsS7AFGONLH7u cVEFSPz9biNEswGJua8qFAVvjwaTmJgDY7KVnMqQXEf6ugkMHtVK2vzKBJM5t9TN HvGqtOm1R89evME9modV+exRuZ7/SvQN/AgUD7iMJd91Uuf1UqsNevnDM2Vqy6eH SRXkn7Sbw0bZnTG64/kJ230kBVpkRqHFPaWM4QImXJ2a3a2bwedo8Dl0R+vrFNQ5 XEDHS0yB/sc6rkybGajHeLCohEHDmgeGhNje50NN0YSl7gmsMoTTH9QsSkCH2JXi OBoCpa3gSr9RyTSxNXfPe/rimTvaTxI= -----END CERTIFICATE-----Generated at Mon May 5 14:15:03 2025 by rpki-client