$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee65d0f4-e8d4-38e5-9980-731f2e9066b3.roa File: ee65d0f4-e8d4-38e5-9980-731f2e9066b3.roa (raw, json) Hash identifier: QzM+PPgPWkiUpDTbsjUEFKd39G3vNj8nYQCSLz5TFsA= Subject key identifier: 44:86:26:C6:AA:24:2A:E8:5C:6C:6D:6A:B2:EA:79:EF:29:2F:DD:C2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849393E7F576929070AA8DBFA40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee65d0f4-e8d4-38e5-9980-731f2e9066b3.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 16625 IP address blocks: 104.121.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:7f:57:69:29:07:0a:a8:db:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=2a07728a-6c89-4e72-bd69-e5ec77057a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5c:6e:6f:b9:06:2c:12:40:3d:02:fc:43:5c: 27:db:16:11:23:6a:08:d4:28:79:90:63:f6:ee:53: 12:2f:9f:9d:b1:d7:15:90:16:22:e9:ea:37:fc:06: c5:35:85:16:4b:98:73:b8:3a:22:9f:28:c3:bb:6c: 50:7c:8c:9a:c4:b6:90:72:50:d8:ef:41:29:35:4e: d7:a0:46:4f:2c:54:de:45:84:ae:09:d8:b8:11:21: 10:0a:fd:4a:cb:93:c9:95:4c:79:69:ec:0f:f9:62: 4a:23:e2:ab:67:44:ed:13:eb:e7:f6:6b:42:c9:cf: b1:70:a6:ee:de:7f:02:d6:0c:d7:c0:bf:29:49:01: ce:1b:93:37:18:7e:da:22:9f:07:e0:0a:fa:4d:af: 98:e0:90:ef:69:16:1a:37:f7:d8:f4:b7:2f:bc:49: 84:5e:82:24:6c:66:08:e3:33:2b:a0:f7:d3:63:90: f7:90:4d:67:12:64:ea:89:91:d0:db:0f:25:a9:16: d2:29:ac:5c:b8:18:39:f7:6b:41:8f:3d:a1:56:7e: fb:eb:93:9e:3e:7f:7a:29:12:a2:df:60:4d:9b:f6: 59:4c:e4:7a:ea:94:a1:b1:e4:77:a8:39:5d:11:9b: 8d:e2:1b:21:95:75:30:14:bb:f2:01:eb:77:e4:2d: d6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:86:26:C6:AA:24:2A:E8:5C:6C:6D:6A:B2:EA:79:EF:29:2F:DD:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee65d0f4-e8d4-38e5-9980-731f2e9066b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.121.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:d5:2a:63:c0:6d:6b:39:16:b9:80:ae:78:43:43:b8:34:32: ff:0f:39:61:6d:ee:ba:fc:b0:ea:e1:30:bc:10:0b:3d:fb:58: fa:2e:bc:d8:b4:08:78:74:45:a5:62:2c:2a:4f:ef:10:1f:27: 4f:a8:45:df:66:d0:70:9a:b5:7a:1b:35:f7:c7:67:65:7f:6d: 2e:54:fa:db:68:9a:fe:1e:36:eb:f3:f7:f0:22:26:28:9b:67: 3c:26:49:b6:1e:1b:d9:df:f8:25:57:a8:aa:1b:ee:1e:f2:cd: ad:fa:79:fa:fa:ce:85:9f:d8:92:b6:4d:85:4f:b4:98:46:78: 95:84:5e:e6:31:e9:d4:b8:29:07:70:bb:8f:99:3a:3c:19:a6: 97:d5:82:a0:e6:34:2d:a4:0e:a4:58:aa:60:fd:8b:f0:a9:81: 66:af:4d:1c:66:e0:1e:12:6a:75:bd:4d:95:aa:cb:c5:67:2b: 46:93:55:bd:6f:57:22:bf:13:72:c6:21:d9:3d:41:b8:52:14: ca:ab:3b:50:3b:50:3f:b2:55:57:8a:10:16:9b:1d:82:74:bc: e2:9b:0c:a6:81:65:75:41:59:37:b2:8e:12:a5:86:35:44:6c: e4:34:7b:50:b2:15:49:a5:f5:f1:bb:37:ac:2a:04:b5:7e:97: 95:16:ba:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5Pn9XaSkHCqjb+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk MmEwNzcyOGEtNmM4OS00ZTcyLWJkNjktZTVlYzc3MDU3YTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFxub7kGLBJAPQL8Q1wn2xYRI2oI1Ch5kGP2 7lMSL5+dsdcVkBYi6eo3/AbFNYUWS5hzuDoinyjDu2xQfIyaxLaQclDY70EpNU7X oEZPLFTeRYSuCdi4ESEQCv1Ky5PJlUx5aewP+WJKI+KrZ0TtE+vn9mtCyc+xcKbu 3n8C1gzXwL8pSQHOG5M3GH7aIp8H4Ar6Ta+Y4JDvaRYaN/fY9LcvvEmEXoIkbGYI 4zMroPfTY5D3kE1nEmTqiZHQ2w8lqRbSKaxcuBg592tBjz2hVn7765OePn96KRKi 32BNm/ZZTOR66pShseR3qDldEZuN4hshlXUwFLvyAet35C3WjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESGJsaqJCroXGxtarLqee8pL93CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWU2NWQwZjQtZThkNC0z OGU1LTk5ODAtNzMxZjJlOTA2NmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaHkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHVKmPAbWs5FrmArnhDQ7g0Mv8POWFt7rr8sOrhMLwQCz37WPouvNi0 CHh0RaViLCpP7xAfJ0+oRd9m0HCatXobNffHZ2V/bS5U+ttomv4eNuvz9/AiJiib ZzwmSbYeG9nf+CVXqKob7h7yza36efr6zoWf2JK2TYVPtJhGeJWEXuYx6dS4KQdw u4+ZOjwZppfVgqDmNC2kDqRYqmD9i/CpgWavTRxm4B4SanW9TZWqy8VnK0aTVb1v VyK/E3LGIdk9QbhSFMqrO1A7UD+yVVeKEBabHYJ0vOKbDKaBZXVBWTeyjhKlhjVE bOQ0e1CyFUml9fG7N6wqBLV+l5UWujk= -----END CERTIFICATE-----Generated at Mon May 5 09:05:59 2025 by rpki-client