$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0365abb-0ef5-397e-b0c2-63db2c9d890d.roa File: f0365abb-0ef5-397e-b0c2-63db2c9d890d.roa (raw, json) Hash identifier: o+53glA4r8mxvv3W7sNsw+DdPiaD0omFY0uSuqtD9/4= Subject key identifier: 55:2A:46:C4:13:DE:87:AD:38:4D:AE:A2:E0:F4:C3:28:6B:A5:1C:71 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849393E81946A374E810A1D6600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0365abb-0ef5-397e-b0c2-63db2c9d890d.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 16625 IP address blocks: 104.126.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:81:94:6a:37:4e:81:0a:1d:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=02232b59-7d4f-4c00-b926-6c7f0937e070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:50:fc:16:ef:00:7c:4c:28:d0:ad:c8:12:c0: 22:b7:c2:b9:0f:ca:e3:0c:de:1c:15:49:aa:49:27: 21:4e:9b:ab:70:cc:dd:9b:e1:16:00:0e:84:f4:2e: 10:a5:1d:3d:76:52:16:77:e8:85:0c:4c:38:29:f4: ed:c8:a9:a4:d2:08:1f:3a:ee:d4:01:b7:77:c8:fe: 81:1a:78:e1:ed:11:84:4e:86:21:23:cb:42:2e:1e: 2b:b2:65:09:70:4d:77:1f:27:1d:15:61:f5:50:bc: 05:bb:19:eb:cb:ba:91:dc:4c:f1:16:59:c4:8b:fc: 9d:b9:cd:bd:96:40:83:10:1f:0a:12:55:73:53:45: 25:4d:1e:2e:ff:e3:10:49:0f:19:b8:03:50:0a:7e: 26:4e:70:5c:c5:73:64:c1:d5:76:f6:dc:07:60:b8: f7:51:86:ab:e7:76:99:bb:d3:34:9e:0e:0c:ff:e3: 77:16:66:d3:db:c2:96:3c:bf:09:48:bd:df:9e:ad: 8c:f0:8c:28:b2:9e:c3:13:4f:3e:ab:6a:74:19:b7: 3b:eb:d8:2c:38:54:2e:c4:73:c2:43:51:8d:37:e1: 15:a5:db:b9:c4:df:cf:d5:fc:31:08:6d:26:82:be: 48:b0:e3:a7:c5:c2:e5:11:e3:e5:98:81:75:96:0c: 2a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2A:46:C4:13:DE:87:AD:38:4D:AE:A2:E0:F4:C3:28:6B:A5:1C:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0365abb-0ef5-397e-b0c2-63db2c9d890d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.126.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:df:ba:d8:bb:fa:f3:a8:03:d1:80:35:d1:42:56:b0:66:70: 7f:22:00:14:c8:58:9c:ba:ed:5c:8e:57:0e:6a:b3:24:fc:36: 67:91:e8:aa:4f:be:e7:f2:8c:53:3f:8e:1f:22:9b:aa:6a:1a: c0:bb:8e:a4:84:8f:18:d1:ce:31:2f:ba:23:62:e9:61:81:6e: 30:fe:41:34:3c:46:1c:a6:c6:06:aa:a0:9d:58:34:64:d6:fa: 48:c7:57:e0:25:23:ad:9d:b4:ba:98:57:1a:15:1e:32:e2:e2: 7a:3e:2d:33:4d:50:a6:33:7a:c9:a7:10:80:8a:6d:67:34:87: 29:a5:e9:6a:35:dd:b2:ef:eb:0c:3a:f3:8b:0b:b9:77:2e:93: a7:c1:fd:70:ad:4d:f4:e4:9c:ff:56:97:48:86:89:9e:2b:e8: 64:a7:b5:8c:a4:5e:83:fa:d1:7a:30:ff:2e:e9:bc:5c:4b:0c: b2:df:5f:9e:2e:c4:bd:78:8f:c9:04:80:ad:4c:a7:dd:d3:ef: 31:33:17:36:d2:db:a8:56:f7:03:bb:79:6d:3f:ed:73:dd:bb: 80:ce:f0:86:37:d2:18:d0:23:95:65:09:a5:92:af:b9:ec:b1: df:3b:7a:78:bf:2f:e0:d6:10:42:67:01:31:ca:4b:92:f3:e4: fd:f2:75:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PoGUajdOgQodZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk MDIyMzJiNTktN2Q0Zi00YzAwLWI5MjYtNmM3ZjA5MzdlMDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1D8Fu8AfEwo0K3IEsAit8K5D8rjDN4cFUmq SSchTpurcMzdm+EWAA6E9C4QpR09dlIWd+iFDEw4KfTtyKmk0ggfOu7UAbd3yP6B Gnjh7RGEToYhI8tCLh4rsmUJcE13HycdFWH1ULwFuxnry7qR3EzxFlnEi/yduc29 lkCDEB8KElVzU0UlTR4u/+MQSQ8ZuANQCn4mTnBcxXNkwdV29twHYLj3UYar53aZ u9M0ng4M/+N3FmbT28KWPL8JSL3fnq2M8Iwosp7DE08+q2p0Gbc769gsOFQuxHPC Q1GNN+EVpdu5xN/P1fwxCG0mgr5IsOOnxcLlEePlmIF1lgwqhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUqRsQT3oetOE2uouD0wyhrpRxxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjAzNjVhYmItMGVmNS0z OTdlLWIwYzItNjNkYjJjOWQ4OTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaH58MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvfuti7+vOoA9GANdFCVrBmcH8iABTIWJy67VyOVw5qsyT8NmeR6KpP vufyjFM/jh8im6pqGsC7jqSEjxjRzjEvuiNi6WGBbjD+QTQ8RhymxgaqoJ1YNGTW +kjHV+AlI62dtLqYVxoVHjLi4no+LTNNUKYzesmnEICKbWc0hyml6Wo13bLv6ww6 84sLuXcuk6fB/XCtTfTknP9Wl0iGiZ4r6GSntYykXoP60Xow/y7pvFxLDLLfX54u xL14j8kEgK1Mp93T7zEzFzbS26hW9wO7eW0/7XPdu4DO8IY30hjQI5VlCaWSr7ns sd87eni/L+DWEEJnATHKS5Lz5P3ydZs= -----END CERTIFICATE-----Generated at Mon May 5 15:16:37 2025 by rpki-client