$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/823cc639-6d73-3313-a883-bac72b1b40b0.roa File: 823cc639-6d73-3313-a883-bac72b1b40b0.roa (raw, json) Hash identifier: EPF/lErfCKQfs/39+WuZB69aMfztQaY1qTCahdrMKyg= Subject key identifier: 62:72:89:0E:02:15:A1:8F:EA:68:92:11:9D:71:BF:02:B3:0B:FF:79 Certificate issuer: /CN=80688222-2583-4dac-a7df-1d78925c7b53 Certificate serial: 010D0C9F43285849FCAA7D45954F443CF3D3A5C0 Authority key identifier: F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/823cc639-6d73-3313-a883-bac72b1b40b0.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 1640 IP address blocks: 104.36.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:7d:45:95:4f:44:3c:f3:d3:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80688222-2583-4dac-a7df-1d78925c7b53 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=9c1afe81-41c5-4202-bb94-76f60140a177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ee:7f:79:9d:7b:77:f9:22:cc:1f:e6:8b:6a: b2:22:98:0d:68:be:29:da:4f:b8:e6:a1:b9:30:87: 3e:de:65:d6:f0:0a:1f:ce:ae:f5:52:8b:bf:fd:d1: e7:7a:13:ec:51:af:92:e8:f4:5c:be:4f:ca:a1:d5: f1:58:a9:fd:a1:6a:50:33:8e:77:5c:5f:79:3b:e4: 9a:8b:93:26:76:27:6b:26:ff:3d:55:0b:70:88:f7: f5:31:c6:e9:d4:54:f2:e5:ed:06:12:04:04:a1:b2: 08:b2:60:a5:62:c3:66:8c:13:cc:4e:f8:05:40:86: e8:de:0f:87:7f:e7:a5:77:9b:73:28:50:7c:d1:9d: db:60:f2:4a:d5:0d:28:51:eb:cc:71:2b:1a:66:d2: 5e:84:1e:58:8c:cb:8d:e6:3c:da:22:fe:e1:e9:50: 70:95:47:e9:c9:3b:8f:5a:4e:f5:21:ad:f8:fb:e8: 4b:71:0a:ea:57:aa:f8:18:3b:2b:fc:69:f4:2e:17: 0f:82:e0:4e:61:2a:88:f8:d2:e1:70:0a:18:6d:fa: f9:6f:3c:cb:3c:c4:75:b2:10:0f:19:9f:67:d8:b4: 94:ad:5c:59:c7:10:71:0e:d3:d3:44:35:f6:2c:d6: 30:21:41:5b:05:c1:08:2e:76:c9:5d:68:3f:4b:ef: 00:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:72:89:0E:02:15:A1:8F:EA:68:92:11:9D:71:BF:02:B3:0B:FF:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/823cc639-6d73-3313-a883-bac72b1b40b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl X509v3 Authority Key Identifier: keyid:F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer sbgp-ipAddrBlock: critical IPv4: 104.36.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d0:83:17:49:00:8d:ac:e2:ea:5e:0b:e2:a9:b9:4b:40:4a: 72:9b:a3:d0:5a:15:8c:ea:41:b0:ea:73:5c:77:33:1f:64:d1: d9:9e:e2:60:a8:19:62:71:9b:d7:eb:0f:2c:f9:20:f7:ae:ac: 3f:da:c1:8b:f6:b2:3a:0a:9a:dd:71:0d:72:03:29:43:08:67: 57:23:80:77:3e:9a:e1:d4:19:22:47:ba:a3:f4:8f:a1:d6:c6: 72:d4:67:6f:60:4d:71:6e:71:00:3d:d6:a1:68:fd:8d:24:e8: 99:46:5c:b3:50:e7:f0:19:43:b3:ef:a7:46:fe:90:85:32:79: a0:1a:6c:48:33:06:0c:7f:d9:32:33:eb:4c:cd:26:ad:51:b7: ec:a1:04:22:f7:7a:b5:83:11:b4:b3:34:8e:94:c7:81:de:15: a2:12:3a:1c:73:01:6a:8d:48:81:eb:a3:24:54:08:39:51:6f: b3:22:f5:54:9b:3b:e2:df:c2:b6:9e:63:ee:6a:96:d8:9f:ba: 04:82:e5:14:6e:4c:a6:5f:06:56:d4:6a:19:cd:4e:1f:69:f3: 63:af:9c:4f:3a:e7:4a:ba:02:4f:a2:ec:a6:9d:53:ee:9f:1b: 59:3a:a9:6f:67:9b:bf:ba:a3:fb:c9:0d:49:77:a0:38:d4:75: ef:8a:40:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qn1FlU9EPPPTpcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA2ODgyMjItMjU4My00ZGFjLWE3ZGYtMWQ3ODkyNWM3 YjUzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk OWMxYWZlODEtNDFjNS00MjAyLWJiOTQtNzZmNjAxNDBhMTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku5/eZ17d/kizB/mi2qyIpgNaL4p2k+45qG5 MIc+3mXW8Aofzq71Uou//dHnehPsUa+S6PRcvk/KodXxWKn9oWpQM453XF95O+Sa i5MmdidrJv89VQtwiPf1Mcbp1FTy5e0GEgQEobIIsmClYsNmjBPMTvgFQIbo3g+H f+eld5tzKFB80Z3bYPJK1Q0oUevMcSsaZtJehB5YjMuN5jzaIv7h6VBwlUfpyTuP Wk71Ia34++hLcQrqV6r4GDsr/Gn0LhcPguBOYSqI+NLhcAoYbfr5bzzLPMR1shAP GZ9n2LSUrVxZxxBxDtPTRDX2LNYwIUFbBcEILnbJXWg/S+8A3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJyiQ4CFaGP6miSEZ1xvwKzC/95MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84MDY4 ODIyMi0yNTgzLTRkYWMtYTdkZi0xZDc4OTI1YzdiNTMvODIzY2M2MzktNmQ3My0z MzEzLWE4ODMtYmFjNzJiMWI0MGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODA2ODgyMjItMjU4My00ZGFjLWE3 ZGYtMWQ3ODkyNWM3YjUzLzgwNjg4MjIyLTI1ODMtNGRhYy1hN2RmLTFkNzg5MjVj N2I1My5jcmwwHwYDVR0jBBgwFoAU+ahh3ff7wnrlT+4Ixm9SjWzKWrUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84MDY4ODIyMi0yNTgzLTRkYWMtYTdkZi0xZDc4 OTI1YzdiNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaCTMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATQgxdJAI2s4upeC+KpuUtASnKbo9BaFYzqQbDqc1x3Mx9k0dme4mCo GWJxm9frDyz5IPeurD/awYv2sjoKmt1xDXIDKUMIZ1cjgHc+muHUGSJHuqP0j6HW xnLUZ29gTXFucQA91qFo/Y0k6JlGXLNQ5/AZQ7Pvp0b+kIUyeaAabEgzBgx/2TIz 60zNJq1Rt+yhBCL3erWDEbSzNI6Ux4HeFaISOhxzAWqNSIHroyRUCDlRb7Mi9VSb O+LfwraeY+5qltifugSC5RRuTKZfBlbUahnNTh9p82OvnE8650q6Ak+i7KadU+6f G1k6qW9nm7+6o/vJDUl3oDjUde+KQDM= -----END CERTIFICATE-----Generated at Thu Jun 5 03:40:18 2025 by rpki-client