$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07c81167-da5f-3b71-8606-25b5a2b2b1d2.roa File: 07c81167-da5f-3b71-8606-25b5a2b2b1d2.roa (raw, json) Hash identifier: 2cgbi8szommwxT2hLT1EnUIFgC/p/KKdI4REVzM0ZX4= Subject key identifier: 58:F9:3D:A4:C9:D7:DE:05:61:F1:47:8D:A7:1E:94:0A:D5:47:B3:99 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A189557951D01EADA361D6C40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07c81167-da5f-3b71-8606-25b5a2b2b1d2.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 16625 IP address blocks: 104.116.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:57:95:1d:01:ea:da:36:1d:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=08255dbb-ea54-41f6-991a-fed5f43a8676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:2b:bb:a0:f8:c2:5f:cf:2a:b2:c7:6e:ac:df: a1:d2:ed:51:ea:3a:5e:74:63:81:8e:26:44:0d:e6: e3:82:3f:39:2c:3d:10:ea:7d:7e:87:01:ba:c4:bb: 63:74:2b:09:e2:ef:5f:da:10:3f:de:d1:89:c5:6b: 85:f0:06:9c:38:b9:2b:3a:e0:c1:42:b2:12:3f:dc: 27:76:06:00:a8:b9:75:52:49:09:3f:50:da:62:6f: 98:c2:0a:43:45:1e:ab:f0:52:83:9b:99:d5:b1:ec: 8c:9b:c2:0f:36:19:a4:54:78:21:e8:ed:44:8d:2d: 5c:e6:08:9b:5b:ee:80:ce:82:de:4e:5d:9d:fb:43: 82:97:c6:73:ee:14:92:f0:2f:29:05:ea:3e:9f:5d: f0:9b:91:57:61:b6:2b:e0:ff:dd:86:9c:e6:c2:0b: 43:d1:89:e1:a2:c9:73:c6:f7:14:c6:81:cb:37:b6: 58:8e:99:9d:e9:d9:5c:0d:c2:ec:c4:f7:bd:26:be: a9:0b:0c:5e:e7:2b:50:e2:59:90:e0:01:07:1c:2b: b4:02:1a:c2:82:a5:95:6d:3d:02:07:d6:59:f0:81: 54:5e:00:69:a3:0d:0a:47:b3:07:fc:ef:f7:0d:ac: ea:35:ea:6b:8a:0d:59:00:e4:ac:67:78:a2:08:03: e8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F9:3D:A4:C9:D7:DE:05:61:F1:47:8D:A7:1E:94:0A:D5:47:B3:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07c81167-da5f-3b71-8606-25b5a2b2b1d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.116.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:01:12:19:79:a5:9a:78:07:8d:47:23:00:15:f8:a2:dc:c8: ca:7c:af:0a:b8:38:4b:bc:70:a5:dc:46:f2:1d:71:51:39:07: 24:19:e5:d2:95:b8:35:b3:60:cb:96:2b:f0:30:28:3d:6c:4d: bc:4c:0b:25:0d:40:52:8c:17:3b:79:79:41:bc:d6:23:4f:4e: 62:59:7c:bf:b2:0b:f2:86:2b:cf:70:9a:ab:31:83:5d:36:1b: 87:88:bb:97:ca:05:ce:d8:bc:57:ba:5f:41:e9:da:38:e3:71: 26:20:f9:7c:9e:7a:22:02:c3:d6:2d:42:8a:fe:ef:5c:e1:90: 2b:e4:8f:b7:44:75:ce:81:b2:e3:6f:98:c4:eb:58:18:7a:31: 92:ee:a8:28:7c:84:09:2d:77:86:84:19:ed:c6:fb:e3:8c:66: ed:d4:28:7e:5b:74:d5:8f:a2:f6:b7:28:7d:1f:7a:dc:b6:72: 5c:72:30:e9:4e:a7:e0:ec:8e:d4:59:12:77:3a:9b:5f:c6:07: 43:db:7a:20:26:86:16:14:fd:fe:9f:07:51:74:0e:bf:b4:e9: bf:da:d6:02:67:60:07:b1:84:37:c6:1a:2b:48:8b:4d:b3:39: 40:8f:37:c3:93:90:25:a4:f5:f9:a1:17:44:c4:ca:f2:8b:9f: 14:fe:53:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlVeVHQHq2jYdbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk MDgyNTVkYmItZWE1NC00MWY2LTk5MWEtZmVkNWY0M2E4Njc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8iu7oPjCX88qssdurN+h0u1R6jpedGOBjiZE Debjgj85LD0Q6n1+hwG6xLtjdCsJ4u9f2hA/3tGJxWuF8AacOLkrOuDBQrISP9wn dgYAqLl1UkkJP1DaYm+YwgpDRR6r8FKDm5nVseyMm8IPNhmkVHgh6O1EjS1c5gib W+6AzoLeTl2d+0OCl8Zz7hSS8C8pBeo+n13wm5FXYbYr4P/dhpzmwgtD0Ynhoslz xvcUxoHLN7ZYjpmd6dlcDcLsxPe9Jr6pCwxe5ytQ4lmQ4AEHHCu0AhrCgqWVbT0C B9ZZ8IFUXgBpow0KR7MH/O/3DazqNeprig1ZAOSsZ3iiCAPoKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFj5PaTJ194FYfFHjacelArVR7OZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDdjODExNjctZGE1Zi0z YjcxLTg2MDYtMjViNWEyYjJiMWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHSkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcBEhl5pZp4B41HIwAV+KLcyMp8rwq4OEu8cKXcRvIdcVE5ByQZ5dKV uDWzYMuWK/AwKD1sTbxMCyUNQFKMFzt5eUG81iNPTmJZfL+yC/KGK89wmqsxg102 G4eIu5fKBc7YvFe6X0Hp2jjjcSYg+XyeeiICw9YtQor+71zhkCvkj7dEdc6BsuNv mMTrWBh6MZLuqCh8hAktd4aEGe3G++OMZu3UKH5bdNWPova3KH0fety2clxyMOlO p+DsjtRZEnc6m1/GB0PbeiAmhhYU/f6fB1F0Dr+06b/a1gJnYAexhDfGGitIi02z OUCPN8OTkCWk9fmhF0TEyvKLnxT+UzA= -----END CERTIFICATE-----Generated at Sat Jun 7 14:13:33 2025 by rpki-client