$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c6acf81-6e3e-361d-8347-9da9ce0981b8.roa File: 0c6acf81-6e3e-361d-8347-9da9ce0981b8.roa (raw, json) Hash identifier: MQ2zwzCBLT1gyFazlAFJ7mgl8FND7d3GTD8yrVO575Q= Subject key identifier: 53:A0:7B:57:45:22:B2:FD:08:3E:AA:C5:B7:47:B9:69:1D:E5:A4:BE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A07D54273C36973BA6467CB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c6acf81-6e3e-361d-8347-9da9ce0981b8.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 7713 IP address blocks: 104.118.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:42:73:c3:69:73:ba:64:67:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=87becaf2-0434-4090-928b-bea64612e44e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0a:0c:11:50:53:53:9e:3d:0d:52:6f:59:33: 91:ef:c3:f2:49:b8:69:e3:b2:37:a1:b6:8d:67:16: 3b:cc:f2:32:dc:ba:a3:1d:1b:cf:87:2c:ab:0a:8d: 4b:94:99:31:fd:fd:01:57:dc:57:d8:2d:e3:33:31: 28:cb:cc:81:c0:65:66:7e:5f:fe:58:9e:64:e9:0e: 72:c5:8f:44:0f:0c:4f:f7:22:04:5e:0f:48:4e:b5: 2f:45:b6:9f:32:84:46:1b:fc:0c:72:3b:44:0f:91: 9a:6a:48:8f:58:9a:3a:e5:d8:f5:98:50:d1:88:35: a5:7f:75:43:18:be:14:49:ae:8c:37:45:31:63:6b: d8:e2:63:91:91:00:5c:4a:57:58:f7:59:c3:8b:24: e5:57:0d:8f:93:f4:6e:d9:bc:1e:c8:d4:89:a0:f2: d2:1c:bd:71:c6:d4:eb:81:87:41:34:5e:4d:75:6a: d7:0d:ed:af:0f:db:3c:b6:c0:a1:93:84:07:0e:3d: 55:80:f6:fc:db:3d:7b:5f:92:ae:01:da:51:51:e5: 6a:94:c1:77:8e:01:f4:1f:2a:03:59:56:cf:c6:3b: 93:13:19:48:33:81:54:fb:d6:ca:80:1e:aa:87:90: b4:e4:8f:e9:01:43:88:7f:d9:9f:ca:df:80:0b:28: da:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A0:7B:57:45:22:B2:FD:08:3E:AA:C5:B7:47:B9:69:1D:E5:A4:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c6acf81-6e3e-361d-8347-9da9ce0981b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.118.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:aa:5c:35:d0:77:0a:4b:d6:54:1d:5e:b1:b0:9b:f6:3a:43: b0:31:fc:ec:89:21:b3:c1:e9:79:7b:71:7a:75:45:fc:fa:3c: 24:86:74:e0:4d:ac:16:fd:42:49:60:a3:57:6a:79:c2:58:52: ee:c6:15:34:39:b4:a8:19:11:a8:77:b5:b6:15:e7:49:b3:43: 18:7f:7b:1a:45:1f:a9:ee:83:d5:d4:57:2a:c3:0b:85:ca:3d: 23:5d:b0:36:75:23:be:23:6b:d5:ed:43:22:a9:da:4a:da:bf: 73:05:2c:be:e2:3e:70:e5:20:c5:cf:90:d2:ab:30:36:12:13: 1d:88:69:1c:1c:da:72:b2:a9:89:3d:ba:87:90:28:d1:e9:34: e0:42:b3:5a:9f:c8:95:16:23:58:35:ed:46:f4:fb:90:2e:2a: 66:15:06:3c:a0:d1:5c:92:7c:84:a5:39:f7:63:70:9a:fe:50: a7:6f:b9:4e:d1:8b:5f:e3:fc:1d:65:00:62:60:2f:1b:b4:83: 58:37:85:2d:27:38:1f:2b:b3:ce:02:ef:20:40:29:83:76:af: e3:4f:fe:fc:42:9a:c8:82:e4:6f:c1:17:32:0a:34:59:74:ee: 47:a7:28:b8:c8:c6:07:6f:10:25:58:f7:c4:e4:6a:9b:dd:e7: 1e:76:63:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1UJzw2lzumRnywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk ODdiZWNhZjItMDQzNC00MDkwLTkyOGItYmVhNjQ2MTJlNDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2goMEVBTU549DVJvWTOR78PySbhp47I3obaN ZxY7zPIy3LqjHRvPhyyrCo1LlJkx/f0BV9xX2C3jMzEoy8yBwGVmfl/+WJ5k6Q5y xY9EDwxP9yIEXg9ITrUvRbafMoRGG/wMcjtED5GaakiPWJo65dj1mFDRiDWlf3VD GL4USa6MN0UxY2vY4mORkQBcSldY91nDiyTlVw2Pk/Ru2bweyNSJoPLSHL1xxtTr gYdBNF5NdWrXDe2vD9s8tsChk4QHDj1VgPb82z17X5KuAdpRUeVqlMF3jgH0HyoD WVbPxjuTExlIM4FU+9bKgB6qh5C05I/pAUOIf9mfyt+ACyjaFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOge1dFIrL9CD6qxbdHuWkd5aS+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGM2YWNmODEtNmUzZS0z NjFkLTgzNDctOWRhOWNlMDk4MWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaHaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqqXDXQdwpL1lQdXrGwm/Y6Q7Ax/OyJIbPB6Xl7cXp1Rfz6PCSGdOBN rBb9Qklgo1dqecJYUu7GFTQ5tKgZEah3tbYV50mzQxh/expFH6nug9XUVyrDC4XK PSNdsDZ1I74ja9XtQyKp2krav3MFLL7iPnDlIMXPkNKrMDYSEx2IaRwc2nKyqYk9 uoeQKNHpNOBCs1qfyJUWI1g17Ub0+5AuKmYVBjyg0VySfISlOfdjcJr+UKdvuU7R i1/j/B1lAGJgLxu0g1g3hS0nOB8rs84C7yBAKYN2r+NP/vxCmsiC5G/BFzIKNFl0 7kenKLjIxgdvECVY98Tkapvd5x52Y2U= -----END CERTIFICATE-----Generated at Sat Jun 7 13:55:05 2025 by rpki-client