$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e95fc8d-2a8d-3e30-8409-2881e39848d7.roa File: 0e95fc8d-2a8d-3e30-8409-2881e39848d7.roa (raw, json) Hash identifier: fb9Zk3PBL/pCx3mx5PUj8qsa65tdZIEIOjDqyM/zsbU= Subject key identifier: F1:BD:BD:CE:5B:28:91:47:0D:F9:85:C9:92:62:EB:CE:0B:19:26:2C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A119AC6AA19745C8EB2962900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e95fc8d-2a8d-3e30-8409-2881e39848d7.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 16625 IP address blocks: 104.68.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:c6:aa:19:74:5c:8e:b2:96:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=8e8b647e-9ef2-4aa1-a0f8-da0f671b305c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e5:fe:99:64:8c:85:40:fc:7f:50:b6:9d:83: f5:e2:f2:13:6c:34:8c:3f:4c:ca:93:ca:dd:c8:d5: d8:ec:b5:38:b2:ed:b8:cd:61:20:2f:56:7c:21:05: 5a:28:54:e3:7f:7f:5b:c5:24:4c:51:1b:f9:d6:8b: 25:53:d8:6a:5f:70:8c:cb:3b:3c:7b:55:ee:40:ed: c9:71:bf:d5:a0:ae:5a:ea:cf:20:51:d1:3c:ca:61: bd:1b:f2:38:bd:c4:dc:ae:c0:47:55:37:6d:cd:2d: 9d:0f:51:26:ea:3d:31:7f:42:1c:d8:36:eb:40:c2: 55:95:19:d3:a7:0f:39:0e:74:93:6f:89:37:71:f5: 7a:9c:0e:53:e3:fd:3c:ab:1e:84:77:37:bd:a4:77: 91:b9:e0:6a:a8:68:88:70:27:06:2b:9f:93:91:39: 3e:dc:ec:d4:f8:04:01:0b:e7:08:66:e6:86:b9:26: b2:ff:fe:b5:84:83:bb:4f:40:19:03:7e:0e:19:75: df:f5:40:9b:70:af:99:3a:d5:28:0a:3a:20:27:6e: 36:15:c6:72:98:f6:2d:90:17:ec:95:eb:0d:cf:74: 9a:6e:2d:d3:90:83:c6:5e:fd:b6:ff:f5:7f:00:f3: 0e:75:1c:32:10:0b:31:ab:d4:8b:0f:73:6b:f2:1d: be:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:BD:BD:CE:5B:28:91:47:0D:F9:85:C9:92:62:EB:CE:0B:19:26:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e95fc8d-2a8d-3e30-8409-2881e39848d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.68.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:4e:95:60:69:77:39:4f:36:35:59:b8:af:00:9b:b6:2e:1d: 8a:50:c8:31:40:37:94:8b:9c:21:d8:0f:e8:17:f9:7f:1a:9c: 97:73:25:bb:04:38:52:bd:fc:af:b7:fe:47:66:fd:62:d6:c0: 37:ea:80:99:c2:1c:18:2a:54:24:63:bd:f6:ed:a0:96:ce:84: 87:43:21:3a:06:64:38:a7:56:a7:22:3d:22:2b:b6:35:a7:22: 9a:2b:73:5e:78:8f:cb:aa:4d:23:b7:3c:08:4a:1c:47:68:fa: 6f:68:35:53:ee:cd:e7:b5:1c:f0:ef:fd:ab:39:c3:8f:05:c6: 9f:eb:1c:03:0a:77:04:d2:3f:bb:d6:1c:14:e9:94:a8:b7:38: 18:87:7d:65:8b:50:e5:58:24:e2:77:27:40:d7:a9:3b:f5:82: bd:93:79:bf:21:a2:27:86:95:93:64:d2:80:0c:4a:b0:fe:16: 58:a5:92:23:aa:f3:9f:5c:47:ea:46:ca:c0:72:6e:c2:03:0f: 71:cf:09:b5:35:60:4d:06:70:b8:d1:95:bb:54:a4:a9:d7:94: 11:b6:e9:40:67:6e:b3:cc:d2:da:17:d6:d2:af:22:0f:2e:0c: d6:98:07:f4:45:40:d2:0b:bd:7f:da:21:e8:c4:62:dd:22:cf: ef:7a:d1:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmsaqGXRcjrKWKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk OGU4YjY0N2UtOWVmMi00YWExLWEwZjgtZGEwZjY3MWIzMDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eX+mWSMhUD8f1C2nYP14vITbDSMP0zKk8rd yNXY7LU4su24zWEgL1Z8IQVaKFTjf39bxSRMURv51oslU9hqX3CMyzs8e1XuQO3J cb/VoK5a6s8gUdE8ymG9G/I4vcTcrsBHVTdtzS2dD1Em6j0xf0Ic2DbrQMJVlRnT pw85DnSTb4k3cfV6nA5T4/08qx6Edze9pHeRueBqqGiIcCcGK5+TkTk+3OzU+AQB C+cIZuaGuSay//61hIO7T0AZA34OGXXf9UCbcK+ZOtUoCjogJ242FcZymPYtkBfs lesNz3Sabi3TkIPGXv22//V/APMOdRwyEAsxq9SLD3Nr8h2+8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPG9vc5bKJFHDfmFyZJi684LGSYsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGU5NWZjOGQtMmE4ZC0z ZTMwLTg0MDktMjg4MWUzOTg0OGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaEToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxOlWBpdzlPNjVZuK8Am7YuHYpQyDFAN5SLnCHYD+gX+X8anJdzJbsE OFK9/K+3/kdm/WLWwDfqgJnCHBgqVCRjvfbtoJbOhIdDIToGZDinVqciPSIrtjWn Iporc154j8uqTSO3PAhKHEdo+m9oNVPuzee1HPDv/as5w48Fxp/rHAMKdwTSP7vW HBTplKi3OBiHfWWLUOVYJOJ3J0DXqTv1gr2Teb8hoieGlZNk0oAMSrD+FlilkiOq 859cR+pGysBybsIDD3HPCbU1YE0GcLjRlbtUpKnXlBG26UBnbrPM0toX1tKvIg8u DNaYB/RFQNILvX/aIejEYt0iz+960RM= -----END CERTIFICATE-----Generated at Sat Jun 7 14:30:18 2025 by rpki-client