$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f76c561-45f7-3f20-9a88-c5dc7441559a.roa File: 1f76c561-45f7-3f20-9a88-c5dc7441559a.roa (raw, json) Hash identifier: CByo3GLLGtWQ2VDTTJ3qb2Z7XVsqVXU61TZLYmDJzLc= Subject key identifier: E8:17:FD:9A:98:08:5B:61:4E:33:39:D6:E1:D3:46:AE:8F:60:85:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A119AB9F1B8474423C360B680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f76c561-45f7-3f20-9a88-c5dc7441559a.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 16625 IP address blocks: 104.71.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:b9:f1:b8:47:44:23:c3:60:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=2c4f925b-b274-44a9-9a44-30ecfd4a42d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6a:9f:7f:6b:16:68:46:65:98:55:27:a3:22: 5d:d8:05:b5:40:51:1e:87:36:b2:42:99:cd:a0:20: b6:50:04:da:82:f9:09:c1:9c:08:e8:7e:62:2a:5c: 15:39:ac:f7:e3:42:16:3f:ad:7a:e6:36:70:93:6c: 62:f7:0c:ee:43:c7:21:52:54:82:81:3a:7a:2f:9d: 15:00:b1:d7:e1:d9:5b:87:9a:ed:4f:9f:2b:fa:f1: 43:d0:f4:e4:81:a3:74:65:42:ee:c3:bb:76:e5:5e: e5:7b:6f:d6:4b:5b:9d:2a:f2:29:8e:ba:53:3a:f7: 12:87:76:20:51:c5:5a:cc:62:12:08:33:3d:ac:ce: 0f:4e:7b:d9:02:31:39:d2:7c:de:46:65:b5:20:01: 13:94:4d:c6:51:5e:4a:59:d5:64:1d:36:10:c9:ce: 69:50:a6:a7:c2:64:4e:f7:1f:e3:71:95:fe:a2:51: e1:11:26:a6:95:26:d6:e5:d3:e7:40:a5:6b:0d:f4: 69:20:d4:85:2e:4f:53:9e:ea:ed:e1:4d:2b:a9:d5: 0e:c5:a0:30:0c:06:68:de:bb:99:85:68:ab:49:f8: df:12:4d:69:fd:a1:5a:aa:54:74:42:a8:ae:79:b9: 1b:f1:78:41:e7:5a:cb:00:54:a0:97:5f:04:58:fa: 5e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:17:FD:9A:98:08:5B:61:4E:33:39:D6:E1:D3:46:AE:8F:60:85:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f76c561-45f7-3f20-9a88-c5dc7441559a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.71.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:2d:bd:37:ad:30:8f:8e:4f:1f:59:95:fe:ab:22:6b:fa:d6: fa:8c:42:09:54:83:4f:40:10:47:9a:95:1e:81:52:8b:9e:95: a3:63:38:c2:75:95:37:b3:20:71:f8:d4:e7:4f:c6:2c:cc:02: fc:a7:7b:ee:c0:f4:6c:61:ca:4c:1c:40:41:ac:3f:c5:80:e0: d9:bb:05:95:95:6c:78:09:0a:fd:2b:06:7d:80:cc:58:78:93: 89:2b:a1:b0:1e:47:5f:80:ba:17:e0:14:e7:0d:e1:59:15:52: 14:42:19:4f:c7:04:0d:71:d5:c1:4b:f8:86:90:36:ad:db:4a: 54:27:44:3e:be:51:4d:3b:4e:18:a7:22:81:be:2c:aa:21:64: 30:ef:43:06:51:d6:b5:f0:db:7a:28:3c:a7:03:d8:98:f9:27: d5:7a:fa:a3:d2:23:19:7e:92:0e:5b:06:72:61:1c:51:78:50: e9:73:6c:1e:c6:f7:28:60:9c:de:18:18:ed:8f:0d:b1:92:83: a5:67:bd:a7:94:09:ee:18:93:cb:47:c9:65:5a:a7:1d:ac:64: 4f:a0:d6:94:5c:df:04:64:5d:e6:3b:d7:66:ec:df:f0:b0:d0: fd:4e:71:a9:9d:07:94:83:8c:0f:43:80:75:ac:02:8b:bc:a6: a9:48:c8:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmrnxuEdEI8NgtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk MmM0ZjkyNWItYjI3NC00NGE5LTlhNDQtMzBlY2ZkNGE0MmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mqff2sWaEZlmFUnoyJd2AW1QFEehzayQpnN oCC2UATagvkJwZwI6H5iKlwVOaz340IWP6165jZwk2xi9wzuQ8chUlSCgTp6L50V ALHX4dlbh5rtT58r+vFD0PTkgaN0ZULuw7t25V7le2/WS1udKvIpjrpTOvcSh3Yg UcVazGISCDM9rM4PTnvZAjE50nzeRmW1IAETlE3GUV5KWdVkHTYQyc5pUKanwmRO 9x/jcZX+olHhESamlSbW5dPnQKVrDfRpINSFLk9Tnurt4U0rqdUOxaAwDAZo3ruZ hWirSfjfEk1p/aFaqlR0Qqiuebkb8XhB51rLAFSgl18EWPpenQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgX/ZqYCFthTjM51uHTRq6PYIUzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWY3NmM1NjEtNDVmNy0z ZjIwLTlhODgtYzVkYzc0NDE1NTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaEewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQtvTetMI+OTx9Zlf6rImv61vqMQglUg09AEEealR6BUouelaNjOMJ1 lTezIHH41OdPxizMAvyne+7A9GxhykwcQEGsP8WA4Nm7BZWVbHgJCv0rBn2AzFh4 k4krobAeR1+AuhfgFOcN4VkVUhRCGU/HBA1x1cFL+IaQNq3bSlQnRD6+UU07Thin IoG+LKohZDDvQwZR1rXw23ooPKcD2Jj5J9V6+qPSIxl+kg5bBnJhHFF4UOlzbB7G 9yhgnN4YGO2PDbGSg6VnvaeUCe4Yk8tHyWVapx2sZE+g1pRc3wRkXeY712bs3/Cw 0P1OcamdB5SDjA9DgHWsAou8pqlIyCo= -----END CERTIFICATE-----Generated at Sat Jun 7 22:50:42 2025 by rpki-client