$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2119444c-ed4f-35d3-890f-44b2ab03b87c.roa File: 2119444c-ed4f-35d3-890f-44b2ab03b87c.roa (raw, json) Hash identifier: ZLW1FcQDSSQ33UEovVGVTTIi5Aeyc3OTGbmpsYJ15Iw= Subject key identifier: CF:88:6A:BA:62:67:4B:35:4A:21:4B:1A:A4:20:F9:92:EB:A5:7A:2D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A1465872C3A5ACAE38A632EC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2119444c-ed4f-35d3-890f-44b2ab03b87c.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 104.97.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:87:2c:3a:5a:ca:e3:8a:63:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=b2c992c5-189c-4d7f-b018-58b68002660d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:dc:13:b0:04:cc:fb:b7:0b:a0:60:93:43:73: 93:1d:2c:e8:95:87:43:30:fd:2e:4b:23:80:ea:d0: c1:0e:a0:21:8b:b3:4a:ba:d2:66:e0:21:56:4d:cf: 39:25:12:74:27:3e:2c:1f:73:e1:b9:6b:c9:38:8c: 48:2c:58:e2:d7:f9:91:54:44:d1:10:49:a5:56:59: 80:1a:a5:dc:0b:88:56:87:cd:af:63:ca:67:3a:75: 25:d6:88:41:03:ce:7e:40:3d:54:b0:91:2d:df:76: a5:8f:f4:1f:d3:8d:da:fb:81:d9:a6:10:ac:0a:0b: d9:a1:03:51:92:e8:a0:bb:38:2e:d8:c4:fe:ec:6b: da:e3:23:a9:9c:c9:09:8f:93:de:82:66:c6:93:69: f0:f9:cf:9b:05:74:79:db:7a:45:68:53:4a:b5:cf: 39:4b:fd:dc:cb:00:03:68:a3:86:50:39:39:12:f7: 37:23:12:af:2a:37:94:6d:0d:63:58:2d:1a:ab:48: 97:2b:cd:9a:5e:03:33:f4:1d:f3:14:00:5f:4d:22: 3e:07:fe:97:a4:42:9b:9e:ad:c1:a8:3c:22:9e:ca: 7e:ff:d1:7d:8a:1a:ba:6a:58:a1:9d:c2:bd:d5:c7: 67:82:d2:59:52:e0:f3:fb:21:99:99:25:29:c8:22: a3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:88:6A:BA:62:67:4B:35:4A:21:4B:1A:A4:20:F9:92:EB:A5:7A:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2119444c-ed4f-35d3-890f-44b2ab03b87c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.97.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:fb:fd:ef:e8:2a:9e:43:42:44:fa:2a:36:76:ae:05:67:34: d6:40:86:b2:87:3d:c4:43:64:f3:71:a0:fd:62:f0:4c:ad:1b: 07:b4:39:09:e1:c7:9c:8d:8a:69:fe:d6:06:31:c7:9a:c9:20: 73:76:85:49:17:81:5b:29:d9:a8:43:e2:cf:90:6c:18:b0:30: 5f:d3:05:3b:13:36:cc:a6:0c:0b:50:fe:ae:af:79:a8:81:bc: ab:f7:cd:cf:c4:02:b7:00:1a:f7:a2:d1:3e:05:1b:e6:e4:a1: ce:71:35:fa:a3:93:22:a7:64:83:34:2a:6e:28:13:61:fb:83: 3b:8b:66:53:a6:02:2e:07:fd:4b:39:b3:3a:fd:6b:28:9e:1b: 8d:3c:57:3f:f6:c5:18:e5:13:59:6c:cc:03:b2:85:29:0f:68: a6:eb:94:56:af:af:40:e3:22:f9:c6:c4:e0:dc:51:eb:90:2d: c8:c5:ef:ab:8e:2d:6a:3c:03:19:39:b5:dc:de:da:df:57:88: fa:2c:9d:82:5d:41:55:59:93:31:c4:2d:75:fb:f2:4e:51:38: 52:1d:0e:1e:49:75:99:27:7e:b7:3f:05:86:92:83:5e:b1:42: 73:2b:88:50:08:3b:8d:f3:35:16:43:3a:43:e5:c5:fd:4f:bd: 9d:69:a8:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZYcsOlrK44pjLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk YjJjOTkyYzUtMTg5Yy00ZDdmLWIwMTgtNThiNjgwMDI2NjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9wTsATM+7cLoGCTQ3OTHSzolYdDMP0uSyOA 6tDBDqAhi7NKutJm4CFWTc85JRJ0Jz4sH3PhuWvJOIxILFji1/mRVETREEmlVlmA GqXcC4hWh82vY8pnOnUl1ohBA85+QD1UsJEt33alj/Qf043a+4HZphCsCgvZoQNR kuiguzgu2MT+7Gva4yOpnMkJj5PegmbGk2nw+c+bBXR523pFaFNKtc85S/3cywAD aKOGUDk5Evc3IxKvKjeUbQ1jWC0aq0iXK82aXgMz9B3zFABfTSI+B/6XpEKbnq3B qDwinsp+/9F9ihq6alihncK91cdngtJZUuDz+yGZmSUpyCKj6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+IarpiZ0s1SiFLGqQg+ZLrpXotMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjExOTQ0NGMtZWQ0Zi0z NWQzLTg5MGYtNDRiMmFiMDNiODdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGFQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFH7/e/oKp5DQkT6KjZ2rgVnNNZAhrKHPcRDZPNxoP1i8EytGwe0OQnh x5yNimn+1gYxx5rJIHN2hUkXgVsp2ahD4s+QbBiwMF/TBTsTNsymDAtQ/q6veaiB vKv3zc/EArcAGvei0T4FG+bkoc5xNfqjkyKnZIM0Km4oE2H7gzuLZlOmAi4H/Us5 szr9ayieG408Vz/2xRjlE1lszAOyhSkPaKbrlFavr0DjIvnGxODcUeuQLcjF76uO LWo8Axk5tdze2t9XiPosnYJdQVVZkzHELXX78k5ROFIdDh5JdZknfrc/BYaSg16x QnMriFAIO43zNRZDOkPlxf1PvZ1pqDA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:21:53 2025 by rpki-client