$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22cb9fda-457b-32d8-8a1b-9aff5a140100.roa File: 22cb9fda-457b-32d8-8a1b-9aff5a140100.roa (raw, json) Hash identifier: WmB8F7EyBjRnr0aAHrNa7kEK/U0sOKFsWesThHDNuIs= Subject key identifier: 28:EA:92:A4:E1:9F:D4:6D:C5:94:7E:D9:06:31:F1:C8:75:BD:53:A5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A07D53F6AE8B411A748DC7D40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22cb9fda-457b-32d8-8a1b-9aff5a140100.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 16625 IP address blocks: 104.86.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:3f:6a:e8:b4:11:a7:48:dc:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=553cea05-0e58-4fdf-b1bb-54b1cd77bf26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:67:1d:c3:9d:40:da:ac:b6:e5:08:84:35:78: 18:13:4d:3d:62:4d:d2:09:03:85:9e:69:b4:3b:f3: 84:4d:e2:d9:57:07:2d:d3:86:1e:56:e1:32:84:b5: 0f:96:24:de:1b:bf:c3:77:59:cc:6c:27:02:82:62: 3f:9d:06:cc:e3:95:c2:99:45:18:f7:f8:f9:01:80: 1a:de:52:ab:4a:98:b9:78:1d:8d:de:43:02:e7:b5: db:f7:72:03:63:e5:68:96:51:2b:ed:7d:13:35:92: 66:0a:1c:32:f8:49:d3:cd:9b:e2:27:21:70:99:e5: ad:81:76:a7:53:26:82:84:f0:05:f7:39:c4:e2:d8: bd:de:fe:d4:6b:a7:d4:5d:ab:c8:df:d8:2b:34:98: d7:42:58:91:fa:43:29:a7:23:20:d0:06:2c:0f:82: d7:2f:44:b4:cf:d7:79:3d:73:e2:e1:f8:df:43:33: b6:60:5d:59:b0:a6:7d:5f:53:eb:4c:5e:f7:d6:20: 3a:85:82:bb:64:b2:64:2d:c5:12:00:8a:62:01:05: df:a2:a4:69:0b:1b:dc:df:f0:0c:b6:33:02:62:d8: 22:8b:bd:cd:50:e6:b1:bb:11:15:16:90:82:7d:45: dd:19:25:85:f7:92:51:67:4a:92:25:40:92:73:ce: f0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EA:92:A4:E1:9F:D4:6D:C5:94:7E:D9:06:31:F1:C8:75:BD:53:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22cb9fda-457b-32d8-8a1b-9aff5a140100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.86.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:e8:14:78:03:88:e9:32:7b:81:31:68:31:3c:a6:9c:66:a0: fa:93:4d:e4:86:a0:2e:59:41:7d:76:98:14:f5:70:0d:31:04: 47:e5:f9:32:9a:2b:1c:42:50:37:51:48:ad:be:a9:0a:e4:4b: 4a:8c:1e:4a:9d:8a:00:a7:ba:d3:b4:4d:e0:00:db:41:71:a5: da:30:da:d1:81:19:93:a4:75:f2:86:74:be:95:d0:d5:a7:e2: 98:91:a6:72:bb:4f:0f:5b:f5:30:b9:d2:e3:ff:66:3e:c7:62: fd:0c:a1:07:9d:d3:71:0e:15:70:bd:05:99:f3:2c:6f:a2:83: f9:92:64:2c:52:8f:5d:3e:69:20:56:60:9e:a8:81:0d:2a:21: 50:c2:07:69:07:c3:97:69:a6:df:60:02:d0:9c:e3:53:94:97: 40:7d:d6:06:3b:8f:b1:42:8c:e2:52:45:b4:14:49:5b:69:47: 5f:7a:1a:96:c9:6e:cd:e9:48:72:0a:49:29:d8:af:3c:ee:25: bf:57:21:f0:c2:53:b9:9e:57:11:30:88:5f:67:fb:b5:93:a7: 7b:f2:9d:36:66:9c:b9:f5:80:4b:00:bc:54:9e:de:2a:8b:c7: c1:6c:90:f9:b0:c8:b2:68:c4:a2:e7:70:0b:21:68:9d:c6:7a: 1c:66:57:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1T9q6LQRp0jcfUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk NTUzY2VhMDUtMGU1OC00ZmRmLWIxYmItNTRiMWNkNzdiZjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2cdw51A2qy25QiENXgYE009Yk3SCQOFnmm0 O/OETeLZVwct04YeVuEyhLUPliTeG7/Dd1nMbCcCgmI/nQbM45XCmUUY9/j5AYAa 3lKrSpi5eB2N3kMC57Xb93IDY+VollEr7X0TNZJmChwy+EnTzZviJyFwmeWtgXan UyaChPAF9znE4ti93v7Ua6fUXavI39grNJjXQliR+kMppyMg0AYsD4LXL0S0z9d5 PXPi4fjfQzO2YF1ZsKZ9X1PrTF731iA6hYK7ZLJkLcUSAIpiAQXfoqRpCxvc3/AM tjMCYtgii73NUOaxuxEVFpCCfUXdGSWF95JRZ0qSJUCSc87wpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjqkqThn9RtxZR+2QYx8ch1vVOlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjJjYjlmZGEtNDU3Yi0z MmQ4LThhMWItOWFmZjVhMTQwMTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaFaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDoFHgDiOkye4ExaDE8ppxmoPqTTeSGoC5ZQX12mBT1cA0xBEfl+TKa KxxCUDdRSK2+qQrkS0qMHkqdigCnutO0TeAA20Fxpdow2tGBGZOkdfKGdL6V0NWn 4piRpnK7Tw9b9TC50uP/Zj7HYv0MoQed03EOFXC9BZnzLG+ig/mSZCxSj10+aSBW YJ6ogQ0qIVDCB2kHw5dppt9gAtCc41OUl0B91gY7j7FCjOJSRbQUSVtpR196GpbJ bs3pSHIKSSnYrzzuJb9XIfDCU7meVxEwiF9n+7WTp3vynTZmnLn1gEsAvFSe3iqL x8FskPmwyLJoxKLncAshaJ3GehxmV8k= -----END CERTIFICATE-----Generated at Sat Jun 7 15:00:47 2025 by rpki-client