$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2fcfe64b-6e2b-3fa2-8a4d-25b5486328ef.roa File: 2fcfe64b-6e2b-3fa2-8a4d-25b5486328ef.roa (raw, json) Hash identifier: ZZ2BUe2C77/Bc6CTQg/RiGrD7+lDivD9hQNlIVAACWI= Subject key identifier: 2E:C9:A1:F9:A4:BD:4A:0A:60:7E:9C:EE:0B:FC:F2:E9:93:48:AD:DF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A189558BE2C0E1C9F26F1FA90 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2fcfe64b-6e2b-3fa2-8a4d-25b5486328ef.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 16625 IP address blocks: 104.119.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:58:be:2c:0e:1c:9f:26:f1:fa:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=fc8f7811-bc72-48cd-b46d-2746f0ab2298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:d0:0b:31:fe:65:20:99:4e:a8:42:1b:9a:8c: 6f:86:f1:e2:c8:0c:13:42:1a:54:36:90:7c:96:6a: 1f:39:37:af:fa:6e:c1:54:d5:16:d8:ee:b3:84:28: d0:40:52:40:6a:a8:02:9f:8d:a7:ec:e2:19:c8:fa: 3f:23:e2:12:f9:e6:c3:8c:32:06:e1:6d:76:cb:dc: ad:c5:f5:4b:7b:33:78:4a:92:85:98:b7:f7:78:cb: 93:11:5c:14:7b:d5:ab:fb:73:53:3e:2d:00:a1:b8: 31:7c:13:d9:e8:08:e5:b7:d6:39:5c:be:61:28:de: 51:2a:10:7e:c7:48:15:24:34:a3:db:fd:33:f3:5d: 5a:2e:56:36:c3:05:fc:57:f4:0a:d4:ec:d7:4f:f0: 1d:60:ee:2a:77:fc:4a:2b:91:b1:10:0d:fd:3e:5c: 9e:2e:ff:b8:6b:f0:38:11:12:51:b1:18:06:6b:b8: 65:de:3c:1a:7d:36:50:0e:f6:98:ff:b9:93:da:cf: cd:4d:50:e5:58:a2:ec:63:3d:c3:32:fb:db:96:d8: 21:07:17:2e:29:73:86:e5:7c:a9:c3:2c:41:bd:70: 66:a5:a2:44:a8:9a:92:ee:5d:45:1e:2d:92:bf:28: 0b:16:10:56:7c:73:be:bd:1c:c8:8d:83:fd:99:fa: b3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C9:A1:F9:A4:BD:4A:0A:60:7E:9C:EE:0B:FC:F2:E9:93:48:AD:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2fcfe64b-6e2b-3fa2-8a4d-25b5486328ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.119.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:67:67:7f:1d:47:fb:b1:c0:b5:9e:42:d9:8b:37:bc:31:77: 98:95:11:de:e2:e4:1c:8a:9e:85:f4:fc:eb:70:a7:b1:23:52: f2:de:72:dc:c4:1e:7e:99:19:1b:dc:7f:f6:0f:dd:c0:b0:67: 32:cd:cd:15:45:ec:c2:a9:e1:7b:dc:cd:13:ce:bc:d5:ac:af: 09:86:8a:66:d4:95:8a:e2:fe:d3:ea:5a:ae:f0:81:63:32:7a: 74:ab:0e:8a:86:f1:e5:85:19:7f:e2:34:61:f4:57:3d:75:9f: 2e:06:22:5b:d9:31:5f:c2:ab:01:3f:b4:3e:0f:8a:ea:17:c3: 21:12:3b:ea:ae:c7:70:a1:0b:6b:c0:de:a4:76:89:44:72:97: 17:6c:00:49:a2:a5:1f:e5:fa:a4:90:62:81:7e:7a:ba:35:a6: 40:d7:dd:ee:f0:dd:db:82:1e:fb:4b:f6:1f:b1:16:7d:66:73: 16:82:03:4b:76:c9:c1:c7:59:ca:65:1e:40:6f:f1:5b:68:f2: b1:9e:7f:a6:21:f5:30:84:ca:91:91:f1:44:5a:97:06:d4:31: 3a:47:25:23:11:cc:e1:0c:9d:20:cd:60:9c:ca:eb:0f:c1:77: 00:a8:19:31:3a:d5:ed:04:08:d8:3b:83:3d:7a:89:a2:d7:0a: 7c:ee:63:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlVi+LA4cnybx+pAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk ZmM4Zjc4MTEtYmM3Mi00OGNkLWI0NmQtMjc0NmYwYWIyMjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+9ALMf5lIJlOqEIbmoxvhvHiyAwTQhpUNpB8 lmofOTev+m7BVNUW2O6zhCjQQFJAaqgCn42n7OIZyPo/I+IS+ebDjDIG4W12y9yt xfVLezN4SpKFmLf3eMuTEVwUe9Wr+3NTPi0AobgxfBPZ6Ajlt9Y5XL5hKN5RKhB+ x0gVJDSj2/0z811aLlY2wwX8V/QK1OzXT/AdYO4qd/xKK5GxEA39PlyeLv+4a/A4 ERJRsRgGa7hl3jwafTZQDvaY/7mT2s/NTVDlWKLsYz3DMvvbltghBxcuKXOG5Xyp wyxBvXBmpaJEqJqS7l1FHi2SvygLFhBWfHO+vRzIjYP9mfqzGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7JofmkvUoKYH6c7gv88umTSK3fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmZjZmU2NGItNmUyYi0z ZmEyLThhNGQtMjViNTQ4NjMyOGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHdsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJnZ38dR/uxwLWeQtmLN7wxd5iVEd7i5ByKnoX0/Otwp7EjUvLectzE Hn6ZGRvcf/YP3cCwZzLNzRVF7MKp4XvczRPOvNWsrwmGimbUlYri/tPqWq7wgWMy enSrDoqG8eWFGX/iNGH0Vz11ny4GIlvZMV/CqwE/tD4PiuoXwyESO+qux3ChC2vA 3qR2iURylxdsAEmipR/l+qSQYoF+ero1pkDX3e7w3duCHvtL9h+xFn1mcxaCA0t2 ycHHWcplHkBv8Vto8rGef6Yh9TCEypGR8URalwbUMTpHJSMRzOEMnSDNYJzK6w/B dwCoGTE61e0ECNg7gz16iaLXCnzuY3s= -----END CERTIFICATE-----Generated at Sat Jun 7 23:05:06 2025 by rpki-client