$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/326d8589-7168-3ad2-9522-1d772eca633b.roa File: 326d8589-7168-3ad2-9522-1d772eca633b.roa (raw, json) Hash identifier: vb1AXRzVOFZQiJ15TMDObezjOWaHcTZTPKDC8oeBWPw= Subject key identifier: 31:AC:31:98:92:A9:32:BB:78:E1:2F:12:BD:C7:63:28:FE:35:88:D4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A18955A5F10B968D85963B2C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/326d8589-7168-3ad2-9522-1d772eca633b.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 20940 IP address blocks: 104.123.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:5a:5f:10:b9:68:d8:59:63:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=a2603d80-70ba-440a-a151-6b839a553a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b6:d7:57:54:e5:cd:a0:b2:16:16:b7:b3:77: 27:33:3b:fa:bb:b9:b6:d5:bf:60:de:96:2b:09:c3: ce:72:20:4c:b7:af:75:00:b7:56:c1:aa:c3:3a:39: c5:5b:e3:a5:1d:37:6d:0c:b4:ad:94:d2:cc:c6:df: bd:2e:86:08:f4:57:ae:69:eb:ec:f5:09:c5:0b:45: 95:07:2e:40:d7:8e:ee:66:bd:c6:68:81:43:73:13: 6d:5f:c3:dc:f2:fe:f7:a7:e2:69:b8:8a:d9:7b:4c: 0d:66:87:cc:82:ca:b5:c3:a2:fe:8b:cc:07:09:b9: fb:6c:d4:ab:ba:48:f3:32:a0:e0:7b:ca:a3:d8:a6: 63:8d:1b:9d:da:9a:c1:75:31:4c:4a:c6:02:01:fb: b0:f5:c5:f6:9d:29:fd:b9:ae:13:69:29:fb:0a:68: 16:7c:1d:5f:ee:dd:5d:36:18:f7:21:13:97:73:5e: 31:c5:aa:32:28:31:f8:da:40:03:0d:83:0c:10:68: e6:1c:82:c5:3d:96:00:6d:59:35:aa:8b:e5:cd:64: 14:71:f1:33:7d:53:bb:26:d5:21:c2:3c:e4:95:0d: c4:ce:1c:99:79:32:75:f0:99:9e:1a:ba:55:8d:60: 79:8a:e9:a1:d9:ad:af:41:7f:61:49:84:f4:89:31: 5f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AC:31:98:92:A9:32:BB:78:E1:2F:12:BD:C7:63:28:FE:35:88:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/326d8589-7168-3ad2-9522-1d772eca633b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.123.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:d0:03:d6:63:df:4e:40:f6:c8:9e:25:59:8c:c9:55:ee:55: 78:95:bb:c6:1e:9e:f7:89:8b:99:23:54:c8:40:7a:6f:f9:73: 99:32:c3:7c:11:51:a3:76:65:54:30:53:3c:e4:e3:58:db:2a: ff:e5:d7:59:65:98:29:42:f9:f8:bc:57:16:4a:35:d8:65:a9: de:22:a9:a2:b1:ec:32:a8:8e:aa:d0:db:c6:2c:30:38:af:53: 21:1e:ad:52:7b:44:55:94:38:a5:55:a0:21:8d:8d:a0:e0:7f: 01:1e:ce:51:89:93:de:bd:89:ab:2f:bb:5e:e2:13:82:73:e1: 59:2a:05:99:2f:2b:27:da:b2:fd:24:00:c2:f4:ad:c8:ed:df: eb:d3:59:a0:fd:cc:38:b7:95:21:be:0e:61:75:ae:8d:82:a4: b9:84:bf:15:f7:51:d8:eb:1e:8b:c0:b6:bc:c2:f7:61:f3:e4: 67:e2:82:10:70:ac:83:5d:f4:80:0a:00:f5:86:8c:e2:60:ff: 34:3b:62:ef:66:57:58:13:15:2c:37:56:9e:bf:58:cd:73:fd: 6e:84:71:8c:6d:7e:ec:9a:e0:14:4d:fc:b4:15:17:b3:fb:3f: e3:43:7d:34:13:b0:1e:e5:90:e9:44:06:ec:61:24:2e:97:d8: 5a:c3:2e:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlVpfELlo2FljssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk YTI2MDNkODAtNzBiYS00NDBhLWExNTEtNmI4MzlhNTUzYTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLbXV1TlzaCyFha3s3cnMzv6u7m21b9g3pYr CcPOciBMt691ALdWwarDOjnFW+OlHTdtDLStlNLMxt+9LoYI9Feuaevs9QnFC0WV By5A147uZr3GaIFDcxNtX8Pc8v73p+JpuIrZe0wNZofMgsq1w6L+i8wHCbn7bNSr ukjzMqDge8qj2KZjjRud2prBdTFMSsYCAfuw9cX2nSn9ua4TaSn7CmgWfB1f7t1d Nhj3IROXc14xxaoyKDH42kADDYMMEGjmHILFPZYAbVk1qovlzWQUcfEzfVO7JtUh wjzklQ3EzhyZeTJ18JmeGrpVjWB5iumh2a2vQX9hSYT0iTFfWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGsMZiSqTK7eOEvEr3HYyj+NYjUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzI2ZDg1ODktNzE2OC0z YWQyLTk1MjItMWQ3NzJlY2E2MzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHtDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLQA9Zj305A9sieJVmMyVXuVXiVu8YenveJi5kjVMhAem/5c5kyw3wR UaN2ZVQwUzzk41jbKv/l11llmClC+fi8VxZKNdhlqd4iqaKx7DKojqrQ28YsMDiv UyEerVJ7RFWUOKVVoCGNjaDgfwEezlGJk969iasvu17iE4Jz4VkqBZkvKyfasv0k AML0rcjt3+vTWaD9zDi3lSG+DmF1ro2CpLmEvxX3UdjrHovAtrzC92Hz5GfighBw rINd9IAKAPWGjOJg/zQ7Yu9mV1gTFSw3Vp6/WM1z/W6EcYxtfuya4BRN/LQVF7P7 P+NDfTQTsB7lkOlEBuxhJC6X2FrDLjs= -----END CERTIFICATE-----Generated at Sat Jun 7 19:53:02 2025 by rpki-client