$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3489639c-5412-3ed7-913f-78c141cc1600.roa File: 3489639c-5412-3ed7-913f-78c141cc1600.roa (raw, json) Hash identifier: wXPX9u2wimQNPkqFh+KkXmN6p8KycP5yUSJ3FI9DFdA= Subject key identifier: D0:23:4A:1E:66:C4:BE:FC:FE:DA:B3:0D:FB:FA:F0:63:3C:79:EC:7D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A18955BBDCD697E54FDD27940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3489639c-5412-3ed7-913f-78c141cc1600.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 24319 IP address blocks: 104.125.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:5b:bd:cd:69:7e:54:fd:d2:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=8f474191-bf27-4096-aabb-4241589e7842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7f:37:53:bd:d4:50:b0:b3:0d:1b:2f:b0:f3: ab:0d:b3:e8:6a:8e:75:f1:2f:78:d1:a4:1c:ea:8d: 82:e4:97:45:6a:ca:28:2b:ff:bf:a3:40:e0:78:31: 0d:61:2b:c2:8f:a1:15:7d:80:88:c0:bd:8e:b6:9f: 5c:5d:32:0c:ad:b4:1c:10:a2:c8:64:ef:c6:32:f8: 23:63:8d:2d:fa:53:11:e7:8f:ce:5d:95:22:f0:06: 12:42:bd:f0:78:36:80:6c:ef:d3:14:5e:51:39:7a: a2:f3:3b:cb:09:8e:f6:46:21:a4:1f:d7:57:08:ca: 40:67:04:15:3f:92:18:34:a0:0b:80:ad:3c:cc:16: 78:84:d2:48:d0:a8:dd:14:7b:63:1f:56:54:f4:1c: 76:4d:17:e4:13:06:f6:c7:d7:95:db:68:4a:24:cf: 9a:ad:de:d4:f6:01:06:be:24:55:00:8f:ca:1d:c8: 83:cd:a6:9c:ac:60:e8:59:38:11:0f:3b:bd:e9:52: 10:5c:a1:d2:ab:b2:49:37:d2:59:0f:5f:43:78:d4: 1f:d9:0a:83:9b:c1:70:13:51:95:4f:f5:d4:3b:77: 7a:f7:d1:4d:3a:9b:d3:1d:4e:4f:b5:b7:24:8a:ac: db:72:2f:f6:12:a4:32:26:f5:a5:61:bb:7c:61:ee: d8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:23:4A:1E:66:C4:BE:FC:FE:DA:B3:0D:FB:FA:F0:63:3C:79:EC:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3489639c-5412-3ed7-913f-78c141cc1600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.125.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:fc:07:bf:09:98:46:02:ac:e9:bd:7d:72:b0:eb:d7:14:d8: de:9d:43:83:31:79:26:63:7f:36:06:66:e4:53:a2:44:e2:f9: 91:9d:04:8e:2f:ca:ec:1a:21:a6:cd:52:ee:f1:38:66:79:82: 07:4e:16:51:6f:b5:f3:a3:5d:8f:9b:93:ec:6e:b0:9c:de:13: 83:0d:bc:46:82:a5:93:61:20:0b:e0:b6:39:16:da:33:a7:a7: c3:e2:37:1a:84:74:ee:d6:ec:da:a7:15:4f:f4:d8:e7:64:70: 8e:7a:25:8c:5c:f9:72:96:d7:6d:62:3e:a0:02:62:81:92:df: c9:95:5c:b2:1e:44:7e:d0:e6:4e:69:e0:19:38:70:e8:7d:36: 11:03:95:e7:e3:e5:f0:9d:4c:3a:09:40:f6:0d:fe:bb:ba:5e: af:c2:f7:74:72:3b:ce:8f:64:6e:e1:ac:cf:bf:f5:d8:d7:d2: ad:c5:aa:a7:2e:91:5c:38:38:62:52:f2:33:46:24:b1:26:9e: 92:12:fa:10:ad:0d:c4:3d:4f:ae:18:a7:73:bd:09:ef:dc:15: 15:4c:cf:bc:c2:e1:94:ed:5d:32:49:54:a6:da:02:b2:02:6e: ca:28:6e:e7:e2:4b:6f:e6:b2:59:42:91:3f:cd:a3:13:9b:8d: e4:58:e3:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlVu9zWl+VP3SeUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk OGY0NzQxOTEtYmYyNy00MDk2LWFhYmItNDI0MTU4OWU3ODQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6H83U73UULCzDRsvsPOrDbPoao518S940aQc 6o2C5JdFasooK/+/o0DgeDENYSvCj6EVfYCIwL2Otp9cXTIMrbQcEKLIZO/GMvgj Y40t+lMR54/OXZUi8AYSQr3weDaAbO/TFF5ROXqi8zvLCY72RiGkH9dXCMpAZwQV P5IYNKALgK08zBZ4hNJI0KjdFHtjH1ZU9Bx2TRfkEwb2x9eV22hKJM+ard7U9gEG viRVAI/KHciDzaacrGDoWTgRDzu96VIQXKHSq7JJN9JZD19DeNQf2QqDm8FwE1GV T/XUO3d699FNOpvTHU5Ptbckiqzbci/2EqQyJvWlYbt8Ye7YrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAjSh5mxL78/tqzDfv68GM8eex9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzQ4OTYzOWMtNTQxMi0z ZWQ3LTkxM2YtNzhjMTQxY2MxNjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaH0PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAf8B78JmEYCrOm9fXKw69cU2N6dQ4MxeSZjfzYGZuRTokTi+ZGdBI4v yuwaIabNUu7xOGZ5ggdOFlFvtfOjXY+bk+xusJzeE4MNvEaCpZNhIAvgtjkW2jOn p8PiNxqEdO7W7NqnFU/02OdkcI56JYxc+XKW121iPqACYoGS38mVXLIeRH7Q5k5p 4Bk4cOh9NhEDlefj5fCdTDoJQPYN/ru6Xq/C93RyO86PZG7hrM+/9djX0q3Fqqcu kVw4OGJS8jNGJLEmnpIS+hCtDcQ9T64Yp3O9Ce/cFRVMz7zC4ZTtXTJJVKbaArIC bsoobufiS2/msllCkT/NoxObjeRY4+4= -----END CERTIFICATE-----Generated at Fri Jun 6 18:05:15 2025 by rpki-client