$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e147995-92fe-3a09-bd47-ecd54b73da6c.roa File: 3e147995-92fe-3a09-bd47-ecd54b73da6c.roa (raw, json) Hash identifier: NKfkndUzgOcbzrsQ8pJnCvvFHyqmg7gFu9eye6iWc1U= Subject key identifier: 12:A2:C0:3E:A4:06:53:BA:38:F6:3B:4E:9A:46:8F:30:3C:D8:D5:DC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A14658867B9581F027CC24D40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e147995-92fe-3a09-bd47-ecd54b73da6c.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 104.101.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:88:67:b9:58:1f:02:7c:c2:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=824f1ee7-4575-4b1a-909f-a719cda9e7b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6b:3f:06:02:85:d6:0e:e5:67:25:d1:02:96: 54:70:49:78:43:0b:cc:f8:0c:c4:65:db:6c:81:ea: 65:90:31:9d:6c:fe:02:b7:88:77:c2:79:a7:b1:7a: 84:e0:70:25:11:3a:c1:da:59:36:fb:e7:cc:0c:05: c3:59:b6:f5:0c:f5:9a:d2:8d:a9:a6:13:8b:de:b0: ae:10:4d:e3:33:38:c4:59:b7:a4:07:a7:ca:1f:04: 65:f1:86:47:6d:2f:8d:ad:63:97:14:fa:41:13:00: 6c:8b:3e:25:2a:f1:14:0e:21:d6:53:c9:97:27:25: b8:42:6c:84:28:77:5f:38:80:8c:67:7e:1c:13:63: 79:bd:05:a9:2e:5a:94:44:f3:1b:b1:85:09:ce:15: 04:cc:e6:58:6e:73:dd:d8:dd:b0:d5:da:05:a0:ab: 40:30:ff:b0:08:d2:02:df:68:e5:55:bf:a5:21:f7: 4f:61:a9:82:1f:7d:97:73:bc:14:33:ac:57:d3:ee: f3:a6:e8:86:fa:ba:89:78:9f:a6:79:14:86:08:6b: e1:5c:77:b1:eb:20:e2:6c:71:ba:6b:76:47:8a:99: 07:5d:a6:16:c7:d7:96:1e:58:cd:9e:f4:56:d2:79: b8:3e:9d:e2:1a:b6:77:5e:ff:4e:60:5e:47:56:81: 1c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A2:C0:3E:A4:06:53:BA:38:F6:3B:4E:9A:46:8F:30:3C:D8:D5:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e147995-92fe-3a09-bd47-ecd54b73da6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.101.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:2f:42:a4:0e:34:b2:f1:b7:83:cc:3e:27:df:a5:90:a8:6b: 8c:e1:9f:0a:aa:48:81:97:e3:c1:b9:1a:e7:53:6c:8f:02:99: d2:18:bd:86:37:90:51:94:fb:78:0b:a5:34:f8:c5:9a:5c:22: 00:cb:74:15:4f:37:50:c4:af:fe:c8:f5:7d:8c:a9:26:da:27: aa:fa:33:5c:d3:e9:75:e6:2a:7f:e4:a4:e9:dd:38:6a:89:a1: 6a:a2:6e:83:72:10:fe:0d:1a:48:2f:e6:d8:36:cf:5f:dd:24: bd:dc:22:2d:62:29:2d:9d:07:07:3a:d8:a5:a6:46:cb:e1:fa: 0d:6f:72:61:08:f8:42:fa:51:56:ad:25:a9:b8:f9:8e:56:4c: 3e:50:df:a2:c6:a4:13:9a:78:de:86:1d:f0:df:b6:08:a6:32: 8a:af:89:3e:c0:bf:1f:bb:8d:15:7c:ed:07:e1:79:a4:a2:77: ce:4f:15:b2:68:77:34:a2:ae:94:99:0c:ab:b5:08:f5:a6:5d: 51:4c:b6:e7:9a:20:d7:9b:50:41:f2:84:95:8e:7a:77:c6:6e: ea:ef:4c:b4:b1:7d:b5:b9:74:f3:96:75:47:37:75:f1:f6:e6: 66:fb:af:f7:55:c1:cd:65:38:d3:1a:f5:a2:79:80:bc:e7:19: ce:99:7e:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZYhnuVgfAnzCTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk ODI0ZjFlZTctNDU3NS00YjFhLTkwOWYtYTcxOWNkYTllN2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72s/BgKF1g7lZyXRApZUcEl4QwvM+AzEZdts geplkDGdbP4Ct4h3wnmnsXqE4HAlETrB2lk2++fMDAXDWbb1DPWa0o2pphOL3rCu EE3jMzjEWbekB6fKHwRl8YZHbS+NrWOXFPpBEwBsiz4lKvEUDiHWU8mXJyW4QmyE KHdfOICMZ34cE2N5vQWpLlqURPMbsYUJzhUEzOZYbnPd2N2w1doFoKtAMP+wCNIC 32jlVb+lIfdPYamCH32Xc7wUM6xX0+7zpuiG+rqJeJ+meRSGCGvhXHex6yDibHG6 a3ZHipkHXaYWx9eWHljNnvRW0nm4Pp3iGrZ3Xv9OYF5HVoEczwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKiwD6kBlO6OPY7TppGjzA82NXcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2UxNDc5OTUtOTJmZS0z YTA5LWJkNDctZWNkNTRiNzNkYTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUvQqQONLLxt4PMPiffpZCoa4zhnwqqSIGX48G5GudTbI8CmdIYvYY3 kFGU+3gLpTT4xZpcIgDLdBVPN1DEr/7I9X2MqSbaJ6r6M1zT6XXmKn/kpOndOGqJ oWqiboNyEP4NGkgv5tg2z1/dJL3cIi1iKS2dBwc62KWmRsvh+g1vcmEI+EL6UVat Jam4+Y5WTD5Q36LGpBOaeN6GHfDftgimMoqviT7Avx+7jRV87QfheaSid85PFbJo dzSirpSZDKu1CPWmXVFMtueaINebUEHyhJWOenfGburvTLSxfbW5dPOWdUc3dfH2 5mb7r/dVwc1lONMa9aJ5gLznGc6Zfu0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:17:15 2025 by rpki-client