$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f1cea95-e202-3f8c-92a5-074dbde27f67.roa File: 3f1cea95-e202-3f8c-92a5-074dbde27f67.roa (raw, json) Hash identifier: 7Yq5ryhU6HNNNEbX6SU53AmTKwF+4kHDEXslbUBDOx8= Subject key identifier: A1:D1:33:8A:45:43:3A:F3:D5:21:C7:6D:37:22:A7:B9:42:3D:6B:77 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A18955091A8E407D3DD9F0C28 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f1cea95-e202-3f8c-92a5-074dbde27f67.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 24319 IP address blocks: 104.123.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:50:91:a8:e4:07:d3:dd:9f:0c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=b0140253-6802-4306-a36a-d513189ad479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7f:80:43:d9:be:02:9a:de:d3:9c:c0:ce:4b: 91:3d:91:0e:9b:90:da:c9:ea:05:e9:5b:75:27:4b: 2a:0e:76:24:f7:8d:b2:04:1b:2d:aa:38:07:bb:09: cd:f4:3f:fd:c1:5f:c3:02:aa:fc:4d:64:b8:98:d9: 24:f8:81:a9:cd:c7:30:9a:f9:9b:64:77:b2:1d:f1: 19:02:98:35:76:b4:a4:a3:ba:40:11:da:ef:4c:45: c0:c2:89:7e:95:ea:dc:3d:1e:49:6d:a1:8a:04:6e: 48:16:57:3b:ce:2a:83:b2:cd:d6:c4:9f:08:5c:0e: 2b:2f:5d:93:3f:75:d9:1f:77:98:b5:89:bf:bb:9c: 9e:b2:70:83:62:4c:00:39:5f:c3:28:f9:4e:1d:c3: a5:1c:d2:4a:74:3f:15:63:1e:e7:19:d9:8f:68:cc: e4:a0:10:1f:48:17:35:89:91:51:d4:8b:b0:ca:56: 8f:e9:5d:6e:0f:06:28:9c:8d:ca:95:fd:8a:6e:28: 8e:6b:39:5d:83:60:e9:4e:39:60:23:90:4f:58:7c: be:72:78:71:c1:d0:22:ae:41:a5:f7:07:52:80:d1: 43:8c:22:5f:54:54:d2:b7:48:25:ef:38:a3:fc:e9: 60:d1:54:98:58:90:a6:3b:52:06:1f:21:f4:79:96: 52:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D1:33:8A:45:43:3A:F3:D5:21:C7:6D:37:22:A7:B9:42:3D:6B:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f1cea95-e202-3f8c-92a5-074dbde27f67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.123.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:08:5d:f8:8e:ff:ef:0f:a9:67:1c:e9:21:31:f7:68:ab:62: 2f:cf:4f:52:26:73:d1:42:d8:57:0d:b2:b5:1d:99:a2:49:56: 12:58:2a:6b:35:88:65:ad:0f:56:e1:72:1a:7a:08:cd:b2:50: 98:2f:1e:d8:41:6a:d2:81:d0:98:0f:a7:87:03:f8:76:1a:66: fa:c1:6a:8c:52:86:9d:a1:ce:87:04:23:a7:18:2d:9d:23:e1: 34:69:a0:f8:5a:08:a0:05:50:f6:12:e9:29:24:11:bb:1f:7c: 90:af:42:11:51:8a:de:ad:81:b4:97:28:12:ba:35:0c:0e:92: b8:9c:c7:20:04:be:ef:e0:32:03:77:c1:93:f8:43:d3:64:5c: 58:ce:a4:d9:d7:6c:f0:56:ce:f4:5c:89:e7:f0:4c:3e:6d:4f: e6:67:d5:44:cb:16:c9:09:5b:1e:36:e0:ed:b5:c9:67:13:74: d2:e3:35:f7:d4:3a:7c:1a:6d:08:4e:7a:74:3d:03:14:89:c6: 90:0a:c6:75:2a:5e:a6:0d:e0:7d:e8:26:d6:83:3c:30:3a:bb: c7:3e:d4:4a:17:25:14:da:1f:8d:29:76:a9:36:4b:f7:34:f3: 71:bf:9f:67:84:a8:78:14:b7:9a:15:bb:0d:ea:dc:74:3e:8f: c7:b2:22:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlVCRqOQH092fDCgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk YjAxNDAyNTMtNjgwMi00MzA2LWEzNmEtZDUxMzE4OWFkNDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH+AQ9m+Apre05zAzkuRPZEOm5DayeoF6Vt1 J0sqDnYk942yBBstqjgHuwnN9D/9wV/DAqr8TWS4mNkk+IGpzccwmvmbZHeyHfEZ Apg1drSko7pAEdrvTEXAwol+lercPR5JbaGKBG5IFlc7ziqDss3WxJ8IXA4rL12T P3XZH3eYtYm/u5yesnCDYkwAOV/DKPlOHcOlHNJKdD8VYx7nGdmPaMzkoBAfSBc1 iZFR1IuwylaP6V1uDwYonI3Klf2KbiiOazldg2DpTjlgI5BPWHy+cnhxwdAirkGl 9wdSgNFDjCJfVFTSt0gl7zij/Olg0VSYWJCmO1IGHyH0eZZSiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHRM4pFQzrz1SHHbTcip7lCPWt3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2YxY2VhOTUtZTIwMi0z ZjhjLTkyYTUtMDc0ZGJkZTI3ZjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsIXfiO/+8PqWcc6SEx92irYi/PT1Imc9FC2FcNsrUdmaJJVhJYKms1 iGWtD1bhchp6CM2yUJgvHthBatKB0JgPp4cD+HYaZvrBaoxShp2hzocEI6cYLZ0j 4TRpoPhaCKAFUPYS6SkkEbsffJCvQhFRit6tgbSXKBK6NQwOkricxyAEvu/gMgN3 wZP4Q9NkXFjOpNnXbPBWzvRciefwTD5tT+Zn1UTLFskJWx424O21yWcTdNLjNffU OnwabQhOenQ9AxSJxpAKxnUqXqYN4H3oJtaDPDA6u8c+1EoXJRTaH40pdqk2S/c0 83G/n2eEqHgUt5oVuw3q3HQ+j8eyIuE= -----END CERTIFICATE-----Generated at Fri Jun 6 04:57:42 2025 by rpki-client