$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fb5b5e8-981a-3af9-a788-9cc294655ead.roa File: 3fb5b5e8-981a-3af9-a788-9cc294655ead.roa (raw, json) Hash identifier: lI1ScJdFiDGtbIL9wXK5Z2wgUQYLSU68z0QLSbI0Yro= Subject key identifier: C5:7C:37:41:6A:76:20:91:6C:96:1C:96:08:E1:07:BE:07:3A:7A:DE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A146592A78300485769614D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fb5b5e8-981a-3af9-a788-9cc294655ead.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 9443 IP address blocks: 104.99.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:92:a7:83:00:48:57:69:61:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=f36b1849-ef33-41da-a60f-afa164194d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3f:bb:24:28:cd:5f:85:7b:58:6c:e7:80:29: 38:56:93:e0:5d:07:f8:99:60:0a:1a:94:5c:b4:3e: 97:22:14:ed:74:65:c2:49:78:d3:cc:58:56:7d:54: 3e:30:1f:1f:0e:e6:75:54:f7:5b:2d:d9:ed:77:29: 7d:2e:30:32:19:39:24:d6:c9:cd:b5:1d:c0:ab:f9: 44:76:87:7b:47:5b:fa:cc:09:56:b3:c0:64:c3:95: e8:18:4e:fc:1a:cd:8c:6d:2c:13:c8:cd:23:42:88: 98:95:20:f7:be:3c:9b:a2:10:8a:d4:1e:b2:62:5e: 53:ba:27:7a:b8:14:ba:23:07:4d:7a:85:4b:cb:da: 22:15:c6:16:f1:32:e9:09:ef:0e:21:69:1d:3f:89: 77:29:4d:ec:3c:28:b3:94:de:d8:65:b0:5c:32:12: 77:99:bb:f3:e2:92:e4:03:49:ff:30:f5:a3:84:5f: 22:e8:42:d9:12:dc:d3:60:04:4c:01:05:ca:53:40: ad:2e:fa:f5:66:f6:16:df:13:b6:9a:e4:77:ce:ef: bf:5c:da:2d:87:b7:2f:a7:b1:07:8d:4b:24:54:96: f2:1d:6e:25:40:d4:fa:d2:e8:22:37:9e:94:79:ba: da:7d:19:82:6a:63:98:e6:3f:58:19:38:4b:80:4e: 8d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7C:37:41:6A:76:20:91:6C:96:1C:96:08:E1:07:BE:07:3A:7A:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fb5b5e8-981a-3af9-a788-9cc294655ead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.99.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:10:7b:5f:b2:82:94:4a:5c:1d:e0:a2:7d:c2:93:18:4c:82: d0:02:a3:27:f1:09:fa:9b:2e:b4:c9:e7:93:0c:28:5b:5b:7c: fb:c2:15:af:8c:9c:4f:f5:ef:fe:7e:02:ea:8f:78:e4:68:a6: a2:b1:8e:18:04:b2:cd:54:ef:bd:ee:ed:f3:4c:ff:8c:59:8a: 85:87:e7:74:94:bc:bd:ba:38:43:44:ee:9f:25:ad:40:ae:cf: 93:97:72:d3:7a:5e:ab:c4:92:ee:55:36:e5:ad:f0:38:f6:34: 4c:2b:9b:86:cf:ba:53:c3:f2:81:b5:35:d0:fd:4f:73:19:13: 7c:8d:0f:1e:a1:1a:6b:4c:88:b6:79:93:e6:2c:43:ef:4f:8c: ed:51:d2:d1:4d:d8:b9:d0:4b:c6:42:f8:ee:3a:8b:4c:94:4c: c9:78:83:be:a7:8f:7d:00:56:67:58:4d:df:f0:fa:72:16:0f: 75:a2:8f:02:1e:a5:52:4c:3f:98:96:7f:db:ba:bd:4c:a5:b5: e9:27:cb:b3:c0:07:f5:0c:bd:06:c0:85:86:3d:34:99:65:33: 79:50:d3:53:61:b3:b3:5d:4f:1f:2f:25:91:ea:96:9d:74:17: b7:4c:52:10:1c:81:7b:f3:fa:12:67:44:bb:4c:0e:3a:c5:f0: 9d:3a:84:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZZKngwBIV2lhTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjM2YjE4NDktZWYzMy00MWRhLWE2MGYtYWZhMTY0MTk0ZDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj+7JCjNX4V7WGzngCk4VpPgXQf4mWAKGpRc tD6XIhTtdGXCSXjTzFhWfVQ+MB8fDuZ1VPdbLdntdyl9LjAyGTkk1snNtR3Aq/lE dod7R1v6zAlWs8Bkw5XoGE78Gs2MbSwTyM0jQoiYlSD3vjybohCK1B6yYl5Tuid6 uBS6IwdNeoVLy9oiFcYW8TLpCe8OIWkdP4l3KU3sPCizlN7YZbBcMhJ3mbvz4pLk A0n/MPWjhF8i6ELZEtzTYARMAQXKU0CtLvr1ZvYW3xO2muR3zu+/XNoth7cvp7EH jUskVJbyHW4lQNT60ugiN56UebrafRmCamOY5j9YGThLgE6NXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMV8N0FqdiCRbJYclgjhB74HOnreMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2ZiNWI1ZTgtOTgxYS0z YWY5LWE3ODgtOWNjMjk0NjU1ZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGPkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwQe1+ygpRKXB3gon3CkxhMgtACoyfxCfqbLrTJ55MMKFtbfPvCFa+M nE/17/5+AuqPeORopqKxjhgEss1U773u7fNM/4xZioWH53SUvL26OENE7p8lrUCu z5OXctN6XqvEku5VNuWt8Dj2NEwrm4bPulPD8oG1NdD9T3MZE3yNDx6hGmtMiLZ5 k+YsQ+9PjO1R0tFN2LnQS8ZC+O46i0yUTMl4g76nj30AVmdYTd/w+nIWD3WijwIe pVJMP5iWf9u6vUyltekny7PAB/UMvQbAhYY9NJllM3lQ01Nhs7NdTx8vJZHqlp10 F7dMUhAcgXvz+hJnRLtMDjrF8J06hKE= -----END CERTIFICATE-----Generated at Thu Jun 5 18:33:42 2025 by rpki-client