$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b33552f-2f2d-35be-a3b9-5aea89cd99af.roa File: 5b33552f-2f2d-35be-a3b9-5aea89cd99af.roa (raw, json) Hash identifier: iZ9HRSbXOH/YshtPrSdcZ3KmwvHPIY//C9k3WaplgZI= Subject key identifier: 27:82:CF:E1:86:02:31:F5:76:F6:15:D0:72:3D:B6:36:5A:F5:E0:39 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A146581773D5EF52B62FA4400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b33552f-2f2d-35be-a3b9-5aea89cd99af.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 9500 IP address blocks: 104.84.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:81:77:3d:5e:f5:2b:62:fa:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=89f4a132-f4f9-4bb8-b2d4-d723a358a6be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3e:8e:22:2f:d6:d9:57:9c:78:1d:04:1d:4a: 7b:30:1a:59:5e:6d:88:46:09:97:80:87:3a:94:f8: cf:2b:8c:a3:6d:da:fc:a4:fd:75:78:cc:86:db:a3: 25:2d:10:8f:7e:2c:5d:0c:c1:2c:ac:5d:15:f3:ae: 75:c0:9a:34:87:0c:44:6a:04:59:90:60:51:5e:e2: b0:97:f6:e5:56:f8:3f:38:3f:ae:c6:01:57:0c:ba: cf:2f:78:dd:94:6e:68:4c:20:c1:dd:f0:ab:2b:65: 56:c6:97:11:58:2c:7b:58:71:ad:e8:12:9e:64:84: bc:ea:d5:9e:5d:d1:55:cd:a6:01:d5:6b:54:1b:c1: e2:fd:62:e9:f9:ac:3a:78:42:7e:04:eb:81:4e:34: 73:96:1f:2a:8a:24:d0:3c:c8:49:11:4d:89:ba:5e: 8b:5e:d8:c2:26:b4:b8:df:71:9f:d5:36:ac:fe:58: 68:36:ba:3e:ed:df:6f:99:11:68:ba:a6:d8:8d:af: fb:29:2e:b4:a4:9e:22:67:4a:e1:ac:17:ea:17:74: 38:eb:a2:ff:e4:09:bb:14:90:0c:86:ae:46:9a:82: 38:f0:91:05:45:2d:77:dd:2e:65:1d:3d:84:d6:30: c8:9e:03:94:6a:32:c6:4f:fc:0a:bc:22:2d:cd:fd: 28:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:82:CF:E1:86:02:31:F5:76:F6:15:D0:72:3D:B6:36:5A:F5:E0:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b33552f-2f2d-35be-a3b9-5aea89cd99af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.84.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:b5:ac:1b:9a:95:57:37:1f:30:76:e6:8f:4b:e0:e7:5b:1d: fa:8e:c2:7c:13:b8:dd:12:7c:9e:e1:9e:3e:cc:e5:6b:90:8b: 6e:15:fb:a3:cb:7c:62:38:10:f4:7c:8b:fb:51:56:9d:4f:5f: f5:87:76:bc:d5:5b:c1:89:cb:7f:82:90:ff:53:b3:7e:cc:16: 75:29:74:13:8e:ae:99:75:00:55:30:38:65:53:d8:49:c0:98: e1:cd:56:64:10:4f:53:5b:f7:82:00:59:30:a1:76:72:a5:13: 5c:e0:91:56:25:30:1b:7b:f7:10:7e:55:71:fc:a5:7d:fc:b4: 4d:9b:74:c1:98:fc:7a:86:87:6f:cc:2c:ec:28:f6:03:18:cc: 6b:29:41:3c:74:54:42:68:a0:e2:b4:b7:3c:50:c7:06:9e:22: 47:fc:7a:b5:42:87:aa:66:b7:36:66:2e:42:5c:98:0b:55:6b: d7:0c:0d:9b:4f:48:65:1f:ed:b0:86:db:f8:10:df:ec:8a:fe: dd:59:1d:b6:ca:34:94:d6:97:c2:a7:53:02:ad:6b:75:ca:65: c3:cc:dc:5c:04:5f:ec:80:58:5f:a7:be:9a:85:74:b9:79:c4: bc:bd:50:3b:00:c8:4e:ee:fa:ca:8f:32:f0:6f:a0:3d:28:a1: 3a:36:43:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZYF3PV71K2L6RAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk ODlmNGExMzItZjRmOS00YmI4LWIyZDQtZDcyM2EzNThhNmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj6OIi/W2VeceB0EHUp7MBpZXm2IRgmXgIc6 lPjPK4yjbdr8pP11eMyG26MlLRCPfixdDMEsrF0V8651wJo0hwxEagRZkGBRXuKw l/blVvg/OD+uxgFXDLrPL3jdlG5oTCDB3fCrK2VWxpcRWCx7WHGt6BKeZIS86tWe XdFVzaYB1WtUG8Hi/WLp+aw6eEJ+BOuBTjRzlh8qiiTQPMhJEU2Jul6LXtjCJrS4 33Gf1Tas/lhoNro+7d9vmRFouqbYja/7KS60pJ4iZ0rhrBfqF3Q466L/5Am7FJAM hq5GmoI48JEFRS133S5lHT2E1jDIngOUajLGT/wKvCItzf0oKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeCz+GGAjH1dvYV0HI9tjZa9eA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWIzMzU1MmYtMmYyZC0z NWJlLWEzYjktNWFlYTg5Y2Q5OWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaFQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADm1rBualVc3HzB25o9L4OdbHfqOwnwTuN0SfJ7hnj7M5WuQi24V+6PL fGI4EPR8i/tRVp1PX/WHdrzVW8GJy3+CkP9Ts37MFnUpdBOOrpl1AFUwOGVT2EnA mOHNVmQQT1Nb94IAWTChdnKlE1zgkVYlMBt79xB+VXH8pX38tE2bdMGY/HqGh2/M LOwo9gMYzGspQTx0VEJooOK0tzxQxwaeIkf8erVCh6pmtzZmLkJcmAtVa9cMDZtP SGUf7bCG2/gQ3+yK/t1ZHbbKNJTWl8KnUwKta3XKZcPM3FwEX+yAWF+nvpqFdLl5 xLy9UDsAyE7u+sqPMvBvoD0ooTo2Q9M= -----END CERTIFICATE-----Generated at Thu Jun 5 18:20:42 2025 by rpki-client