$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66a87bee-0aa7-3c2d-831d-044eb7c1e92c.roa File: 66a87bee-0aa7-3c2d-831d-044eb7c1e92c.roa (raw, json) Hash identifier: ah5+7t+hqnKuE4BzpenFXUBClUvk4d0q13tjzM19TNM= Subject key identifier: A7:A7:F0:D8:4B:80:4C:94:12:3E:F5:C4:F3:14:18:20:05:FA:A9:55 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A146581B36B41C6D3A637FCB0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66a87bee-0aa7-3c2d-831d-044eb7c1e92c.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 104.84.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:81:b3:6b:41:c6:d3:a6:37:fc:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=8a5ceb6f-a047-4577-a481-56de4891f9c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f5:48:55:08:5c:0e:ef:fc:79:6c:de:f0:98: dc:b7:e6:ad:91:64:fe:4d:36:f9:53:46:1e:cc:92: be:f4:8d:f0:4b:b9:8c:cf:99:36:48:95:b7:a3:8e: 11:8e:4d:ce:a8:05:39:23:20:73:8f:88:98:ae:74: 46:d4:ba:e3:f7:5a:d5:ed:37:30:a6:99:c9:c5:9f: a6:0a:15:3a:39:4c:b4:74:12:41:e8:e6:c3:a6:a4: 6e:e5:36:2e:3c:09:73:ca:93:ee:bc:3f:bc:78:d5: 41:b1:d4:2f:d8:e9:2e:fe:3d:36:5a:f1:40:32:0d: e1:b9:2e:54:9d:7d:fd:4c:6c:6b:24:89:25:4b:66: 79:34:33:69:9f:e2:51:26:ff:b7:91:a8:31:a1:f1: 89:38:e5:6b:1f:73:af:d7:64:75:7d:77:c8:79:f4: f4:7c:f7:e4:e8:0b:0f:d5:d7:8f:e6:ed:4c:9b:21: 4e:23:9c:84:a1:9b:b1:d5:7e:49:41:37:f8:7b:2d: 9c:b3:56:e8:47:53:24:82:2d:77:38:a9:d3:92:1d: f2:7e:96:fc:80:ad:88:b9:fb:ab:38:ad:2b:ec:33: 7f:08:57:ea:7d:05:50:8c:13:32:eb:84:e1:18:c3: 2b:3a:17:bc:63:a5:d1:48:69:1a:a2:e1:8f:b1:71: 80:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A7:F0:D8:4B:80:4C:94:12:3E:F5:C4:F3:14:18:20:05:FA:A9:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66a87bee-0aa7-3c2d-831d-044eb7c1e92c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.84.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:44:fb:71:b8:28:41:69:79:cc:f5:49:a4:26:e2:0c:36:2b: 9e:91:5d:79:c1:34:96:10:15:c5:80:7c:3c:29:d3:10:c7:88: 00:74:33:49:08:f5:36:87:64:1c:17:05:0f:46:1f:b9:d0:9c: 79:ed:c1:9e:a0:ab:9c:b2:43:47:1d:aa:57:0d:d8:d6:75:f1: df:83:2f:87:36:cd:da:e2:bd:4b:75:78:c9:f0:f1:2c:99:9d: 4f:e2:a6:f7:20:64:0b:07:b7:16:0c:9c:98:af:58:c8:1d:0a: 05:0a:e0:c0:1a:46:45:2e:da:42:e5:a5:d6:1b:b6:6a:40:6e: c0:0c:98:6a:60:05:91:b6:6a:39:e4:6d:9f:8c:24:41:55:e9: e7:44:56:e8:ee:d8:45:fe:77:45:da:63:82:25:ac:6c:0e:51: 54:c2:67:e7:71:d8:d5:95:55:0f:0f:c2:bb:5d:9f:1a:4c:14: bc:3b:41:42:fc:3c:b9:b5:ea:3c:b4:da:da:51:f5:f5:37:f0: 41:0a:68:7a:06:d6:ef:9f:77:33:0c:a7:56:06:6c:79:2c:f4: 2e:ac:f4:a0:bd:3d:b4:a3:06:6e:8f:21:ad:79:ea:a0:18:99: f9:a0:ac:10:11:6e:a1:3e:24:ab:41:95:51:f6:15:2c:6d:df: ed:56:23:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZYGza0HG06Y3/LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk OGE1Y2ViNmYtYTA0Ny00NTc3LWE0ODEtNTZkZTQ4OTFmOWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvVIVQhcDu/8eWze8Jjct+atkWT+TTb5U0Ye zJK+9I3wS7mMz5k2SJW3o44Rjk3OqAU5IyBzj4iYrnRG1Lrj91rV7TcwppnJxZ+m ChU6OUy0dBJB6ObDpqRu5TYuPAlzypPuvD+8eNVBsdQv2Oku/j02WvFAMg3huS5U nX39TGxrJIklS2Z5NDNpn+JRJv+3kagxofGJOOVrH3Ov12R1fXfIefT0fPfk6AsP 1deP5u1MmyFOI5yEoZux1X5JQTf4ey2cs1boR1Mkgi13OKnTkh3yfpb8gK2Iufur OK0r7DN/CFfqfQVQjBMy64ThGMMrOhe8Y6XRSGkaouGPsXGA5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKen8NhLgEyUEj71xPMUGCAF+qlVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjZhODdiZWUtMGFhNy0z YzJkLTgzMWQtMDQ0ZWI3YzFlOTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaFSWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9E+3G4KEFpecz1SaQm4gw2K56RXXnBNJYQFcWAfDwp0xDHiAB0M0kI 9TaHZBwXBQ9GH7nQnHntwZ6gq5yyQ0cdqlcN2NZ18d+DL4c2zdrivUt1eMnw8SyZ nU/ipvcgZAsHtxYMnJivWMgdCgUK4MAaRkUu2kLlpdYbtmpAbsAMmGpgBZG2ajnk bZ+MJEFV6edEVuju2EX+d0XaY4IlrGwOUVTCZ+dx2NWVVQ8PwrtdnxpMFLw7QUL8 PLm16jy02tpR9fU38EEKaHoG1u+fdzMMp1YGbHks9C6s9KC9PbSjBm6PIa156qAY mfmgrBARbqE+JKtBlVH2FSxt3+1WI0M= -----END CERTIFICATE-----Generated at Thu Jun 5 18:15:15 2025 by rpki-client