$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67b4856a-f739-32f4-856a-6c24584e5917.roa File: 67b4856a-f739-32f4-856a-6c24584e5917.roa (raw, json) Hash identifier: QcsTBwtJkOsR/esHSfE6ES9N0yiZBrVLCWFetkIegMI= Subject key identifier: 2E:04:D9:98:29:06:13:0C:54:10:5C:F9:DE:59:04:53:7A:AD:6D:9D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A07D5449262A6E189FE0FC180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67b4856a-f739-32f4-856a-6c24584e5917.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 16625 IP address blocks: 104.77.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:44:92:62:a6:e1:89:fe:0f:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=ff974143-4726-4d76-b744-57efd3a73948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e7:17:17:43:d7:51:7f:ab:1a:cd:ef:1f:4a: ab:5e:94:ad:76:e2:da:73:ac:7d:54:ad:39:70:48: 05:61:3d:84:5c:61:97:06:e9:2f:6e:f0:b9:64:dd: 19:2e:00:71:99:cf:60:29:75:27:f6:5b:2c:db:36: f4:9a:bd:5c:d8:d1:12:11:ef:a9:69:c2:8b:39:26: e4:87:62:39:58:4c:f1:1d:df:84:74:14:f7:88:8f: 99:7f:26:ce:43:35:1a:2c:50:85:80:f7:74:a0:a7: a3:f3:b0:19:10:61:03:8e:44:ee:23:d9:4f:22:8e: 94:53:0d:36:5a:29:8f:56:03:8f:a5:c3:7a:e2:bf: a9:d8:33:10:1b:9c:0b:6e:e6:e1:79:21:8b:b9:c3: a4:06:f9:81:39:a8:47:e6:ad:6b:3a:cc:66:16:de: a5:26:cf:33:6c:2f:29:f6:6d:f9:59:77:a3:cf:23: c8:46:14:f3:fb:6c:91:e1:51:3a:4d:b0:f3:6b:26: 84:db:86:60:07:2b:b9:2e:3c:40:7d:9b:3c:18:07: 4f:0e:ed:22:ba:68:bc:5f:19:f8:96:d5:2d:9a:1b: d5:11:2a:4e:2a:72:e3:ab:9c:a9:2c:2f:6f:18:06: 9f:f2:ce:73:cc:93:f1:a1:61:59:0e:f2:f0:09:9a: b9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:04:D9:98:29:06:13:0C:54:10:5C:F9:DE:59:04:53:7A:AD:6D:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67b4856a-f739-32f4-856a-6c24584e5917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.77.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:6c:19:fb:a9:75:23:88:f5:e2:76:5a:d3:72:be:ef:82:87: 0f:bb:df:dc:46:a4:21:69:95:f4:44:52:e4:aa:b4:d1:f4:10: c8:41:5b:f7:f2:13:d6:36:63:9f:91:9c:cb:48:4a:b9:0a:6f: 83:a9:46:6d:d2:f2:81:a1:b4:d9:b6:99:10:53:b6:4d:d7:1f: ff:d7:86:d7:03:c2:13:90:01:3b:b1:0d:bd:6b:ca:0c:ce:66: 5c:d9:b6:5f:d4:7a:94:4d:a5:a4:d2:83:8b:31:cd:39:4f:53: 2b:58:11:a7:b2:e2:79:45:2e:4e:56:60:01:3f:51:46:e0:a3: 83:a5:13:98:b9:62:ad:7f:69:13:01:81:18:dd:c5:56:8a:87: 69:44:2d:30:4a:77:1a:53:f9:64:ab:6b:a1:60:07:27:b0:d7: d5:2b:71:af:77:7c:44:c5:6d:c1:a9:64:d6:7b:38:9d:36:36: d5:53:44:e0:37:f5:b7:b7:33:c5:d2:ca:69:ae:38:26:94:0f: cf:9c:4e:40:04:77:4d:fa:16:70:d6:db:be:23:48:3e:71:d7: 0c:b2:1a:32:78:a3:e3:81:ef:55:92:ac:f7:20:d7:0f:32:ea: f2:55:0a:da:79:6a:a6:6e:55:c4:b7:7e:9f:cf:91:33:81:80: 71:2a:3c:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1USSYqbhif4PwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk ZmY5NzQxNDMtNDcyNi00ZDc2LWI3NDQtNTdlZmQzYTczOTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxucXF0PXUX+rGs3vH0qrXpStduLac6x9VK05 cEgFYT2EXGGXBukvbvC5ZN0ZLgBxmc9gKXUn9lss2zb0mr1c2NESEe+pacKLOSbk h2I5WEzxHd+EdBT3iI+ZfybOQzUaLFCFgPd0oKej87AZEGEDjkTuI9lPIo6UUw02 WimPVgOPpcN64r+p2DMQG5wLbubheSGLucOkBvmBOahH5q1rOsxmFt6lJs8zbC8p 9m35WXejzyPIRhTz+2yR4VE6TbDzayaE24ZgByu5LjxAfZs8GAdPDu0iumi8Xxn4 ltUtmhvVESpOKnLjq5ypLC9vGAaf8s5zzJPxoWFZDvLwCZq52QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4E2ZgpBhMMVBBc+d5ZBFN6rW2dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjdiNDg1NmEtZjczOS0z MmY0LTg1NmEtNmMyNDU4NGU1OTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaE0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFsGfupdSOI9eJ2WtNyvu+Chw+739xGpCFplfREUuSqtNH0EMhBW/fy E9Y2Y5+RnMtISrkKb4OpRm3S8oGhtNm2mRBTtk3XH//XhtcDwhOQATuxDb1rygzO ZlzZtl/UepRNpaTSg4sxzTlPUytYEaey4nlFLk5WYAE/UUbgo4OlE5i5Yq1/aRMB gRjdxVaKh2lELTBKdxpT+WSra6FgByew19Urca93fETFbcGpZNZ7OJ02NtVTROA3 9be3M8XSymmuOCaUD8+cTkAEd036FnDW274jSD5x1wyyGjJ4o+OB71WSrPcg1w8y 6vJVCtp5aqZuVcS3fp/PkTOBgHEqPCU= -----END CERTIFICATE-----Generated at Sat Jun 7 19:28:02 2025 by rpki-client