$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/685b1937-b97c-3a3a-8a8e-c372ca902a3a.roa File: 685b1937-b97c-3a3a-8a8e-c372ca902a3a.roa (raw, json) Hash identifier: vMZwieWEmYT7QNcNJoMW5N/wx2C61SDR2NTBm4Nx0OI= Subject key identifier: 4B:7C:AB:D5:EA:06:79:A1:66:2D:81:EB:26:FB:CE:93:2F:D1:06:D0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A119ACB4B239999CD7D303F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/685b1937-b97c-3a3a-8a8e-c372ca902a3a.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 16625 IP address blocks: 104.77.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:cb:4b:23:99:99:cd:7d:30:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=966503d4-de83-474b-a752-942d077dc1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c5:dc:61:b5:76:51:39:e2:b0:ba:68:87:1b: 07:0f:1d:a5:1e:e2:25:8e:31:70:1a:36:8a:2c:36: a9:7d:22:42:70:68:f9:64:58:c1:07:79:7f:dc:2f: 4f:c5:f4:83:37:2b:17:75:3d:50:90:cc:5a:30:c5: 52:2e:58:a4:a9:8b:85:ca:af:60:f3:dd:ac:e6:8f: 3f:7d:03:eb:b9:e2:c3:33:14:8c:2f:11:a5:e3:41: b6:bd:bd:43:cd:93:d2:15:97:4c:50:55:fd:33:bb: a6:15:1b:91:9c:ff:8f:2b:0b:aa:4a:82:88:1e:b9: 7e:df:95:d1:de:f1:60:19:a4:1a:50:e6:9a:01:da: ae:34:39:9b:f9:09:80:fd:b7:60:38:09:10:0e:5d: 03:50:69:e0:c0:1a:7b:4b:bd:02:08:18:f8:c2:e7: b2:37:6a:2e:40:a0:14:81:ef:d0:5f:e8:0d:f6:5c: 92:d8:78:7f:de:3e:2b:60:93:54:0e:43:b1:19:18: 40:7d:41:76:bb:59:06:fc:36:32:f6:31:32:54:0d: 53:cd:4a:53:40:11:55:50:a3:d9:f3:de:6e:55:be: 27:22:b2:e8:10:6c:a1:c3:25:8e:df:70:4a:39:01: 80:41:7e:58:50:cc:ed:75:fd:94:fa:3b:eb:ef:b0: e9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7C:AB:D5:EA:06:79:A1:66:2D:81:EB:26:FB:CE:93:2F:D1:06:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/685b1937-b97c-3a3a-8a8e-c372ca902a3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.77.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:d7:b7:84:38:c2:b4:b5:af:b4:c1:07:ef:78:a3:ea:f8:55: 60:5f:83:83:3b:b5:a3:5b:cb:26:a2:b7:90:69:e5:1d:c4:0f: 71:09:5a:24:e0:c6:f5:02:89:22:db:78:25:ae:8d:9f:2f:09: 3e:11:39:05:fa:36:68:27:35:48:3e:a9:b8:40:8a:b0:0f:13: 88:e0:24:15:73:f9:6e:38:d7:6e:00:34:b3:e5:ef:21:55:14: fb:27:f7:cc:43:76:e1:31:82:25:d7:a6:ca:eb:45:67:0c:64: 54:16:a9:05:c7:8d:4f:80:bf:3c:8c:bb:3d:08:23:f2:4b:1a: 3f:8b:b2:13:ba:ad:e6:a7:35:0c:c3:06:34:e7:c3:19:be:25: 6b:58:5b:00:14:c1:84:75:b9:0f:2c:9b:7c:31:97:63:29:53: cd:46:42:a1:09:8f:23:5d:e0:86:97:37:37:18:89:03:93:82: f3:9d:1c:f8:62:e9:c8:95:33:d0:2a:68:cc:05:6e:99:1a:19: 1f:99:49:52:d3:dc:82:61:c9:f2:5b:8b:0e:a5:21:13:e9:11: 1c:e8:4c:d9:87:5f:08:7b:c0:a5:47:bc:6b:77:43:e2:4e:04: 83:31:11:d2:91:53:3d:1e:20:04:ca:b1:98:cf:70:d8:39:34: 78:6a:ce:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmstLI5mZzX0wPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk OTY2NTAzZDQtZGU4My00NzRiLWE3NTItOTQyZDA3N2RjMWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMXcYbV2UTnisLpohxsHDx2lHuIljjFwGjaK LDapfSJCcGj5ZFjBB3l/3C9PxfSDNysXdT1QkMxaMMVSLlikqYuFyq9g892s5o8/ fQPrueLDMxSMLxGl40G2vb1DzZPSFZdMUFX9M7umFRuRnP+PKwuqSoKIHrl+35XR 3vFgGaQaUOaaAdquNDmb+QmA/bdgOAkQDl0DUGngwBp7S70CCBj4wueyN2ouQKAU ge/QX+gN9lyS2Hh/3j4rYJNUDkOxGRhAfUF2u1kG/DYy9jEyVA1TzUpTQBFVUKPZ 895uVb4nIrLoEGyhwyWO33BKOQGAQX5YUMztdf2U+jvr77DpZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEt8q9XqBnmhZi2B6yb7zpMv0QbQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjg1YjE5MzctYjk3Yy0z YTNhLThhOGUtYzM3MmNhOTAyYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaE3cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbXt4Q4wrS1r7TBB+94o+r4VWBfg4M7taNbyyait5Bp5R3ED3EJWiTg xvUCiSLbeCWujZ8vCT4ROQX6NmgnNUg+qbhAirAPE4jgJBVz+W44124ANLPl7yFV FPsn98xDduExgiXXpsrrRWcMZFQWqQXHjU+AvzyMuz0II/JLGj+LshO6reanNQzD BjTnwxm+JWtYWwAUwYR1uQ8sm3wxl2MpU81GQqEJjyNd4IaXNzcYiQOTgvOdHPhi 6ciVM9AqaMwFbpkaGR+ZSVLT3IJhyfJbiw6lIRPpERzoTNmHXwh7wKVHvGt3Q+JO BIMxEdKRUz0eIATKsZjPcNg5NHhqzss= -----END CERTIFICATE-----Generated at Sat Jun 7 13:48:49 2025 by rpki-client