$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7385b9a9-24a5-3857-84df-7b9c5c61356c.roa File: 7385b9a9-24a5-3857-84df-7b9c5c61356c.roa (raw, json) Hash identifier: uIvx4TyjE1t+AsWMaTrUj7Jb+6z3IVAXMqkvfq75fgM= Subject key identifier: 84:83:7F:3D:0E:78:80:E5:28:C6:BC:77:43:7D:E3:E1:3D:3B:6F:24 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A14658676A213EEE92A492180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7385b9a9-24a5-3857-84df-7b9c5c61356c.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 104.96.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:86:76:a2:13:ee:e9:2a:49:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=aace18ed-ea16-4903-9ae8-3774402eef99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9f:3f:0c:d0:7d:63:98:b3:02:b2:cd:90:95: 8e:19:50:fe:72:57:20:91:2c:c9:fc:d5:a1:d5:c2: c4:09:24:fa:b6:be:53:5e:96:6b:1d:4b:98:6a:f5: a0:b9:24:bc:e9:ef:af:c1:3f:e6:31:c2:c7:a5:d1: 61:39:d8:24:0d:b8:7a:b8:20:0c:34:a8:d1:59:79: 9b:4f:b5:cc:21:91:29:9d:7a:bd:f3:14:dd:78:ae: 1f:b2:3d:d5:4e:8a:10:64:70:f6:00:22:c4:27:e9: d5:d8:8f:ac:c6:79:a0:50:14:03:59:39:0b:cc:d7: 76:b9:0c:80:8f:24:df:5d:e2:a9:1b:72:27:f8:10: ce:88:0d:0b:64:e7:0a:0d:34:b9:b8:26:d2:e1:26: 3b:fd:6a:55:81:64:9a:53:77:a9:b0:9c:61:2f:c7: 49:38:a6:e4:c7:08:4c:91:51:46:25:ef:1b:1e:b3: 30:53:ee:44:dc:ec:b3:62:4d:dd:96:e1:d6:69:9a: a3:61:f0:6f:ef:c0:50:5e:50:84:3e:7e:32:6b:12: 58:1d:bc:dc:41:5a:11:e1:1d:0a:2a:59:49:ca:ef: 8c:4d:63:b4:0e:57:33:dd:dc:4a:df:f7:a7:2f:42: 3b:fb:73:46:3a:65:de:fe:18:b4:f2:00:88:52:5f: 66:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:83:7F:3D:0E:78:80:E5:28:C6:BC:77:43:7D:E3:E1:3D:3B:6F:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7385b9a9-24a5-3857-84df-7b9c5c61356c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.96.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:59:ab:40:0c:2b:a7:eb:08:30:ac:ef:d1:b5:4a:3f:09:77: 03:68:14:60:3a:84:4c:47:2f:90:d7:42:24:34:58:27:07:0d: 43:09:61:78:3b:fe:00:29:2d:6d:7d:a0:d5:be:e8:6b:0a:f8: ed:4c:8e:82:b5:2c:91:ec:0c:6b:44:b7:86:49:0b:c7:98:43: a3:9a:51:9c:d8:a2:f5:8a:68:0e:76:12:8a:7f:b7:a5:5f:dc: 39:9e:ca:9c:96:c3:09:c9:2a:61:43:c9:cf:bb:04:4c:d9:10: 9c:ab:bc:5f:82:99:c4:7a:57:e2:d3:14:f9:70:e8:9a:87:4f: 57:bf:39:f3:e2:f7:ba:4c:95:f5:78:19:f5:5e:c7:48:e9:bb: 76:94:c3:9a:2d:b9:04:2d:e9:68:c1:b2:8c:4e:8b:d0:3e:9c: 33:95:7e:7c:ce:f5:59:73:07:8a:89:cc:eb:56:e0:60:ca:f7: bd:d6:f6:7e:f1:18:b7:56:fe:8e:ac:39:08:2f:c0:e6:ef:27: 24:d9:ea:a1:05:de:3f:c3:a3:7d:5b:18:7a:07:a9:31:2c:ec: 33:dc:ef:c8:29:1f:44:73:2d:4d:35:82:f0:7b:dd:18:89:87: 5a:74:6f:ae:f3:02:c4:9c:b2:c6:15:69:05:ff:3c:8d:b1:49: 95:ac:f7:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZYZ2ohPu6SpJIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk YWFjZTE4ZWQtZWExNi00OTAzLTlhZTgtMzc3NDQwMmVlZjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ8/DNB9Y5izArLNkJWOGVD+clcgkSzJ/NWh 1cLECST6tr5TXpZrHUuYavWguSS86e+vwT/mMcLHpdFhOdgkDbh6uCAMNKjRWXmb T7XMIZEpnXq98xTdeK4fsj3VTooQZHD2ACLEJ+nV2I+sxnmgUBQDWTkLzNd2uQyA jyTfXeKpG3In+BDOiA0LZOcKDTS5uCbS4SY7/WpVgWSaU3epsJxhL8dJOKbkxwhM kVFGJe8bHrMwU+5E3OyzYk3dluHWaZqjYfBv78BQXlCEPn4yaxJYHbzcQVoR4R0K KllJyu+MTWO0Dlcz3dxK3/enL0I7+3NGOmXe/hi08gCIUl9mLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISDfz0OeIDlKMa8d0N94+E9O28kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzM4NWI5YTktMjRhNS0z ODU3LTg0ZGYtN2I5YzVjNjEzNTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGDJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBZq0AMK6frCDCs79G1Sj8JdwNoFGA6hExHL5DXQiQ0WCcHDUMJYXg7 /gApLW19oNW+6GsK+O1MjoK1LJHsDGtEt4ZJC8eYQ6OaUZzYovWKaA52Eop/t6Vf 3DmeypyWwwnJKmFDyc+7BEzZEJyrvF+CmcR6V+LTFPlw6JqHT1e/OfPi97pMlfV4 GfVex0jpu3aUw5otuQQt6WjBsoxOi9A+nDOVfnzO9VlzB4qJzOtW4GDK973W9n7x GLdW/o6sOQgvwObvJyTZ6qEF3j/Do31bGHoHqTEs7DPc78gpH0RzLU01gvB73RiJ h1p0b67zAsScssYVaQX/PI2xSZWs96s= -----END CERTIFICATE-----Generated at Thu Jun 5 18:33:52 2025 by rpki-client