$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78e18e11-ff20-374e-bdc2-e1bb7807a20c.roa File: 78e18e11-ff20-374e-bdc2-e1bb7807a20c.roa (raw, json) Hash identifier: s7iC0pWpaijxVT7V0guBYWY4QhPwi+9I+M20cuCileI= Subject key identifier: CD:9C:35:82:DE:46:FF:17:42:31:17:1D:E5:52:0E:06:0A:0B:B9:40 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A1465931B8552DF1063248F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78e18e11-ff20-374e-bdc2-e1bb7807a20c.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 16625 IP address blocks: 104.101.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:93:1b:85:52:df:10:63:24:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=b0e3ccca-ce72-4a3b-b357-e2d0d929babe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5f:d7:53:21:82:cf:c4:44:83:69:00:f1:1b: 02:27:04:1c:30:a6:a0:88:df:13:24:28:40:c0:e1: 9f:25:38:c9:1f:f1:a1:fe:04:53:91:f4:17:f1:2d: 61:92:01:2b:83:1c:48:5e:89:45:00:6d:97:ea:12: c2:2f:84:fb:a1:bf:f8:99:f3:7e:d5:c0:37:5d:6e: 85:7e:13:9c:5a:fa:0c:93:d9:46:cf:d8:77:4b:e9: 83:93:77:d6:39:47:99:6d:f1:e3:af:8a:02:19:5f: 3e:38:8a:c2:b5:62:3b:19:d9:79:f9:21:63:cd:a1: 53:3f:ef:d8:02:c3:67:32:fa:c1:6c:03:4a:cd:02: 62:4c:fc:fe:e5:1b:80:48:5a:40:cd:af:26:b5:75: e1:32:93:86:9a:12:48:72:dd:f9:76:8d:e7:73:bb: 5e:e1:a2:a2:82:d4:0f:7e:43:b0:32:53:cc:35:cc: 60:97:b4:e5:2b:47:0f:69:51:41:43:69:5a:c1:a2: 45:56:d5:50:7e:99:1e:15:62:6e:8e:d2:48:d3:16: 4d:0e:3b:ed:73:8a:7a:1e:c3:b4:7b:69:23:87:4b: 42:1e:83:a5:33:1b:d4:b5:4a:4c:cf:72:ea:b7:04: 7d:91:ff:37:c5:05:fe:f3:90:33:79:5c:e9:6a:79: d5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9C:35:82:DE:46:FF:17:42:31:17:1D:E5:52:0E:06:0A:0B:B9:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78e18e11-ff20-374e-bdc2-e1bb7807a20c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.101.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:27:76:ad:09:97:e4:db:4d:a6:e7:c5:c6:86:78:a6:56:3f: b9:d3:ff:af:20:8d:f3:56:fa:1b:52:f5:17:06:df:a3:3d:58: 14:41:d1:2a:29:83:3f:7c:18:e9:c6:d2:86:8b:ba:5d:3e:5b: be:df:e1:27:cc:d8:ae:60:df:b2:7a:0a:ca:63:44:75:be:6b: 2e:42:3b:c5:d4:40:0b:d7:e6:10:3d:cb:5f:2f:18:a7:dd:4c: 86:af:fb:b0:58:b5:f8:86:5e:bf:4a:cd:54:e7:59:1e:fe:af: 87:ab:4b:f7:25:64:76:31:84:cc:e6:05:1a:fb:82:ff:b5:5b: d1:e9:b9:6c:db:f4:1f:7a:a5:60:96:85:78:ef:98:97:9d:b2: 09:f2:35:7a:e4:7a:1d:91:ad:46:7f:e0:d5:26:d4:bf:09:8a: 6c:af:ab:dc:94:d9:b4:96:3b:8a:47:6d:95:f2:ff:a0:ee:59: 9c:df:3e:21:23:a6:1e:0e:4b:6b:4c:a3:81:3e:bf:01:42:09: ab:f2:ec:68:af:35:8b:27:03:dc:74:bc:54:ec:0b:5b:74:58: 29:d8:c6:ae:15:77:c6:1e:eb:51:9b:18:de:fb:81:04:5e:c9: 8d:31:b6:ad:d3:61:4b:6c:52:93:2f:0e:24:1d:09:6d:2a:ff: 6b:dc:ce:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZZMbhVLfEGMkj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk YjBlM2NjY2EtY2U3Mi00YTNiLWIzNTctZTJkMGQ5MjliYWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1/XUyGCz8REg2kA8RsCJwQcMKagiN8TJChA wOGfJTjJH/Gh/gRTkfQX8S1hkgErgxxIXolFAG2X6hLCL4T7ob/4mfN+1cA3XW6F fhOcWvoMk9lGz9h3S+mDk3fWOUeZbfHjr4oCGV8+OIrCtWI7Gdl5+SFjzaFTP+/Y AsNnMvrBbANKzQJiTPz+5RuASFpAza8mtXXhMpOGmhJIct35do3nc7te4aKigtQP fkOwMlPMNcxgl7TlK0cPaVFBQ2lawaJFVtVQfpkeFWJujtJI0xZNDjvtc4p6HsO0 e2kjh0tCHoOlMxvUtUpMz3LqtwR9kf83xQX+85AzeVzpannVfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2cNYLeRv8XQjEXHeVSDgYKC7lAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzhlMThlMTEtZmYyMC0z NzRlLWJkYzItZTFiYjc4MDdhMjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaGXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYndq0Jl+TbTabnxcaGeKZWP7nT/68gjfNW+htS9RcG36M9WBRB0Sop gz98GOnG0oaLul0+W77f4SfM2K5g37J6CspjRHW+ay5CO8XUQAvX5hA9y18vGKfd TIav+7BYtfiGXr9KzVTnWR7+r4erS/clZHYxhMzmBRr7gv+1W9HpuWzb9B96pWCW hXjvmJedsgnyNXrkeh2RrUZ/4NUm1L8Jimyvq9yU2bSWO4pHbZXy/6DuWZzfPiEj ph4OS2tMo4E+vwFCCavy7GivNYsnA9x0vFTsC1t0WCnYxq4Vd8Ye61GbGN77gQRe yY0xtq3TYUtsUpMvDiQdCW0q/2vcznk= -----END CERTIFICATE-----Generated at Sat Jun 7 13:56:54 2025 by rpki-client