$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86f10792-ebce-3d34-b619-59f83c89ced3.roa File: 86f10792-ebce-3d34-b619-59f83c89ced3.roa (raw, json) Hash identifier: SprMudOVBbVCLGQAK7wFWzJYGvAqVSJznn1dKb9Jg/E= Subject key identifier: AD:81:59:BD:40:60:85:D9:A7:09:CA:EC:0C:03:1D:F2:DE:FF:05:67 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A119AB8808C08DB38D77BED00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86f10792-ebce-3d34-b619-59f83c89ced3.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 16625 IP address blocks: 104.66.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:b8:80:8c:08:db:38:d7:7b:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=5df38b3b-899f-40de-8f36-cc259ae865da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2c:37:dd:80:8a:01:ea:bc:68:7b:87:b1:27: 33:1d:2c:1a:62:46:f5:93:8b:cb:ec:0d:ff:1d:61: ef:11:0c:93:84:da:e2:89:3a:3c:1d:6e:df:1b:00: 2b:2a:28:55:40:f7:88:fe:00:25:05:9a:86:1f:09: 60:90:de:33:0a:7d:13:95:32:3c:b5:cc:e0:34:ee: 92:c9:94:77:76:f2:66:16:de:fd:6f:44:10:44:e0: dd:5a:b1:37:4e:1e:fa:12:2b:8c:bc:dc:c3:41:18: 7c:1e:a4:85:13:1b:8c:cf:10:24:1d:91:31:5a:02: 67:0b:ec:29:57:0c:30:62:28:7c:91:51:eb:0a:77: 67:41:d2:58:73:1f:fa:d8:d4:a1:9e:6c:3b:b3:72: dd:e9:c2:3f:ff:cd:8c:0d:ba:90:47:a7:66:fc:00: 1b:8f:35:f0:5e:cb:f8:3a:96:53:76:e7:60:26:5b: 97:11:90:6b:27:6f:db:5e:be:e6:26:77:1e:cc:a2: 25:99:42:d5:9c:5b:bd:ae:60:27:9c:d7:02:4e:7e: 50:6e:65:22:cb:3f:a0:1b:d9:81:e7:dd:23:6b:e6: 2f:1a:fb:ad:01:8f:84:33:ea:45:e2:43:9f:97:cb: 1d:24:d6:2b:4b:05:47:70:f7:37:1e:e9:79:33:bb: 84:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:81:59:BD:40:60:85:D9:A7:09:CA:EC:0C:03:1D:F2:DE:FF:05:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86f10792-ebce-3d34-b619-59f83c89ced3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.66.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ab:8c:03:f7:5c:b6:c7:3c:a6:f6:16:8d:e0:57:e3:0b:18: 5b:7f:32:db:9c:6c:0a:7c:56:bc:83:88:7c:ba:55:3b:9c:c1: 73:d8:7b:ae:4a:7d:fc:b1:31:02:6d:ad:68:01:e6:49:45:8f: 83:d4:36:f3:0a:a2:dd:03:1d:77:90:77:11:02:3e:b6:ae:0f: cd:ef:34:24:e8:89:1a:f5:5c:3c:ce:f4:ac:b2:de:f6:f1:49: 2c:2b:ed:63:36:0b:2a:dc:ad:fe:3a:ac:31:91:5b:66:cd:b8: 41:22:46:12:17:38:0e:1c:53:6d:31:8f:ce:2f:05:d7:82:2b: af:90:ce:f7:c0:8b:88:47:12:7a:2e:f6:86:60:3a:fb:59:2b: 5b:ef:3e:38:32:c1:d9:81:2f:ab:db:64:ea:fc:31:f9:96:1c: 93:b0:d7:9d:4d:b9:d4:c9:6d:1f:76:48:30:1f:07:ba:d8:1e: c1:0e:6d:69:1a:4e:82:45:bb:7d:c9:a4:66:64:49:04:89:b4: bd:48:13:e0:cb:82:c1:80:af:52:7d:11:d7:39:af:b9:97:8f: c2:b5:10:08:13:a1:ef:b6:29:4b:17:38:e9:eb:2a:75:9d:ca: 63:e5:ef:24:6f:39:6e:30:5b:6c:da:27:7f:46:17:cf:b2:54: d7:4c:58:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmriAjAjbONd77QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk NWRmMzhiM2ItODk5Zi00MGRlLThmMzYtY2MyNTlhZTg2NWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyw33YCKAeq8aHuHsSczHSwaYkb1k4vL7A3/ HWHvEQyThNriiTo8HW7fGwArKihVQPeI/gAlBZqGHwlgkN4zCn0TlTI8tczgNO6S yZR3dvJmFt79b0QQRODdWrE3Th76EiuMvNzDQRh8HqSFExuMzxAkHZExWgJnC+wp VwwwYih8kVHrCndnQdJYcx/62NShnmw7s3Ld6cI//82MDbqQR6dm/AAbjzXwXsv4 OpZTdudgJluXEZBrJ2/bXr7mJncezKIlmULVnFu9rmAnnNcCTn5QbmUiyz+gG9mB 590ja+YvGvutAY+EM+pF4kOfl8sdJNYrSwVHcPc3Hul5M7uEjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2BWb1AYIXZpwnK7AwDHfLe/wVnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODZmMTA3OTItZWJjZS0z ZDM0LWI2MTktNTlmODNjODljZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaEJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGirjAP3XLbHPKb2Fo3gV+MLGFt/MtucbAp8VryDiHy6VTucwXPYe65K ffyxMQJtrWgB5klFj4PUNvMKot0DHXeQdxECPrauD83vNCToiRr1XDzO9Kyy3vbx SSwr7WM2Cyrcrf46rDGRW2bNuEEiRhIXOA4cU20xj84vBdeCK6+QzvfAi4hHEnou 9oZgOvtZK1vvPjgywdmBL6vbZOr8MfmWHJOw151NudTJbR92SDAfB7rYHsEObWka ToJFu33JpGZkSQSJtL1IE+DLgsGAr1J9Edc5r7mXj8K1EAgToe+2KUsXOOnrKnWd ymPl7yRvOW4wW2zaJ39GF8+yVNdMWAc= -----END CERTIFICATE-----Generated at Sat Jun 7 23:15:06 2025 by rpki-client