$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88874c79-a36a-334f-93cf-4dfb58395bd7.roa File: 88874c79-a36a-334f-93cf-4dfb58395bd7.roa (raw, json) Hash identifier: 4N8/PLS6AolCnkopAJVxnolJ+9AoZV83vFXqL/jMwiA= Subject key identifier: 62:BF:1D:FC:DB:7B:E9:0F:DF:D5:53:63:A4:07:D5:F0:A0:36:83:B6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A07D53DDAD511924AB9AA00C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88874c79-a36a-334f-93cf-4dfb58395bd7.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 16625 IP address blocks: 104.71.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:3d:da:d5:11:92:4a:b9:aa:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=2bc7911f-a9f2-4cb6-aa35-17a3bcf23d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ca:86:bb:f3:1a:3a:5b:3d:12:2c:f5:f7:c9: cf:1c:f9:be:d8:51:b1:45:c4:9e:8e:fb:41:fc:ea: 63:72:ef:e8:36:53:86:7e:2c:54:fd:2f:54:f2:80: c8:c2:2b:f6:b2:54:99:07:f8:52:fb:d8:c0:0a:ec: a2:f7:03:8f:ff:bc:5e:53:fa:31:0a:c1:2b:f2:75: b8:9e:ad:34:5b:ca:40:77:50:c0:40:ad:6b:0b:5c: cc:75:dc:a5:4f:4d:5b:4e:84:2c:df:4f:21:12:33: 28:db:6a:6a:b1:d1:c2:02:b3:2d:88:4e:45:89:9f: 05:a2:4d:96:6a:69:ae:ff:59:62:e7:4f:5a:67:02: 35:9d:11:a5:bf:36:6e:25:6e:0d:93:a6:88:dc:e7: 32:d1:e0:21:81:7f:6e:ac:de:c2:43:10:b7:20:9f: c0:b2:40:09:b8:0f:a9:be:c2:99:e4:60:c5:b2:cf: 82:1c:f1:05:1d:b8:a1:5e:08:29:59:a0:09:ce:15: 59:18:65:60:1d:ef:78:8d:14:eb:32:c9:25:40:de: 60:f5:ce:93:e3:a0:98:35:04:56:15:37:1b:90:e6: 00:dd:73:ae:b3:47:c8:fa:7b:f2:39:11:82:2e:f8: b3:43:c1:67:3f:7e:06:16:51:bf:1b:2f:0c:8a:90: bd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BF:1D:FC:DB:7B:E9:0F:DF:D5:53:63:A4:07:D5:F0:A0:36:83:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88874c79-a36a-334f-93cf-4dfb58395bd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.71.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:28:c0:19:b5:4a:e3:9e:20:97:e9:40:99:95:e3:01:09:0d: 7e:a5:c7:94:00:ae:69:c6:ed:83:9e:22:fd:f9:d3:ea:98:c4: 27:cf:39:b5:24:3d:a2:a3:ea:7d:8a:6c:46:23:51:3e:d6:10: 1a:2f:0e:ee:48:a5:a2:ee:0e:3f:4a:bd:2c:d4:68:9c:d9:3b: 41:b9:3c:2c:48:7d:d8:e3:f1:5f:f3:94:45:dd:fc:12:9f:cb: 1f:fc:57:f0:09:ae:2d:2f:2c:6b:0a:ba:78:75:28:81:e1:e6: c9:59:fe:e5:0c:c5:c4:f6:5d:b7:02:54:a7:f0:1a:fa:b0:a4: 70:65:82:41:6e:46:8e:84:55:45:46:0b:24:2a:ab:ad:f3:49: 1f:7d:13:26:82:b4:6b:ec:5b:93:33:4f:2a:98:66:37:b3:bc: 9a:50:37:f9:33:34:12:bf:74:64:27:df:75:06:f4:ab:71:0e: 26:ca:41:bf:2e:35:e1:d5:26:37:47:25:b6:9a:9c:2c:1d:4a: 87:09:2b:28:ba:e4:9e:d2:89:bc:94:d3:73:4e:72:64:4a:2e: c4:35:a6:08:5b:62:32:fc:02:64:cc:54:58:91:5a:60:f2:af: 9f:72:ad:0e:1d:e9:1d:ac:4e:49:78:1f:a5:0f:15:17:9d:f2: 6b:09:8c:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1T3a1RGSSrmqAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk MmJjNzkxMWYtYTlmMi00Y2I2LWFhMzUtMTdhM2JjZjIzZDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMqGu/MaOls9Eiz198nPHPm+2FGxRcSejvtB /Opjcu/oNlOGfixU/S9U8oDIwiv2slSZB/hS+9jACuyi9wOP/7xeU/oxCsEr8nW4 nq00W8pAd1DAQK1rC1zMddylT01bToQs308hEjMo22pqsdHCArMtiE5FiZ8Fok2W ammu/1li509aZwI1nRGlvzZuJW4Nk6aI3Ocy0eAhgX9urN7CQxC3IJ/AskAJuA+p vsKZ5GDFss+CHPEFHbihXggpWaAJzhVZGGVgHe94jRTrMsklQN5g9c6T46CYNQRW FTcbkOYA3XOus0fI+nvyORGCLvizQ8FnP34GFlG/Gy8MipC9/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGK/Hfzbe+kP39VTY6QH1fCgNoO2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODg4NzRjNzktYTM2YS0z MzRmLTkzY2YtNGRmYjU4Mzk1YmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaEeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8owBm1SuOeIJfpQJmV4wEJDX6lx5QArmnG7YOeIv350+qYxCfPObUk PaKj6n2KbEYjUT7WEBovDu5IpaLuDj9KvSzUaJzZO0G5PCxIfdjj8V/zlEXd/BKf yx/8V/AJri0vLGsKunh1KIHh5slZ/uUMxcT2XbcCVKfwGvqwpHBlgkFuRo6EVUVG CyQqq63zSR99EyaCtGvsW5MzTyqYZjezvJpQN/kzNBK/dGQn33UG9KtxDibKQb8u NeHVJjdHJbaanCwdSocJKyi65J7SibyU03NOcmRKLsQ1pghbYjL8AmTMVFiRWmDy r59yrQ4d6R2sTkl4H6UPFRed8msJjLg= -----END CERTIFICATE-----Generated at Sat Jun 7 14:06:34 2025 by rpki-client