$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a530b37-ec11-30b2-8ecf-b4b191e9c3b4.roa File: 8a530b37-ec11-30b2-8ecf-b4b191e9c3b4.roa (raw, json) Hash identifier: kDl5dDbktHbD9DBILcy4L7vvyK6l7BaaW3+zd3Yp8fQ= Subject key identifier: BB:69:77:4A:6D:9C:C0:8A:E4:86:80:54:7F:F4:95:DD:33:30:02:8A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A14658846198FDF44A3536C20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a530b37-ec11-30b2-8ecf-b4b191e9c3b4.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 16625 IP address blocks: 104.100.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:88:46:19:8f:df:44:a3:53:6c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=8b5dacb1-8bc6-48f9-bb23-02148b7901f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:af:7b:f0:c8:cd:1f:08:75:db:38:32:d0:06: 22:3d:bf:eb:6d:40:31:8f:f8:a1:45:46:47:79:9c: 62:52:e2:41:31:54:28:18:4e:76:cc:5a:42:5c:47: c5:fd:74:87:25:99:f5:4a:6e:87:de:06:ba:4b:0c: 2e:5f:b1:7e:8c:e5:e2:da:b5:f5:87:be:bc:92:36: d9:cf:6d:29:f0:4a:9f:bb:eb:7c:b4:39:90:f4:18: 52:75:63:ee:31:ba:00:2c:e2:0f:a6:6b:29:65:3d: e8:c2:06:87:e5:76:a5:b4:0e:e9:36:a1:0c:2c:37: 2b:1d:18:17:38:c9:ce:fb:07:32:09:65:7f:09:3a: c4:f7:bb:0a:fa:a2:89:19:de:1f:62:9a:63:17:4d: f1:fc:ec:07:23:89:6a:33:29:26:51:f0:11:e6:25: 84:e2:8c:1e:af:5f:f5:4d:13:d8:00:87:4d:9b:0f: fb:44:da:e3:61:d0:fe:7e:bc:43:0b:96:2e:9a:df: 81:10:06:0b:e0:53:29:80:84:a2:b8:45:98:84:2b: 37:6c:0f:b3:5d:d9:16:80:69:d6:a6:46:ad:8d:0e: f2:ad:44:01:e5:0a:49:9d:77:29:0c:ee:db:db:52: c4:a5:a7:cc:a9:27:8b:58:d4:d5:26:65:38:77:6c: 04:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:69:77:4A:6D:9C:C0:8A:E4:86:80:54:7F:F4:95:DD:33:30:02:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a530b37-ec11-30b2-8ecf-b4b191e9c3b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.100.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:63:b1:a7:ff:6e:31:d5:0c:96:dd:85:48:9f:a2:1f:e2:25: ff:d8:e7:34:6d:03:98:e0:65:d0:d5:9d:dc:7e:ee:07:e6:6b: 20:ff:aa:66:5b:96:55:a8:72:25:ca:4b:cb:94:d7:7f:a3:4e: dd:b9:6e:95:a6:7f:48:0e:3b:7e:bb:3f:7b:ca:8c:28:4a:2b: 9e:c5:b4:86:29:de:7d:fa:e1:0f:89:ed:70:84:9c:63:96:19: f3:dc:9d:21:a9:19:31:17:7c:ff:42:cc:a0:0c:c9:e6:13:85: 08:31:56:61:d0:a8:39:dc:e6:98:f7:3f:49:82:1a:8b:6e:f8: 27:04:1d:a7:6c:68:8d:29:c6:eb:0c:b9:e7:26:57:aa:cd:eb: 36:b6:ea:54:8e:f6:fa:04:2e:2f:88:b6:38:a2:a3:83:d5:3d: 8d:fa:47:5c:47:f5:55:30:2a:45:f9:a2:6b:6d:e7:6f:3f:fc: 13:b0:ff:c3:c6:4c:7f:21:ab:8b:7d:ad:d9:14:93:aa:e0:db: 0b:4e:01:17:4d:0f:42:69:ec:fa:a4:d5:98:22:86:3a:15:ff: 49:8a:0b:8b:7a:0d:3c:b7:6a:94:fc:80:02:25:6c:c7:50:f1: 1f:21:cd:79:95:90:9a:74:2e:aa:8e:fa:ef:c6:a0:40:0d:f8: 7a:31:9e:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZYhGGY/fRKNTbCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk OGI1ZGFjYjEtOGJjNi00OGY5LWJiMjMtMDIxNDhiNzkwMWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K978MjNHwh12zgy0AYiPb/rbUAxj/ihRUZH eZxiUuJBMVQoGE52zFpCXEfF/XSHJZn1Sm6H3ga6SwwuX7F+jOXi2rX1h768kjbZ z20p8Eqfu+t8tDmQ9BhSdWPuMboALOIPpmspZT3owgaH5XaltA7pNqEMLDcrHRgX OMnO+wcyCWV/CTrE97sK+qKJGd4fYppjF03x/OwHI4lqMykmUfAR5iWE4ower1/1 TRPYAIdNmw/7RNrjYdD+frxDC5Yumt+BEAYL4FMpgISiuEWYhCs3bA+zXdkWgGnW pkatjQ7yrUQB5QpJnXcpDO7b21LEpafMqSeLWNTVJmU4d2wESQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtpd0ptnMCK5IaAVH/0ld0zMAKKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGE1MzBiMzctZWMxMS0z MGIyLThlY2YtYjRiMTkxZTljM2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaGRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNjsaf/bjHVDJbdhUifoh/iJf/Y5zRtA5jgZdDVndx+7gfmayD/qmZb llWociXKS8uU13+jTt25bpWmf0gOO367P3vKjChKK57FtIYp3n364Q+J7XCEnGOW GfPcnSGpGTEXfP9CzKAMyeYThQgxVmHQqDnc5pj3P0mCGotu+CcEHadsaI0pxusM uecmV6rN6za26lSO9voELi+Itjiio4PVPY36R1xH9VUwKkX5omtt528//BOw/8PG TH8hq4t9rdkUk6rg2wtOARdND0Jp7Pqk1ZgihjoV/0mKC4t6DTy3apT8gAIlbMdQ 8R8hzXmVkJp0LqqO+u/GoEAN+Hoxnl0= -----END CERTIFICATE-----Generated at Sat Jun 7 19:23:09 2025 by rpki-client