$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c2be0b0-9006-3bf9-91b2-f7e53afa8a71.roa File: 8c2be0b0-9006-3bf9-91b2-f7e53afa8a71.roa (raw, json) Hash identifier: X53wabGNiknCNHb9GzwZosgUymQ81H6LUcTGYjxrtS8= Subject key identifier: B4:22:45:C5:BC:F5:D2:FD:AD:2C:87:AC:2E:23:F0:50:19:5F:93:CC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A07D53CAD70FA2EA5B7AC4300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c2be0b0-9006-3bf9-91b2-f7e53afa8a71.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 16625 IP address blocks: 104.120.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:3c:ad:70:fa:2e:a5:b7:ac:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=eaf057c4-15f1-4c90-9846-6c9b0ecdd80a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f3:a4:62:2f:de:98:f1:40:c2:08:96:5c:bf: 0d:dc:68:88:f4:c3:00:dd:ca:b9:fc:6d:fe:0e:f8: bd:aa:8d:61:99:0a:e3:68:da:cf:c6:b7:0d:1a:32: b5:0a:41:47:2f:ba:4f:82:82:3d:47:60:2d:f5:60: 0c:93:cd:1b:36:86:76:56:91:a2:ea:84:c4:4e:0a: 82:cf:ad:07:3e:0a:ef:91:30:1b:48:be:23:28:90: c9:a6:2c:2e:65:77:87:c5:90:fc:39:e1:36:4b:3d: f5:db:39:f8:2d:2f:fb:70:98:9e:bb:8f:85:15:75: 33:9c:40:ad:f2:d9:e7:c0:6e:8d:ad:f7:5f:84:40: 20:06:5e:ef:87:fb:87:12:e0:28:4a:aa:0f:73:b8: b8:72:26:2a:63:59:04:ec:4e:25:28:02:51:88:c0: 97:d3:cb:8e:28:ef:0f:2a:15:e6:9e:e0:b2:8b:19: 33:4f:22:be:75:ef:7c:f3:a9:aa:09:9f:84:9d:54: 16:20:02:b0:c1:0a:f3:59:e7:81:0f:b1:0f:9c:96: 3c:34:1b:bd:9a:ab:c4:c9:1a:92:2b:2e:45:21:1e: 8a:d1:d8:53:3b:6d:f1:78:09:c0:55:df:0b:4b:3e: e3:48:c1:8c:05:12:05:3f:b5:5c:f6:c5:49:c1:01: 4c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:22:45:C5:BC:F5:D2:FD:AD:2C:87:AC:2E:23:F0:50:19:5F:93:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c2be0b0-9006-3bf9-91b2-f7e53afa8a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.120.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:91:60:67:e4:eb:31:68:6c:13:81:ea:2d:7d:d6:8d:9a:ed: dc:ed:e9:52:8f:34:0b:a1:16:f4:81:8c:9c:40:f2:dd:ce:a1: ae:e5:fa:c2:18:cd:6d:25:f4:0e:e6:95:37:9e:e4:59:04:cc: 5b:9b:d9:4a:71:57:9b:a7:01:63:89:c1:1d:60:f4:19:7e:a2: 7f:ad:91:22:42:08:8c:d8:92:3f:1a:9b:89:13:1a:2f:5e:2c: 52:9f:72:66:8a:e9:d6:f1:1a:83:b5:06:76:53:b0:2f:25:68: aa:dc:0c:79:a2:50:d1:1b:ca:6c:67:b1:6a:29:93:37:70:b1: 41:19:ab:2e:cf:5b:03:da:ed:47:84:e7:4d:9d:5d:66:cb:c4: e4:61:cd:07:3c:3d:ee:47:15:5c:c4:2a:25:77:da:a3:48:1d: 8f:13:ef:f8:32:be:5d:d8:1b:80:2c:12:55:57:22:ed:5b:7f: b2:b6:0d:1b:7b:23:a8:b9:ad:99:71:4e:ae:ab:09:f4:07:98: 8e:62:98:27:77:ee:ac:55:7b:db:31:cf:fc:4a:2b:2e:4d:e0: 19:8e:ec:f2:4c:4f:62:ef:49:f7:ef:40:7f:00:f4:85:99:1a: d1:fa:08:39:bf:5a:22:a0:33:02:85:d7:01:6e:33:78:9a:72: 25:9a:4f:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1TytcPoupbesQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk ZWFmMDU3YzQtMTVmMS00YzkwLTk4NDYtNmM5YjBlY2RkODBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/OkYi/emPFAwgiWXL8N3GiI9MMA3cq5/G3+ Dvi9qo1hmQrjaNrPxrcNGjK1CkFHL7pPgoI9R2At9WAMk80bNoZ2VpGi6oTETgqC z60HPgrvkTAbSL4jKJDJpiwuZXeHxZD8OeE2Sz312zn4LS/7cJieu4+FFXUznECt 8tnnwG6NrfdfhEAgBl7vh/uHEuAoSqoPc7i4ciYqY1kE7E4lKAJRiMCX08uOKO8P KhXmnuCyixkzTyK+de9886mqCZ+EnVQWIAKwwQrzWeeBD7EPnJY8NBu9mqvEyRqS Ky5FIR6K0dhTO23xeAnAVd8LSz7jSMGMBRIFP7Vc9sVJwQFMjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQiRcW89dL9rSyHrC4j8FAZX5PMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGMyYmUwYjAtOTAwNi0z YmY5LTkxYjItZjdlNTNhZmE4YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHgIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWRYGfk6zFobBOB6i191o2a7dzt6VKPNAuhFvSBjJxA8t3Ooa7l+sIY zW0l9A7mlTee5FkEzFub2UpxV5unAWOJwR1g9Bl+on+tkSJCCIzYkj8am4kTGi9e LFKfcmaK6dbxGoO1BnZTsC8laKrcDHmiUNEbymxnsWopkzdwsUEZqy7PWwPa7UeE 502dXWbLxORhzQc8Pe5HFVzEKiV32qNIHY8T7/gyvl3YG4AsElVXIu1bf7K2DRt7 I6i5rZlxTq6rCfQHmI5imCd37qxVe9sxz/xKKy5N4BmO7PJMT2LvSffvQH8A9IWZ GtH6CDm/WiKgMwKF1wFuM3iaciWaT+s= -----END CERTIFICATE-----Generated at Sat Jun 7 23:34:07 2025 by rpki-client