$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c88a335-da1e-3dec-b58f-ce2820f2f8e8.roa File: 8c88a335-da1e-3dec-b58f-ce2820f2f8e8.roa (raw, json) Hash identifier: lDigSPcKQWMpOIVCzQSYBs9Z2ST7N25F0edvey4zhZw= Subject key identifier: 2E:27:DF:84:BC:73:58:8E:49:B2:DF:54:3F:FF:2A:47:91:5A:CE:20 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A14658B8A9608ABAFFD2DC280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c88a335-da1e-3dec-b58f-ce2820f2f8e8.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 104.104.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:8b:8a:96:08:ab:af:fd:2d:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=869a07f8-a0b6-4d67-a991-0496fd30bf1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ee:9a:d7:d9:80:24:d9:1d:00:f5:8e:71:12: 96:90:ab:b7:b7:1b:cf:4e:6a:15:2e:c7:48:0b:a4: 28:ed:50:60:59:ad:b5:b9:1c:70:51:c0:5a:75:9a: 11:0b:09:40:8e:25:22:16:b1:93:08:35:aa:76:b3: 50:28:20:92:c1:1b:7c:8c:a8:a1:54:45:f1:d8:e5: 21:0a:7a:1e:f6:8d:7a:fc:c0:10:5a:0a:17:7f:f5: b5:3a:50:3f:d7:5f:85:d3:30:3b:63:7d:0c:3a:a6: 24:36:7e:f4:cf:61:82:3b:17:47:d1:a1:a7:a7:92: 12:34:70:3e:7f:d0:61:f0:2e:63:ee:ac:06:84:75: 55:18:66:24:04:d4:2f:59:b1:e3:51:8b:af:45:38: 58:b0:c7:61:aa:ee:f5:b0:9e:ac:f5:11:71:94:de: f8:11:d9:79:ad:a2:85:c9:92:9f:f9:55:95:0a:2d: ac:87:ad:98:94:55:99:d2:75:6b:1c:35:e5:aa:6a: 18:48:a8:1f:05:3d:30:81:ec:a9:94:d8:d9:a4:22: 48:49:8b:f9:0a:38:93:9d:3b:8e:91:0e:48:83:d1: f0:4a:c4:d5:a5:10:51:db:8f:8d:01:9b:b2:62:87: 27:48:70:da:eb:fe:08:c5:d2:c1:ef:48:d0:34:d2: 95:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:27:DF:84:BC:73:58:8E:49:B2:DF:54:3F:FF:2A:47:91:5A:CE:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c88a335-da1e-3dec-b58f-ce2820f2f8e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.104.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a6:35:c4:62:67:2c:a1:28:22:f7:2c:e0:df:89:ae:8c:da: fc:78:ad:33:d5:dd:d9:24:ce:d6:44:e6:f8:50:b8:9e:76:b5: 67:f0:fc:5a:0b:5c:37:01:31:a0:8a:67:2b:12:f3:db:46:a4: 5d:42:59:45:7e:fb:1a:00:58:4d:ef:21:26:96:c9:e7:47:bb: cf:9c:57:97:04:8d:46:25:e0:aa:6f:8c:f4:06:4b:ed:eb:85: f5:d1:16:a7:7b:5f:54:26:1c:b9:0f:75:2f:34:38:13:b4:48: 24:d1:9c:6c:a1:2f:5e:d3:b1:c5:e3:21:2d:2e:a2:40:ec:37: f5:e0:ac:de:d6:25:20:ed:13:92:9c:f0:74:cb:ff:c6:69:6c: be:5a:6b:8d:67:b4:f2:bd:eb:39:64:1b:1f:07:bd:e9:6a:9e: ac:8c:4c:c8:86:46:db:4d:c0:5f:35:f9:3a:d1:f4:e0:64:32: d1:fb:e8:53:cb:bc:97:51:d7:3d:4e:3c:7f:27:f7:23:66:af: 0c:b3:88:2b:35:cc:50:25:35:1c:bb:16:b2:93:e7:ad:32:a0: cb:8f:79:4b:76:69:ab:ea:be:83:9c:12:c8:b3:24:cc:d3:31: 21:ee:4d:2a:17:a7:6b:72:b0:56:26:01:c2:00:e7:82:62:fb: 41:1d:f5:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZYuKlgirr/0twoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk ODY5YTA3ZjgtYTBiNi00ZDY3LWE5OTEtMDQ5NmZkMzBiZjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu6a19mAJNkdAPWOcRKWkKu3txvPTmoVLsdI C6Qo7VBgWa21uRxwUcBadZoRCwlAjiUiFrGTCDWqdrNQKCCSwRt8jKihVEXx2OUh Cnoe9o16/MAQWgoXf/W1OlA/11+F0zA7Y30MOqYkNn70z2GCOxdH0aGnp5ISNHA+ f9Bh8C5j7qwGhHVVGGYkBNQvWbHjUYuvRThYsMdhqu71sJ6s9RFxlN74Edl5raKF yZKf+VWVCi2sh62YlFWZ0nVrHDXlqmoYSKgfBT0wgeyplNjZpCJISYv5CjiTnTuO kQ5Ig9HwSsTVpRBR24+NAZuyYocnSHDa6/4IxdLB70jQNNKVfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4n34S8c1iOSbLfVD//KkeRWs4gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGM4OGEzMzUtZGExZS0z ZGVjLWI1OGYtY2UyODIwZjJmOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaGj0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABimNcRiZyyhKCL3LODfia6M2vx4rTPV3dkkztZE5vhQuJ52tWfw/FoL XDcBMaCKZysS89tGpF1CWUV++xoAWE3vISaWyedHu8+cV5cEjUYl4KpvjPQGS+3r hfXRFqd7X1QmHLkPdS80OBO0SCTRnGyhL17TscXjIS0uokDsN/XgrN7WJSDtE5Kc 8HTL/8ZpbL5aa41ntPK96zlkGx8HvelqnqyMTMiGRttNwF81+TrR9OBkMtH76FPL vJdR1z1OPH8n9yNmrwyziCs1zFAlNRy7FrKT560yoMuPeUt2aavqvoOcEsizJMzT MSHuTSoXp2tysFYmAcIA54Ji+0Ed9dE= -----END CERTIFICATE-----Generated at Thu Jun 5 18:26:55 2025 by rpki-client