$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e807cc0-8c79-3459-9cc2-cdbfa70a78da.roa File: 8e807cc0-8c79-3459-9cc2-cdbfa70a78da.roa (raw, json) Hash identifier: AElv/Hw1BdHgPbEYHKjLxT5T5EwOpw84po1LBbQKoW8= Subject key identifier: 08:21:B2:3C:85:21:4B:34:5B:79:C6:FE:12:B7:95:56:71:47:09:E1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A119ACB72B7CF3C36C3E70280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e807cc0-8c79-3459-9cc2-cdbfa70a78da.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 16625 IP address blocks: 104.78.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:cb:72:b7:cf:3c:36:c3:e7:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=c5906964-d413-4af8-8310-cce37de5c55b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cc:cf:47:34:ee:0e:ca:ed:0a:49:fc:d1:08: f8:67:9c:17:46:15:66:7f:1d:30:9d:50:5a:cd:24: df:6c:6c:b3:18:ae:13:f3:9a:02:7f:7b:5e:50:ac: 1c:bf:64:55:74:a5:3d:ff:c9:2d:43:fa:66:c1:d6: 99:d0:78:e0:6d:68:95:5f:90:78:e2:77:5d:3d:1d: 3c:60:11:72:03:ae:61:91:20:03:f0:d7:bd:a3:07: 92:b9:3e:86:3c:ec:62:20:8e:bf:30:74:c2:dd:cb: 97:1f:08:7a:d6:83:13:88:43:d7:f4:8c:13:db:a1: 69:0a:b6:13:10:8e:c7:c2:f3:1d:14:54:8c:0d:33: 69:2f:b8:ad:f6:a5:0c:ad:23:3d:93:59:a7:04:80: ea:46:eb:21:f9:19:dc:9a:54:c5:50:a2:46:f1:4e: c1:94:ae:8c:34:ab:1e:27:4c:84:4a:08:bd:e7:f9: b5:e4:12:b0:84:c9:27:a3:b0:75:12:50:96:cd:be: d5:a5:9c:09:22:5b:f4:d3:45:7e:3f:63:fc:76:8f: 26:27:88:14:a5:1b:bd:0c:1f:33:f9:1d:5d:37:94: 68:b5:ae:3a:0f:25:dc:5e:8b:52:97:43:96:f8:5e: e4:c9:87:3d:08:9b:59:d1:ec:59:10:9d:13:f6:1d: 7b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:21:B2:3C:85:21:4B:34:5B:79:C6:FE:12:B7:95:56:71:47:09:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e807cc0-8c79-3459-9cc2-cdbfa70a78da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.78.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:c8:5d:0e:67:9b:2e:ad:2f:36:ca:70:5c:04:09:23:06:70: 0c:06:f1:d7:a0:93:51:fd:ae:17:bb:e9:0e:a9:31:59:53:dc: 83:df:1c:a4:ef:38:cd:94:dd:54:11:b0:37:91:45:8f:65:22: d0:1b:ec:64:5a:4a:55:c8:f8:d7:57:3c:ec:89:7c:c3:53:04: 2a:d9:ef:0a:d4:bc:09:5b:f4:af:3b:de:d1:ac:53:76:3c:2b: e7:aa:6c:5b:11:45:f3:f3:2b:91:90:83:d6:91:b0:67:66:fa: 09:e0:32:1a:34:41:a7:c0:42:c4:35:ab:67:0f:2e:8e:fc:41: bf:39:6b:6a:20:31:ca:64:82:14:38:2d:69:2e:a7:76:29:2c: 3a:32:11:2a:7e:7d:40:f1:1d:dd:7d:31:85:91:7e:9a:85:79: 64:45:27:44:55:f2:00:55:4e:9c:4c:bd:15:d9:83:93:81:d3: 21:87:29:6f:97:43:4a:b8:98:99:ae:fd:23:d6:ae:1c:f6:e4: 8d:bc:d8:19:75:13:3f:13:de:29:5a:6a:02:9e:5c:d3:57:2a: fb:7a:f5:c0:7f:dd:13:91:da:0b:6f:4e:c5:18:fb:f2:e1:fb: c1:a6:a8:86:8f:91:ac:71:77:dd:ca:0a:20:4b:3d:ee:69:05: 93:1b:b9:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmstyt888NsPnAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk YzU5MDY5NjQtZDQxMy00YWY4LTgzMTAtY2NlMzdkZTVjNTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMzPRzTuDsrtCkn80Qj4Z5wXRhVmfx0wnVBa zSTfbGyzGK4T85oCf3teUKwcv2RVdKU9/8ktQ/pmwdaZ0HjgbWiVX5B44nddPR08 YBFyA65hkSAD8Ne9oweSuT6GPOxiII6/MHTC3cuXHwh61oMTiEPX9IwT26FpCrYT EI7HwvMdFFSMDTNpL7it9qUMrSM9k1mnBIDqRush+RncmlTFUKJG8U7BlK6MNKse J0yESgi95/m15BKwhMkno7B1ElCWzb7VpZwJIlv000V+P2P8do8mJ4gUpRu9DB8z +R1dN5Rota46DyXcXotSl0OW+F7kyYc9CJtZ0exZEJ0T9h17mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAghsjyFIUs0W3nG/hK3lVZxRwnhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGU4MDdjYzAtOGM3OS0z NDU5LTljYzItY2RiZmE3MGE3OGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaE68MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3IXQ5nmy6tLzbKcFwECSMGcAwG8degk1H9rhe76Q6pMVlT3IPfHKTv OM2U3VQRsDeRRY9lItAb7GRaSlXI+NdXPOyJfMNTBCrZ7wrUvAlb9K873tGsU3Y8 K+eqbFsRRfPzK5GQg9aRsGdm+gngMho0QafAQsQ1q2cPLo78Qb85a2ogMcpkghQ4 LWkup3YpLDoyESp+fUDxHd19MYWRfpqFeWRFJ0RV8gBVTpxMvRXZg5OB0yGHKW+X Q0q4mJmu/SPWrhz25I282Bl1Ez8T3ilaagKeXNNXKvt69cB/3ROR2gtvTsUY+/Lh +8GmqIaPkaxxd93KCiBLPe5pBZMbucw= -----END CERTIFICATE-----Generated at Sat Jun 7 14:12:24 2025 by rpki-client