$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aadf1d1a-73bb-3a23-85a5-f88b6352a326.roa File: aadf1d1a-73bb-3a23-85a5-f88b6352a326.roa (raw, json) Hash identifier: gwvqUm/WByVY64/0fiJ8yVIyX88rb3O78JHSyP4fnMk= Subject key identifier: 0D:C7:4F:56:E1:79:85:C9:8B:CF:56:6E:6C:CF:B6:45:26:32:29:83 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A14658D10E595C584E4F08D40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aadf1d1a-73bb-3a23-85a5-f88b6352a326.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 16625 IP address blocks: 104.81.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:8d:10:e5:95:c5:84:e4:f0:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=389100ec-236b-4f30-978e-7a54fd7caa27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:11:72:f0:60:3e:17:2c:db:c2:6a:d0:40:67: 5e:15:49:ce:17:32:53:08:63:10:66:05:fc:ab:6c: e8:34:b6:75:d9:5c:35:36:46:cd:66:05:7b:53:13: fa:53:e9:d4:bf:5b:b0:4d:14:56:88:8b:36:ee:1c: de:48:ce:22:4e:0c:03:80:18:49:0f:c7:16:e2:70: 1b:09:2b:9e:20:ef:06:fa:5c:de:93:68:ed:fc:35: 4a:94:a0:c3:28:d9:e0:d1:b6:d0:3e:b1:61:4c:25: 34:60:a6:57:22:db:ba:ef:d5:50:11:87:d3:bb:5a: bd:43:8c:17:4d:5f:11:01:e3:7a:5d:29:44:5f:e6: c3:bc:7c:66:5b:00:f2:a5:fa:64:b5:47:a8:84:55: e1:0c:4a:3e:52:b6:06:d7:64:b1:85:29:1d:1e:82: bd:9d:67:1f:ae:2f:ff:97:dc:7c:c4:35:36:bc:54: b4:d6:47:6a:f3:59:11:ca:3d:6f:02:12:95:cc:6b: 2e:c1:f5:ab:90:6d:eb:93:41:5e:f4:7c:09:87:4d: bf:26:d1:e5:82:f8:a9:c4:59:a6:84:5e:5b:5c:8c: 72:e7:1b:bd:1b:91:23:70:40:37:f2:59:79:2f:87: 46:75:bd:39:3e:0e:75:c4:30:ad:95:75:4d:5d:74: 8d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C7:4F:56:E1:79:85:C9:8B:CF:56:6E:6C:CF:B6:45:26:32:29:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aadf1d1a-73bb-3a23-85a5-f88b6352a326.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.81.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:7e:d5:5d:c8:51:1e:8b:ca:b9:18:96:08:ab:46:c7:e8:2a: cc:3a:70:01:39:87:1a:95:b3:d8:cf:3c:0a:3e:08:1c:86:7f: 87:8d:5c:d8:90:95:a5:50:93:dc:0b:ff:b5:f1:e8:a7:1c:1e: 41:ee:ff:53:67:76:b2:8a:f1:2d:dc:37:b4:5b:1d:b5:c8:e0: 5c:f3:8c:fb:36:8d:55:b7:1c:bb:64:d7:3d:5d:c0:78:17:32: 33:9b:f2:b3:40:65:e2:fc:c6:6b:5c:f9:69:fa:04:b2:1d:42: 5d:c2:e8:34:68:47:be:3e:30:20:4e:d3:f6:ea:8e:d5:e3:f8: c2:19:ce:06:66:3b:67:7a:51:5f:6d:9d:1d:86:22:06:ab:b9: 6f:88:28:e1:69:a6:dc:a7:2d:5d:82:50:20:9b:52:bd:4c:2c: 48:d4:4a:01:5c:f0:ae:1b:2b:de:fd:c2:16:e0:d7:80:e4:12: b0:bb:eb:3b:4d:57:45:cc:2a:d8:3f:66:11:5f:38:4d:4a:f1: 42:a0:0b:17:2e:f3:06:38:16:8b:c5:aa:6c:d6:bb:3d:90:75: b9:ae:47:4c:32:ee:22:89:13:66:d2:74:9b:27:79:c4:75:e2: d6:28:d6:2a:67:0d:c5:7e:4e:63:02:12:20:51:86:3b:c8:ae: 15:a0:a7:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZY0Q5ZXFhOTwjUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk Mzg5MTAwZWMtMjM2Yi00ZjMwLTk3OGUtN2E1NGZkN2NhYTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhFy8GA+FyzbwmrQQGdeFUnOFzJTCGMQZgX8 q2zoNLZ12Vw1NkbNZgV7UxP6U+nUv1uwTRRWiIs27hzeSM4iTgwDgBhJD8cW4nAb CSueIO8G+lzek2jt/DVKlKDDKNng0bbQPrFhTCU0YKZXItu679VQEYfTu1q9Q4wX TV8RAeN6XSlEX+bDvHxmWwDypfpktUeohFXhDEo+UrYG12SxhSkdHoK9nWcfri// l9x8xDU2vFS01kdq81kRyj1vAhKVzGsuwfWrkG3rk0Fe9HwJh02/JtHlgvipxFmm hF5bXIxy5xu9G5EjcEA38ll5L4dGdb05Pg51xDCtlXVNXXSNzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3HT1bheYXJi89WbmzPtkUmMimDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWFkZjFkMWEtNzNiYi0z YTIzLTg1YTUtZjg4YjYzNTJhMzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaFHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp+1V3IUR6LyrkYlgirRsfoKsw6cAE5hxqVs9jPPAo+CByGf4eNXNiQ laVQk9wL/7Xx6KccHkHu/1NndrKK8S3cN7RbHbXI4FzzjPs2jVW3HLtk1z1dwHgX MjOb8rNAZeL8xmtc+Wn6BLIdQl3C6DRoR74+MCBO0/bqjtXj+MIZzgZmO2d6UV9t nR2GIgaruW+IKOFpptynLV2CUCCbUr1MLEjUSgFc8K4bK979whbg14DkErC76ztN V0XMKtg/ZhFfOE1K8UKgCxcu8wY4FovFqmzWuz2QdbmuR0wy7iKJE2bSdJsnecR1 4tYo1ipnDcV+TmMCEiBRhjvIrhWgp8c= -----END CERTIFICATE-----Generated at Sat Jun 7 14:05:02 2025 by rpki-client