$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b854178b-5c15-36e6-b26b-4aca0e533f37.roa File: b854178b-5c15-36e6-b26b-4aca0e533f37.roa (raw, json) Hash identifier: ksniB8uiVkXCirH1++PFaKGFPgdQ2S2a6TGHeOp8LTA= Subject key identifier: 35:A8:92:A8:8F:31:DF:DF:A6:84:6F:74:AE:1F:D6:8F:C7:C8:BC:FA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A14658DB6C81842D2EE0D1600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b854178b-5c15-36e6-b26b-4aca0e533f37.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 16625 IP address blocks: 104.83.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:8d:b6:c8:18:42:d2:ee:0d:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=8d05f55e-c852-4d37-b909-e9e72f76c705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9c:e2:50:c1:28:8d:bf:c0:f7:41:5f:c2:59: 3e:59:18:8d:36:0e:60:65:88:74:8e:a4:ef:d7:3c: e0:07:fc:c1:75:34:7f:d4:4c:ab:e8:6d:96:66:b4: 58:fa:16:17:96:d5:c2:ba:34:84:00:5d:f3:eb:1e: 2c:e2:d1:42:84:96:bd:df:2d:60:85:5f:57:8f:56: bf:c4:49:c5:5d:ef:e7:8c:18:b2:c7:c2:76:90:a0: ff:2c:8a:2c:c7:27:d6:dc:09:cb:f2:dc:22:31:82: 3e:94:22:88:32:be:c4:e1:fa:05:7b:ad:8d:31:8c: 2b:63:c0:96:73:b8:25:dc:98:ab:6e:a8:7d:75:91: 33:97:4c:d5:0e:cd:ff:32:29:dd:64:e3:6a:ce:0a: df:76:36:c8:2d:46:61:09:ac:2f:bd:0c:d8:ee:b0: 7f:1d:2a:be:49:df:88:8e:bb:1b:d4:ed:0c:7b:54: 75:70:4f:d5:7d:0d:78:bc:57:cb:72:3c:c1:68:cc: ae:b9:71:97:73:f3:7f:5a:e4:59:52:0d:2f:54:64: 69:3a:b3:c5:e4:78:05:45:14:40:ba:ba:21:31:50: 0b:b3:bf:0e:e0:d0:2d:8d:70:bb:18:87:c2:0e:14: 1f:0f:96:17:27:5c:15:d5:3d:84:bb:b2:af:a3:02: 32:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A8:92:A8:8F:31:DF:DF:A6:84:6F:74:AE:1F:D6:8F:C7:C8:BC:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b854178b-5c15-36e6-b26b-4aca0e533f37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.83.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:64:69:6c:86:dc:4f:63:97:be:d7:2e:5c:e6:75:0e:13:99: 44:ce:7d:b8:c6:aa:cd:f1:0e:ff:d2:e2:42:33:e9:85:3d:3c: 4f:5d:a9:31:e1:ce:82:45:f7:56:ca:c7:52:5b:eb:f4:78:e4: 3c:6d:43:bb:ea:be:b9:03:17:c5:c2:cf:26:1d:b1:c9:c9:9b: 9d:36:2d:4b:b0:2e:ed:39:a9:64:7c:94:6a:21:c5:f4:84:9b: a0:8b:ef:5d:f4:ba:4a:4c:88:26:42:b7:8c:bc:85:1f:ad:16: 82:17:d2:12:98:20:eb:9c:5b:30:b5:b7:36:74:54:ac:7b:94: 60:11:2f:54:c5:45:74:06:f5:45:8c:51:7f:34:08:2d:e0:2b: 4a:2e:ea:3f:df:01:85:2b:95:dd:e5:1f:08:e6:38:f2:bf:cb: 6e:cc:5e:39:e4:d6:56:05:88:c3:6f:44:5f:26:a3:64:16:dc: d1:39:a6:fa:04:b2:79:01:33:ce:34:b7:68:11:9e:ac:91:6b: 31:e1:37:15:93:f9:40:a2:f0:f9:e5:0f:ef:ec:b0:22:6f:57: f2:e1:80:69:eb:57:7a:15:65:ca:f0:a6:c8:55:16:56:27:82: 6f:f6:6b:e6:e3:91:3f:f9:09:9b:72:16:a9:d0:ae:62:bc:42: a7:a7:fc:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZY22yBhC0u4NFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk OGQwNWY1NWUtYzg1Mi00ZDM3LWI5MDktZTllNzJmNzZjNzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZziUMEojb/A90Ffwlk+WRiNNg5gZYh0jqTv 1zzgB/zBdTR/1Eyr6G2WZrRY+hYXltXCujSEAF3z6x4s4tFChJa93y1ghV9Xj1a/ xEnFXe/njBiyx8J2kKD/LIosxyfW3AnL8twiMYI+lCKIMr7E4foFe62NMYwrY8CW c7gl3Jirbqh9dZEzl0zVDs3/MindZONqzgrfdjbILUZhCawvvQzY7rB/HSq+Sd+I jrsb1O0Me1R1cE/VfQ14vFfLcjzBaMyuuXGXc/N/WuRZUg0vVGRpOrPF5HgFRRRA urohMVALs78O4NAtjXC7GIfCDhQfD5YXJ1wV1T2Eu7KvowIynQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWokqiPMd/fpoRvdK4f1o/HyLz6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjg1NDE3OGItNWMxNS0z NmU2LWIyNmItNGFjYTBlNTMzZjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaFNUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9kaWyG3E9jl77XLlzmdQ4TmUTOfbjGqs3xDv/S4kIz6YU9PE9dqTHh zoJF91bKx1Jb6/R45DxtQ7vqvrkDF8XCzyYdscnJm502LUuwLu05qWR8lGohxfSE m6CL7130ukpMiCZCt4y8hR+tFoIX0hKYIOucWzC1tzZ0VKx7lGARL1TFRXQG9UWM UX80CC3gK0ou6j/fAYUrld3lHwjmOPK/y27MXjnk1lYFiMNvRF8mo2QW3NE5pvoE snkBM840t2gRnqyRazHhNxWT+UCi8PnlD+/ssCJvV/LhgGnrV3oVZcrwpshVFlYn gm/2a+bjkT/5CZtyFqnQrmK8Qqen/DI= -----END CERTIFICATE-----Generated at Sat Jun 7 14:47:58 2025 by rpki-client