$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c49d1003-c774-3608-9480-6b74164c8872.roa File: c49d1003-c774-3608-9480-6b74164c8872.roa (raw, json) Hash identifier: xr04bQ67utpWeEU6U6hNFf9f7HzDXprlgjXs3HHLuwk= Subject key identifier: 12:18:7E:9A:87:ED:35:44:E3:71:FF:17:5A:75:46:31:27:24:DA:70 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A119AB8DB0A2C7068961C0180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c49d1003-c774-3608-9480-6b74164c8872.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 20940 IP address blocks: 104.70.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:b8:db:0a:2c:70:68:96:1c:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=25308f95-6168-4065-8851-0631d09e90db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8e:c4:b9:eb:f0:bf:76:3c:14:7a:f9:6f:d1: 1d:26:0c:48:df:c8:44:57:03:29:38:ad:b5:9c:6d: be:88:76:2e:aa:fc:c2:29:fb:b3:cf:78:57:01:c1: f4:32:19:85:a7:20:89:53:79:1f:39:8e:50:5d:81: f7:60:53:76:46:82:ee:c7:98:3f:9e:74:7d:bf:18: de:de:e8:e9:78:22:4f:8a:cc:8d:33:4b:96:06:00: 45:cb:29:96:34:10:47:66:c0:bd:32:20:96:e4:c4: 43:a9:e9:ea:56:c0:c0:54:a3:53:f4:12:c8:b5:f1: 93:d4:a9:35:85:6e:ae:25:3a:a5:b8:3f:72:a3:60: 70:77:a9:14:25:d9:2e:be:75:ea:b0:84:7a:a1:da: 65:86:17:ec:e2:ee:6f:55:88:e0:f5:9d:aa:a0:6c: 5a:9c:ab:69:7d:3e:41:05:d2:65:c4:06:aa:21:b2: 69:94:48:ce:06:14:76:55:fe:bc:af:b5:6b:f1:12: 78:6a:18:9f:fd:5b:58:74:48:ff:23:9b:09:eb:fb: 4f:e7:e3:2d:75:b0:54:55:77:4d:8d:39:42:90:fa: a6:1d:63:69:72:35:bf:0c:e9:b4:2d:8b:82:ec:23: a1:2b:42:aa:0f:ca:ba:aa:71:ab:dd:8c:18:42:7c: 0b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:18:7E:9A:87:ED:35:44:E3:71:FF:17:5A:75:46:31:27:24:DA:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c49d1003-c774-3608-9480-6b74164c8872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.70.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:ad:79:67:5f:09:d7:ff:98:cc:d9:2c:1c:34:7d:53:45:de: 7f:ef:47:85:4c:7f:ed:be:69:65:6f:d7:c2:14:3e:5b:ca:0f: 01:be:52:aa:39:b5:c2:92:ca:00:4c:a5:1f:77:b7:0a:b2:2d: a9:5f:5d:1c:dc:04:22:83:4b:25:7a:91:da:41:06:77:cd:a1: 75:4a:df:ea:18:6e:db:e2:f9:16:14:75:ca:fb:87:02:b8:2a: ab:ae:22:b5:54:3f:8c:e7:9f:c1:8d:ca:8f:c0:24:1f:a3:2e: b3:82:28:0e:71:73:10:7d:e9:04:c4:f2:d5:7f:25:90:8c:3b: f1:e5:35:82:13:c4:31:63:b2:3b:76:65:bd:9c:ac:92:7b:63: b0:0d:01:1d:8d:47:5e:ce:ef:fd:2a:52:c3:29:07:65:92:e2: 70:49:22:71:8c:80:19:41:80:a1:6a:5d:8e:04:e9:cd:60:8d: 89:58:e8:b0:58:a3:71:54:ac:aa:65:57:1e:51:ff:34:d4:82: 0e:aa:75:17:4f:2d:f7:cc:39:54:f7:7b:39:e5:1d:7c:2c:56: d1:bc:73:f1:c0:38:dc:98:27:27:cb:d8:96:33:14:8b:e2:b2: 78:95:83:83:c1:ba:83:ac:c2:91:98:bb:14:90:da:94:14:ff: af:5d:12:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmrjbCixwaJYcAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk MjUzMDhmOTUtNjE2OC00MDY1LTg4NTEtMDYzMWQwOWU5MGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho7Euevwv3Y8FHr5b9EdJgxI38hEVwMpOK21 nG2+iHYuqvzCKfuzz3hXAcH0MhmFpyCJU3kfOY5QXYH3YFN2RoLux5g/nnR9vxje 3ujpeCJPisyNM0uWBgBFyymWNBBHZsC9MiCW5MRDqenqVsDAVKNT9BLItfGT1Kk1 hW6uJTqluD9yo2Bwd6kUJdkuvnXqsIR6odplhhfs4u5vVYjg9Z2qoGxanKtpfT5B BdJlxAaqIbJplEjOBhR2Vf68r7Vr8RJ4ahif/VtYdEj/I5sJ6/tP5+MtdbBUVXdN jTlCkPqmHWNpcjW/DOm0LYuC7COhK0KqD8q6qnGr3YwYQnwLRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIYfpqH7TVE43H/F1p1RjEnJNpwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzQ5ZDEwMDMtYzc3NC0z NjA4LTk0ODAtNmI3NDE2NGM4ODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEZ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+teWdfCdf/mMzZLBw0fVNF3n/vR4VMf+2+aWVv18IUPlvKDwG+Uqo5 tcKSygBMpR93twqyLalfXRzcBCKDSyV6kdpBBnfNoXVK3+oYbtvi+RYUdcr7hwK4 KquuIrVUP4znn8GNyo/AJB+jLrOCKA5xcxB96QTE8tV/JZCMO/HlNYITxDFjsjt2 Zb2crJJ7Y7ANAR2NR17O7/0qUsMpB2WS4nBJInGMgBlBgKFqXY4E6c1gjYlY6LBY o3FUrKplVx5R/zTUgg6qdRdPLffMOVT3eznlHXwsVtG8c/HAONyYJyfL2JYzFIvi sniVg4PBuoOswpGYuxSQ2pQU/69dEpA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:34:15 2025 by rpki-client