$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6f1a2a5-180b-3aed-87bc-afc48b47ee15.roa File: c6f1a2a5-180b-3aed-87bc-afc48b47ee15.roa (raw, json) Hash identifier: lnBlwxe69P8zvdvMp/vQbWBOdzed9kzXkzTrU8MCu9o= Subject key identifier: AB:8C:71:05:D5:DB:30:43:C2:FE:B8:37:55:A9:42:B1:80:28:88:85 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A07D545A42675488948EE4200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6f1a2a5-180b-3aed-87bc-afc48b47ee15.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 16625 IP address blocks: 104.98.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:45:a4:26:75:48:89:48:ee:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=4d69b623-86d4-4a8e-87e9-9495682f39cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6e:d0:a9:94:aa:06:42:54:02:3d:e8:84:21: 49:40:0d:40:4f:98:be:c2:39:9a:ff:da:82:69:5b: cd:7e:20:14:7d:ee:ed:f6:77:83:b6:41:51:2f:c9: a7:91:d5:ec:10:8c:f7:2b:47:3b:8b:cc:2f:97:84: f5:9f:a2:f6:4d:5e:9b:2a:a0:d2:94:a4:0b:ba:b3: c4:32:ce:e8:b7:b0:aa:bf:71:f3:a5:19:95:94:ea: 0d:c5:fe:35:d1:50:26:53:0d:e9:89:98:7f:bc:84: 7b:1d:0c:e3:9e:87:b9:c3:64:8a:ff:1a:f8:88:19: 39:4a:bc:87:eb:a3:58:cc:fb:fc:8b:57:20:51:77: 78:99:81:8b:b5:d7:2f:1a:92:52:ad:ac:01:0a:9b: 29:fe:52:e3:dc:7b:3c:09:b1:75:1c:24:ab:90:c0: 33:8f:27:bc:45:9a:1a:ec:ed:75:30:4d:44:65:7d: 5a:b8:1e:f7:99:a8:bc:1e:a0:da:58:0d:02:4e:e2: a3:0a:6b:e8:08:50:d4:a3:dc:7c:45:e7:d2:8e:c3: f2:0c:05:80:be:d8:c1:df:86:52:44:84:65:4d:73: b1:84:00:98:b4:45:0b:7c:73:60:01:26:b1:e5:49: f1:06:fc:34:33:ea:c9:3b:f6:04:f5:28:0d:cb:50: 04:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:8C:71:05:D5:DB:30:43:C2:FE:B8:37:55:A9:42:B1:80:28:88:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6f1a2a5-180b-3aed-87bc-afc48b47ee15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.98.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:3f:33:1c:72:dd:fe:1d:f4:26:3a:41:1f:dd:ec:49:7b:33: 91:25:0d:27:01:72:3d:8b:a5:85:11:a4:9d:48:5e:fa:50:a8: 09:87:b1:e9:81:51:4b:04:e0:a4:af:12:5e:e1:77:3a:1a:41: 1d:8b:27:be:15:1e:77:b5:65:dc:2a:b6:55:1e:25:78:c8:42: 95:e5:2e:05:4c:46:6d:2e:10:6f:3c:26:61:58:74:64:bb:eb: 57:a5:4c:b9:5f:57:ab:b3:0a:29:38:0d:57:e9:3f:9b:81:1a: 83:a3:f5:39:3c:a9:0c:20:e5:0d:b4:69:0e:33:c2:d6:a7:a1: c9:a5:0c:f9:50:a2:5b:a8:dd:4c:59:65:f3:48:e7:3e:b2:ea: e3:c6:84:0e:d6:85:62:8c:3e:c4:b4:c4:74:47:f5:d6:ac:92: 43:fa:c5:eb:f6:7c:5a:cf:94:f9:92:47:c3:f7:ea:6d:bc:c3: e9:c6:4d:29:d8:b3:82:fa:69:4a:e7:e7:eb:e8:7f:c7:33:02: b2:c9:14:e5:6e:19:c1:1d:93:50:07:af:3b:6e:91:bc:a6:b7: 02:1a:e4:db:98:40:d7:ab:2f:77:c6:29:14:5e:81:2d:3f:27: 8c:a3:99:c2:da:fd:6e:7c:72:9d:2e:c4:50:0a:d5:40:1e:b5: 2b:81:71:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1UWkJnVIiUjuQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk NGQ2OWI2MjMtODZkNC00YThlLTg3ZTktOTQ5NTY4MmYzOWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG7QqZSqBkJUAj3ohCFJQA1AT5i+wjma/9qC aVvNfiAUfe7t9neDtkFRL8mnkdXsEIz3K0c7i8wvl4T1n6L2TV6bKqDSlKQLurPE Ms7ot7Cqv3HzpRmVlOoNxf410VAmUw3piZh/vIR7HQzjnoe5w2SK/xr4iBk5SryH 66NYzPv8i1cgUXd4mYGLtdcvGpJSrawBCpsp/lLj3Hs8CbF1HCSrkMAzjye8RZoa 7O11ME1EZX1auB73mai8HqDaWA0CTuKjCmvoCFDUo9x8RefSjsPyDAWAvtjB34ZS RIRlTXOxhACYtEULfHNgASax5UnxBvw0M+rJO/YE9SgNy1AErQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuMcQXV2zBDwv64N1WpQrGAKIiFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzZmMWEyYTUtMTgwYi0z YWVkLTg3YmMtYWZjNDhiNDdlZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaGLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADg/Mxxy3f4d9CY6QR/d7El7M5ElDScBcj2LpYURpJ1IXvpQqAmHsemB UUsE4KSvEl7hdzoaQR2LJ74VHne1ZdwqtlUeJXjIQpXlLgVMRm0uEG88JmFYdGS7 61elTLlfV6uzCik4DVfpP5uBGoOj9Tk8qQwg5Q20aQ4zwtanocmlDPlQoluo3UxZ ZfNI5z6y6uPGhA7WhWKMPsS0xHRH9daskkP6xev2fFrPlPmSR8P36m28w+nGTSnY s4L6aUrn5+vof8czArLJFOVuGcEdk1AHrztukbymtwIa5NuYQNerL3fGKRRegS0/ J4yjmcLa/W58cp0uxFAK1UAetSuBcU4= -----END CERTIFICATE-----Generated at Sat Jun 7 14:07:15 2025 by rpki-client