$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1b36903-206e-3aec-83d6-bd2d95bb8a99.roa File: d1b36903-206e-3aec-83d6-bd2d95bb8a99.roa (raw, json) Hash identifier: 6j6N3TLyF+CPtpClFo/SQz+O/H+MYmQkl89WXIZxyrM= Subject key identifier: A4:3D:01:F0:0B:D4:04:CC:1D:C7:2C:14:1B:D8:CB:5D:E7:B3:4F:92 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A050A7FE4DB1D21C7A4AB0300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1b36903-206e-3aec-83d6-bd2d95bb8a99.roa Signing time: Fri 30 May 2025 01:00:48 +0000 ROA not before: Fri 30 May 2025 01:00:48 +0000 ROA not after: Thu 28 Aug 2025 01:00:48 +0000 asID: 16625 IP address blocks: 104.114.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:05:0a:7f:e4:db:1d:21:c7:a4:ab:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 30 01:00:48 2025 GMT Not After : Aug 28 01:00:48 2025 GMT Subject: CN=e0199258-a604-4deb-aad5-a698a00ae575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c8:6d:aa:2e:f5:81:8b:d9:ec:0f:63:af:76: 1d:d6:16:88:db:b8:28:e5:1b:d8:4d:23:6a:48:a4: e5:48:fa:9a:0d:22:da:4a:2c:e1:e7:7c:9d:29:76: 61:3c:cf:88:01:9a:21:b1:5c:c4:91:71:7a:21:83: f2:99:00:ba:7e:9d:70:5e:a0:12:a2:6f:3a:75:23: cb:45:04:9b:8a:ee:60:09:fd:9b:0e:3a:b9:07:51: 88:b1:d1:72:19:63:83:0c:ac:10:f8:ee:cb:00:1c: 8c:63:c2:79:e1:ff:c4:35:7e:82:89:db:54:8d:e9: ac:f0:65:cb:26:5d:fa:51:b7:9a:36:4d:24:c7:7e: 23:fd:e8:77:c3:c0:b6:f2:b5:a9:62:31:3a:9f:21: 73:c3:a5:e2:d1:69:5e:92:b0:49:0a:d5:a9:f8:f8: 8c:ca:4e:74:af:32:da:cf:45:80:18:4f:9e:1d:5a: db:18:21:03:85:ad:75:fb:b8:4f:90:a8:b6:5b:23: 7d:ae:b2:a9:72:46:d2:cf:d0:af:53:57:6f:a1:eb: 7f:39:14:88:9e:b8:c2:15:d5:08:c6:f9:a6:19:06: 4d:52:51:e3:c5:ac:64:57:16:50:4c:4b:60:50:d3: 63:a3:5a:1a:65:49:f1:c9:98:b4:1d:47:11:0a:44: 3c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3D:01:F0:0B:D4:04:CC:1D:C7:2C:14:1B:D8:CB:5D:E7:B3:4F:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1b36903-206e-3aec-83d6-bd2d95bb8a99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.114.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:41:7d:2f:ec:bd:6c:76:9e:ff:cd:6a:c2:ec:b7:92:f9:53: 04:c7:3c:69:a7:4e:13:5a:f0:56:08:71:9b:cb:2e:42:46:99: 8a:32:dd:f8:f2:ae:49:6e:82:3a:66:96:98:e4:14:41:36:74: ac:a7:f2:44:88:98:38:4b:06:e7:94:a8:63:6f:dd:92:db:30: fc:c4:6a:2c:ef:05:71:3b:49:36:3f:74:19:a9:3c:6d:dd:ec: d0:b2:7e:dd:98:ac:2b:32:79:1a:2e:fa:fc:47:2b:f1:90:fb: 4f:64:fb:6d:a2:fc:c9:71:3f:f4:26:0a:8b:d7:6e:2d:f2:8e: 6f:dd:68:fa:59:45:d9:08:f0:66:f9:93:01:1c:59:02:28:2b: 5b:2e:78:d1:db:15:d5:57:c4:40:32:a0:d0:71:2b:ab:92:c5: f2:30:e9:35:75:53:9c:41:ef:d5:4f:dd:8a:b7:22:6a:b8:94: c3:42:fa:dc:a7:12:f9:3d:d6:b7:cf:94:49:95:f0:9b:55:d3: ae:b5:22:9e:fc:3f:98:47:8c:7e:0d:9e:59:4c:cf:2c:52:3d: 36:e6:aa:c1:5b:89:c1:64:83:4c:7a:c0:c3:4e:97:ac:93:50: 2a:44:69:71:e7:36:c9:98:a8:b6:4d:47:de:ae:c6:47:38:80: cc:48:d0:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoFCn/k2x0hx6SrAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUzMDAxMDA0OFoXDTI1MDgyODAxMDA0OFowLzEtMCsGA1UEAxMk ZTAxOTkyNTgtYTYwNC00ZGViLWFhZDUtYTY5OGEwMGFlNTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgchtqi71gYvZ7A9jr3Yd1haI27go5RvYTSNq SKTlSPqaDSLaSizh53ydKXZhPM+IAZohsVzEkXF6IYPymQC6fp1wXqASom86dSPL RQSbiu5gCf2bDjq5B1GIsdFyGWODDKwQ+O7LAByMY8J54f/ENX6CidtUjems8GXL Jl36UbeaNk0kx34j/eh3w8C28rWpYjE6nyFzw6Xi0WlekrBJCtWp+PiMyk50rzLa z0WAGE+eHVrbGCEDha11+7hPkKi2WyN9rrKpckbSz9CvU1dvoet/ORSInrjCFdUI xvmmGQZNUlHjxaxkVxZQTEtgUNNjo1oaZUnxyZi0HUcRCkQ8lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQ9AfAL1ATMHccsFBvYy13ns0+SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDFiMzY5MDMtMjA2ZS0z YWVjLTgzZDYtYmQyZDk1YmI4YTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHJEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5BfS/svWx2nv/NasLst5L5UwTHPGmnThNa8FYIcZvLLkJGmYoy3fjy rklugjpmlpjkFEE2dKyn8kSImDhLBueUqGNv3ZLbMPzEaizvBXE7STY/dBmpPG3d 7NCyft2YrCsyeRou+vxHK/GQ+09k+22i/MlxP/QmCovXbi3yjm/daPpZRdkI8Gb5 kwEcWQIoK1sueNHbFdVXxEAyoNBxK6uSxfIw6TV1U5xB79VP3Yq3Imq4lMNC+tyn Evk91rfPlEmV8JtV0661Ip78P5hHjH4NnllMzyxSPTbmqsFbicFkg0x6wMNOl6yT UCpEaXHnNsmYqLZNR96uxkc4gMxI0LI= -----END CERTIFICATE-----Generated at Sat Jun 7 14:05:10 2025 by rpki-client