$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d521682a-df3e-34d3-ab3e-27bd263e2578.roa File: d521682a-df3e-34d3-ab3e-27bd263e2578.roa (raw, json) Hash identifier: NL/ag3jUOOA+CaNOReAQ9el2Dqsf9Q5r4ZBCzo0JIZM= Subject key identifier: A1:51:A5:B8:F5:5B:2F:13:CC:49:15:BA:36:10:E4:8B:75:87:67:8E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A1895597FBE4B091F587ADE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d521682a-df3e-34d3-ab3e-27bd263e2578.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 35994 IP address blocks: 104.121.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:59:7f:be:4b:09:1f:58:7a:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=4d91fba2-c0be-4441-9094-7cba06528cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3a:87:b7:03:de:4c:8b:70:ef:30:f1:b2:c9: b2:9d:71:2a:0c:51:53:1b:37:08:7e:19:16:5e:be: bc:2f:bf:1d:41:90:17:41:f4:3f:fa:f7:41:60:e0: 11:76:0c:a9:10:c7:6f:e2:28:f4:e3:91:0e:b8:c4: 9b:7e:e3:f2:c9:08:dd:85:3c:7b:06:8d:66:51:6c: e1:de:b9:d3:4b:b4:f7:3e:89:d8:3f:6d:bc:ad:a2: 5c:68:c7:c9:ab:15:3b:12:21:93:22:09:d3:08:40: 76:18:46:cd:9e:3d:ac:45:08:01:df:e0:34:e8:2e: 16:62:e3:35:ea:6d:3f:c1:56:da:f4:be:c4:8c:1f: 8e:57:f5:c8:e6:3d:1e:87:11:a7:f7:c6:2b:2e:20: fb:00:12:ea:97:1d:a0:77:2b:8f:03:9c:cd:91:8c: 71:cb:77:24:9c:90:e4:56:f3:e2:0b:3d:c1:c0:af: ce:e2:0e:31:28:e6:8e:9f:e6:fb:71:f0:0a:49:80: cc:c6:49:f4:25:d7:ae:71:fa:99:fe:53:28:77:62: 70:a9:73:21:89:d7:58:b2:df:29:9d:08:73:47:fd: c1:4f:3b:e7:ca:2e:c4:df:a2:f1:41:3f:e9:8c:b9: 5e:cf:19:65:7b:da:6e:ba:f0:4b:cc:4d:f0:51:32: a7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:51:A5:B8:F5:5B:2F:13:CC:49:15:BA:36:10:E4:8B:75:87:67:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d521682a-df3e-34d3-ab3e-27bd263e2578.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.121.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:f4:3f:2e:f4:bc:ee:e2:e5:5a:15:07:39:68:97:3e:bf:e3: fc:22:34:98:c7:44:dc:16:f1:ee:a9:26:46:0c:99:95:06:94: 7d:b2:73:18:21:ae:39:70:c4:a4:4f:e4:9b:25:73:3b:20:9d: 12:b1:82:86:b5:f6:41:c4:59:3d:d1:bc:e2:1c:ab:d6:87:4e: d1:97:22:d3:80:ae:87:00:ea:d9:2a:76:ea:80:37:ec:90:9d: a7:49:20:32:07:be:12:2d:bf:0b:be:37:4d:31:d4:da:33:69: 9d:85:eb:06:b9:a7:9b:42:2c:bc:4d:fe:35:ed:4c:80:c4:c5: 52:d7:f6:d4:fc:f4:63:b1:3a:59:3f:2f:1e:05:29:70:cf:8c: e1:f5:12:f9:69:85:fe:2b:8a:bb:81:56:24:37:cf:53:e9:0c: 2f:dd:53:0f:db:09:44:2c:13:a4:2a:cf:40:f4:0c:64:1a:cd: d2:a2:95:a6:99:5f:7f:65:8d:bb:60:0f:02:3e:1e:e9:51:6f: ee:d0:62:c3:de:61:b8:58:57:5d:60:4e:bf:3d:d1:95:5b:dd: 8e:85:7c:58:e5:f2:17:d8:72:7c:4e:12:a9:1d:7e:ec:97:d0: d8:65:f4:25:5e:3c:44:3b:5a:40:db:f9:8c:27:99:83:df:28: ca:d0:5b:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlVl/vksJH1h63oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk NGQ5MWZiYTItYzBiZS00NDQxLTkwOTQtN2NiYTA2NTI4Y2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDqHtwPeTItw7zDxssmynXEqDFFTGzcIfhkW Xr68L78dQZAXQfQ/+vdBYOARdgypEMdv4ij045EOuMSbfuPyyQjdhTx7Bo1mUWzh 3rnTS7T3PonYP228raJcaMfJqxU7EiGTIgnTCEB2GEbNnj2sRQgB3+A06C4WYuM1 6m0/wVba9L7EjB+OV/XI5j0ehxGn98YrLiD7ABLqlx2gdyuPA5zNkYxxy3cknJDk VvPiCz3BwK/O4g4xKOaOn+b7cfAKSYDMxkn0JdeucfqZ/lMod2JwqXMhiddYst8p nQhzR/3BTzvnyi7E36LxQT/pjLlezxlle9puuvBLzE3wUTKnDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFRpbj1Wy8TzEkVujYQ5It1h2eOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDUyMTY4MmEtZGYzZS0z NGQzLWFiM2UtMjdiZDI2M2UyNTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHlIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACj0Py70vO7i5VoVBzlolz6/4/wiNJjHRNwW8e6pJkYMmZUGlH2ycxgh rjlwxKRP5JslczsgnRKxgoa19kHEWT3RvOIcq9aHTtGXItOArocA6tkqduqAN+yQ nadJIDIHvhItvwu+N00x1NozaZ2F6wa5p5tCLLxN/jXtTIDExVLX9tT89GOxOlk/ Lx4FKXDPjOH1Evlphf4riruBViQ3z1PpDC/dUw/bCUQsE6Qqz0D0DGQazdKilaaZ X39ljbtgDwI+HulRb+7QYsPeYbhYV11gTr890ZVb3Y6FfFjl8hfYcnxOEqkdfuyX 0Nhl9CVePEQ7WkDb+YwnmYPfKMrQWxY= -----END CERTIFICATE-----Generated at Sat Jun 7 14:01:00 2025 by rpki-client