$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5a95456-83f7-3981-a0b9-515831d8b3f9.roa File: d5a95456-83f7-3981-a0b9-515831d8b3f9.roa (raw, json) Hash identifier: LbF+0x8ybCoK4Nk++c4Sx5Le0XZ73ODAzXrW/Yb8S2k= Subject key identifier: DB:04:FE:5F:CB:3E:95:F4:AF:07:13:0C:53:7E:3D:32:AC:09:8B:DA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A146580C34A94394098D2CD40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5a95456-83f7-3981-a0b9-515831d8b3f9.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 16625 IP address blocks: 104.82.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:80:c3:4a:94:39:40:98:d2:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=fc4dcb34-16ee-42c9-b368-602694031fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:04:d6:8d:75:66:96:29:c2:c3:83:0c:54:3e: 98:fa:9e:28:c1:b5:cd:c1:1a:b2:a8:ac:79:38:c3: 48:8a:0f:01:9a:99:ca:eb:14:4b:9f:ac:2c:16:ef: 55:bf:57:a3:8c:30:9c:1a:80:3c:34:08:28:39:c9: 3a:2d:fe:0f:6e:a4:88:47:9e:48:e1:8d:ef:cd:ad: 6c:9c:35:25:8f:a1:54:34:f4:cd:41:da:22:a8:77: 6d:f9:bc:e5:72:56:83:4a:fd:c2:a9:97:f6:a4:ec: 4d:9d:b2:59:bb:1e:17:64:37:45:33:dc:61:a8:a9: ce:8f:e7:c0:b1:26:b4:1a:f6:ac:82:06:41:58:87: 53:e2:10:d4:c6:54:c2:f3:45:4e:f9:a2:d3:28:16: d3:76:42:70:40:93:86:ff:8b:82:72:d8:29:b3:fc: ab:d3:3d:82:4b:d4:68:59:2d:83:27:88:f8:a6:5c: 3d:00:73:25:a3:91:e1:21:e0:4e:7d:5f:44:2b:79: 1b:3c:85:6c:78:f5:6a:36:33:95:87:98:f8:9c:69: 1d:53:5e:c8:4f:d0:d1:2e:b4:f6:c9:b3:51:44:50: da:2e:31:d9:a2:7a:d2:4d:88:82:78:2d:12:b1:f6: ac:6f:6e:2c:92:c4:42:93:b4:ea:43:b4:05:7c:78: 56:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:04:FE:5F:CB:3E:95:F4:AF:07:13:0C:53:7E:3D:32:AC:09:8B:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5a95456-83f7-3981-a0b9-515831d8b3f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.82.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:50:b9:1a:9c:03:24:fe:a2:06:35:c3:fc:73:94:cd:a9:bb: a5:6c:3a:65:a5:e5:9b:e4:fa:43:e0:33:b7:17:66:8f:b8:ab: ca:b1:d3:2c:26:0d:6e:b5:bc:ed:62:02:59:06:e4:05:1c:6a: ec:77:c9:71:84:8b:52:c5:ca:02:54:33:36:b1:79:b1:97:58: 3d:ce:41:9d:f1:b6:8b:34:a5:8c:b1:e7:46:73:f5:89:ac:3d: 29:43:b6:0b:45:be:e1:f9:0f:f7:67:f9:6c:8c:4b:bf:48:6d: 34:f4:6d:45:42:5f:06:8e:1b:1d:a9:c6:b5:26:ab:7f:fa:5e: 80:9f:09:68:3c:06:ff:70:d9:bf:0a:3d:fb:b4:78:02:c7:06: c1:36:87:21:76:18:36:91:da:b2:e0:d0:ad:8b:0f:bf:ac:57: b1:74:f3:76:38:6f:ca:9a:6b:e2:a4:ba:42:ba:17:6d:4e:d7: 36:1b:b7:b8:75:84:6e:45:0c:fc:8a:bf:20:36:07:7b:0c:69: 56:15:87:f5:60:69:03:47:19:0d:78:dd:6b:95:31:17:99:9b: 31:39:ee:61:84:36:58:46:1d:d6:bc:b5:15:6a:12:8a:63:02: 34:09:3b:58:e4:6e:d4:1f:c0:ed:73:70:93:de:ed:16:80:18: e1:12:cc:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZYDDSpQ5QJjSzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk ZmM0ZGNiMzQtMTZlZS00MmM5LWIzNjgtNjAyNjk0MDMxZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgTWjXVmlinCw4MMVD6Y+p4owbXNwRqyqKx5 OMNIig8BmpnK6xRLn6wsFu9Vv1ejjDCcGoA8NAgoOck6Lf4PbqSIR55I4Y3vza1s nDUlj6FUNPTNQdoiqHdt+bzlclaDSv3CqZf2pOxNnbJZux4XZDdFM9xhqKnOj+fA sSa0GvasggZBWIdT4hDUxlTC80VO+aLTKBbTdkJwQJOG/4uCctgps/yr0z2CS9Ro WS2DJ4j4plw9AHMlo5HhIeBOfV9EK3kbPIVsePVqNjOVh5j4nGkdU17IT9DRLrT2 ybNRRFDaLjHZonrSTYiCeC0Ssfasb24sksRCk7TqQ7QFfHhWXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsE/l/LPpX0rwcTDFN+PTKsCYvaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDVhOTU0NTYtODNmNy0z OTgxLWEwYjktNTE1ODMxZDhiM2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaFJIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZQuRqcAyT+ogY1w/xzlM2pu6VsOmWl5Zvk+kPgM7cXZo+4q8qx0ywm DW61vO1iAlkG5AUcaux3yXGEi1LFygJUMzaxebGXWD3OQZ3xtos0pYyx50Zz9Yms PSlDtgtFvuH5D/dn+WyMS79IbTT0bUVCXwaOGx2pxrUmq3/6XoCfCWg8Bv9w2b8K Pfu0eALHBsE2hyF2GDaR2rLg0K2LD7+sV7F083Y4b8qaa+KkukK6F21O1zYbt7h1 hG5FDPyKvyA2B3sMaVYVh/VgaQNHGQ143WuVMReZmzE57mGENlhGHda8tRVqEopj AjQJO1jkbtQfwO1zcJPe7RaAGOESzE8= -----END CERTIFICATE-----Generated at Sat Jun 7 22:59:13 2025 by rpki-client