$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7ff4aa1-fecc-3ac8-bdfa-b6e168136a9b.roa File: d7ff4aa1-fecc-3ac8-bdfa-b6e168136a9b.roa (raw, json) Hash identifier: LvtYXYLWHexpPxuBp+Z4ZBJARpiBWMM0wSkt+1dwMEI= Subject key identifier: 6C:92:4C:47:93:A3:BC:4E:0A:D5:13:AD:21:57:46:BE:83:DE:69:68 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A07D54530AE89C41DD5719700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7ff4aa1-fecc-3ac8-bdfa-b6e168136a9b.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 16625 IP address blocks: 104.87.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:45:30:ae:89:c4:1d:d5:71:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=86769a8a-b328-4574-aab6-9bcf632a3ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:12:5f:b2:4c:2c:ea:ef:8e:62:92:72:9f:12: 65:b7:91:7e:05:ce:16:5d:9e:ab:f9:6b:14:ba:2b: b8:af:e8:2b:90:ba:94:a6:60:80:a7:ea:79:58:37: 02:0d:fa:b7:ac:26:a1:af:62:48:90:86:0b:e1:d1: a4:73:04:ef:17:8b:3d:e8:bd:19:82:3b:5a:fe:13: 37:2f:65:35:f3:47:1f:27:0b:4f:4d:91:4e:47:01: b2:0f:70:e7:8e:39:ac:76:b7:1a:2c:4b:ce:6e:b3: 40:c9:c4:a1:9a:81:ae:2c:96:ca:6d:49:f9:27:39: f1:9d:55:4d:21:1d:fb:22:9f:9a:a7:40:f9:19:05: ef:07:dc:ba:6b:73:cd:a0:39:fa:c7:a2:31:19:50: 67:42:38:94:84:d7:f8:0b:af:b0:dd:0e:36:c2:8f: 6c:0e:52:ba:16:fa:77:1f:09:2c:8c:02:77:aa:50: 4b:bd:52:1a:95:b7:90:cc:75:27:b9:ec:8a:cd:66: 6b:15:6d:38:fa:2c:8e:8f:44:47:0a:ee:f6:f6:af: 0a:0a:0c:bb:f8:95:e8:d1:d8:8a:91:cb:e1:01:3e: e0:e0:54:18:65:70:39:5d:a9:89:51:fc:2f:50:27: 57:26:33:b3:29:26:a5:b6:2f:42:7e:c5:bc:d3:03: 52:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:92:4C:47:93:A3:BC:4E:0A:D5:13:AD:21:57:46:BE:83:DE:69:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7ff4aa1-fecc-3ac8-bdfa-b6e168136a9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.87.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:0f:5d:c2:73:59:3f:f2:de:4d:68:f9:62:0f:1d:ef:86:47: 4c:4f:52:4f:4e:7e:30:ad:da:45:4c:3f:01:ed:93:ac:f7:21: 5c:89:14:25:96:cc:cf:ae:69:2c:ad:28:b6:d6:8a:1b:57:c4: 9e:4a:2d:14:7c:fb:3c:02:7f:af:d0:d1:de:da:84:ea:dd:37: ba:0c:7a:78:9c:d3:79:5a:4d:91:6e:1b:f4:0e:55:41:18:73: 14:84:99:9c:44:48:12:7e:1b:d0:04:a3:29:5e:7a:6d:5b:f6: 3f:22:70:37:9c:2e:fd:73:ae:07:56:f9:93:8f:43:7d:5d:55: 83:c1:c7:3e:00:78:b9:16:f1:83:29:b8:f6:79:62:d7:08:0e: b6:66:52:ec:73:6d:60:8e:f9:a7:af:a3:01:39:f5:7f:47:0a: 4c:b5:cc:90:cc:97:29:6a:1b:f4:ae:ae:e3:b9:d6:83:48:5b: 64:7c:ca:2d:41:fa:e6:54:8f:ef:84:bd:e8:c1:73:28:d1:da: c6:39:60:52:47:50:6d:2b:ee:7a:bb:fa:54:3c:3e:f8:5e:83: 99:bd:8e:c0:ca:3c:40:27:30:a3:c1:80:ca:87:a7:cf:3e:a6: 7d:d2:a5:da:7c:84:dc:14:90:50:8d:72:cd:e0:7b:3e:90:2a: e0:88:65:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1UUwronEHdVxlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk ODY3NjlhOGEtYjMyOC00NTc0LWFhYjYtOWJjZjYzMmEzY2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRJfskws6u+OYpJynxJlt5F+Bc4WXZ6r+WsU uiu4r+grkLqUpmCAp+p5WDcCDfq3rCahr2JIkIYL4dGkcwTvF4s96L0Zgjta/hM3 L2U180cfJwtPTZFORwGyD3DnjjmsdrcaLEvObrNAycShmoGuLJbKbUn5JznxnVVN IR37Ip+ap0D5GQXvB9y6a3PNoDn6x6IxGVBnQjiUhNf4C6+w3Q42wo9sDlK6Fvp3 HwksjAJ3qlBLvVIalbeQzHUnueyKzWZrFW04+iyOj0RHCu729q8KCgy7+JXo0diK kcvhAT7g4FQYZXA5XamJUfwvUCdXJjOzKSalti9CfsW80wNSgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGySTEeTo7xOCtUTrSFXRr6D3mloMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDdmZjRhYTEtZmVjYy0z YWM4LWJkZmEtYjZlMTY4MTM2YTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaFfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoPXcJzWT/y3k1o+WIPHe+GR0xPUk9OfjCt2kVMPwHtk6z3IVyJFCWW zM+uaSytKLbWihtXxJ5KLRR8+zwCf6/Q0d7ahOrdN7oMenic03laTZFuG/QOVUEY cxSEmZxESBJ+G9AEoyleem1b9j8icDecLv1zrgdW+ZOPQ31dVYPBxz4AeLkW8YMp uPZ5YtcIDrZmUuxzbWCO+aevowE59X9HCky1zJDMlylqG/SuruO51oNIW2R8yi1B +uZUj++EvejBcyjR2sY5YFJHUG0r7nq7+lQ8Pvheg5m9jsDKPEAnMKPBgMqHp88+ pn3Spdp8hNwUkFCNcs3gez6QKuCIZTc= -----END CERTIFICATE-----Generated at Sat Jun 7 22:55:15 2025 by rpki-client