$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da07b213-ef60-3bc8-b6c3-6cce2d81fae7.roa File: da07b213-ef60-3bc8-b6c3-6cce2d81fae7.roa (raw, json) Hash identifier: zXNq83KTD0GfjQzoxHEGQ8Mq2nz+VOrJ3ZhaDal0a78= Subject key identifier: 18:83:29:B9:5A:E0:F5:80:B5:B2:4A:CB:13:90:E5:7A:C6:B8:FD:58 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A07D544844BEF0669B625E700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da07b213-ef60-3bc8-b6c3-6cce2d81fae7.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 45758 IP address blocks: 104.76.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:44:84:4b:ef:06:69:b6:25:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=03e9f3d5-4237-4d49-b382-66e40dc2a1b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3b:c4:f5:95:38:77:32:7f:34:d3:a3:17:ae: c0:62:63:a6:19:c2:60:c6:82:d7:84:a1:6a:02:66: 31:83:03:a4:ff:2a:1b:7d:ae:4d:a8:60:39:8d:50: c4:65:19:98:c4:88:50:cf:64:81:18:80:e4:6a:cf: 6e:0a:b8:30:10:b0:7c:2c:41:71:c7:c4:16:ec:b4: 8d:49:7e:88:80:98:9e:bd:77:61:2d:04:83:86:20: 60:23:f9:41:5d:12:63:5c:c3:e6:86:94:d0:0d:ed: 30:8c:a6:01:12:ba:0b:14:cb:10:63:0f:fd:a0:c4: b8:e6:1e:2c:2a:3f:18:d7:4e:37:ed:b3:67:df:3b: 57:d0:d1:d0:6e:a9:09:10:4d:f3:a8:e9:d9:08:e8: 9a:d9:b0:b6:08:d1:cf:d4:4c:57:60:26:d1:a6:c7: 9a:08:8f:21:29:f6:87:b3:8b:c1:91:b9:56:22:1c: 0d:c2:16:9b:62:1d:bd:0f:51:7c:71:02:78:a0:1e: 44:77:38:8a:77:47:7d:4f:c1:b8:31:a6:5a:c9:56: 71:db:b9:ac:26:34:b2:40:a1:f4:cc:eb:d5:5a:1b: a7:6b:eb:60:0f:34:4e:5e:b3:11:57:3f:7e:b3:0e: 9d:c2:0c:e6:a6:c8:75:86:5b:c9:82:6c:5a:d4:27: 99:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:83:29:B9:5A:E0:F5:80:B5:B2:4A:CB:13:90:E5:7A:C6:B8:FD:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da07b213-ef60-3bc8-b6c3-6cce2d81fae7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.76.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e8:f4:fb:a1:e5:dc:15:e1:32:21:cf:37:05:ae:3b:de:c5: e1:c1:75:17:ea:21:60:26:7c:0d:ee:83:4a:9b:0c:f4:78:75: 5a:16:ed:d5:7c:f1:d0:85:cc:94:97:e4:c5:36:d5:3e:ac:48: cd:bb:b5:84:aa:da:fe:ec:15:45:da:77:b1:48:fc:01:d8:38: 44:39:b4:3a:03:ca:0a:7e:23:1e:48:5d:e3:51:af:17:60:3e: a3:c1:cf:5f:38:59:09:d7:ed:34:60:a5:55:0e:c7:c9:85:7f: a9:ba:aa:f4:87:d2:8c:89:a0:9f:3b:a9:e0:4e:26:e6:27:b9: 69:c9:9f:0d:a0:d6:d9:d5:24:61:ec:96:49:8c:a3:9b:06:4a: 05:fe:40:76:b3:35:fe:4e:47:96:d7:12:14:33:f0:f9:4c:7b: 9c:4e:5d:08:c3:30:da:ba:73:c9:27:ec:10:02:c9:0d:ae:cb: 5f:00:79:0b:9e:d8:13:f2:05:7e:02:b5:c6:79:83:74:85:ac: 05:ee:db:d6:0a:48:c6:e1:7f:ad:8f:37:e9:85:e3:7c:b9:d2: 50:4f:25:c8:45:72:ca:78:af:b0:f5:91:4f:37:54:49:9a:46: 9b:6b:7b:c6:2e:15:af:6c:19:3d:03:53:37:fc:b3:cb:e7:a3: d5:93:73:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1USES+8GabYl5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk MDNlOWYzZDUtNDIzNy00ZDQ5LWIzODItNjZlNDBkYzJhMWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDvE9ZU4dzJ/NNOjF67AYmOmGcJgxoLXhKFq AmYxgwOk/yobfa5NqGA5jVDEZRmYxIhQz2SBGIDkas9uCrgwELB8LEFxx8QW7LSN SX6IgJievXdhLQSDhiBgI/lBXRJjXMPmhpTQDe0wjKYBEroLFMsQYw/9oMS45h4s Kj8Y10437bNn3ztX0NHQbqkJEE3zqOnZCOia2bC2CNHP1ExXYCbRpseaCI8hKfaH s4vBkblWIhwNwhabYh29D1F8cQJ4oB5EdziKd0d9T8G4MaZayVZx27msJjSyQKH0 zOvVWhuna+tgDzROXrMRVz9+sw6dwgzmpsh1hlvJgmxa1CeZ3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiDKbla4PWAtbJKyxOQ5XrGuP1YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGEwN2IyMTMtZWY2MC0z YmM4LWI2YzMtNmNjZTJkODFmYWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEzEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvo9Puh5dwV4TIhzzcFrjvexeHBdRfqIWAmfA3ug0qbDPR4dVoW7dV8 8dCFzJSX5MU21T6sSM27tYSq2v7sFUXad7FI/AHYOEQ5tDoDygp+Ix5IXeNRrxdg PqPBz184WQnX7TRgpVUOx8mFf6m6qvSH0oyJoJ87qeBOJuYnuWnJnw2g1tnVJGHs lkmMo5sGSgX+QHazNf5OR5bXEhQz8PlMe5xOXQjDMNq6c8kn7BACyQ2uy18AeQue 2BPyBX4CtcZ5g3SFrAXu29YKSMbhf62PN+mF43y50lBPJchFcsp4r7D1kU83VEma Rptre8YuFa9sGT0DUzf8s8vno9WTc1U= -----END CERTIFICATE-----Generated at Thu Jun 5 18:30:51 2025 by rpki-client