$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0f5df80-7f78-3181-9425-35bb6afb0a44.roa File: e0f5df80-7f78-3181-9425-35bb6afb0a44.roa (raw, json) Hash identifier: 3jX/yPIhQRPaJwxhgBTpjSehkKYfbbDiVbzobC5f0II= Subject key identifier: BB:67:C5:1E:29:A1:D6:E8:50:84:95:92:10:AF:3D:1A:3D:14:26:7A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A050A7FAB5F67549067B9DD30 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0f5df80-7f78-3181-9425-35bb6afb0a44.roa Signing time: Fri 30 May 2025 01:00:48 +0000 ROA not before: Fri 30 May 2025 01:00:48 +0000 ROA not after: Thu 28 Aug 2025 01:00:48 +0000 asID: 16625 IP address blocks: 104.104.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:05:0a:7f:ab:5f:67:54:90:67:b9:dd:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 30 01:00:48 2025 GMT Not After : Aug 28 01:00:48 2025 GMT Subject: CN=f646e091-85e9-4abd-b35b-4e1853ea980d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:e0:93:34:0a:5f:17:18:5f:8b:53:e4:a4:63: 31:2b:73:82:70:14:ac:2c:76:88:6d:fd:e1:a0:f4: 67:89:1f:be:88:bd:41:e5:6f:48:50:72:36:35:b3: f7:db:41:bf:b3:df:f9:be:ee:25:73:5d:ee:74:62: 9d:6a:00:9c:f6:17:e3:05:7e:cb:40:1d:82:eb:2e: f0:20:c9:99:66:c6:88:bc:cf:d1:e6:18:d4:d1:ae: d9:5e:89:74:51:f8:07:26:f7:17:d1:0a:71:a2:7d: 5d:1a:51:f3:24:73:1e:48:42:31:92:16:58:15:e1: c3:a0:e1:33:0f:63:d2:96:2a:d7:4b:2b:12:f4:ce: 5c:92:7f:54:f9:5e:1d:3e:ba:bb:30:b3:11:60:bb: 87:73:e5:8e:7d:37:43:53:2a:f0:84:cd:d6:90:0f: 93:c1:31:a4:4d:8a:3c:ea:1a:38:aa:37:c6:65:71: 0e:65:da:fb:3f:49:ca:a0:3e:33:c4:e8:68:1d:67: c2:e5:0f:2a:07:66:84:ee:77:55:da:8d:63:27:5f: ae:e6:40:6d:71:0c:d9:b7:ba:83:fb:cf:53:4b:00: 8c:16:41:6b:ef:8d:da:bf:2b:ee:b7:db:07:94:6c: ba:8b:a7:95:b4:06:69:0f:b5:ea:a1:a9:09:4e:2b: 96:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:67:C5:1E:29:A1:D6:E8:50:84:95:92:10:AF:3D:1A:3D:14:26:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0f5df80-7f78-3181-9425-35bb6afb0a44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.104.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:46:ad:d3:f5:03:5a:54:59:f6:ef:20:56:0a:ba:a6:73:19: 30:e7:0a:f6:30:a9:a5:c6:ed:41:17:b3:05:47:e0:03:77:53: c3:c7:e9:73:45:37:cc:40:b2:11:77:c3:81:6f:93:8b:ea:78: f4:59:4a:f6:62:98:1a:2d:a9:21:a3:69:0a:ab:36:da:3a:03: 19:3a:5d:cf:81:3b:59:42:96:4d:25:6f:d0:a6:95:56:3b:21: c9:c3:0f:7a:f7:01:f0:e7:d3:22:0d:9a:e7:92:a0:06:3f:02: 65:c7:c2:20:dd:b8:c0:6c:ca:e0:38:7f:71:fb:36:7f:e3:d2: 28:89:33:73:aa:bf:07:cd:5c:15:33:f0:2b:9f:70:ce:20:b8: 7e:d9:5d:8b:d1:c8:41:58:fc:77:1f:85:ef:c3:3e:fa:57:3f: b6:f6:e7:0b:ae:af:76:1f:2e:72:3a:2d:81:73:c6:6c:98:e5: 9d:56:62:1f:37:2a:fb:c8:1b:a3:26:e2:d9:a4:76:17:51:a5: dc:78:e5:6f:68:56:86:d9:5d:8d:79:32:ea:7b:9a:02:c5:ee: b6:88:93:04:4c:0a:55:08:2b:63:3c:7f:5f:16:d0:61:9d:db: b7:48:84:40:f8:22:3f:ae:f8:1a:98:a5:00:e6:0b:d4:a5:1d: 85:77:a8:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoFCn+rX2dUkGe53TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUzMDAxMDA0OFoXDTI1MDgyODAxMDA0OFowLzEtMCsGA1UEAxMk ZjY0NmUwOTEtODVlOS00YWJkLWIzNWItNGUxODUzZWE5ODBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+OCTNApfFxhfi1PkpGMxK3OCcBSsLHaIbf3h oPRniR++iL1B5W9IUHI2NbP320G/s9/5vu4lc13udGKdagCc9hfjBX7LQB2C6y7w IMmZZsaIvM/R5hjU0a7ZXol0UfgHJvcX0Qpxon1dGlHzJHMeSEIxkhZYFeHDoOEz D2PSlirXSysS9M5ckn9U+V4dPrq7MLMRYLuHc+WOfTdDUyrwhM3WkA+TwTGkTYo8 6ho4qjfGZXEOZdr7P0nKoD4zxOhoHWfC5Q8qB2aE7ndV2o1jJ1+u5kBtcQzZt7qD +89TSwCMFkFr743avyvut9sHlGy6i6eVtAZpD7XqoakJTiuWSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtnxR4podboUISVkhCvPRo9FCZ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTBmNWRmODAtN2Y3OC0z MTgxLTk0MjUtMzViYjZhZmIwYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaGggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtGrdP1A1pUWfbvIFYKuqZzGTDnCvYwqaXG7UEXswVH4AN3U8PH6XNF N8xAshF3w4Fvk4vqePRZSvZimBotqSGjaQqrNto6Axk6Xc+BO1lClk0lb9CmlVY7 IcnDD3r3AfDn0yINmueSoAY/AmXHwiDduMBsyuA4f3H7Nn/j0iiJM3OqvwfNXBUz 8CufcM4guH7ZXYvRyEFY/Hcfhe/DPvpXP7b25wuur3YfLnI6LYFzxmyY5Z1WYh83 KvvIG6Mm4tmkdhdRpdx45W9oVobZXY15Mup7mgLF7raIkwRMClUIK2M8f18W0GGd 27dIhED4Ij+u+BqYpQDmC9SlHYV3qNE= -----END CERTIFICATE-----Generated at Sat Jun 7 19:31:19 2025 by rpki-client