$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e93cfa3a-ed8a-31f7-af61-bd602b67434a.roa File: e93cfa3a-ed8a-31f7-af61-bd602b67434a.roa (raw, json) Hash identifier: Tnbe1ZrofWqiGsdlZ8xy64tKQAQZjWPm3bYrI4/gNDs= Subject key identifier: 9B:46:11:22:BB:49:75:AE:B9:24:D2:A1:D9:04:D1:BC:03:42:51:B2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A050A7DD70C22EA4BD3199780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e93cfa3a-ed8a-31f7-af61-bd602b67434a.roa Signing time: Fri 30 May 2025 01:00:48 +0000 ROA not before: Fri 30 May 2025 01:00:48 +0000 ROA not after: Thu 28 Aug 2025 01:00:48 +0000 asID: 16625 IP address blocks: 104.106.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:05:0a:7d:d7:0c:22:ea:4b:d3:19:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 30 01:00:48 2025 GMT Not After : Aug 28 01:00:48 2025 GMT Subject: CN=54204032-8899-4147-b7d8-434e4f4a7ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:20:3c:c1:1a:98:da:74:96:6f:81:2b:76:91: ad:17:38:64:fe:99:b1:50:67:9b:9c:68:ea:11:1d: 1f:d0:aa:dc:60:f5:59:70:3e:fe:22:4e:8d:e6:c2: 10:a9:64:08:31:f6:f8:5c:ef:5c:47:5a:32:8c:fa: 1c:9d:4d:a3:66:cf:2d:e2:73:ef:ab:ec:77:6d:da: 22:04:02:5b:a3:39:d0:c2:00:cc:47:c7:c0:71:44: 56:ae:7d:64:69:b7:d2:5d:ca:52:2d:1d:25:12:fa: 97:24:51:65:64:00:d9:95:d6:47:83:04:89:8e:84: 97:45:45:de:cc:12:6f:6b:2b:e0:9a:56:49:1f:6a: b0:e9:cc:07:36:4f:c2:88:50:a7:d6:9c:27:3b:c5: 5e:d7:6f:c8:ae:50:fc:80:e7:df:b4:9d:03:e1:d4: 93:ba:91:46:cc:65:68:c8:5e:c3:ce:0b:4a:44:5d: 73:7d:39:df:61:e6:54:68:67:bc:7a:c5:7e:7d:39: 19:ec:87:31:01:56:75:66:97:31:07:a9:60:29:ad: da:b1:fc:c9:2c:15:23:f4:1a:7a:ff:f3:d6:2f:24: 61:bf:72:54:65:80:3a:d8:16:98:6d:2c:86:4d:3b: 35:3e:94:5f:0e:6c:6c:46:21:ab:b8:7d:67:27:af: e4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:46:11:22:BB:49:75:AE:B9:24:D2:A1:D9:04:D1:BC:03:42:51:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e93cfa3a-ed8a-31f7-af61-bd602b67434a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.106.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:83:40:45:57:69:9d:93:93:7b:14:75:30:ee:4c:ef:2d:bb: b7:0d:08:ad:90:a0:d9:b7:3f:6d:ae:34:95:57:c0:0b:aa:26: f1:0a:34:5d:61:1a:f9:aa:df:ad:16:fc:bb:3c:dd:0c:0e:49: 7c:b4:ba:cc:7b:bf:49:f4:d6:d1:88:0e:e4:32:34:49:de:49: 7e:1f:3e:e5:fb:f9:b2:39:38:a6:2d:6c:d2:81:a8:72:62:05: 3c:91:11:b9:7f:9e:f9:75:b2:4f:08:2d:32:fb:0f:80:90:43: 48:18:5e:a4:90:c7:85:89:b2:ef:6f:20:7a:9c:ec:7b:3c:74: 45:f8:71:5d:45:f1:4f:b1:04:d4:2e:38:7a:dd:83:88:b0:e1: 1e:cc:97:e1:88:8b:dc:c6:e2:05:18:1e:c4:54:43:71:22:99: 44:cb:6b:ff:4b:9f:ff:06:5b:a9:7d:8e:65:59:8e:03:f4:91: b4:4a:84:7d:62:5f:c8:cc:88:22:16:51:4b:ec:fc:6b:2e:af: 49:f2:77:61:5f:ab:1d:43:b8:64:6f:3b:4b:17:b0:6d:82:5d: fb:97:e5:5b:dd:f7:d6:48:d7:1c:29:fa:0c:e9:12:a2:4f:3f: f5:c8:77:c2:c9:e5:dd:6c:bb:b4:25:95:25:94:7d:52:3c:48: 50:d2:75:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoFCn3XDCLqS9MZl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUzMDAxMDA0OFoXDTI1MDgyODAxMDA0OFowLzEtMCsGA1UEAxMk NTQyMDQwMzItODg5OS00MTQ3LWI3ZDgtNDM0ZTRmNGE3YWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiA8wRqY2nSWb4ErdpGtFzhk/pmxUGebnGjq ER0f0KrcYPVZcD7+Ik6N5sIQqWQIMfb4XO9cR1oyjPocnU2jZs8t4nPvq+x3bdoi BAJboznQwgDMR8fAcURWrn1kabfSXcpSLR0lEvqXJFFlZADZldZHgwSJjoSXRUXe zBJvayvgmlZJH2qw6cwHNk/CiFCn1pwnO8Ve12/IrlD8gOfftJ0D4dSTupFGzGVo yF7DzgtKRF1zfTnfYeZUaGe8esV+fTkZ7IcxAVZ1ZpcxB6lgKa3asfzJLBUj9Bp6 //PWLyRhv3JUZYA62BaYbSyGTTs1PpRfDmxsRiGruH1nJ6/kfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtGESK7SXWuuSTSodkE0bwDQlGyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTkzY2ZhM2EtZWQ4YS0z MWY3LWFmNjEtYmQ2MDJiNjc0MzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaGpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqDQEVXaZ2Tk3sUdTDuTO8tu7cNCK2QoNm3P22uNJVXwAuqJvEKNF1h Gvmq360W/Ls83QwOSXy0usx7v0n01tGIDuQyNEneSX4fPuX7+bI5OKYtbNKBqHJi BTyREbl/nvl1sk8ILTL7D4CQQ0gYXqSQx4WJsu9vIHqc7Hs8dEX4cV1F8U+xBNQu OHrdg4iw4R7Ml+GIi9zG4gUYHsRUQ3EimUTLa/9Ln/8GW6l9jmVZjgP0kbRKhH1i X8jMiCIWUUvs/Gsur0nyd2Ffqx1DuGRvO0sXsG2CXfuX5Vvd99ZI1xwp+gzpEqJP P/XId8LJ5d1su7QllSWUfVI8SFDSdRA= -----END CERTIFICATE-----Generated at Sat Jun 7 14:13:43 2025 by rpki-client