$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f953c8bd-a37f-39fe-a20c-0a2632cb738c.roa File: f953c8bd-a37f-39fe-a20c-0a2632cb738c.roa (raw, json) Hash identifier: TBHSvQiIVyBuPtJADGRQfkTZcLWZOPTIBiiI/2mO7Nw= Subject key identifier: 17:AC:8C:02:E5:B0:F8:8A:FE:97:1C:9B:66:C4:17:BE:D6:E2:A3:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A119AB8CE0CA1C97142B7F080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f953c8bd-a37f-39fe-a20c-0a2632cb738c.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 16625 IP address blocks: 104.69.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:b8:ce:0c:a1:c9:71:42:b7:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=b7e61fbd-3895-4306-b15a-08578e87a766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1a:11:8b:8c:7d:ba:d3:85:ee:b0:e7:fc:2d: 88:c8:d2:df:7a:d5:49:8c:cb:cb:c6:9b:4b:84:20: a1:3c:69:73:fc:cf:8d:42:65:72:83:fd:77:f8:82: 4c:83:63:14:18:1a:1d:26:90:1b:8f:23:77:99:06: 7c:82:9a:c3:a2:66:6f:1a:59:3b:06:81:4c:bc:74: 68:ac:36:5d:ec:fc:0c:a1:02:84:74:d4:26:3b:c9: e2:d2:c1:05:ed:f8:6d:4e:79:3f:5b:3e:25:fe:34: 0f:ec:b1:f8:79:3e:c2:64:e0:a1:b7:29:c1:71:e9: 6d:20:50:66:d6:c4:26:7f:1a:d0:e9:a2:6d:4f:73: c8:98:4b:88:40:ec:c3:fc:55:04:6a:d2:c6:49:d1: d4:0a:12:46:21:e0:84:12:aa:56:73:64:79:2a:97: 69:d5:3d:e0:d8:63:71:3a:23:90:30:72:7c:5d:21: e3:03:37:7d:27:af:46:3e:59:28:1e:69:bd:03:45: 8b:55:bf:81:74:c8:26:e8:cf:b5:51:3d:d7:eb:2d: 6f:47:ab:ad:f1:7d:03:6a:57:bb:85:3e:a8:ca:af: 94:35:38:de:72:d5:e4:7f:2f:b6:18:9b:81:f0:1c: 4d:d4:74:0e:e4:8e:a3:c3:0d:f2:cc:45:9d:7a:9b: d1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AC:8C:02:E5:B0:F8:8A:FE:97:1C:9B:66:C4:17:BE:D6:E2:A3:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f953c8bd-a37f-39fe-a20c-0a2632cb738c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.69.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:dc:d7:59:ec:1b:17:54:18:cf:89:8f:01:21:3e:d8:0d:16: b6:d2:b5:a6:3d:79:ff:f4:d3:32:6e:10:0f:82:d3:bc:58:bc: 83:26:ff:55:42:ec:99:f9:eb:a9:28:54:46:e2:8a:bf:96:e0: 6e:b8:55:4c:af:f7:92:73:3f:02:94:ae:59:18:12:58:ad:fb: 39:e2:75:34:03:45:42:91:67:06:af:81:96:df:a7:cf:f7:67: 91:d4:a8:b8:8a:5c:f1:f8:fe:90:21:d0:fe:1f:7a:9d:4d:f4: d4:7e:2f:c0:d5:d9:be:64:ec:80:72:1f:fb:69:8b:c2:ee:7c: c8:fc:3a:04:e0:5f:5b:cb:07:55:7d:0b:80:cf:f9:7a:43:9e: fa:9b:1a:c3:72:3c:1d:9f:97:ee:c4:6a:76:67:9d:a6:34:b0: c9:5c:39:f3:6b:cd:71:99:6f:cf:13:5e:74:41:c8:af:33:73: 5b:f4:0d:7f:fe:1d:2c:77:0f:b4:6b:a1:ad:d6:cc:f4:68:51: a1:25:24:9c:18:f1:62:dc:ea:3f:9e:2b:bb:25:81:3d:be:63: f8:89:bf:80:5a:fc:31:28:84:65:ff:25:8d:c2:93:5f:5d:1e: 7c:7f:82:78:28:50:5a:0c:ad:88:e3:c9:66:97:d8:6a:3b:03: 13:fb:bb:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmrjODKHJcUK38IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk YjdlNjFmYmQtMzg5NS00MzA2LWIxNWEtMDg1NzhlODdhNzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBoRi4x9utOF7rDn/C2IyNLfetVJjMvLxptL hCChPGlz/M+NQmVyg/13+IJMg2MUGBodJpAbjyN3mQZ8gprDomZvGlk7BoFMvHRo rDZd7PwMoQKEdNQmO8ni0sEF7fhtTnk/Wz4l/jQP7LH4eT7CZOChtynBceltIFBm 1sQmfxrQ6aJtT3PImEuIQOzD/FUEatLGSdHUChJGIeCEEqpWc2R5Kpdp1T3g2GNx OiOQMHJ8XSHjAzd9J69GPlkoHmm9A0WLVb+BdMgm6M+1UT3X6y1vR6ut8X0Dale7 hT6oyq+UNTjectXkfy+2GJuB8BxN1HQO5I6jww3yzEWdepvRFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBesjALlsPiK/pccm2bEF77W4qMzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjk1M2M4YmQtYTM3Zi0z OWZlLWEyMGMtMGEyNjMyY2I3MzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaEWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXc11nsGxdUGM+JjwEhPtgNFrbStaY9ef/00zJuEA+C07xYvIMm/1VC 7Jn566koVEbiir+W4G64VUyv95JzPwKUrlkYElit+znidTQDRUKRZwavgZbfp8/3 Z5HUqLiKXPH4/pAh0P4fep1N9NR+L8DV2b5k7IByH/tpi8LufMj8OgTgX1vLB1V9 C4DP+XpDnvqbGsNyPB2fl+7EanZnnaY0sMlcOfNrzXGZb88TXnRByK8zc1v0DX/+ HSx3D7Rroa3WzPRoUaElJJwY8WLc6j+eK7slgT2+Y/iJv4Ba/DEohGX/JY3Ck19d Hnx/gngoUFoMrYjjyWaX2Go7AxP7uyQ= -----END CERTIFICATE-----Generated at Sat Jun 7 18:37:24 2025 by rpki-client