$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4493a76f-b62c-3b5d-8538-1b27eee707ee.roa File: 4493a76f-b62c-3b5d-8538-1b27eee707ee.roa (raw, json) Hash identifier: exVkLL8mvUGzROBBnJchtF29cBiLzYwIhFdMVvSyins= Subject key identifier: 23:E2:2B:FA:C6:E2:18:0F:85:AC:D4:13:D5:60:72:5F:7A:B7:96:EA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A1465888021F29059D7BA4780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4493a76f-b62c-3b5d-8538-1b27eee707ee.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 35994 IP address blocks: 104.101.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:88:80:21:f2:90:59:d7:ba:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=ac056f84-ba6e-414d-8a31-5f6de53af35a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4d:7f:8a:16:8c:38:f0:d9:cf:85:60:29:87: 7e:44:c7:20:af:c5:2b:e8:af:69:0b:37:e2:2c:40: 2d:49:de:f3:30:1a:4a:99:cc:d9:60:3d:13:3d:8c: 49:df:00:a0:2e:06:e7:f9:91:ef:8a:90:ba:e2:eb: e6:50:8f:c9:3a:e1:12:1a:00:b5:16:39:c6:b4:41: 7d:ec:95:e6:2b:44:2f:d3:de:9d:38:73:62:14:85: 0e:ac:6b:e8:3a:01:e2:f1:c6:78:4c:d3:ce:b5:48: 15:9f:a1:41:86:8d:90:ee:d6:ae:46:2d:70:f3:7a: d1:d0:bc:bd:7b:4e:39:ff:23:42:33:7c:ee:ea:5f: cc:ff:09:b6:80:b5:b0:89:7e:65:5f:f7:19:52:61: 5a:a9:bc:a3:2e:1a:bd:92:4d:5e:b0:24:9a:0e:5a: 07:b9:26:37:55:7f:7c:61:ec:02:93:9d:0a:50:9d: b0:dd:98:8e:b5:84:73:8e:a5:bf:3c:a9:65:2f:2c: 15:d1:69:e4:d0:db:89:07:a3:5f:29:a7:3d:84:d2: 0b:21:3b:e2:41:90:cf:f7:f3:53:e0:07:5b:87:1e: 81:a2:27:80:d9:58:0a:ab:c1:e8:19:7d:47:45:50: 3e:a4:0c:ca:c3:cf:5a:e6:57:04:eb:46:a6:c5:be: 00:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E2:2B:FA:C6:E2:18:0F:85:AC:D4:13:D5:60:72:5F:7A:B7:96:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4493a76f-b62c-3b5d-8538-1b27eee707ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.101.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:d9:08:aa:86:ef:60:d1:a9:54:4f:00:60:f1:56:8c:fa:04: c4:86:30:38:df:14:44:fc:4c:0b:2e:77:80:3e:c2:52:7c:d1: 8b:3f:d2:47:ae:be:e9:f5:0b:da:d7:a5:cd:8f:6a:1d:5f:b6: c0:31:88:e8:20:7c:51:ba:b7:3f:f4:25:9a:35:e6:10:27:22: 02:b4:7b:3f:7e:70:f6:eb:90:ba:74:aa:24:a5:b9:25:fd:34: 7b:f2:14:3e:e5:62:45:f5:af:8c:b3:30:6d:17:4f:84:88:2c: b5:fb:d6:84:99:df:7f:00:73:ad:32:11:5b:86:f4:35:0a:08: a9:3d:92:02:e6:d4:7c:dd:64:0f:fc:b4:2d:e6:4b:35:c5:d8: 05:25:2f:7c:eb:40:b3:5b:7e:de:12:96:87:8b:ae:28:4b:cb: 08:b3:39:79:b9:06:79:b8:b7:ae:9f:69:70:66:69:1b:c5:46: f3:c2:7f:ef:af:e6:7d:51:3d:45:3d:be:4e:96:a1:6d:11:0d: 59:6b:fb:3b:fe:21:1a:b2:4b:24:64:65:07:21:a5:48:41:cd: b4:fa:99:3a:b7:58:5e:9e:d3:fe:14:8f:5e:3a:9b:c1:08:8a: 2e:b6:26:90:9d:61:0f:e2:de:31:39:56:59:3f:ad:d9:ea:1e: bb:5e:64:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZYiAIfKQWde6R4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk YWMwNTZmODQtYmE2ZS00MTRkLThhMzEtNWY2ZGU1M2FmMzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr01/ihaMOPDZz4VgKYd+RMcgr8Ur6K9pCzfi LEAtSd7zMBpKmczZYD0TPYxJ3wCgLgbn+ZHvipC64uvmUI/JOuESGgC1FjnGtEF9 7JXmK0Qv096dOHNiFIUOrGvoOgHi8cZ4TNPOtUgVn6FBho2Q7tauRi1w83rR0Ly9 e045/yNCM3zu6l/M/wm2gLWwiX5lX/cZUmFaqbyjLhq9kk1esCSaDloHuSY3VX98 YewCk50KUJ2w3ZiOtYRzjqW/PKllLywV0Wnk0NuJB6NfKac9hNILITviQZDP9/NT 4Adbhx6BoieA2VgKq8HoGX1HRVA+pAzKw89a5lcE60amxb4AhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPiK/rG4hgPhazUE9Vgcl96t5bqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDQ5M2E3NmYtYjYyYy0z YjVkLTg1MzgtMWIyN2VlZTcwN2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaGXmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnZCKqG72DRqVRPAGDxVoz6BMSGMDjfFET8TAsud4A+wlJ80Ys/0keu vun1C9rXpc2Pah1ftsAxiOggfFG6tz/0JZo15hAnIgK0ez9+cPbrkLp0qiSluSX9 NHvyFD7lYkX1r4yzMG0XT4SILLX71oSZ338Ac60yEVuG9DUKCKk9kgLm1HzdZA/8 tC3mSzXF2AUlL3zrQLNbft4SloeLrihLywizOXm5Bnm4t66faXBmaRvFRvPCf++v 5n1RPUU9vk6WoW0RDVlr+zv+IRqySyRkZQchpUhBzbT6mTq3WF6e0/4Uj146m8EI ii62JpCdYQ/i3jE5Vlk/rdnqHrteZB4= -----END CERTIFICATE-----Generated at Mon Jun 16 15:25:42 2025 by rpki-client