$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b96c08a-0220-37fe-b69a-907045b640e7.roa File: 4b96c08a-0220-37fe-b69a-907045b640e7.roa (raw, json) Hash identifier: MG495+inxTmx8djvq2QfHp8F1yqAPm3bmB2FJHA2IkE= Subject key identifier: 59:9F:AD:9D:EA:92:DF:A6:DD:A8:AC:0C:54:EC:DD:60:8E:4E:EE:29 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849E7BA75498093515BEE167700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b96c08a-0220-37fe-b69a-907045b640e7.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 24319 IP address blocks: 104.96.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:75:49:80:93:51:5b:ee:16:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=9e8985c5-1c5e-4a59-88f3-83d74403755b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:01:cf:41:06:08:9b:37:db:9c:0b:2f:b7:3a: 5f:37:f3:ad:57:40:59:9a:a8:42:b4:e7:5b:53:33: 31:db:e8:91:16:ed:3b:0d:6a:68:fe:d9:06:35:d6: 5f:62:c3:00:01:6d:0e:cc:20:b1:80:71:19:39:c5: 33:6c:0e:6b:59:bc:53:f3:c8:d5:72:da:fb:92:b8: 66:f9:d0:28:40:e5:ce:6a:84:f9:ae:4e:f6:69:d6: 36:e5:9e:20:32:3b:2b:1a:54:2c:a8:1a:3d:ed:d9: 69:fb:1b:8a:b6:d3:42:59:41:d6:d2:8e:70:0e:74: 40:8e:3c:19:f5:e8:b9:3e:b7:28:9c:c1:1d:db:bf: 9d:2a:e6:9d:dc:c5:3f:be:60:1e:c1:01:b8:66:55: 08:1b:e3:e8:09:df:59:94:d7:8a:d5:2c:ca:83:0b: c5:ee:bd:86:bd:d3:0e:58:17:63:41:b5:97:a0:b0: e6:58:73:78:cf:cd:94:ca:37:a6:62:c5:e9:ea:52: 05:f5:63:b4:64:b7:3f:a9:4b:75:e5:d3:8c:69:41: 8b:97:a4:29:2b:02:bc:a0:0c:c1:23:99:cd:3e:fc: 4f:51:ac:27:3a:59:d3:b4:28:ee:31:bb:0f:4b:ff: 05:b2:af:9a:03:d5:28:6f:6d:7c:59:27:13:6d:51: 42:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9F:AD:9D:EA:92:DF:A6:DD:A8:AC:0C:54:EC:DD:60:8E:4E:EE:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b96c08a-0220-37fe-b69a-907045b640e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.96.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:21:b6:54:f7:14:47:62:7b:3f:38:66:8f:89:04:59:02:b2: 6d:98:cd:24:1e:d3:78:d1:2f:cc:06:53:ad:8b:95:25:a8:32: 11:b4:e8:61:d3:43:83:05:11:9b:9d:37:76:50:64:06:ed:ff: 8b:f1:2b:95:51:25:64:70:89:0b:2d:2d:c8:fd:c8:ec:6e:d1: 73:0b:aa:bf:47:88:8f:f3:52:e8:2b:02:76:a2:47:50:fb:b9: d7:f8:fc:90:d2:1b:11:80:5a:0f:79:69:9d:c8:f9:27:9a:ee: ca:76:27:03:83:fc:ed:f3:5c:e8:34:79:b2:32:07:cb:a5:1b: 16:91:d5:90:c4:d6:d1:ed:72:fe:cd:d4:4c:39:a3:5f:13:8d: 7f:2b:ca:6c:a9:1f:63:aa:8f:33:ed:e9:7d:cd:d2:fc:e5:da: f4:d5:e4:e2:91:1c:09:09:92:3d:79:c1:6c:c4:6b:15:65:d9: f6:9c:0b:1d:30:fb:61:85:1f:31:74:80:6d:9b:46:d2:00:5e: 0e:5d:cc:8b:94:9b:12:d2:58:36:3c:49:25:99:6f:6b:38:a5: 5d:b5:4d:f1:bf:34:ff:24:e9:9b:a6:ff:49:3d:fc:08:32:9b: 82:f5:1d:6d:c4:8c:59:a0:06:a1:e6:ce:90:76:c3:90:10:e6: 09:39:d3:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnunVJgJNRW+4WdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk OWU4OTg1YzUtMWM1ZS00YTU5LTg4ZjMtODNkNzQ0MDM3NTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAHPQQYImzfbnAsvtzpfN/OtV0BZmqhCtOdb UzMx2+iRFu07DWpo/tkGNdZfYsMAAW0OzCCxgHEZOcUzbA5rWbxT88jVctr7krhm +dAoQOXOaoT5rk72adY25Z4gMjsrGlQsqBo97dlp+xuKttNCWUHW0o5wDnRAjjwZ 9ei5PrconMEd27+dKuad3MU/vmAewQG4ZlUIG+PoCd9ZlNeK1SzKgwvF7r2GvdMO WBdjQbWXoLDmWHN4z82UyjemYsXp6lIF9WO0ZLc/qUt15dOMaUGLl6QpKwK8oAzB I5nNPvxPUawnOlnTtCjuMbsPS/8Fsq+aA9Uob218WScTbVFCYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmfrZ3qkt+m3aisDFTs3WCOTu4pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGI5NmMwOGEtMDIyMC0z N2ZlLWI2OWEtOTA3MDQ1YjY0MGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGCqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAshtlT3FEdiez84Zo+JBFkCsm2YzSQe03jRL8wGU62LlSWoMhG06GHT Q4MFEZudN3ZQZAbt/4vxK5VRJWRwiQstLcj9yOxu0XMLqr9HiI/zUugrAnaiR1D7 udf4/JDSGxGAWg95aZ3I+Sea7sp2JwOD/O3zXOg0ebIyB8ulGxaR1ZDE1tHtcv7N 1Ew5o18TjX8rymypH2OqjzPt6X3N0vzl2vTV5OKRHAkJkj15wWzEaxVl2facCx0w +2GFHzF0gG2bRtIAXg5dzIuUmxLSWDY8SSWZb2s4pV21TfG/NP8k6Zum/0k9/Agy m4L1HW3EjFmgBqHmzpB2w5AQ5gk507Y= -----END CERTIFICATE-----Generated at Mon Jun 16 02:29:04 2025 by rpki-client