$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db217d05-2151-337c-981c-de867fa6c103.roa File: db217d05-2151-337c-981c-de867fa6c103.roa (raw, json) Hash identifier: POj6Mww5ZqCPxp2aEy0a7+ne2owb/lraErUWlXlHgpI= Subject key identifier: 02:7C:BA:3F:30:5A:1E:91:CD:D1:52:78:B6:06:9A:75:E3:2B:26:2E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A1895593A5324F085ACCF0DC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db217d05-2151-337c-981c-de867fa6c103.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 20940 IP address blocks: 104.120.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:59:3a:53:24:f0:85:ac:cf:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=c3e316c2-5784-415b-9ecf-5b2c23e46e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fd:a7:76:2a:b3:42:05:f8:31:9d:57:6f:4e: 28:b9:3b:54:57:77:b1:ef:b5:98:33:f9:a1:9b:ad: 29:b2:bb:b8:2f:a8:73:7a:a2:6f:66:91:e4:8d:1d: d5:9e:f0:24:b7:f1:4c:b3:dd:6b:79:db:1e:1c:fd: 86:88:5b:80:4b:d0:fa:94:50:a9:a1:4a:09:e8:25: c2:da:bd:85:eb:52:2d:5c:0a:f6:49:53:4b:d2:2a: d5:9b:3b:80:dd:37:a7:ea:25:ce:83:e2:d1:44:b3: d1:c6:04:e0:8b:06:1e:d3:46:18:19:e0:ed:c7:95: f0:5e:6d:11:42:31:0b:3e:e4:7f:5d:38:86:1f:c7: f8:91:6e:86:a4:34:fb:10:c8:e8:bf:ed:78:25:8e: f5:e0:53:9b:ba:41:c3:ce:80:21:e6:94:d4:ee:7c: 56:16:a1:97:51:ba:a8:44:3a:2a:e9:1b:c5:e2:6d: a7:70:4b:99:89:62:59:75:93:42:18:97:f1:dc:7c: 1b:ae:51:07:31:38:cd:59:08:0e:40:c5:0f:c5:7d: f4:93:4e:03:55:f0:75:77:77:7b:1a:84:89:41:57: 72:84:53:22:8f:29:86:ea:25:d7:67:53:b8:62:d4: bc:59:7b:9a:0c:ce:05:8b:a0:ad:d8:dd:c5:e0:81: 4b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7C:BA:3F:30:5A:1E:91:CD:D1:52:78:B6:06:9A:75:E3:2B:26:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db217d05-2151-337c-981c-de867fa6c103.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.120.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:c9:e7:b0:74:1b:e8:8d:8f:63:76:5d:4b:04:8e:40:a0:cd: 80:4b:bc:26:1a:93:ff:9b:f0:d5:02:d8:b0:67:b4:26:32:cf: e1:bc:f3:8b:06:21:6f:9a:bb:9a:0c:dc:07:bf:77:22:42:db: cc:8b:a3:54:68:50:88:0f:42:1c:8f:bb:92:5b:f0:8e:f3:dc: a6:76:1e:0b:90:b0:a8:67:04:fe:df:e8:67:0b:c5:3c:3a:c2: 80:36:d6:de:8f:fe:ab:40:11:78:88:39:c3:e8:81:31:9e:54: af:fa:c4:66:c4:ba:45:e1:29:f7:77:1b:d8:af:7f:1f:c5:1f: 55:62:5f:75:01:cf:e5:35:90:6f:87:ef:c0:98:17:11:b1:84: 52:f3:b3:c7:a6:c6:a2:98:cc:49:eb:e6:55:2d:3c:53:76:20: c5:fe:93:38:78:d5:7c:5a:a9:d5:a2:71:60:89:84:b2:39:e5: dc:84:cf:de:65:ba:83:35:fc:63:e0:54:62:1e:a1:04:d2:ae: 94:60:53:b7:76:89:46:98:62:1d:0a:08:ab:b3:82:3c:7d:40: ea:8c:c7:ef:87:07:fc:e7:c4:46:8e:f3:bb:2c:9a:ab:07:17: 5f:d1:dd:20:4b:29:5a:6a:97:ac:ec:ce:b2:44:d8:62:b7:b9: 34:3c:77:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlVk6UyTwhazPDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk YzNlMzE2YzItNTc4NC00MTViLTllY2YtNWIyYzIzZTQ2ZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/2ndiqzQgX4MZ1Xb04ouTtUV3ex77WYM/mh m60psru4L6hzeqJvZpHkjR3VnvAkt/FMs91redseHP2GiFuAS9D6lFCpoUoJ6CXC 2r2F61ItXAr2SVNL0irVmzuA3Ten6iXOg+LRRLPRxgTgiwYe00YYGeDtx5XwXm0R QjELPuR/XTiGH8f4kW6GpDT7EMjov+14JY714FObukHDzoAh5pTU7nxWFqGXUbqo RDoq6RvF4m2ncEuZiWJZdZNCGJfx3HwbrlEHMTjNWQgOQMUPxX30k04DVfB1d3d7 GoSJQVdyhFMijymG6iXXZ1O4YtS8WXuaDM4Fi6Ct2N3F4IFL1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJ8uj8wWh6RzdFSeLYGmnXjKyYuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGIyMTdkMDUtMjE1MS0z MzdjLTk4MWMtZGU4NjdmYTZjMTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErJ57B0G+iNj2N2XUsEjkCgzYBLvCYak/+b8NUC2LBntCYyz+G884sG IW+au5oM3Ae/dyJC28yLo1RoUIgPQhyPu5Jb8I7z3KZ2HguQsKhnBP7f6GcLxTw6 woA21t6P/qtAEXiIOcPogTGeVK/6xGbEukXhKfd3G9ivfx/FH1ViX3UBz+U1kG+H 78CYFxGxhFLzs8emxqKYzEnr5lUtPFN2IMX+kzh41XxaqdWicWCJhLI55dyEz95l uoM1/GPgVGIeoQTSrpRgU7d2iUaYYh0KCKuzgjx9QOqMx++HB/znxEaO87ssmqsH F1/R3SBLKVpql6zszrJE2GK3uTQ8d7U= -----END CERTIFICATE-----Generated at Sun Jun 15 18:47:20 2025 by rpki-client