$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2a4d41f-4cc6-3aa5-b242-b0e3f7a8be5a.roa File: e2a4d41f-4cc6-3aa5-b242-b0e3f7a8be5a.roa (raw, json) Hash identifier: 1A2IoJHqCJM4jOSeflWb9OMLxU/Q67W8vF73JK7a2Vs= Subject key identifier: E8:7A:65:7F:83:9B:EC:43:B8:A9:D6:A3:40:E7:45:8F:D2:A6:F7:AA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A18954F9144E1E0A0A385F500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2a4d41f-4cc6-3aa5-b242-b0e3f7a8be5a.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 18209 IP address blocks: 104.120.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:4f:91:44:e1:e0:a0:a3:85:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=6c235036-937c-42d8-b6c7-32e8be3cc279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e2:84:a2:45:f2:88:f9:b5:66:24:f8:33:ee: f3:74:4a:38:5f:7c:27:c8:b5:94:24:02:c3:86:6a: f3:6f:7e:af:f8:0f:b0:e1:ed:61:ca:e0:2e:e1:67: 64:7d:80:f6:f6:7c:80:99:d3:1b:37:62:34:43:ee: 0c:68:03:bb:ed:ca:a0:8d:c4:99:8e:db:bf:1c:37: 3a:f6:8f:d4:93:16:5d:19:2b:31:2d:5c:e9:21:a1: 51:74:e3:48:b8:b9:c2:49:9c:23:7c:36:1d:5f:e6: 77:9c:00:4b:e6:e8:55:e4:ab:12:64:d9:29:82:28: 86:63:91:8a:88:76:f3:32:7a:7a:7a:54:e4:fd:62: e3:51:6e:23:98:ad:60:b8:f5:4e:90:13:8c:02:fc: b0:55:a2:30:31:0a:ae:ae:14:c6:d0:df:0f:3b:7f: 63:2a:66:5e:eb:07:20:30:82:94:04:7e:4d:8c:85: f0:a5:69:ff:a3:80:0c:80:ab:9d:55:53:04:eb:ad: 79:fc:f0:74:ee:5a:a2:ca:6b:2b:f9:6c:fc:dc:7e: a5:c2:8e:64:c7:04:c6:7c:e6:f8:80:05:e5:9d:32: e0:ec:99:1b:b6:7d:bc:06:fc:a9:62:b1:99:f9:be: ea:66:a1:94:13:d1:03:ea:34:ac:6c:89:5d:3f:c5: 0d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7A:65:7F:83:9B:EC:43:B8:A9:D6:A3:40:E7:45:8F:D2:A6:F7:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2a4d41f-4cc6-3aa5-b242-b0e3f7a8be5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.120.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:f2:12:4c:ea:24:72:3f:ff:c4:b7:11:9d:77:6c:81:b5:45: 35:24:5f:1f:15:e9:28:f2:77:d3:03:c1:61:b5:6b:d2:ab:dd: 8b:78:1e:76:21:88:2f:df:2f:cc:1c:ee:05:9f:11:c8:1c:ff: 0e:33:68:22:09:da:a3:b8:40:25:cd:ac:9d:4b:ec:a8:93:51: 5d:b7:e5:ad:d2:3b:42:8f:40:b7:ad:df:65:c6:5b:d0:64:48: 80:a4:66:32:8f:6e:61:0f:a2:60:bd:cf:27:31:cf:88:7d:f9: e5:d1:42:7c:49:8e:77:06:56:ff:64:05:23:87:4b:64:92:9a: 6b:58:23:68:79:1c:b6:0d:4f:0e:f3:17:f7:91:55:62:51:c5: af:50:7d:aa:7b:d2:30:d2:72:62:55:8d:a4:c7:1f:8b:15:37: e7:72:7b:18:1c:cd:6d:ef:51:b3:93:24:be:f7:28:f2:3f:05: 99:7d:ed:5a:45:25:f7:0f:e9:77:04:a9:ec:0e:f5:3a:bb:f3: ca:4e:48:73:6f:33:ec:5d:9e:cd:65:11:95:7b:ba:14:78:ac: 84:b6:33:5e:57:db:be:d2:6f:dd:31:aa:15:cf:31:d5:ff:b7: 4e:17:3f:99:55:74:68:fd:91:ff:4f:d3:76:bc:3e:91:bb:0b: 82:54:5f:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlU+RROHgoKOF9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk NmMyMzUwMzYtOTM3Yy00MmQ4LWI2YzctMzJlOGJlM2NjMjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeKEokXyiPm1ZiT4M+7zdEo4X3wnyLWUJALD hmrzb36v+A+w4e1hyuAu4WdkfYD29nyAmdMbN2I0Q+4MaAO77cqgjcSZjtu/HDc6 9o/UkxZdGSsxLVzpIaFRdONIuLnCSZwjfDYdX+Z3nABL5uhV5KsSZNkpgiiGY5GK iHbzMnp6elTk/WLjUW4jmK1guPVOkBOMAvywVaIwMQqurhTG0N8PO39jKmZe6wcg MIKUBH5NjIXwpWn/o4AMgKudVVME6615/PB07lqiymsr+Wz83H6lwo5kxwTGfOb4 gAXlnTLg7Jkbtn28BvypYrGZ+b7qZqGUE9ED6jSsbIldP8UN1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOh6ZX+Dm+xDuKnWo0DnRY/SpveqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTJhNGQ0MWYtNGNjNi0z YWE1LWIyNDItYjBlM2Y3YThiZTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbyEkzqJHI//8S3EZ13bIG1RTUkXx8V6Sjyd9MDwWG1a9Kr3Yt4HnYh iC/fL8wc7gWfEcgc/w4zaCIJ2qO4QCXNrJ1L7KiTUV235a3SO0KPQLet32XGW9Bk SICkZjKPbmEPomC9zycxz4h9+eXRQnxJjncGVv9kBSOHS2SSmmtYI2h5HLYNTw7z F/eRVWJRxa9Qfap70jDScmJVjaTHH4sVN+dyexgczW3vUbOTJL73KPI/BZl97VpF JfcP6XcEqewO9Tq788pOSHNvM+xdns1lEZV7uhR4rIS2M15X277Sb90xqhXPMdX/ t04XP5lVdGj9kf9P03a8PpG7C4JUX4Q= -----END CERTIFICATE-----Generated at Mon Jun 16 15:39:11 2025 by rpki-client