$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/14fd48c2-5fdb-3225-95ad-b27fcc46e894.roa File: 14fd48c2-5fdb-3225-95ad-b27fcc46e894.roa (raw, json) Hash identifier: cbX/n9l5g2cO3gTfvhh075DBKQ+Mye2YrmiAzXAMTlU= Subject key identifier: 14:E7:44:4D:E2:26:BB:B9:99:87:90:34:0D:7C:CF:09:FA:EE:7E:90 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A8B0B62ACDCDEACD69FEA8B00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/14fd48c2-5fdb-3225-95ad-b27fcc46e894.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 9009 IP address blocks: 104.243.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:62:ac:dc:de:ac:d6:9f:ea:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=075843b9-9d68-4ae7-9641-710d2eca564f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ba:41:38:cd:09:2a:03:4a:76:35:c2:41:80: 6b:26:14:0d:26:30:d7:36:38:ce:a5:2a:67:8d:7a: cf:3d:0f:9a:1a:e9:c2:0a:1c:67:44:16:2c:10:6b: 16:97:97:fe:61:fc:3c:fe:84:c8:eb:e6:55:5a:ab: a5:d7:01:74:c3:96:34:cd:2d:35:3e:2e:00:83:07: 2c:99:5a:ba:cd:98:7f:df:7d:1e:72:5d:60:bb:af: 7e:92:7a:73:f5:7d:82:0c:c9:cd:51:3c:28:2d:75: 19:b9:bf:93:ca:c6:0f:ed:f1:0b:39:56:98:74:11: b2:6e:26:c9:a5:06:f4:75:ad:5a:f0:d9:a6:80:14: 77:ed:26:52:d7:56:47:5c:da:b3:1b:25:df:d7:ce: 84:93:43:1d:b6:d9:d2:e4:0c:1c:75:8c:68:fa:ef: 72:ec:60:8e:4d:fd:7d:52:f4:62:06:49:e2:8b:1d: e5:49:61:89:83:4b:05:8a:be:b4:e1:2f:45:db:47: 02:ce:55:a9:c6:89:20:e6:6f:26:e3:de:44:9a:82: c6:a2:12:ca:29:10:98:a4:8e:0c:41:7e:23:1f:3f: fd:e2:57:46:b0:c9:79:ff:b1:81:04:b8:d8:e5:d8: 7b:59:6d:63:71:de:de:f5:7a:1f:7a:c6:2a:f2:52: e3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E7:44:4D:E2:26:BB:B9:99:87:90:34:0D:7C:CF:09:FA:EE:7E:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/14fd48c2-5fdb-3225-95ad-b27fcc46e894.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:2a:2a:60:93:f0:51:fe:f8:75:ab:46:34:02:cf:f1:ec:ad: 47:b1:45:4c:1b:fe:53:9f:6b:cd:a9:39:a6:5a:f9:d5:e9:bb: f9:92:1a:32:74:77:36:6f:1b:8d:7e:f7:b0:79:89:f7:ad:05: e0:0c:28:f4:e5:3e:57:e0:42:1c:e2:83:d0:28:c9:71:7f:82: 06:44:e9:0f:a6:0f:ae:8a:22:93:8e:3a:95:7c:a3:7e:33:49: da:65:cb:32:66:1a:f7:a1:db:07:2a:d6:08:e9:62:79:64:c1: cf:bb:9b:e5:c0:4f:9d:56:0c:ae:7c:eb:d8:2c:03:ce:35:23: bf:e3:ee:1b:a9:fd:57:89:2c:8c:a9:76:38:80:ff:de:4f:3b: 2c:4c:1e:8b:7b:22:e6:b9:8d:8f:06:73:11:01:f1:b1:24:4a: 5a:5a:cc:48:05:76:cd:ea:03:df:81:46:4f:3a:0f:91:fa:8d: df:c3:b9:08:18:1b:c7:6d:ec:18:a9:99:e1:cb:8c:07:c9:4b: 3d:73:39:91:04:30:f3:ec:fa:9a:bf:80:5a:e8:dd:cf:ee:04: 89:2b:05:dc:6e:b6:74:0a:75:80:95:05:5f:9a:d4:2f:84:19: a9:8c:7a:95:2a:0e:b3:7b:cf:ad:31:07:7f:1a:f3:6e:c2:02: 80:cd:3d:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC2Ks3N6s1p/qiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk MDc1ODQzYjktOWQ2OC00YWU3LTk2NDEtNzEwZDJlY2E1NjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirpBOM0JKgNKdjXCQYBrJhQNJjDXNjjOpSpn jXrPPQ+aGunCChxnRBYsEGsWl5f+Yfw8/oTI6+ZVWqul1wF0w5Y0zS01Pi4Agwcs mVq6zZh/330ecl1gu69+knpz9X2CDMnNUTwoLXUZub+TysYP7fELOVaYdBGybibJ pQb0da1a8NmmgBR37SZS11ZHXNqzGyXf186Ek0MdttnS5AwcdYxo+u9y7GCOTf19 UvRiBkniix3lSWGJg0sFir604S9F20cCzlWpxokg5m8m495EmoLGohLKKRCYpI4M QX4jHz/94ldGsMl5/7GBBLjY5dh7WW1jcd7e9XofesYq8lLjrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTnRE3iJru5mYeQNA18zwn67n6QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTRmZDQ4YzItNWZkYi0z MjI1LTk1YWQtYjI3ZmNjNDZlODk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkqKmCT8FH++HWrRjQCz/HsrUexRUwb/lOfa82pOaZa+dXpu/mSGjJ0 dzZvG41+97B5ifetBeAMKPTlPlfgQhzig9AoyXF/ggZE6Q+mD66KIpOOOpV8o34z SdplyzJmGveh2wcq1gjpYnlkwc+7m+XAT51WDK5869gsA841I7/j7hup/VeJLIyp djiA/95POyxMHot7Iua5jY8GcxEB8bEkSlpazEgFds3qA9+BRk86D5H6jd/DuQgY G8dt7BipmeHLjAfJSz1zOZEEMPPs+pq/gFro3c/uBIkrBdxutnQKdYCVBV+a1C+E GamMepUqDrN7z60xB38a827CAoDNPQo= -----END CERTIFICATE-----Generated at Sun Jul 20 11:14:38 2025 by rpki-client