$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/b510b231-5c86-397c-b89a-69e44e4abe9c.roa File: b510b231-5c86-397c-b89a-69e44e4abe9c.roa (raw, json) Hash identifier: vyeil5c/P3qjz2cAmZN5H8yz48co173kNTxG5p4BYoM= Subject key identifier: CD:54:D4:77:2A:8C:25:38:FD:6E:BE:C7:B5:79:F9:56:F1:79:E8:74 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584A8575F27FE7460047F13DA540 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/b510b231-5c86-397c-b89a-69e44e4abe9c.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 21743 IP address blocks: 104.247.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:f2:7f:e7:46:00:47:f1:3d:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=1ccdd4d0-ee98-4c26-8290-1adab840cc4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6e:05:12:a3:c9:41:0c:42:7d:06:5b:46:6c: 0c:99:7b:3b:ef:d7:0e:b1:f1:31:72:ca:de:de:7d: 4b:80:1d:14:7e:f8:65:45:8e:45:2e:83:80:41:98: 98:b1:b8:dc:82:1c:65:db:07:6e:7d:81:af:5a:15: 57:1c:0e:f2:ad:73:5c:77:b0:2f:b4:17:4d:80:23: ed:21:b2:1f:5b:02:ba:d7:2d:e1:76:c2:ba:66:fb: d7:69:e7:bd:84:26:f8:26:d7:eb:ef:16:49:59:ef: 5b:dd:67:db:1b:dd:a3:41:36:8d:a7:92:88:15:ee: 9f:b7:29:1e:04:98:64:4c:8c:e0:3b:ce:ce:69:ca: 6e:a8:4a:8b:6c:17:42:53:dd:dc:73:23:63:eb:89: e1:2b:5f:be:77:74:f4:c0:4e:10:4f:a5:16:bd:55: b7:10:c5:46:41:7f:e8:66:15:82:c5:2e:27:9f:4f: bc:cc:e6:6d:04:1b:81:39:56:e5:f4:48:57:77:96: 25:19:42:4d:0c:c5:c0:43:42:1a:65:f1:e0:bf:bb: 21:0f:03:a6:8c:51:0c:ce:42:36:9a:24:72:c5:5e: a7:05:9b:3b:71:49:a5:4d:33:8b:0d:ea:62:69:b3: 8d:38:30:e8:68:10:fd:f2:88:8b:8b:04:4a:09:ae: 4f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:54:D4:77:2A:8C:25:38:FD:6E:BE:C7:B5:79:F9:56:F1:79:E8:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/b510b231-5c86-397c-b89a-69e44e4abe9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 104.247.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:c5:ef:91:6a:43:04:72:91:e9:1a:63:be:fa:58:4b:7e:97: b8:8b:2b:41:32:5b:49:17:78:c0:25:cc:d2:3e:a5:21:b4:dd: 0c:3b:86:b2:b8:6e:d1:bb:10:8a:a0:63:f6:11:fb:6b:ea:1b: 22:ed:b5:d5:df:4d:1e:8d:32:64:3e:13:c8:c6:41:a9:a5:38: e0:04:b7:a8:4b:be:b1:3f:6d:82:5a:dd:4b:c2:32:67:f9:cd: 5b:e9:64:f3:bb:0b:a7:b8:69:02:93:8c:4f:0b:6f:1a:af:f8: 5c:08:74:2b:e0:dc:d9:00:7a:48:83:77:0f:f8:8b:84:ed:41: 65:6f:1a:d0:a3:17:e0:be:17:c2:9b:9d:1a:af:6d:f3:d4:54: 66:d7:20:71:bd:4e:94:e9:03:8a:a4:59:b2:ad:c0:56:2b:88: a8:28:fa:4a:33:61:26:69:7f:b0:12:14:54:66:c1:b3:5b:c2: d5:f2:62:52:82:79:d0:d2:5c:63:18:75:9b:a6:09:36:3b:ff: 64:1b:ff:40:f3:88:fb:5b:3c:1d:52:e4:30:1f:63:2d:c4:5f: 0c:b2:e5:6f:55:94:81:90:4e:ca:ae:32:a2:52:82:6d:48:09: b5:86:b5:49:31:bd:26:62:9a:54:1c:97:15:0e:cd:c2:ca:a8: 53:43:22:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdfJ/50YAR/E9pUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk MWNjZGQ0ZDAtZWU5OC00YzI2LTgyOTAtMWFkYWI4NDBjYzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgm4FEqPJQQxCfQZbRmwMmXs779cOsfExcsre 3n1LgB0UfvhlRY5FLoOAQZiYsbjcghxl2wdufYGvWhVXHA7yrXNcd7AvtBdNgCPt IbIfWwK61y3hdsK6ZvvXaee9hCb4Jtfr7xZJWe9b3WfbG92jQTaNp5KIFe6ftyke BJhkTIzgO87OacpuqEqLbBdCU93ccyNj64nhK1++d3T0wE4QT6UWvVW3EMVGQX/o ZhWCxS4nn0+8zOZtBBuBOVbl9EhXd5YlGUJNDMXAQ0IaZfHgv7shDwOmjFEMzkI2 miRyxV6nBZs7cUmlTTOLDepiabONODDoaBD98oiLiwRKCa5P9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1U1HcqjCU4/W6+x7V5+Vbxeeh0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvYjUxMGIyMzEtNWM4Ni0z OTdjLWI4OWEtNjllNDRlNGFiZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPd6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXF75FqQwRykekaY776WEt+l7iLK0EyW0kXeMAlzNI+pSG03Qw7hrK4 btG7EIqgY/YR+2vqGyLttdXfTR6NMmQ+E8jGQamlOOAEt6hLvrE/bYJa3UvCMmf5 zVvpZPO7C6e4aQKTjE8Lbxqv+FwIdCvg3NkAekiDdw/4i4TtQWVvGtCjF+C+F8Kb nRqvbfPUVGbXIHG9TpTpA4qkWbKtwFYriKgo+kozYSZpf7ASFFRmwbNbwtXyYlKC edDSXGMYdZumCTY7/2Qb/0DziPtbPB1S5DAfYy3EXwyy5W9VlIGQTsquMqJSgm1I CbWGtUkxvSZimlQclxUOzcLKqFNDIoc= -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:17 2025 by rpki-client