$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b9bf8681-9025-360c-820c-2d5bb3dbb16c.roa File: b9bf8681-9025-360c-820c-2d5bb3dbb16c.roa (raw, json) Hash identifier: K2KhsYfuUx87BbKNYNhBgBPu47YC+UOHTcbo417TGKg= Subject key identifier: CB:50:AA:DA:C9:26:20:C4:12:F6:C9:EB:98:C9:56:A6:1A:8B:29:03 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584A671400260337796633625F40 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b9bf8681-9025-360c-820c-2d5bb3dbb16c.roa Signing time: Fri 04 Jul 2025 03:49:19 +0000 ROA not before: Fri 04 Jul 2025 03:49:19 +0000 ROA not after: Thu 02 Oct 2025 03:49:19 +0000 asID: 26658 IP address blocks: 104.232.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:67:14:00:26:03:37:79:66:33:62:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Jul 4 03:49:19 2025 GMT Not After : Oct 2 03:49:19 2025 GMT Subject: CN=73e8d878-0236-4def-9287-baf343311c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:92:d3:9c:c4:61:8c:7b:11:f0:a3:93:d3:9c: 79:32:af:f1:ae:f9:bb:11:20:77:81:3d:84:1b:d3: 28:41:1d:c8:de:59:92:fd:f0:fc:da:2f:a0:b8:e5: 53:01:3b:6e:e9:95:cd:b0:41:b8:9a:28:57:06:03: 28:7b:d9:f6:54:2d:5d:64:01:43:e7:15:03:86:a0: 6b:84:45:97:5a:f3:0f:73:ae:88:e3:7a:c0:06:28: 9b:d5:42:70:41:98:39:f0:77:6b:26:5f:26:83:54: 40:3e:1f:12:64:61:2b:5e:e1:9e:03:62:d2:13:ad: 94:77:2e:47:c4:c7:38:49:bc:90:15:35:ec:d4:95: 29:51:87:07:49:64:4c:64:5a:6d:ce:2c:65:54:5f: 09:0f:30:76:e2:6a:61:43:07:89:5b:3c:06:9f:fe: 0b:8d:9b:e4:41:ab:fd:3e:d7:bf:a1:c3:51:2c:7f: 8c:10:5d:1d:07:49:c9:68:42:b2:6d:85:04:c4:19: 24:d4:28:de:f6:de:72:63:73:e9:11:42:29:fc:55: f0:f4:e8:fb:60:63:e9:4a:d3:7b:b2:32:bb:09:ef: df:65:1e:91:f7:ea:d1:d0:49:c2:39:61:78:03:36: 11:fc:81:1c:4a:23:1a:66:ed:84:ae:76:85:95:4e: 9b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:50:AA:DA:C9:26:20:C4:12:F6:C9:EB:98:C9:56:A6:1A:8B:29:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b9bf8681-9025-360c-820c-2d5bb3dbb16c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.232.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:c1:48:db:0b:b8:9d:67:44:d9:06:d0:3e:b8:8a:a1:1e:ad: be:16:88:8a:18:07:0d:44:43:05:d2:4e:ad:15:c3:ce:23:ae: 16:42:46:0a:a4:0b:77:6f:f4:c4:af:31:02:73:52:5d:45:de: 47:c9:d6:09:75:0e:22:21:17:6b:38:c4:02:f3:84:ff:e7:79: 2c:11:42:36:a8:49:72:cf:d3:6f:ae:3f:86:9f:ce:03:b9:b9: 02:75:1c:7c:66:25:e6:fd:c5:06:d6:ed:a0:98:38:e4:b5:2b: b8:7c:45:75:ac:3e:ae:64:fa:10:19:6f:a2:2a:67:19:0c:50: 78:0d:92:98:72:22:87:81:fc:93:8b:7d:a6:a9:83:48:c0:39: 14:7b:7c:f0:2b:9d:b5:e0:96:f7:1d:04:37:53:e5:2d:3f:49: fe:8f:ca:5d:cc:3e:91:c3:ea:47:e9:c5:49:65:de:9b:a8:5f: d8:b9:02:b8:6b:17:8e:3b:39:dd:58:ef:27:ce:38:18:6c:28: 18:ab:ff:0e:14:cd:f6:16:4b:d6:a3:ab:63:47:af:07:ff:3f: 98:c2:08:29:45:94:83:e8:83:58:41:4c:f0:b7:77:04:6c:84: 77:fa:35:35:4a:e3:e9:2b:82:0c:c6:ce:5c:d1:a7:8d:a4:94: 53:04:4b:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpnFAAmAzd5ZjNiX0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDcwNDAzNDkxOVoXDTI1MTAwMjAzNDkxOVowLzEtMCsGA1UEAxMk NzNlOGQ4NzgtMDIzNi00ZGVmLTkyODctYmFmMzQzMzExYzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5LTnMRhjHsR8KOT05x5Mq/xrvm7ESB3gT2E G9MoQR3I3lmS/fD82i+guOVTATtu6ZXNsEG4mihXBgMoe9n2VC1dZAFD5xUDhqBr hEWXWvMPc66I43rABiib1UJwQZg58HdrJl8mg1RAPh8SZGErXuGeA2LSE62Udy5H xMc4SbyQFTXs1JUpUYcHSWRMZFptzixlVF8JDzB24mphQweJWzwGn/4LjZvkQav9 Pte/ocNRLH+MEF0dB0nJaEKybYUExBkk1Cje9t5yY3PpEUIp/FXw9Oj7YGPpStN7 sjK7Ce/fZR6R9+rR0EnCOWF4AzYR/IEcSiMaZu2ErnaFlU6bEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtQqtrJJiDEEvbJ65jJVqYaiykDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvYjliZjg2ODEtOTAyNS0z NjBjLTgyMGMtMmQ1YmIzZGJiMTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOhGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7BSNsLuJ1nRNkG0D64iqEerb4WiIoYBw1EQwXSTq0Vw84jrhZCRgqk C3dv9MSvMQJzUl1F3kfJ1gl1DiIhF2s4xALzhP/neSwRQjaoSXLP02+uP4afzgO5 uQJ1HHxmJeb9xQbW7aCYOOS1K7h8RXWsPq5k+hAZb6IqZxkMUHgNkphyIoeB/JOL faapg0jAORR7fPArnbXglvcdBDdT5S0/Sf6Pyl3MPpHD6kfpxUll3puoX9i5Arhr F447Od1Y7yfOOBhsKBir/w4UzfYWS9ajq2NHrwf/P5jCCClFlIPog1hBTPC3dwRs hHf6NTVK4+krggzGzlzRp42klFMES6M= -----END CERTIFICATE-----Generated at Sun Jul 20 11:11:13 2025 by rpki-client