$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/6deddc91-1e80-3cbe-aa0c-aac1448de702.roa File: 6deddc91-1e80-3cbe-aa0c-aac1448de702.roa (raw, json) Hash identifier: DuXduHiCJ7WGFQRKS1vHV7vg6DNa6kT68BViJlwEDOY= Subject key identifier: 4F:1E:07:27:C8:49:F2:02:DF:78:4F:ED:31:12:53:72:3B:CF:D8:65 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584A7FE0971E73F761FAC79B0A00 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/6deddc91-1e80-3cbe-aa0c-aac1448de702.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 213122 IP address blocks: 104.224.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:97:1e:73:f7:61:fa:c7:9b:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=8eabe4cc-0a03-442d-b822-d6fcc9de0816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e8:6e:5b:bc:12:7f:19:0b:d9:e3:ac:ad:7d: 4e:91:53:6d:6a:a0:b6:fe:4c:e8:c8:c6:6b:b9:5f: 47:f2:34:13:ad:55:d0:60:3d:7b:7c:37:be:6c:09: 77:ca:b2:1e:ec:13:40:e5:f2:e4:68:07:c7:a1:3b: 05:b0:89:e1:a4:11:44:a8:8b:4d:64:eb:20:c2:32: e5:d0:3c:82:85:95:41:5e:17:eb:38:b4:aa:77:64: 75:22:28:9a:d9:c4:37:18:52:2b:fe:ed:22:54:32: c5:a3:30:c8:1a:38:f6:83:46:6b:08:87:f5:ac:93: 9a:d4:03:fb:0a:d9:4a:3f:65:46:aa:8c:58:15:f5: 63:06:ac:0e:36:5e:a5:fe:72:54:61:84:60:63:97: a1:fe:de:27:57:b3:27:d3:ca:19:d0:16:61:1b:6c: 03:9b:42:5e:b6:48:92:cf:7a:c3:28:3e:01:4f:7b: 1d:f3:ac:78:a4:48:ed:70:b3:44:fa:e0:30:a9:1d: c3:68:92:5b:5c:95:d3:67:e7:a4:0f:02:5c:bc:90: fd:06:6b:bc:ad:37:87:8c:a5:0a:ea:36:51:34:b6: ab:13:b3:21:c2:cf:a7:f3:24:b5:a5:74:91:19:72: d5:95:9d:6c:c4:7a:6d:69:4b:2c:17:c0:64:c6:49: ae:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1E:07:27:C8:49:F2:02:DF:78:4F:ED:31:12:53:72:3B:CF:D8:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/6deddc91-1e80-3cbe-aa0c-aac1448de702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.224.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a7:44:99:c9:dc:80:74:41:3c:1b:88:ea:66:df:80:c4:93: 17:f4:64:08:13:5a:be:df:fa:89:74:69:e0:61:bf:b2:f9:de: 64:e6:b6:82:da:4f:95:f9:28:9a:eb:4a:33:29:95:e1:4f:cc: 68:49:ff:b6:25:d2:48:d1:e1:1b:a9:d2:a0:6c:d8:6d:68:d9: 8f:e7:be:f4:af:98:6c:2e:b0:8b:28:b4:a5:5e:df:bd:50:b3: 99:17:c1:4f:b0:65:31:57:c3:77:3b:07:58:97:46:f3:1b:f2: 3c:94:5b:d1:d8:3a:d4:70:95:fd:d2:0d:3d:69:a7:6c:96:09: 27:95:e7:66:9f:8c:0c:c0:26:a6:fc:1d:89:f1:81:2b:2d:2c: bf:7f:d4:e8:55:32:00:0d:7b:9a:b9:80:ba:cc:b8:08:59:dc: c3:fb:d5:14:c3:ec:a7:cb:07:3d:74:5c:09:04:fc:82:71:cc: e4:2c:c7:b3:fb:f9:01:55:ec:51:0e:2b:4d:dc:04:a8:d7:2d: 28:e0:64:5e:dd:eb:61:f5:f1:22:ba:e1:ea:4f:ef:a5:a8:ba: e6:ea:0f:80:ed:73:32:d3:70:d0:4f:71:0d:b8:83:8f:dd:80: 51:a4:91:71:c0:d6:48:e8:13:30:f1:73:fb:1b:4e:22:a7:e5: a7:50:77:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4Jcec/dh+sebCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk OGVhYmU0Y2MtMGEwMy00NDJkLWI4MjItZDZmY2M5ZGUwODE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+huW7wSfxkL2eOsrX1OkVNtaqC2/kzoyMZr uV9H8jQTrVXQYD17fDe+bAl3yrIe7BNA5fLkaAfHoTsFsInhpBFEqItNZOsgwjLl 0DyChZVBXhfrOLSqd2R1Iiia2cQ3GFIr/u0iVDLFozDIGjj2g0ZrCIf1rJOa1AP7 CtlKP2VGqoxYFfVjBqwONl6l/nJUYYRgY5eh/t4nV7Mn08oZ0BZhG2wDm0JetkiS z3rDKD4BT3sd86x4pEjtcLNE+uAwqR3DaJJbXJXTZ+ekDwJcvJD9Bmu8rTeHjKUK 6jZRNLarE7Mhws+n8yS1pXSRGXLVlZ1sxHptaUssF8Bkxkmu3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8eByfISfIC33hP7TESU3I7z9hlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNmRlZGRjOTEtMWU4MC0z Y2JlLWFhMGMtYWFjMTQ0OGRlNzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSnRJnJ3IB0QTwbiOpm34DEkxf0ZAgTWr7f+ol0aeBhv7L53mTmtoLa T5X5KJrrSjMpleFPzGhJ/7Yl0kjR4Rup0qBs2G1o2Y/nvvSvmGwusIsotKVe371Q s5kXwU+wZTFXw3c7B1iXRvMb8jyUW9HYOtRwlf3SDT1pp2yWCSeV52afjAzAJqb8 HYnxgSstLL9/1OhVMgANe5q5gLrMuAhZ3MP71RTD7KfLBz10XAkE/IJxzOQsx7P7 +QFV7FEOK03cBKjXLSjgZF7d62H18SK64epP76WouubqD4DtczLTcNBPcQ24g4/d gFGkkXHA1kjoEzDxc/sbTiKn5adQdxA= -----END CERTIFICATE-----Generated at Sun Jul 20 14:56:28 2025 by rpki-client