$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e59419c7-f2cd-369a-8fd3-eb62f0eca867.roa File: e59419c7-f2cd-369a-8fd3-eb62f0eca867.roa (raw, json) Hash identifier: 5JmKET86MhKUWQlucSPEwJ9p7PTQ4Tw88YeoqNy+hjE= Subject key identifier: DD:71:AA:3B:4C:39:73:16:F3:12:12:C3:17:F7:D6:02:0F:2B:CB:F3 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584A7FE09751EAEF2EF4FB247AC0 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e59419c7-f2cd-369a-8fd3-eb62f0eca867.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 213122 IP address blocks: 104.224.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:97:51:ea:ef:2e:f4:fb:24:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=ce9b9397-2f0f-4b22-a86c-2ca9834130ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:28:33:14:76:75:05:8d:ee:61:b6:f4:e1:95: 3d:38:a5:d3:35:b1:54:8d:ab:d0:51:ca:88:5e:44: 8a:e6:52:9e:00:07:5d:d5:73:ce:62:18:73:0c:18: 38:89:1f:00:54:3b:33:ff:e3:f2:3c:3a:c2:08:d4: 46:a9:8f:5f:3a:26:6b:a4:a1:f1:dd:6f:54:2f:d8: af:72:6f:95:7d:96:e8:a6:a5:8c:05:e8:99:fa:2b: cd:bf:db:56:ad:98:d6:8c:f7:7d:d9:1e:cf:86:55: 0d:c9:38:c2:92:21:41:87:c6:ab:e8:6f:f0:5b:89: 1b:a4:04:2b:5f:51:57:92:ae:f7:ec:7b:5f:54:d6: 49:22:8b:1f:31:5f:38:5d:c9:ed:29:07:3d:f2:89: c6:83:be:d5:d5:f7:54:cb:2a:6b:17:76:97:f5:7d: 16:f6:8e:25:d9:37:08:a4:8d:05:e6:7d:9a:f8:c1: 4e:ed:16:00:31:0f:ea:5c:a3:95:b7:77:da:28:85: b0:1d:33:14:8b:5b:04:2c:78:f0:5a:dd:63:9b:ac: e3:2a:da:11:35:87:b4:e0:93:29:e1:e3:af:44:26: 2f:97:ef:67:8d:91:93:a8:b8:7e:53:8e:3c:54:a5: 2c:4c:fa:fd:a4:8a:14:b6:93:ee:0d:2a:06:84:fa: b6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:71:AA:3B:4C:39:73:16:F3:12:12:C3:17:F7:D6:02:0F:2B:CB:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e59419c7-f2cd-369a-8fd3-eb62f0eca867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.224.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:e9:01:78:2f:3b:87:7e:77:95:78:18:37:90:a9:2e:f4:d3: 3d:e3:08:26:d6:92:5c:cf:99:f0:cb:8a:8e:44:de:a3:0a:20: d0:be:9e:ac:64:37:08:76:8f:a1:73:e8:d5:26:7f:f4:4e:0d: d3:38:3a:37:72:43:f1:0d:6e:45:d8:ee:15:9d:51:5c:c3:bf: 39:00:71:5b:11:1d:dd:a4:79:ad:47:cd:bc:51:d8:5f:9d:55: 5e:58:96:52:0c:29:5d:0d:82:f6:6c:b5:65:3e:58:04:c2:12: ad:70:68:c7:99:e2:b1:33:6e:93:4f:f8:9e:65:86:b8:47:26: 0d:58:0d:a2:34:9e:92:8b:97:c2:90:d5:05:41:95:d8:43:41: 31:b6:6e:ef:47:9a:52:23:e5:4f:5f:eb:6e:09:27:4b:78:aa: 56:55:e9:e6:f6:17:ca:c7:a1:b9:e7:fe:55:bf:eb:31:b9:5a: 44:d0:56:8e:d3:40:17:04:2e:84:13:dd:7b:4d:c5:25:98:a0: 2f:0b:d9:23:39:05:71:87:6a:54:0b:ab:10:06:5f:a0:f9:51: c2:92:ce:20:ef:c5:86:e0:d4:bb:4a:a8:4d:db:4c:a1:37:81: 01:6b:04:36:1f:c9:bd:64:f6:12:dc:42:11:3c:03:72:21:da: 12:d8:a6:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JdR6u8u9PskesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk Y2U5YjkzOTctMmYwZi00YjIyLWE4NmMtMmNhOTgzNDEzMGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCgzFHZ1BY3uYbb04ZU9OKXTNbFUjavQUcqI XkSK5lKeAAdd1XPOYhhzDBg4iR8AVDsz/+PyPDrCCNRGqY9fOiZrpKHx3W9UL9iv cm+VfZbopqWMBeiZ+ivNv9tWrZjWjPd92R7PhlUNyTjCkiFBh8ar6G/wW4kbpAQr X1FXkq737HtfVNZJIosfMV84XcntKQc98onGg77V1fdUyyprF3aX9X0W9o4l2TcI pI0F5n2a+MFO7RYAMQ/qXKOVt3faKIWwHTMUi1sELHjwWt1jm6zjKtoRNYe04JMp 4eOvRCYvl+9njZGTqLh+U448VKUsTPr9pIoUtpPuDSoGhPq2lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1xqjtMOXMW8xISwxf31gIPK8vzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvZTU5NDE5YzctZjJjZC0z NjlhLThmZDMtZWI2MmYwZWNhODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOAfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPpAXgvO4d+d5V4GDeQqS700z3jCCbWklzPmfDLio5E3qMKINC+nqxk Nwh2j6Fz6NUmf/RODdM4OjdyQ/ENbkXY7hWdUVzDvzkAcVsRHd2kea1HzbxR2F+d VV5YllIMKV0NgvZstWU+WATCEq1waMeZ4rEzbpNP+J5lhrhHJg1YDaI0npKLl8KQ 1QVBldhDQTG2bu9HmlIj5U9f624JJ0t4qlZV6eb2F8rHobnn/lW/6zG5WkTQVo7T QBcELoQT3XtNxSWYoC8L2SM5BXGHalQLqxAGX6D5UcKSziDvxYbg1LtKqE3bTKE3 gQFrBDYfyb1k9hLcQhE8A3Ih2hLYprM= -----END CERTIFICATE-----Generated at Sun Jul 20 15:03:40 2025 by rpki-client