$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e3b4711a-2547-31a9-8ca7-81ce081814c9.roa File: e3b4711a-2547-31a9-8ca7-81ce081814c9.roa (raw, json) Hash identifier: 2W7Ax6vPu+Nsj2dfSLN2JnOfahxwaM0pVz/nbxEm69E= Subject key identifier: 25:8C:D1:70:E8:5F:BC:13:7F:E2:40:F4:11:BC:A7:D2:A3:9A:AA:45 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A2A8F23B9825A6384C6AE1680 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e3b4711a-2547-31a9-8ca7-81ce081814c9.roa Signing time: Thu 12 Jun 2025 11:33:07 +0000 ROA not before: Thu 12 Jun 2025 11:33:07 +0000 ROA not after: Wed 10 Sep 2025 11:33:07 +0000 asID: 64267 IP address blocks: 104.244.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:8f:23:b9:82:5a:63:84:c6:ae:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jun 12 11:33:07 2025 GMT Not After : Sep 10 11:33:07 2025 GMT Subject: CN=164c0cd9-3395-44f8-8e5d-9df603d9bbae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b1:d5:b2:2c:d1:10:ce:7b:b2:51:2a:9d:34: 63:c6:37:2b:5c:d1:6a:88:f9:b7:c3:63:a9:f3:7a: 72:25:3d:df:10:c2:b6:91:1f:f6:54:20:7d:e6:7e: 42:b6:9a:de:76:1f:30:60:4a:35:8e:56:14:64:55: 4f:6e:b2:8a:b2:e0:8c:8a:2c:c7:8a:40:16:bb:ee: 02:ac:2d:6f:06:ef:9c:90:d2:63:75:6b:25:42:0d: 8e:ad:55:f9:ad:44:c1:b0:9e:34:30:bb:fa:e8:0d: 40:24:31:45:2b:42:b9:95:da:31:03:bf:21:88:f7: f2:f4:d5:96:a3:ca:57:57:3a:de:1b:86:09:17:b0: 60:d1:1f:33:71:82:8f:e1:65:14:d8:65:d9:96:0d: 0a:93:72:c6:f6:70:05:d0:af:7c:2f:8b:24:9b:29: d4:dd:d7:16:ef:c4:96:8f:cb:9d:e5:db:69:9d:21: 51:d1:0c:81:c7:dd:74:13:ff:29:85:ad:ee:d1:f1: bc:a2:d4:e1:99:bd:06:c5:38:12:5b:42:8d:48:90: 63:b7:7b:ed:42:20:1c:80:4a:bc:81:d3:9b:c1:07: 3c:43:33:e3:29:f8:2b:4d:23:b6:07:ef:fd:dc:5d: 5f:82:e7:a0:a8:62:9b:81:f8:8d:64:43:52:1d:0e: 1c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8C:D1:70:E8:5F:BC:13:7F:E2:40:F4:11:BC:A7:D2:A3:9A:AA:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e3b4711a-2547-31a9-8ca7-81ce081814c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 104.244.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:66:74:dd:b4:72:d8:14:4c:ce:f4:f4:ca:60:33:2a:20:ff: 45:98:31:0a:04:95:73:7d:18:33:5f:f7:e1:54:22:3a:bf:9d: 93:f2:89:85:6d:13:46:90:3d:ad:dc:67:b6:80:fe:74:56:53: 54:d3:18:ec:c5:ab:6f:5c:e8:fd:63:97:b0:cb:ce:e6:57:15: f5:11:b1:61:69:86:77:23:21:f1:ea:1a:b0:58:c5:b4:8e:ec: 80:d0:aa:73:c7:6c:0e:c4:25:dd:0a:a5:65:3d:c4:d2:e5:7a: 7d:8b:f3:de:4a:72:38:68:b8:1e:f4:b9:be:e2:93:2c:a4:b1: 85:69:de:52:0c:75:17:38:38:d0:f8:6a:b5:c7:24:cd:40:48: bf:7d:71:4a:7a:a9:f3:71:44:83:f5:82:ee:51:e2:5a:ae:dd: da:c1:be:0b:75:00:7c:02:7e:ff:05:25:90:55:cb:52:d5:36: 9c:b5:33:26:6e:a6:15:82:fc:3a:79:38:8c:ec:6c:01:0a:38: 9d:c0:23:92:78:33:92:cc:e7:29:46:1c:24:a6:c1:d4:6b:d5: 52:fa:11:18:b2:f4:34:f6:3c:3a:c7:ea:68:45:cc:97:d7:91: 4a:ba:6b:68:8f:dc:ea:2a:09:30:48:f2:c6:5b:ba:28:9a:bc: 41:88:e3:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqjyO5glpjhMauFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDYxMjExMzMwN1oXDTI1MDkxMDExMzMwN1owLzEtMCsGA1UEAxMk MTY0YzBjZDktMzM5NS00NGY4LThlNWQtOWRmNjAzZDliYmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLHVsizREM57slEqnTRjxjcrXNFqiPm3w2Op 83pyJT3fEMK2kR/2VCB95n5Ctpredh8wYEo1jlYUZFVPbrKKsuCMiizHikAWu+4C rC1vBu+ckNJjdWslQg2OrVX5rUTBsJ40MLv66A1AJDFFK0K5ldoxA78hiPfy9NWW o8pXVzreG4YJF7Bg0R8zcYKP4WUU2GXZlg0Kk3LG9nAF0K98L4skmynU3dcW78SW j8ud5dtpnSFR0QyBx910E/8pha3u0fG8otThmb0GxTgSW0KNSJBjt3vtQiAcgEq8 gdObwQc8QzPjKfgrTSO2B+/93F1fguegqGKbgfiNZENSHQ4chwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWM0XDoX7wTf+JA9BG8p9KjmqpFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZTNiNDcxMWEtMjU0Ny0z MWE5LThjYTctODFjZTA4MTgxNGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPRmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtmdN20ctgUTM709MpgMyog/0WYMQoElXN9GDNf9+FUIjq/nZPyiYVt E0aQPa3cZ7aA/nRWU1TTGOzFq29c6P1jl7DLzuZXFfURsWFphncjIfHqGrBYxbSO 7IDQqnPHbA7EJd0KpWU9xNLlen2L895KcjhouB70ub7ikyyksYVp3lIMdRc4OND4 arXHJM1ASL99cUp6qfNxRIP1gu5R4lqu3drBvgt1AHwCfv8FJZBVy1LVNpy1MyZu phWC/Dp5OIzsbAEKOJ3AI5J4M5LM5ylGHCSmwdRr1VL6ERiy9DT2PDrH6mhFzJfX kUq6a2iP3OoqCTBI8sZbuiiavEGI4+M= -----END CERTIFICATE-----Generated at Mon Jul 21 12:33:02 2025 by rpki-client