$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/0b95849b-a821-3b29-86e2-82b650dfd913.roa File: 0b95849b-a821-3b29-86e2-82b650dfd913.roa (raw, json) Hash identifier: kFhCydq7tVqq/MtVc9Yojim2F7VnCAQLIPGdHCxNXbA= Subject key identifier: 5B:E3:1D:B8:3C:C4:25:00:AB:3D:67:3C:D2:AD:AC:B1:B0:FE:C5:CD Certificate issuer: /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Certificate serial: 010D0C9F4328584A7E7B5C313A63931B59A65D98 Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/0b95849b-a821-3b29-86e2-82b650dfd913.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 59920 IP address blocks: 104.167.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:5c:31:3a:63:93:1b:59:a6:5d:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=069d6408-17c5-4ba9-90de-a470e301ef2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a8:8e:25:0d:1e:89:79:58:2a:b3:f1:12:2d: d5:8d:22:85:fe:96:58:d2:ed:45:22:03:8d:90:f7: 49:6e:5b:61:a3:7f:87:a4:9d:48:ea:53:f4:3f:5f: d0:67:ba:70:bd:27:58:f4:e9:5b:a6:2b:81:bf:7a: 3e:d2:0f:51:11:8f:5c:c9:4d:f7:8e:74:43:0a:30: ed:6c:b4:a0:32:8f:6d:a4:b1:3b:7e:b1:07:06:9a: 41:32:d2:83:67:1a:30:5f:a1:94:86:5d:b8:1a:fb: 5c:7c:d4:b8:37:b5:cb:c3:5e:e8:6f:45:7a:6e:a1: 49:ad:67:f3:13:47:71:ec:e5:fb:c4:1c:69:bb:63: d4:aa:54:43:e4:d7:83:38:3c:e2:35:f5:54:f2:77: 92:64:6e:1c:31:1b:a6:5a:9d:03:65:12:37:a8:fc: 9b:ac:10:81:2d:c0:92:8f:ac:77:6e:84:f9:8f:74: f2:84:f1:65:df:20:b5:8f:ea:cf:5b:4b:0e:ed:0a: 1e:fb:1c:86:6e:92:3d:36:44:b1:64:63:c6:1c:ff: 40:4b:39:ca:74:48:f5:9f:15:0e:ab:1e:d7:93:bf: d9:ff:92:5c:95:6a:d2:07:20:93:f3:3a:cb:bb:2d: 75:79:68:e8:78:58:77:12:0b:aa:86:80:17:b2:27: 54:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E3:1D:B8:3C:C4:25:00:AB:3D:67:3C:D2:AD:AC:B1:B0:FE:C5:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/0b95849b-a821-3b29-86e2-82b650dfd913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl X509v3 Authority Key Identifier: keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer sbgp-ipAddrBlock: critical IPv4: 104.167.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:50:52:c2:43:e8:26:14:c8:f1:49:94:a6:f3:54:67:d0:77: db:84:b7:a6:45:0c:da:17:e7:be:b0:80:b6:8c:be:ae:a0:91: 10:96:21:fc:10:3d:89:d8:58:80:ec:cc:bb:28:ba:00:cc:33: f6:e5:5c:01:ab:7f:90:6c:1a:e4:c6:19:fd:6f:2c:ca:37:48: 19:64:ec:78:88:25:33:52:50:c7:9e:5c:ca:41:d9:48:2e:c7: df:59:4c:c3:5b:c9:cf:d2:0d:e8:0d:55:8e:9e:cc:97:64:41: 6d:82:14:bf:2f:42:2e:36:52:b3:cf:e7:f8:17:8c:5a:1f:22: dd:a4:c2:7e:a3:6e:d3:c8:3a:49:6c:46:5a:f5:8d:98:2b:7b: bf:a7:e0:a8:a8:f7:6c:2f:21:57:24:c7:05:5a:c5:74:37:36: 6d:fa:f5:24:d0:09:84:02:b7:9d:0e:cb:cb:7a:03:b8:c6:1e: 51:ab:f0:9e:da:6f:f3:3a:08:f6:0b:c0:52:e5:d1:d5:cd:83: dd:98:9e:a2:89:db:77:d2:d0:9f:27:5e:4a:43:55:a3:8a:0d: fc:40:ec:eb:a0:06:02:b6:2d:98:95:7f:40:cc:33:53:62:88: b9:80:45:7d:93:64:c2:63:7d:3d:71:18:b1:2f:ef:f7:4f:e6: 32:bc:24:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e1wxOmOTG1mmXZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4 ZjcyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MDY5ZDY0MDgtMTdjNS00YmE5LTkwZGUtYTQ3MGUzMDFlZjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KiOJQ0eiXlYKrPxEi3VjSKF/pZY0u1FIgON kPdJbltho3+HpJ1I6lP0P1/QZ7pwvSdY9OlbpiuBv3o+0g9REY9cyU33jnRDCjDt bLSgMo9tpLE7frEHBppBMtKDZxowX6GUhl24GvtcfNS4N7XLw17ob0V6bqFJrWfz E0dx7OX7xBxpu2PUqlRD5NeDODziNfVU8neSZG4cMRumWp0DZRI3qPybrBCBLcCS j6x3boT5j3TyhPFl3yC1j+rPW0sO7Qoe+xyGbpI9NkSxZGPGHP9ASznKdEj1nxUO qx7Xk7/Z/5JclWrSByCT8zrLuy11eWjoeFh3EguqhoAXsidU3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvjHbg8xCUAqz1nPNKtrLGw/sXNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvMGI5NTg0OWItYTgyMS0z YjI5LTg2ZTItODJiNjUwZGZkOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4 NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2 N2JmMDhmNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKfWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5QUsJD6CYUyPFJlKbzVGfQd9uEt6ZFDNoX576wgLaMvq6gkRCWIfwQ PYnYWIDszLsougDMM/blXAGrf5BsGuTGGf1vLMo3SBlk7HiIJTNSUMeeXMpB2Ugu x99ZTMNbyc/SDegNVY6ezJdkQW2CFL8vQi42UrPP5/gXjFofIt2kwn6jbtPIOkls Rlr1jZgre7+n4Kio92wvIVckxwVaxXQ3Nm369STQCYQCt50Oy8t6A7jGHlGr8J7a b/M6CPYLwFLl0dXNg92YnqKJ23fS0J8nXkpDVaOKDfxA7OugBgK2LZiVf0DMM1Ni iLmARX2TZMJjfT1xGLEv7/dP5jK8JIE= -----END CERTIFICATE-----Generated at Tue Jul 22 19:46:03 2025 by rpki-client