$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6967d3fc-fd2a-35f9-b2d9-df2d0c5c66ed.roa File: 6967d3fc-fd2a-35f9-b2d9-df2d0c5c66ed.roa (raw, json) Hash identifier: yxveYyqkRG1rshoFHnwHYJmj0vtU6IuF7KY37LiviNY= Subject key identifier: 1D:85:BE:E7:B9:BE:02:0C:67:5D:6B:18:0D:4B:63:3A:01:F0:E7:C2 Certificate issuer: /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Certificate serial: 010D0C9F4328584A66C06A4A4274B19342B61A80 Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6967d3fc-fd2a-35f9-b2d9-df2d0c5c66ed.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 0 IP address blocks: 104.167.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:6a:4a:42:74:b1:93:42:b6:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=3da8ac99-f059-4a76-a146-dcedf5a230ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e5:42:7f:bb:03:07:51:39:30:1e:aa:6c:01: ff:6c:b5:ca:e7:29:a0:06:0a:16:f7:49:69:71:a2: 64:20:06:dc:cb:8f:ca:bf:96:c0:cb:3c:57:01:f9: 5b:9f:b1:f0:19:aa:61:92:5a:d4:7e:ec:47:a2:d3: c7:4f:4e:43:5b:8d:18:a8:fd:06:9c:da:56:33:ea: 44:d3:14:1f:9a:0a:76:ec:f5:fd:71:08:18:b2:7a: ae:e9:a5:43:f2:11:b6:6b:5c:9f:d5:a1:87:2b:0e: 3c:64:41:19:10:22:4a:15:5d:71:bf:e5:74:01:45: 23:bd:24:0a:3d:b8:f8:cc:29:49:a0:53:3d:85:df: 2a:12:f8:4b:26:97:52:1a:07:4a:d2:da:77:c1:9d: 55:dc:e8:05:13:1c:f8:19:8d:c3:43:88:79:03:46: 39:c8:17:90:bc:57:15:c1:51:16:db:75:36:40:cb: 9f:18:d0:be:3e:f1:2b:22:8a:1f:2e:0d:b6:57:7a: 6d:48:ab:43:d0:aa:fb:13:74:d3:27:a2:53:ce:a9: 5a:df:a3:9b:04:f8:20:41:08:d7:bd:e5:9d:d1:28: bc:4d:01:48:2e:44:0f:cb:d5:f8:2c:5f:b0:b9:81: ca:6a:21:6c:79:ec:da:c4:3a:7e:95:6c:f5:73:a5: e6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:85:BE:E7:B9:BE:02:0C:67:5D:6B:18:0D:4B:63:3A:01:F0:E7:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6967d3fc-fd2a-35f9-b2d9-df2d0c5c66ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl X509v3 Authority Key Identifier: keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer sbgp-ipAddrBlock: critical IPv4: 104.167.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:bc:2b:5e:c9:3e:ff:19:76:6c:f8:67:0b:ee:af:92:c9:7b: 1f:02:01:8c:eb:d3:02:3f:55:c9:84:a2:e0:4d:14:63:6b:e5: 09:e4:3b:cc:79:3e:68:81:4f:6a:34:53:bd:b5:fc:77:67:78: 9e:f0:d2:b7:e1:5f:fb:52:80:1f:3f:3f:55:f8:39:dc:9b:7d: 65:0c:83:59:ed:86:00:ae:dd:68:eb:e1:75:15:5f:43:a9:81: 05:c5:29:7f:56:55:b5:30:e2:7c:ae:fe:ad:d8:19:9b:69:75: 87:79:5c:3e:a4:23:71:9a:62:11:89:d7:27:b0:d5:0e:82:ac: aa:27:8b:05:97:cd:ea:5b:83:43:ec:34:ae:fb:aa:76:4a:ab: 88:32:81:f9:22:c9:a1:c0:04:57:83:52:60:a1:9c:51:bd:ba: fa:1b:b9:f6:d8:8c:c2:45:bc:99:5d:84:fc:f9:82:7d:fa:31: 16:e0:5a:00:e1:a8:30:f1:26:47:69:3b:f4:b7:49:c1:14:c0: dc:fa:e2:47:28:7a:2f:f9:de:b0:e4:c7:fb:f5:a3:23:ad:87: c3:f1:e2:f2:62:26:c1:ed:8f:c0:ba:b7:04:70:16:81:ee:6d: d8:9a:05:19:8f:50:6d:a7:82:4e:5f:d7:f0:d8:da:10:28:17: d4:6c:06:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwGpKQnSxk0K2GoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4 ZjcyMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk M2RhOGFjOTktZjA1OS00YTc2LWExNDYtZGNlZGY1YTIzMGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeVCf7sDB1E5MB6qbAH/bLXK5ymgBgoW90lp caJkIAbcy4/Kv5bAyzxXAflbn7HwGaphklrUfuxHotPHT05DW40YqP0GnNpWM+pE 0xQfmgp27PX9cQgYsnqu6aVD8hG2a1yf1aGHKw48ZEEZECJKFV1xv+V0AUUjvSQK Pbj4zClJoFM9hd8qEvhLJpdSGgdK0tp3wZ1V3OgFExz4GY3DQ4h5A0Y5yBeQvFcV wVEW23U2QMufGNC+PvErIoofLg22V3ptSKtD0Kr7E3TTJ6JTzqla36ObBPggQQjX veWd0Si8TQFILkQPy9X4LF+wuYHKaiFseezaxDp+lWz1c6XmYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2Fvue5vgIMZ11rGA1LYzoB8OfCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvNjk2N2QzZmMtZmQyYS0z NWY5LWIyZDktZGYyZDBjNWM2NmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4 NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2 N2JmMDhmNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaKfUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKe8K17JPv8Zdmz4Zwvur5LJex8CAYzr0wI/VcmEouBNFGNr5QnkO8x5 PmiBT2o0U721/HdneJ7w0rfhX/tSgB8/P1X4OdybfWUMg1nthgCu3Wjr4XUVX0Op gQXFKX9WVbUw4nyu/q3YGZtpdYd5XD6kI3GaYhGJ1yew1Q6CrKoniwWXzepbg0Ps NK77qnZKq4gygfkiyaHABFeDUmChnFG9uvobufbYjMJFvJldhPz5gn36MRbgWgDh qDDxJkdpO/S3ScEUwNz64kcoei/53rDkx/v1oyOth8Px4vJiJsHtj8C6twRwFoHu bdiaBRmPUG2ngk5f1/DY2hAoF9RsBkA= -----END CERTIFICATE-----Generated at Wed Jul 23 12:25:18 2025 by rpki-client