$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/4749d5a9-351a-310d-a4b1-7d0866c068cd.roa File: 4749d5a9-351a-310d-a4b1-7d0866c068cd.roa (raw, json) Hash identifier: wlcMAIWm4gm6+41/en+VWCJ141THEsFngI5boxBE0VY= Subject key identifier: 24:2E:06:99:F8:89:95:67:08:30:CE:AB:63:E0:59:60:85:24:D0:D1 Certificate issuer: /CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Certificate serial: 010D0C9F4328584A6C55D5D73745FC1809C2BD80 Authority key identifier: C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/4749d5a9-351a-310d-a4b1-7d0866c068cd.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 49585 IP address blocks: 104.156.136.0/24 maxlen: 24 104.156.137.0/24 maxlen: 24 104.156.138.0/24 maxlen: 24 104.156.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:d5:d7:37:45:fc:18:09:c2:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=e29358a8-6836-44d3-8c68-1ab605b65ace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:70:89:57:a7:6c:eb:89:76:f3:dc:11:d1:28: 2d:62:e9:f0:b6:ec:7f:06:3b:c0:17:e9:97:31:77: 71:c6:50:35:05:a6:2f:b3:76:1b:ac:ff:33:39:7e: 32:07:78:27:98:5a:ca:b3:ea:78:19:35:70:fd:ac: 27:3a:ed:cd:94:46:12:62:06:a1:6e:b6:aa:60:50: b2:69:12:61:e2:53:eb:7b:fb:ad:4a:00:5b:93:0c: 5d:f3:43:a7:40:4d:66:e1:1d:44:03:42:c9:d5:87: 2e:fe:64:09:84:14:01:e4:52:22:3f:21:5f:f9:1a: f3:9a:b0:aa:a9:f8:76:2b:f6:25:65:57:5d:ad:4d: 6d:b9:a4:33:b2:69:0e:63:8e:ce:b1:50:92:47:48: 0d:73:83:28:e5:13:ef:01:01:66:33:28:5b:d0:63: 3d:f3:f7:c0:fd:9a:34:37:c3:1d:df:fb:20:77:03: c0:d7:e7:2a:47:3b:a7:bc:82:9d:5d:e2:12:8e:fd: 41:25:91:fb:44:be:07:10:f2:f7:d1:a1:cd:8b:23: 7f:7a:83:91:1a:e9:32:52:b9:b6:16:36:25:1b:48: 91:53:41:84:cc:be:55:a3:e3:99:53:17:95:23:80: b5:3b:85:fa:d4:d2:3d:6b:f2:aa:54:25:2d:d4:c6: 34:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2E:06:99:F8:89:95:67:08:30:CE:AB:63:E0:59:60:85:24:D0:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/4749d5a9-351a-310d-a4b1-7d0866c068cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl X509v3 Authority Key Identifier: keyid:C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer sbgp-ipAddrBlock: critical IPv4: 104.156.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:e9:18:86:78:aa:35:60:8b:c1:dd:f8:c6:73:a1:40:e3:e9: 0d:26:cc:53:a4:2b:0d:63:ab:77:c8:72:95:14:84:7a:2f:46: bd:fe:15:5c:35:4d:c8:ce:53:ef:16:11:9e:0c:38:8a:44:57: b0:80:bb:2b:b2:1a:7e:4f:4c:3b:f0:8a:ab:d2:ac:16:9b:7e: 00:2b:97:8d:5f:28:95:f9:07:9c:30:7b:a7:42:7e:89:5c:fb: 7d:a0:32:b1:29:7d:d8:1d:04:ff:b3:66:c2:3d:7a:ea:38:9a: ad:42:8a:05:4e:a7:01:0f:00:aa:82:f1:56:ae:3d:d1:32:62: c4:35:fe:bc:d2:54:46:79:28:6b:3c:f4:a0:fc:23:d2:d4:7c: 03:c9:36:10:c0:24:1a:9b:31:4d:0c:25:21:5e:f8:0c:86:13: 5f:bd:a9:67:7a:37:f2:5f:fa:26:65:69:58:b5:d0:43:41:d7: f1:17:e5:f2:17:b1:68:c5:8c:da:bf:6a:15:f8:27:dd:3c:ca: 2f:91:6b:d5:94:db:32:61:9a:88:e7:00:ca:35:7f:dd:17:50: ff:56:50:cb:73:85:21:29:b9:d6:6c:21:99:f0:5f:64:0d:d0: ad:eb:86:c8:87:08:5d:0f:b7:5a:9d:e6:a7:45:59:c9:43:50: 9c:a1:eb:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVdXXN0X8GAnCvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE4NzNlNWEtYTE2ZC00ODkwLThkZmUtYzI4MWJmNmUw MjBlMB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk ZTI5MzU4YTgtNjgzNi00NGQzLThjNjgtMWFiNjA1YjY1YWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHCJV6ds64l289wR0SgtYunwtux/BjvAF+mX MXdxxlA1BaYvs3YbrP8zOX4yB3gnmFrKs+p4GTVw/awnOu3NlEYSYgahbraqYFCy aRJh4lPre/utSgBbkwxd80OnQE1m4R1EA0LJ1Ycu/mQJhBQB5FIiPyFf+RrzmrCq qfh2K/YlZVddrU1tuaQzsmkOY47OsVCSR0gNc4Mo5RPvAQFmMyhb0GM98/fA/Zo0 N8Md3/sgdwPA1+cqRzunvIKdXeISjv1BJZH7RL4HEPL30aHNiyN/eoORGukyUrm2 FjYlG0iRU0GEzL5Vo+OZUxeVI4C1O4X61NI9a/KqVCUt1MY0yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQuBpn4iZVnCDDOq2PgWWCFJNDRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3 M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgxYmY2ZTAyMGUvNDc0OWQ1YTktMzUxYS0z MTBkLWE0YjEtN2QwODY2YzA2OGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjE4NzNlNWEtYTE2ZC00ODkwLThk ZmUtYzI4MWJmNmUwMjBlLzIxODczZTVhLWExNmQtNDg5MC04ZGZlLWMyODFiZjZl MDIwZS5jcmwwHwYDVR0jBBgwFoAUx3mnxj/aW1dVPvxCh5HuGzfxwqYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgx YmY2ZTAyMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/pGIZ4qjVgi8Hd+MZzoUDj6Q0mzFOkKw1jq3fIcpUUhHovRr3+FVw1 TcjOU+8WEZ4MOIpEV7CAuyuyGn5PTDvwiqvSrBabfgArl41fKJX5B5wwe6dCfolc +32gMrEpfdgdBP+zZsI9euo4mq1CigVOpwEPAKqC8VauPdEyYsQ1/rzSVEZ5KGs8 9KD8I9LUfAPJNhDAJBqbMU0MJSFe+AyGE1+9qWd6N/Jf+iZlaVi10ENB1/EX5fIX sWjFjNq/ahX4J908yi+Ra9WU2zJhmojnAMo1f90XUP9WUMtzhSEpudZsIZnwX2QN 0K3rhsiHCF0Pt1qd5qdFWclDUJyh65E= -----END CERTIFICATE-----Generated at Sat Jul 26 14:49:17 2025 by rpki-client