$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/643b1254-d7f1-376e-9ab7-2d0174638962.roa File: 643b1254-d7f1-376e-9ab7-2d0174638962.roa (raw, json) Hash identifier: aJTe2gP7abAH5o7EY2OYhIM7PycBLdcxOEp4478jq6o= Subject key identifier: 2E:89:BE:97:6A:01:8E:38:32:B4:37:0B:8A:8F:3C:90:44:10:C9:2A Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F4328584A612B1423B7ADFAFC85E5A0D0 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/643b1254-d7f1-376e-9ab7-2d0174638962.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 397423 IP address blocks: 104.245.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:14:23:b7:ad:fa:fc:85:e5:a0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=bbd340f4-5b1e-479c-9aca-2b46ceb11180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a2:06:96:76:57:8b:5c:b5:1e:ab:ba:95:f7: 5a:56:88:0a:9f:2a:b2:c8:f9:17:eb:09:d2:41:64: 9c:88:dc:9d:67:11:4b:ac:ac:5c:d4:c5:0f:d7:60: a9:a6:7b:18:91:47:1d:85:87:0c:52:20:5b:3a:f7: 20:20:7b:67:c2:79:4b:c8:c1:40:02:8f:25:8f:5a: 7c:80:4e:85:e2:ad:4a:d7:fe:cf:3d:f5:6c:c7:c5: 03:be:d9:bc:5e:2f:0e:bd:30:ff:20:db:58:22:3d: 00:9b:54:7b:e1:08:59:d9:1d:6b:a9:f1:a4:bd:52: c0:31:a9:ea:cf:d4:24:ad:54:46:2a:b3:6b:9a:f4: d2:77:71:3d:79:7c:c5:a1:a5:d3:5a:77:a1:a4:37: d7:b1:e3:89:68:78:4e:4b:3b:ba:c4:c0:be:6e:32: 84:44:16:a3:68:80:b2:9e:08:01:4e:82:54:8d:66: a1:b8:cd:c7:b5:ef:4a:b0:82:50:a0:32:32:d8:6a: a7:e5:74:94:2c:d2:66:3d:f3:cc:5c:70:8d:3a:30: 58:11:b3:de:83:54:a3:be:e6:31:df:d6:97:2d:ef: 35:b1:16:06:51:c9:0f:e9:d6:78:1f:9e:fa:b3:20: 4b:58:da:5f:c5:c8:68:7d:03:25:cc:30:54:26:f1: 45:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:89:BE:97:6A:01:8E:38:32:B4:37:0B:8A:8F:3C:90:44:10:C9:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/643b1254-d7f1-376e-9ab7-2d0174638962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 104.245.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:27:2a:37:17:ba:ec:a8:6d:76:f2:5b:07:68:e1:6e:30:c5: 51:7c:d3:42:07:2a:62:6e:df:7e:fa:6d:a5:d5:5d:91:31:96: 4c:4a:fe:97:40:bc:aa:62:34:92:03:d6:83:1b:ef:05:f7:e4: 5f:ff:f9:bf:11:4e:7a:49:5e:7d:d8:2d:f2:a4:87:11:a0:86: 74:aa:58:7d:16:cc:12:a4:62:12:80:82:79:4f:25:f8:8a:05: 56:02:0f:6d:f2:af:13:c7:54:8e:8e:d0:a8:59:60:a7:ab:b4: de:fb:c9:53:12:a8:89:25:9d:9e:59:9b:3f:0e:b7:88:a5:d2: 35:d2:84:f3:c3:bb:62:68:3d:89:bb:f6:78:69:28:99:7a:e2: 7a:1a:f2:9d:71:b4:c9:68:e6:1e:35:eb:c1:ba:80:9a:11:15: 66:8e:b4:43:63:e4:c1:f3:6b:66:cb:c5:64:8c:f7:02:64:89: ae:61:7b:a7:66:da:7e:ff:ce:8f:ef:22:0d:42:7f:8d:05:c9: 02:0e:ae:32:f0:35:bf:b6:71:0e:f1:b4:86:c7:c8:87:de:80: 3e:e0:ca:48:fb:02:17:7d:54:d3:df:2a:bf:7c:11:1b:c8:ce: 31:d8:e2:d5:30:07:12:1b:6d:aa:50:90:01:f5:38:80:8e:5f: 72:59:3f:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxQjt636/IXloNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk YmJkMzQwZjQtNWIxZS00NzljLTlhY2EtMmI0NmNlYjExMTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqIGlnZXi1y1Hqu6lfdaVogKnyqyyPkX6wnS QWSciNydZxFLrKxc1MUP12CppnsYkUcdhYcMUiBbOvcgIHtnwnlLyMFAAo8lj1p8 gE6F4q1K1/7PPfVsx8UDvtm8Xi8OvTD/INtYIj0Am1R74QhZ2R1rqfGkvVLAManq z9QkrVRGKrNrmvTSd3E9eXzFoaXTWnehpDfXseOJaHhOSzu6xMC+bjKERBajaICy nggBToJUjWahuM3Hte9KsIJQoDIy2Gqn5XSULNJmPfPMXHCNOjBYEbPeg1SjvuYx 39aXLe81sRYGUckP6dZ4H576syBLWNpfxchofQMlzDBUJvFFDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6JvpdqAY44MrQ3C4qPPJBEEMkqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvNjQzYjEyNTQtZDdmMS0z NzZlLTlhYjctMmQwMTc0NjM4OTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMnKjcXuuyobXbyWwdo4W4wxVF800IHKmJu3376baXVXZExlkxK/pdA vKpiNJID1oMb7wX35F//+b8RTnpJXn3YLfKkhxGghnSqWH0WzBKkYhKAgnlPJfiK BVYCD23yrxPHVI6O0KhZYKertN77yVMSqIklnZ5Zmz8Ot4il0jXShPPDu2JoPYm7 9nhpKJl64noa8p1xtMlo5h4168G6gJoRFWaOtENj5MHza2bLxWSM9wJkia5he6dm 2n7/zo/vIg1Cf40FyQIOrjLwNb+2cQ7xtIbHyIfegD7gykj7Ahd9VNPfKr98ERvI zjHY4tUwBxIbbapQkAH1OICOX3JZP8Y= -----END CERTIFICATE-----Generated at Fri Jul 25 00:55:54 2025 by rpki-client