$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/58ad2792-dfe9-39d9-8e32-bb768e23741b.roa File: 58ad2792-dfe9-39d9-8e32-bb768e23741b.roa (raw, json) Hash identifier: +U5SD3T2v5+TeRPXHD9bdnzju4CkGN79ziwGeCoKGAo= Subject key identifier: BD:F4:82:D9:64:DD:B8:8E:A6:57:88:09:2B:21:2F:57:31:30:44:71 Certificate issuer: /CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8 Certificate serial: 010D0C9F4328584A6C55D2ECBD33026A03241D80 Authority key identifier: D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/58ad2792-dfe9-39d9-8e32-bb768e23741b.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 63267 IP address blocks: 104.171.208.0/24 maxlen: 24 104.171.209.0/24 maxlen: 24 104.171.210.0/24 maxlen: 24 104.171.211.0/24 maxlen: 24 104.171.212.0/24 maxlen: 24 104.171.213.0/24 maxlen: 24 104.171.214.0/24 maxlen: 24 104.171.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:d2:ec:bd:33:02:6a:03:24:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=a09ffc04-b283-40f1-bd7f-595b8946d3ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4c:03:7a:b4:72:d3:90:d2:71:9f:e4:7b:33: c9:55:c4:85:de:4a:cc:93:55:f6:6d:fb:67:38:6c: 88:ea:22:9e:d9:5d:24:9a:9e:eb:50:73:32:60:e4: 54:af:ba:40:be:c2:63:85:b1:e9:f8:e0:d8:a2:7e: 9f:eb:16:cb:bf:5f:fa:e0:14:e8:6a:8e:f8:48:fc: 60:1f:ad:b8:1a:f3:f9:04:32:49:97:aa:1d:e1:e7: 9b:0d:61:e6:4f:d5:36:21:5b:cd:38:25:17:09:d9: e5:2c:0f:22:40:44:7c:59:4e:ce:78:98:be:f5:a5: ac:a4:17:ff:1e:c3:2c:37:88:44:e5:52:8a:26:94: 6d:20:05:af:31:eb:61:a6:0d:b2:d5:ef:ab:ef:70: 32:f5:b6:fa:1f:fd:ea:09:5c:ab:fe:b8:de:1f:5c: f1:69:78:d2:11:21:2a:db:33:36:46:28:41:8d:a7: a4:f8:d9:e9:e8:ba:67:1d:8a:4f:17:b4:3d:30:e7: 5c:18:e6:4a:90:cd:a0:60:ec:76:3f:ff:cb:6c:9b: e2:c3:bb:1c:18:a5:05:ea:e4:54:bf:15:8c:ec:d9: 69:b0:73:30:e5:90:bd:5f:7f:4f:1e:ee:ed:8f:9a: 43:bb:4e:10:dc:04:ec:07:69:5d:53:c5:0d:c1:8c: 73:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F4:82:D9:64:DD:B8:8E:A6:57:88:09:2B:21:2F:57:31:30:44:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/58ad2792-dfe9-39d9-8e32-bb768e23741b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl X509v3 Authority Key Identifier: keyid:D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer sbgp-ipAddrBlock: critical IPv4: 104.171.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b8:12:e8:75:fd:58:35:31:a7:9c:7d:ec:66:cc:eb:1f:36: f2:86:99:81:3a:b2:63:de:a5:73:94:37:05:d6:5d:ad:a2:71: 64:e5:3b:42:85:ed:74:a2:6b:a2:ea:ad:10:53:91:25:be:4c: 65:02:a2:54:51:63:91:93:a8:d3:e2:1b:ab:31:29:57:8e:e2: 15:6c:5a:46:76:d5:04:12:11:fa:3c:28:88:ae:66:a3:78:a3: 94:c0:70:2f:d4:94:f7:63:46:55:c8:50:b2:7e:72:0c:78:cd: 4f:54:ee:ae:80:30:90:b6:e6:01:25:f7:7e:4c:08:1a:08:5d: 0f:d3:3b:a5:96:38:08:15:04:64:d9:4d:3d:fb:64:3d:b1:58: cb:60:72:bf:54:85:28:13:b5:cf:05:2c:40:91:38:fd:69:91: 99:5e:ac:6f:5b:25:50:ab:dd:26:0f:7b:f9:5f:b8:93:62:7e: c4:26:51:5f:34:68:e9:2c:e5:a4:d2:91:53:7d:d4:2f:a0:5f: f0:c6:c6:68:ad:ea:e3:ab:15:36:24:4b:4e:07:e1:5b:0f:e6: 42:08:be:40:b0:2a:ca:e2:c1:d8:c7:db:8d:21:79:b6:43:1e: 33:a9:60:e1:d3:2f:90:26:73:e8:84:35:09:4b:84:c1:52:ba: 13:53:a7:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVdLsvTMCagMkHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjdjN2EzNDQtNGJjNy00NjhiLWFkMzAtM2I5YzAwNmNk MGM4MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk YTA5ZmZjMDQtYjI4My00MGYxLWJkN2YtNTk1Yjg5NDZkM2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUwDerRy05DScZ/kezPJVcSF3krMk1X2bftn OGyI6iKe2V0kmp7rUHMyYORUr7pAvsJjhbHp+ODYon6f6xbLv1/64BToao74SPxg H624GvP5BDJJl6od4eebDWHmT9U2IVvNOCUXCdnlLA8iQER8WU7OeJi+9aWspBf/ HsMsN4hE5VKKJpRtIAWvMethpg2y1e+r73Ay9bb6H/3qCVyr/rjeH1zxaXjSESEq 2zM2RihBjaek+Nnp6LpnHYpPF7Q9MOdcGOZKkM2gYOx2P//LbJviw7scGKUF6uRU vxWM7NlpsHMw5ZC9X39PHu7tj5pDu04Q3ATsB2ldU8UNwYxzZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL30gtlk3biOpleICSshL1cxMERxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yN2M3 YTM0NC00YmM3LTQ2OGItYWQzMC0zYjljMDA2Y2QwYzgvNThhZDI3OTItZGZlOS0z OWQ5LThlMzItYmI3NjhlMjM3NDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjdjN2EzNDQtNGJjNy00NjhiLWFk MzAtM2I5YzAwNmNkMGM4LzI3YzdhMzQ0LTRiYzctNDY4Yi1hZDMwLTNiOWMwMDZj ZDBjOC5jcmwwHwYDVR0jBBgwFoAU2UqH6Z9k85IcgEkD0OABbmMYM90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yN2M3YTM0NC00YmM3LTQ2OGItYWQzMC0zYjlj MDA2Y2QwYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaKvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFC4Euh1/Vg1MaecfexmzOsfNvKGmYE6smPepXOUNwXWXa2icWTlO0KF 7XSia6LqrRBTkSW+TGUColRRY5GTqNPiG6sxKVeO4hVsWkZ21QQSEfo8KIiuZqN4 o5TAcC/UlPdjRlXIULJ+cgx4zU9U7q6AMJC25gEl935MCBoIXQ/TO6WWOAgVBGTZ TT37ZD2xWMtgcr9UhSgTtc8FLECROP1pkZlerG9bJVCr3SYPe/lfuJNifsQmUV80 aOks5aTSkVN91C+gX/DGxmit6uOrFTYkS04H4VsP5kIIvkCwKsriwdjH240hebZD HjOpYOHTL5Amc+iENQlLhMFSuhNTp7Q= -----END CERTIFICATE-----Generated at Thu Jul 10 13:44:25 2025 by rpki-client