$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/b97a4bd7-5509-3b4c-b144-618edbe6fa2d.roa File: b97a4bd7-5509-3b4c-b144-618edbe6fa2d.roa (raw, json) Hash identifier: rK5gBCtWlpk9uaKW3OloUm6DHGUW3dMuM7fG5xcYHPs= Subject key identifier: 1B:C8:E1:2A:06:80:C0:3A:5E:49:B9:85:80:D8:F1:24:84:D4:21:DD Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F4328584A5FC5E7DEFC4C4370B8A88F40 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/b97a4bd7-5509-3b4c-b144-618edbe6fa2d.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 16509 IP address blocks: 104.218.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e7:de:fc:4c:43:70:b8:a8:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=20fd339e-bca3-4dbd-a068-919e49b5e1e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0e:14:a2:0f:b8:01:6f:4c:d3:c4:81:f1:68: 5c:d1:4a:b1:f8:33:fb:54:3a:30:71:68:76:4c:6c: e7:38:81:7f:52:04:56:00:88:ec:58:59:0a:d4:9d: c0:4d:fc:33:9b:9e:8f:df:eb:64:c1:2a:02:79:b9: 63:48:12:d2:9f:c2:c2:2c:8a:3a:e9:15:63:49:39: 91:ce:d3:35:c5:ef:09:61:a0:9d:ab:04:24:bb:f3: c9:0f:94:4b:3f:67:f0:dc:b2:f8:d2:18:45:78:0f: 15:ac:10:9f:52:b6:39:83:fd:b6:58:1e:39:5b:17: 03:3a:25:68:da:5c:1c:de:43:30:8b:17:e9:90:d7: cc:f4:39:19:75:ff:cf:03:3b:8b:d2:1e:bc:d9:14: 51:00:f8:cb:15:db:6e:66:5d:10:fb:97:83:29:03: 87:22:bc:f2:3b:ee:0a:ae:dc:15:b9:4f:6c:4f:e7: 51:a8:c3:d8:5e:9b:c7:20:26:63:83:7b:2d:2b:ff: de:5c:73:08:32:4b:ea:2e:31:5b:1d:58:11:e0:bd: 6c:14:c4:18:c0:5d:be:04:6a:dc:bd:da:a4:0a:a3: 11:52:20:3c:99:10:03:d3:55:48:78:89:0f:b9:5b: 42:51:87:96:ad:4b:31:2d:21:2e:23:83:9e:5e:9f: 34:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C8:E1:2A:06:80:C0:3A:5E:49:B9:85:80:D8:F1:24:84:D4:21:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/b97a4bd7-5509-3b4c-b144-618edbe6fa2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv4: 104.218.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:b2:98:ee:99:20:d0:79:88:03:eb:54:6a:3a:fd:18:72:61: 8c:8f:71:12:0d:a7:32:f1:9c:37:03:7c:8c:46:28:a5:20:1c: e9:3b:79:0c:e3:e1:1b:12:5b:5d:89:fd:fa:29:61:a1:b4:54: 11:09:a9:5f:47:b5:35:e5:af:3e:96:18:94:92:23:5e:13:50: 6d:64:21:de:7d:66:17:95:49:b2:4d:ac:7a:ee:4a:5f:a2:50: c5:f1:b6:b3:c3:dc:fd:d9:a3:c0:cd:06:ed:77:be:50:1c:26: e1:cf:48:57:6d:35:a7:c2:ca:fc:4a:38:ef:1b:a2:9f:aa:9f: 0b:d1:c0:fa:21:12:d4:a1:34:77:21:24:2c:eb:ce:98:5f:f1: ec:89:01:fd:4c:75:2c:29:e8:dc:fd:b2:a3:3f:60:35:de:4d: 58:14:55:92:46:01:47:e5:6b:52:a7:a0:55:ac:ff:f1:00:e6: 64:99:28:b4:cb:89:53:9b:55:26:78:d7:fe:c9:eb:b4:91:3e: 70:ae:6f:6b:21:b5:32:f9:98:b8:21:6f:e2:70:41:ed:35:8c: ca:81:88:66:97:97:32:12:e9:74:43:87:94:93:db:33:ae:38: a7:e4:11:e5:39:d6:0b:10:0d:88:d4:3d:c7:bc:2d:c7:7c:d4: 0f:29:c0:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxefe/ExDcLioj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk MjBmZDMzOWUtYmNhMy00ZGJkLWEwNjgtOTE5ZTQ5YjVlMWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ4Uog+4AW9M08SB8Whc0Uqx+DP7VDowcWh2 TGznOIF/UgRWAIjsWFkK1J3ATfwzm56P3+tkwSoCebljSBLSn8LCLIo66RVjSTmR ztM1xe8JYaCdqwQku/PJD5RLP2fw3LL40hhFeA8VrBCfUrY5g/22WB45WxcDOiVo 2lwc3kMwixfpkNfM9DkZdf/PAzuL0h682RRRAPjLFdtuZl0Q+5eDKQOHIrzyO+4K rtwVuU9sT+dRqMPYXpvHICZjg3stK//eXHMIMkvqLjFbHVgR4L1sFMQYwF2+BGrc vdqkCqMRUiA8mRAD01VIeIkPuVtCUYeWrUsxLSEuI4OeXp80PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvI4SoGgMA6Xkm5hYDY8SSE1CHdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvYjk3YTRiZDctNTUwOS0z YjRjLWIxNDQtNjE4ZWRiZTZmYTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCymO6ZINB5iAPrVGo6/RhyYYyPcRINpzLxnDcDfIxGKKUgHOk7eQzj 4RsSW12J/fopYaG0VBEJqV9HtTXlrz6WGJSSI14TUG1kId59ZheVSbJNrHruSl+i UMXxtrPD3P3Zo8DNBu13vlAcJuHPSFdtNafCyvxKOO8bop+qnwvRwPohEtShNHch JCzrzphf8eyJAf1MdSwp6Nz9sqM/YDXeTVgUVZJGAUfla1KnoFWs//EA5mSZKLTL iVObVSZ41/7J67SRPnCub2shtTL5mLghb+JwQe01jMqBiGaXlzIS6XRDh5ST2zOu OKfkEeU51gsQDYjUPce8Lcd81A8pwAg= -----END CERTIFICATE-----Generated at Thu Jul 10 11:29:38 2025 by rpki-client