$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/0420671e-3982-3344-9b47-51bea31f38a2.roa File: 0420671e-3982-3344-9b47-51bea31f38a2.roa (raw, json) Hash identifier: 1rOI5R9GqVL8GY67kdWe7XzLaL54QUai1Mn5y/bK6+k= Subject key identifier: 47:14:2A:0C:87:00:64:B8:23:8D:E6:D8:51:68:B6:91:9E:04:CA:75 Certificate issuer: /CN=61078829-6930-46b0-9ac8-91898d36b056 Certificate serial: 010D0C9F4328584A62909EF91BDFD20769DDE880 Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/0420671e-3982-3344-9b47-51bea31f38a2.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 33548 IP address blocks: 104.200.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:9e:f9:1b:df:d2:07:69:dd:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=3b4bd4f1-89d9-4f38-9eb9-c7efded99917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:91:8e:cb:08:54:ca:ee:1e:ff:1e:7b:01:9c: 1c:a8:39:02:19:0e:c8:ff:33:6e:a3:5b:55:e2:b1: 5e:69:7c:77:46:56:b8:b3:d5:7f:77:03:fa:ad:7a: a2:b6:c1:8d:a0:89:7e:12:3d:76:a0:2c:ce:25:71: 90:c5:31:08:8a:d8:8f:30:cb:e8:c7:51:2a:93:18: 28:8b:09:4d:b6:57:27:2d:92:41:87:64:2e:69:ca: 7e:9e:81:f1:03:4e:3b:9d:d6:55:4c:f6:b9:cf:15: 60:7f:8b:4d:74:c6:f6:72:e1:0a:db:a7:e2:10:c7: 3c:a0:a5:fb:38:59:e1:a8:a8:48:46:a2:71:c8:f6: bd:ce:6c:c2:c9:67:0d:7f:c2:94:1e:2c:75:5e:0d: dc:67:9d:d5:d3:74:61:cf:a2:9a:ab:69:09:00:15: a3:4e:62:ef:5d:f1:fb:b8:69:a7:91:0e:3f:6b:33: 91:49:f1:b8:bd:26:48:92:82:e2:e5:0b:fc:ae:d5: e0:4a:35:61:cf:aa:1d:30:b6:2a:d5:8c:47:10:d5: 97:16:13:20:49:6a:92:2b:a9:42:50:54:bb:10:9a: f2:0b:55:20:cb:80:35:19:2e:a2:80:af:2f:f8:f8: c0:5d:0b:fd:b1:16:64:37:e9:41:5a:2b:08:b2:de: 50:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:14:2A:0C:87:00:64:B8:23:8D:E6:D8:51:68:B6:91:9E:04:CA:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/0420671e-3982-3344-9b47-51bea31f38a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl X509v3 Authority Key Identifier: keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer sbgp-ipAddrBlock: critical IPv4: 104.200.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:0a:7b:39:c8:dd:ea:35:aa:b3:a4:cc:43:9e:63:ba:4f:03: 18:3b:ee:40:aa:00:12:73:b1:66:bd:bc:ee:2a:1b:37:ac:48: c1:62:a1:98:da:dc:fa:ed:68:e5:0c:07:6b:b9:6d:d4:30:6f: 09:c4:5b:f2:f3:ce:ef:ae:a6:f6:8d:1e:d2:2d:7a:cb:8a:b0: ea:29:d2:2b:2f:14:d1:6a:bf:5f:fa:09:2f:26:e5:b6:36:98: 1e:27:33:99:ee:e6:bc:de:15:3f:fa:a5:65:87:4a:8f:87:58: cc:de:5c:b9:48:07:4b:77:02:18:56:76:fe:28:d9:50:2e:50: 57:67:4f:51:15:e5:2a:ed:5d:1a:de:b7:3d:8a:92:08:d0:15: 51:27:f4:ed:c0:7e:54:d1:18:9c:6e:df:f0:ad:9f:1f:93:0d: 51:bb:33:cd:3c:29:05:9d:f6:5c:25:02:d3:3a:47:67:b1:06: 6a:4b:1c:67:05:00:b0:0c:cb:b6:f3:cd:02:54:4f:2c:49:b8: 3b:9d:e8:73:d2:b0:3a:7e:6b:3e:3c:90:59:db:72:1e:c0:1b: 59:57:f0:17:8e:c3:2e:d1:b1:eb:ad:27:46:06:56:0e:d6:6e: e4:6b:cb:4c:79:bc:8f:bd:14:42:f1:cd:a9:a5:69:90:71:f0: 37:23:49:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJ75G9/SB2nd6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjEwNzg4MjktNjkzMC00NmIwLTlhYzgtOTE4OThkMzZi MDU2MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk M2I0YmQ0ZjEtODlkOS00ZjM4LTllYjktYzdlZmRlZDk5OTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5GOywhUyu4e/x57AZwcqDkCGQ7I/zNuo1tV 4rFeaXx3Rla4s9V/dwP6rXqitsGNoIl+Ej12oCzOJXGQxTEIitiPMMvox1Eqkxgo iwlNtlcnLZJBh2Quacp+noHxA047ndZVTPa5zxVgf4tNdMb2cuEK26fiEMc8oKX7 OFnhqKhIRqJxyPa9zmzCyWcNf8KUHix1Xg3cZ53V03Rhz6Kaq2kJABWjTmLvXfH7 uGmnkQ4/azORSfG4vSZIkoLi5Qv8rtXgSjVhz6odMLYq1YxHENWXFhMgSWqSK6lC UFS7EJryC1Ugy4A1GS6igK8v+PjAXQv9sRZkN+lBWisIst5QJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcUKgyHAGS4I43m2FFotpGeBMp1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MTA3 ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5OGQzNmIwNTYvMDQyMDY3MWUtMzk4Mi0z MzQ0LTliNDctNTFiZWEzMWYzOGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjEwNzg4MjktNjkzMC00NmIwLTlh YzgtOTE4OThkMzZiMDU2LzYxMDc4ODI5LTY5MzAtNDZiMC05YWM4LTkxODk4ZDM2 YjA1Ni5jcmwwHwYDVR0jBBgwFoAUIEXV2ie7S4lN1IK5ZqALwLa2VKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82MTA3ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5 OGQzNmIwNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYKeznI3eo1qrOkzEOeY7pPAxg77kCqABJzsWa9vO4qGzesSMFioZja 3PrtaOUMB2u5bdQwbwnEW/Lzzu+upvaNHtItesuKsOop0isvFNFqv1/6CS8m5bY2 mB4nM5nu5rzeFT/6pWWHSo+HWMzeXLlIB0t3AhhWdv4o2VAuUFdnT1EV5SrtXRre tz2KkgjQFVEn9O3AflTRGJxu3/Ctnx+TDVG7M808KQWd9lwlAtM6R2exBmpLHGcF ALAMy7bzzQJUTyxJuDud6HPSsDp+az48kFnbch7AG1lX8BeOwy7RseutJ0YGVg7W buRry0x5vI+9FELxzamlaZBx8DcjSUQ= -----END CERTIFICATE-----Generated at Wed Jul 9 21:32:56 2025 by rpki-client