$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/baee71ad-3baa-3dab-8533-57d28b98781b.roa File: baee71ad-3baa-3dab-8533-57d28b98781b.roa (raw, json) Hash identifier: o8FoiRFtRlNqJnIAxpdljC5aH/Cu+1NZGlGa/NBBK30= Subject key identifier: 54:76:2F:2C:87:A8:CB:89:DA:08:BF:D7:15:0E:4A:D0:98:27:2B:32 Certificate issuer: /CN=39b2626e-a40d-46fc-b3c3-ff5a12195939 Certificate serial: 010D0C9F4328584A0A891E09E66501B577C05B40 Authority key identifier: 16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/baee71ad-3baa-3dab-8533-57d28b98781b.roa Signing time: Sun 01 Jun 2025 00:15:07 +0000 ROA not before: Sun 01 Jun 2025 00:15:07 +0000 ROA not after: Sat 30 Aug 2025 00:15:07 +0000 asID: 401707 IP address blocks: 104.232.11.0/24 maxlen: 24 2602:f899:fe::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0a:89:1e:09:e6:65:01:b5:77:c0:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39b2626e-a40d-46fc-b3c3-ff5a12195939 Validity Not Before: Jun 1 00:15:07 2025 GMT Not After : Aug 30 00:15:07 2025 GMT Subject: CN=04c554bb-7db7-4d24-b92d-1fa8e904c96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b8:f3:e4:e8:0b:c9:5c:4f:50:5b:1c:82:f9: 61:2c:aa:55:19:c0:10:ea:4f:ba:af:17:10:a3:f0: a0:b1:4f:98:c5:4d:79:d4:22:40:be:73:d9:c0:df: 98:28:d2:69:b4:0e:8d:82:24:11:09:1f:35:b4:c1: 72:4d:df:d6:d0:dc:2a:4e:44:d0:3c:7a:be:9f:65: b0:10:a7:50:6c:af:48:d9:7b:ae:58:bf:3f:0c:c3: d8:d0:e4:f2:d4:16:c9:66:10:2a:90:81:de:eb:2f: 00:c9:d1:c3:b9:ac:43:dc:b5:df:04:49:66:d2:2d: c1:37:b2:50:c7:5b:cd:57:35:10:84:18:63:b5:05: 51:d7:69:19:1c:08:ef:7c:25:59:d7:00:0f:d1:d6: 98:cc:e2:f8:56:63:e7:e0:57:c4:a6:10:80:39:dc: 47:5c:99:fa:c9:ff:59:34:16:07:25:ec:13:43:a0: 89:21:81:de:87:76:38:55:1c:61:5b:0a:48:9b:1f: 3f:52:f8:12:5b:ab:d1:6a:7d:56:42:e2:56:b3:24: 3f:e2:15:13:3f:49:5b:0f:5d:29:c6:26:9a:65:b3: 41:6f:88:6a:83:4e:b7:7f:13:06:ba:0b:78:15:14: 9c:72:a8:88:cd:f8:04:ad:73:7a:34:b7:f6:09:3d: bc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:76:2F:2C:87:A8:CB:89:DA:08:BF:D7:15:0E:4A:D0:98:27:2B:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/baee71ad-3baa-3dab-8533-57d28b98781b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.crl X509v3 Authority Key Identifier: keyid:16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer sbgp-ipAddrBlock: critical IPv4: 104.232.11.0/24 IPv6: 2602:f899:fe::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d0:85:ac:45:4e:b8:39:50:9c:56:c0:2f:5f:f3:1b:99:b9: 14:0d:70:c1:09:89:e6:69:1d:fa:48:4f:8d:74:2d:87:22:2a: c6:7e:41:d1:62:8e:42:d9:f1:02:7e:ae:e2:1c:4d:01:eb:ef: 01:7a:d5:3d:d6:b1:6a:3b:d5:23:dc:8c:85:f3:81:8e:b4:d8: 32:02:03:76:f6:a3:22:bd:de:fe:6c:35:95:93:2d:a2:52:fc: b9:c0:9e:88:a3:b9:3f:24:1c:21:0f:c5:1b:0d:ef:fb:fc:cc: e2:87:14:f2:cc:86:4c:3e:df:b9:56:62:cd:3d:87:8c:87:b0: 5b:ab:60:3d:60:85:90:69:72:26:56:44:58:9f:98:bd:03:3c: 17:b2:86:70:a3:c1:2d:49:18:fc:09:fd:d0:24:b1:01:63:a4: 50:97:7d:7d:27:9f:f6:4a:38:af:9e:da:3d:d7:d6:75:17:a7: a2:6b:a9:10:95:ab:1a:dd:2b:11:51:0f:2b:1f:e8:a9:b3:9d: 56:9d:06:e8:21:31:41:85:02:6b:51:99:71:ad:36:3f:30:50: 72:1a:db:11:13:34:2a:80:4b:80:ce:d1:62:0a:c3:ab:50:3b: d1:0f:a2:0d:fa:1f:33:29:2f:d1:2a:4c:a5:7b:e4:c3:61:fb: 0c:b2:73:50 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEoKiR4J5mUBtXfAW0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzliMjYyNmUtYTQwZC00NmZjLWIzYzMtZmY1YTEyMTk1 OTM5MB4XDTI1MDYwMTAwMTUwN1oXDTI1MDgzMDAwMTUwN1owLzEtMCsGA1UEAxMk MDRjNTU0YmItN2RiNy00ZDI0LWI5MmQtMWZhOGU5MDRjOTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrjz5OgLyVxPUFscgvlhLKpVGcAQ6k+6rxcQ o/CgsU+YxU151CJAvnPZwN+YKNJptA6NgiQRCR81tMFyTd/W0NwqTkTQPHq+n2Ww EKdQbK9I2XuuWL8/DMPY0OTy1BbJZhAqkIHe6y8AydHDuaxD3LXfBElm0i3BN7JQ x1vNVzUQhBhjtQVR12kZHAjvfCVZ1wAP0daYzOL4VmPn4FfEphCAOdxHXJn6yf9Z NBYHJewTQ6CJIYHeh3Y4VRxhWwpImx8/UvgSW6vRan1WQuJWsyQ/4hUTP0lbD10p xiaaZbNBb4hqg063fxMGugt4FRSccqiIzfgErXN6NLf2CT28HQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFFR2LyyHqMuJ2gi/1xUOStCYJysyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOWIy NjI2ZS1hNDBkLTQ2ZmMtYjNjMy1mZjVhMTIxOTU5MzkvYmFlZTcxYWQtM2JhYS0z ZGFiLTg1MzMtNTdkMjhiOTg3ODFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzliMjYyNmUtYTQwZC00NmZjLWIz YzMtZmY1YTEyMTk1OTM5LzM5YjI2MjZlLWE0MGQtNDZmYy1iM2MzLWZmNWExMjE5 NTkzOS5jcmwwHwYDVR0jBBgwFoAUFlk2LKpBOBxjTu4FUkfAgNzA2YAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOWIyNjI2ZS1hNDBkLTQ2ZmMtYjNjMy1mZjVh MTIxOTU5MzkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAaOgLMA8E AgACMAkDBwEmAviZAP4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfNCFrEVOuDlQnFbAL1/zG5m5FA1wwQmJ 5mkd+khPjXQthyIqxn5B0WKOQtnxAn6u4hxNAevvAXrVPdaxajvVI9yMhfOBjrTY MgIDdvajIr3e/mw1lZMtolL8ucCeiKO5PyQcIQ/FGw3v+/zM4ocU8syGTD7fuVZi zT2HjIewW6tgPWCFkGlyJlZEWJ+YvQM8F7KGcKPBLUkY/An90CSxAWOkUJd9fSef 9ko4r57aPdfWdRenomupEJWrGt0rEVEPKx/oqbOdVp0G6CExQYUCa1GZca02PzBQ chrbERM0KoBLgM7RYgrDq1A70Q+iDfofMykv0SpMpXvkw2H7DLJzUA== -----END CERTIFICATE-----Generated at Sun Jun 8 20:29:49 2025 by rpki-client