$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/cd4fd3cf-f44a-34d3-9cf9-b4d328d19fbb.roa File: cd4fd3cf-f44a-34d3-9cf9-b4d328d19fbb.roa (raw, json) Hash identifier: Yv35/oEL2RjPiWJocTKtKxwAR932u/EEWF38PzAYerI= Subject key identifier: FD:6F:EF:6D:74:94:42:A3:BD:36:4F:E1:AA:2A:60:81:7B:7D:F5:E9 Certificate issuer: /CN=657b5e5f-0699-429f-8c83-a39c9a7a0322 Certificate serial: 010D0C9F4328584AC2E10DD28A60CE70ABA44820 Authority key identifier: 85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/cd4fd3cf-f44a-34d3-9cf9-b4d328d19fbb.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 104.243.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:0d:d2:8a:60:ce:70:ab:a4:48:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=657b5e5f-0699-429f-8c83-a39c9a7a0322 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=cdf9edf8-aa93-4702-a9e8-0840d352fb96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0b:88:6e:5e:a0:b6:7c:2c:09:7b:df:62:50: cd:7b:f8:c2:d5:e4:b4:21:49:8b:ea:91:9d:08:1d: 09:32:5b:49:44:f6:75:e8:3f:e5:4e:3b:a4:68:1c: 94:e0:ee:d1:b1:c5:1e:d6:ed:c7:a9:b5:ec:db:dd: 3d:69:cf:54:63:22:ec:4a:b6:2f:ce:5f:c8:bf:e5: 20:90:64:6b:ed:5d:98:b3:c8:67:e0:9f:af:a6:76: c0:91:2d:ef:dc:06:00:d6:fb:28:44:68:72:ff:b7: 2e:b4:6a:5f:df:04:a7:c3:b9:ba:a7:e1:73:fb:1c: 16:e2:3f:cc:72:93:09:b2:48:30:01:a4:14:d0:97: f7:cd:c2:e4:1e:40:12:9c:0d:6e:e0:24:ec:a0:00: 8f:1a:07:ef:d3:0b:95:30:9a:c1:27:a9:32:79:a0: 13:f3:4c:a8:4c:9c:fb:f0:35:01:a6:fb:4e:96:da: d7:ea:fc:ba:b4:eb:3e:26:fb:c1:b2:df:ec:0f:20: 74:4a:c4:17:d6:dc:68:04:44:9d:88:7d:59:a7:04: 35:eb:f1:a4:a2:53:71:b6:e3:f2:2b:2b:bc:78:ba: 0f:fe:81:54:86:6b:f7:e0:f2:50:1e:6b:be:a2:5c: 80:5e:23:2f:3c:18:ee:66:2a:db:24:b1:a6:59:00: fe:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6F:EF:6D:74:94:42:A3:BD:36:4F:E1:AA:2A:60:81:7B:7D:F5:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/cd4fd3cf-f44a-34d3-9cf9-b4d328d19fbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl X509v3 Authority Key Identifier: keyid:85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer sbgp-ipAddrBlock: critical IPv4: 104.243.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:b2:40:47:28:0c:ed:91:e8:d9:68:27:eb:93:e4:3b:2e:7a: 2d:c3:60:ef:8c:8c:ba:af:82:8d:e5:bd:f6:60:6f:ac:de:1b: 77:4e:ff:b2:ab:9a:8e:ab:f4:f7:b4:fe:5b:90:37:97:7c:65: fc:c3:27:5a:1d:57:eb:72:71:83:fb:a0:3e:e3:8a:44:51:78: 66:97:fc:93:2f:99:24:85:3c:cf:7c:90:b7:79:60:a7:47:d6: 5b:48:d9:87:8c:2b:ca:cc:93:ee:8b:c6:04:40:34:0c:e5:29: 26:6d:3e:3d:8b:90:c5:2b:e4:6a:4e:4c:8f:b4:d9:0c:b4:e0: a7:d1:82:7b:bd:ec:5b:65:22:d0:44:c4:08:1f:ea:4c:a1:e0: 69:c1:71:d6:79:ad:28:8d:3d:09:85:43:ac:ce:84:1f:34:f7: f3:5f:ba:69:05:b0:46:db:61:25:47:d6:a4:f8:6e:48:24:0b: df:01:81:0c:2f:f2:f3:40:56:46:48:db:38:00:a0:5d:71:60: 04:b0:56:bc:c0:99:de:43:2c:87:19:1f:72:6f:67:69:d3:7c: 34:06:75:98:cc:c2:fc:de:1b:b5:a1:93:7f:2f:68:07:29:ba: 2f:ce:72:9f:39:48:1e:71:85:2f:c6:68:69:63:41:69:fd:3e: da:99:c0:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Q3SimDOcKukSCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU3YjVlNWYtMDY5OS00MjlmLThjODMtYTM5YzlhN2Ew MzIyMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk Y2RmOWVkZjgtYWE5My00NzAyLWE5ZTgtMDg0MGQzNTJmYjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAuIbl6gtnwsCXvfYlDNe/jC1eS0IUmL6pGd CB0JMltJRPZ16D/lTjukaByU4O7RscUe1u3HqbXs2909ac9UYyLsSrYvzl/Iv+Ug kGRr7V2Ys8hn4J+vpnbAkS3v3AYA1vsoRGhy/7cutGpf3wSnw7m6p+Fz+xwW4j/M cpMJskgwAaQU0Jf3zcLkHkASnA1u4CTsoACPGgfv0wuVMJrBJ6kyeaAT80yoTJz7 8DUBpvtOltrX6vy6tOs+JvvBst/sDyB0SsQX1txoBESdiH1ZpwQ16/GkolNxtuPy Kyu8eLoP/oFUhmv34PJQHmu+olyAXiMvPBjuZirbJLGmWQD+twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1v7210lEKjvTZP4aoqYIF7ffXpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82NTdi NWU1Zi0wNjk5LTQyOWYtOGM4My1hMzljOWE3YTAzMjIvY2Q0ZmQzY2YtZjQ0YS0z NGQzLTljZjktYjRkMzI4ZDE5ZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjU3YjVlNWYtMDY5OS00MjlmLThj ODMtYTM5YzlhN2EwMzIyLzY1N2I1ZTVmLTA2OTktNDI5Zi04YzgzLWEzOWM5YTdh MDMyMi5jcmwwHwYDVR0jBBgwFoAUhSb8rQNqMi+Cj148GAC/WbmIDswwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82NTdiNWU1Zi0wNjk5LTQyOWYtOGM4My1hMzlj OWE3YTAzMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+yQEcoDO2R6NloJ+uT5Dsuei3DYO+MjLqvgo3lvfZgb6zeG3dO/7Kr mo6r9Pe0/luQN5d8ZfzDJ1odV+tycYP7oD7jikRReGaX/JMvmSSFPM98kLd5YKdH 1ltI2YeMK8rMk+6LxgRANAzlKSZtPj2LkMUr5GpOTI+02Qy04KfRgnu97FtlItBE xAgf6kyh4GnBcdZ5rSiNPQmFQ6zOhB809/NfumkFsEbbYSVH1qT4bkgkC98BgQwv 8vNAVkZI2zgAoF1xYASwVrzAmd5DLIcZH3JvZ2nTfDQGdZjMwvzeG7Whk38vaAcp ui/Ocp85SB5xhS/GaGljQWn9PtqZwAA= -----END CERTIFICATE-----Generated at Wed Aug 20 10:42:51 2025 by rpki-client