$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/1b20dd41-c9ad-38bd-bec3-d2964ae20ddc.roa File: 1b20dd41-c9ad-38bd-bec3-d2964ae20ddc.roa (raw, json) Hash identifier: kQmmwt7OT4uZzLFIVGUym8LjBBfBFdCdCnqA92k+Z40= Subject key identifier: 94:65:0C:0C:EA:66:9C:48:28:59:71:E4:02:0A:35:8F:1B:52:EA:F6 Certificate issuer: /CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a Certificate serial: 010D0C9F4328584A5335AC691C286D6120EBE140 Authority key identifier: 2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/1b20dd41-c9ad-38bd-bec3-d2964ae20ddc.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 22552 IP address blocks: 104.251.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:ac:69:1c:28:6d:61:20:eb:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=899befce-1065-4711-85b9-6135eba627cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5d:32:7c:8c:27:af:18:32:0b:ef:b7:b6:be: e1:31:90:7b:b8:76:05:a8:a5:de:8c:6e:3d:d2:7a: 57:34:6a:d7:80:ed:96:4b:9a:a2:fb:46:d4:64:46: f7:db:ec:ad:9a:43:e1:e9:a1:10:c7:46:12:71:a3: 58:9c:6b:c4:43:1f:13:01:09:d1:61:32:53:08:9d: ae:cc:15:a2:c6:01:2d:af:de:20:dc:d1:70:a7:b0: 07:d4:eb:da:eb:d3:76:bd:a8:1a:8f:42:81:5c:54: 6c:89:77:38:3c:4a:8a:11:c6:61:a0:cd:d9:33:9d: 1c:2f:39:03:df:cd:24:be:c5:b2:ba:50:43:62:e8: e3:71:02:36:0e:3b:4a:33:d6:ad:55:21:98:c9:1e: 1c:87:9e:d5:19:14:d8:fd:3c:d4:1b:1d:00:0c:77: ff:4e:da:2d:c5:2a:e5:7a:85:48:c7:2b:16:5f:90: 45:46:50:a7:73:c4:a1:dc:28:ce:1b:d7:09:7c:2c: 1f:4c:02:22:2d:41:1c:3b:96:65:86:95:47:76:6f: 37:be:2a:14:b0:10:93:fd:ff:11:98:de:ea:01:bd: 34:07:bd:60:0a:21:5a:c8:4b:be:d0:0c:0e:79:43: 8c:b4:62:d2:57:2d:93:c8:d1:1f:5c:b8:ba:4e:af: 6f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:65:0C:0C:EA:66:9C:48:28:59:71:E4:02:0A:35:8F:1B:52:EA:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/1b20dd41-c9ad-38bd-bec3-d2964ae20ddc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.crl X509v3 Authority Key Identifier: keyid:2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer sbgp-ipAddrBlock: critical IPv4: 104.251.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:21:96:81:45:71:c0:9a:44:cc:84:74:8f:1f:49:4e:ff:5a: be:aa:9b:17:65:9c:07:3d:63:c1:a5:55:84:ed:f8:47:5e:13: 74:e0:e3:64:3f:2d:1b:3d:b5:2c:20:fa:ab:c3:c6:49:f6:ed: 4f:12:d7:24:f8:6c:86:c2:1b:4c:04:22:2e:c1:33:c4:a9:2b: f5:68:e0:9d:89:33:69:c2:1a:8e:c4:c8:32:83:aa:22:e7:4c: c0:b4:68:f7:1e:22:dd:26:a6:bc:79:4d:ec:3d:ab:67:41:b1: e4:cd:04:0f:13:0b:bd:04:24:ee:b2:af:24:ce:f7:98:d5:38: f9:ab:52:ac:48:88:a3:83:62:de:f7:02:56:f9:21:4c:93:64: 75:2a:0d:13:3e:4e:5d:91:e9:e7:19:cf:57:7d:ad:a5:01:59: bd:87:e6:30:f3:f6:4a:10:0a:84:a3:82:20:18:24:84:23:97: 80:bc:c6:ae:f3:74:14:ad:78:80:cb:64:29:50:4c:f0:e6:d2: fb:fe:fa:4c:65:81:70:ad:66:eb:7f:00:09:67:cc:04:c9:14: bf:33:07:47:93:0d:b0:46:bb:97:47:09:42:49:0e:dc:78:34: 0a:cb:db:38:b2:c2:e2:a7:d3:27:4d:c2:42:83:9f:82:65:fd: 3e:44:a3:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNaxpHChtYSDr4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFiZGUwN2ItMjg4OC00NTkyLTgxNDUtZjRiY2QzZTNh MTJhMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk ODk5YmVmY2UtMTA2NS00NzExLTg1YjktNjEzNWViYTYyN2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7F0yfIwnrxgyC++3tr7hMZB7uHYFqKXejG49 0npXNGrXgO2WS5qi+0bUZEb32+ytmkPh6aEQx0YScaNYnGvEQx8TAQnRYTJTCJ2u zBWixgEtr94g3NFwp7AH1Ova69N2vagaj0KBXFRsiXc4PEqKEcZhoM3ZM50cLzkD 380kvsWyulBDYujjcQI2DjtKM9atVSGYyR4ch57VGRTY/TzUGx0ADHf/TtotxSrl eoVIxysWX5BFRlCnc8Sh3CjOG9cJfCwfTAIiLUEcO5ZlhpVHdm83vioUsBCT/f8R mN7qAb00B71gCiFayEu+0AwOeUOMtGLSVy2TyNEfXLi6Tq9vKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRlDAzqZpxIKFlx5AIKNY8bUur2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMWJk ZTA3Yi0yODg4LTQ1OTItODE0NS1mNGJjZDNlM2ExMmEvMWIyMGRkNDEtYzlhZC0z OGJkLWJlYzMtZDI5NjRhZTIwZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjFiZGUwN2ItMjg4OC00NTkyLTgx NDUtZjRiY2QzZTNhMTJhL2IxYmRlMDdiLTI4ODgtNDU5Mi04MTQ1LWY0YmNkM2Uz YTEyYS5jcmwwHwYDVR0jBBgwFoAUK+RPWssBQtxS7Wsbo+me/XzGY7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMWJkZTA3Yi0yODg4LTQ1OTItODE0NS1mNGJj ZDNlM2ExMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaPswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwhloFFccCaRMyEdI8fSU7/Wr6qmxdlnAc9Y8GlVYTt+EdeE3Tg42Q/ LRs9tSwg+qvDxkn27U8S1yT4bIbCG0wEIi7BM8SpK/Vo4J2JM2nCGo7EyDKDqiLn TMC0aPceIt0mprx5Tew9q2dBseTNBA8TC70EJO6yryTO95jVOPmrUqxIiKODYt73 Alb5IUyTZHUqDRM+Tl2R6ecZz1d9raUBWb2H5jDz9koQCoSjgiAYJIQjl4C8xq7z dBSteIDLZClQTPDm0vv++kxlgXCtZut/AAlnzATJFL8zB0eTDbBGu5dHCUJJDtx4 NArL2ziywuKn0ydNwkKDn4Jl/T5Eo2I= -----END CERTIFICATE-----Generated at Wed Jul 9 18:55:58 2025 by rpki-client