$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa File: b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa (raw, json) Hash identifier: 8l+t/vfO9tb7t7LrxvPpb0LhJIuW1IfD/KaHURRFlBU= Subject key identifier: 28:07:3C:27:D2:2B:F7:65:A2:22:34:B2:7D:EA:BD:1E:99:83:BF:86 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76BF0556928C58C3E55940 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 104.220.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:bf:05:56:92:8c:58:c3:e5:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=0da2d894-891b-4679-b2f5-961fde3c666c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e7:7a:e8:37:dc:85:7c:9f:fa:04:4a:de:87: c6:a6:b9:66:03:f4:e2:1e:c5:bc:bc:34:f5:2b:6b: b4:5d:0a:07:4a:d5:82:38:cd:83:4d:40:44:0d:26: d1:d2:50:2c:22:b3:5b:c5:2c:57:35:c9:a0:b8:bd: 36:2d:d9:b3:ac:09:94:94:f4:85:fc:2a:8f:37:6a: 67:66:24:e4:c2:a4:47:1e:fa:71:75:9f:7b:db:07: d3:98:66:0d:cd:35:08:b2:a6:65:5a:72:a8:bd:d8: 8c:f7:b5:1b:61:9f:f5:71:4e:95:e0:a5:5a:91:60: 17:73:26:b8:9a:f4:be:9f:ae:3a:2e:c4:74:b9:17: b4:eb:23:e5:9c:48:de:b2:63:a0:a7:e1:b5:f1:04: c9:dd:ec:10:57:9f:ea:5a:96:80:0f:44:ae:97:6f: 73:93:1b:69:ec:e0:c3:04:e8:43:e7:b3:8b:4f:37: c8:39:49:a3:b8:ee:f7:1f:e5:be:62:ab:b7:35:fa: ab:bf:70:b9:f3:76:57:dd:af:9f:5d:e8:2e:a0:d7: b3:b9:33:2f:b9:96:a1:98:22:67:95:11:42:4a:ee: 7b:82:a2:75:61:a5:8e:79:e8:88:6a:5f:35:e2:6f: a8:a3:62:4f:e5:a2:01:74:7c:a6:8d:d2:f5:15:f1: 9a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:07:3C:27:D2:2B:F7:65:A2:22:34:B2:7D:EA:BD:1E:99:83:BF:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.220.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:47:2f:b0:37:30:64:62:5c:03:45:7f:07:e2:64:49:5c:fb: d3:8e:d5:08:af:10:1b:d4:5d:70:b7:e7:d2:e6:40:0c:95:cd: 31:d0:8a:99:8a:cc:c7:d5:94:26:7d:f1:f9:a5:35:c0:92:04: 32:75:0d:36:fc:10:44:d6:1f:18:01:c8:6e:cb:ae:ea:f4:38: 17:8e:e8:96:37:24:a9:31:03:bc:fe:86:95:85:91:7f:80:8f: 5b:40:09:f8:65:b8:23:2b:7b:0d:40:83:81:ad:c8:42:68:49: 90:81:28:05:70:cb:9e:58:ed:92:39:af:a7:f6:b8:4a:4d:42: df:f0:a7:84:39:4b:35:e3:f0:11:cf:b9:9d:de:7e:88:35:06: 6b:fb:3f:cd:f5:99:6c:f4:7e:4f:e0:b0:2a:32:8d:fd:71:5d: b0:f8:ab:9e:b3:10:9a:c4:7c:71:43:6e:29:7d:df:cb:f3:83: 31:e8:f4:40:94:26:11:aa:3a:e8:42:77:1d:9e:f9:82:d0:38: 25:08:61:5a:76:bc:64:bd:c3:b8:6c:95:25:01:87:f9:2c:f2: ab:96:f5:15:3a:30:61:b2:a2:81:25:e1:43:19:7a:a5:66:3e: 97:d3:47:11:3a:be:97:66:31:be:44:7c:0a:6f:5d:52:8d:35: c6:1d:aa:71 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsLdr8FVpKMWMPlWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MGRhMmQ4OTQtODkxYi00Njc5LWIyZjUtOTYxZmRlM2M2NjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvud66DfchXyf+gRK3ofGprlmA/TiHsW8vDT1 K2u0XQoHStWCOM2DTUBEDSbR0lAsIrNbxSxXNcmguL02LdmzrAmUlPSF/CqPN2pn ZiTkwqRHHvpxdZ972wfTmGYNzTUIsqZlWnKovdiM97UbYZ/1cU6V4KVakWAXcya4 mvS+n646LsR0uRe06yPlnEjesmOgp+G18QTJ3ewQV5/qWpaAD0Sul29zkxtp7ODD BOhD57OLTzfIOUmjuO73H+W+Yqu3Nfqrv3C583ZX3a+fXeguoNezuTMvuZahmCJn lRFCSu57gqJ1YaWOeeiIal814m+oo2JP5aIBdHymjdL1FfGavwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCgHPCfSK/dloiI0sn3qvR6Zg7+GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYjA5YjhjY2ItZWI2Ny0z YTMwLTlkNTEtMjRkZmMwMzE4ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAaNwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAR0cvsDcwZGJcA0V/B+JkSVz7047VCK8QG9RdcLfn0uZADJXNMdCKmYrM x9WUJn3x+aU1wJIEMnUNNvwQRNYfGAHIbsuu6vQ4F47oljckqTEDvP6GlYWRf4CP W0AJ+GW4Iyt7DUCDga3IQmhJkIEoBXDLnljtkjmvp/a4Sk1C3/CnhDlLNePwEc+5 nd5+iDUGa/s/zfWZbPR+T+CwKjKN/XFdsPirnrMQmsR8cUNuKX3fy/ODMej0QJQm Eao66EJ3HZ75gtA4JQhhWna8ZL3DuGyVJQGH+Szyq5b1FTowYbKigSXhQxl6pWY+ l9NHETq+l2YxvkR8Cm9dUo01xh2qcQ== -----END CERTIFICATE-----Generated at Sat Sep 6 23:51:02 2025 by rpki-client