$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/d459f45e-a006-338c-9b08-b1327ea9704d.roa File: d459f45e-a006-338c-9b08-b1327ea9704d.roa (raw, json) Hash identifier: g0Ij3YZGtEe2I54iTI0n/ZpJ1e91xoK3fsnxQaHnzeg= Subject key identifier: 77:93:19:4F:76:47:B6:D1:97:A8:59:E6:25:75:81:7B:97:63:ED:E5 Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584A66C06DC7127CF6F1AD338720 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/d459f45e-a006-338c-9b08-b1327ea9704d.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 22773 IP address blocks: 104.200.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:6d:c7:12:7c:f6:f1:ad:33:87:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=ad5d9f64-b498-4e1f-9e5d-957a2df1e0a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:74:94:a1:89:a2:58:24:79:74:64:1a:a6:44: 98:e5:f1:24:b7:f4:f0:75:77:95:76:bc:3f:a6:0d: 6a:1c:02:a0:2a:07:e4:6f:fb:67:ae:a3:d8:b7:f8: 2e:22:7e:ab:b9:46:a1:c8:ca:2c:54:9c:8a:3a:fe: 69:ff:15:78:bc:e9:94:c5:10:20:f1:03:eb:d9:85: 37:b3:c0:a4:0a:e1:31:f7:18:0f:1f:38:9d:79:d4: 86:f8:a5:f9:cf:1c:f4:ba:b8:39:1a:67:2f:c7:a1: 67:9e:2b:cb:46:4c:55:36:38:85:d2:f6:78:a9:e6: 15:71:27:f2:ee:84:54:0f:05:cd:fb:4a:35:75:e1: c0:4d:77:cb:0c:cd:05:b6:b8:34:7e:a2:b8:32:3f: 00:52:34:cd:96:77:d6:17:be:fa:b2:84:d6:5b:71: 5b:b2:03:ac:17:1b:13:09:2e:30:61:8c:d6:ca:8b: b9:73:c4:9b:48:30:69:c7:a1:fa:de:75:e3:27:60: 85:5f:87:c0:d0:bb:5b:79:55:28:09:85:26:2d:87: 92:94:1c:fc:a0:e3:ce:bf:69:c5:04:8f:95:29:5e: 73:ab:20:88:ff:0b:69:96:6f:b3:eb:17:9b:8a:72: 4e:cb:d1:e7:a0:eb:a8:d2:98:15:4d:05:f2:16:ed: ca:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:93:19:4F:76:47:B6:D1:97:A8:59:E6:25:75:81:7B:97:63:ED:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/d459f45e-a006-338c-9b08-b1327ea9704d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 104.200.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:ac:84:b1:b6:88:6d:04:77:5f:7f:1c:fa:f9:13:22:d1:61: fb:c5:64:b6:fc:4c:b9:f4:89:be:1f:1e:48:9a:39:7c:b0:76: f2:6a:8a:6c:26:d6:7a:87:10:c5:38:d0:be:ce:65:72:65:3b: 3a:be:7c:55:a0:8d:ee:11:95:38:85:3c:4d:3c:e0:32:66:92: 56:59:25:0a:7a:6d:56:de:03:36:c9:de:09:39:30:11:fe:86: 54:f6:05:0f:65:86:b6:69:be:b8:5a:4e:6e:9b:f7:f8:9b:6e: 46:55:10:f7:6b:4a:bb:ff:cd:11:6c:9a:01:b5:f4:d6:9e:51: c0:18:76:d4:c2:1f:6b:2d:6f:14:05:5d:dd:02:76:d7:08:9d: 81:aa:e8:d1:c3:98:a5:0f:09:d1:5a:67:49:36:fc:64:1f:30: ff:31:22:29:28:bd:22:e8:9d:09:cf:fc:f4:8b:c8:ce:78:d7: dd:fb:91:bc:66:cb:bb:a0:e4:d8:5a:28:ff:0b:8d:55:df:67: cb:d8:e8:b3:c9:d5:f1:ab:2b:76:36:5b:94:32:74:49:1b:ef: cf:11:6f:64:3e:0a:2d:71:c5:dc:29:54:03:34:35:99:79:db: f9:7c:d3:b1:18:fc:25:6c:6f:ca:45:cc:c6:71:de:95:00:66: 8b:b3:d8:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwG3HEnz28a0zhyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk YWQ1ZDlmNjQtYjQ5OC00ZTFmLTllNWQtOTU3YTJkZjFlMGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHSUoYmiWCR5dGQapkSY5fEkt/TwdXeVdrw/ pg1qHAKgKgfkb/tnrqPYt/guIn6ruUahyMosVJyKOv5p/xV4vOmUxRAg8QPr2YU3 s8CkCuEx9xgPHzidedSG+KX5zxz0urg5Gmcvx6FnnivLRkxVNjiF0vZ4qeYVcSfy 7oRUDwXN+0o1deHATXfLDM0Ftrg0fqK4Mj8AUjTNlnfWF776soTWW3FbsgOsFxsT CS4wYYzWyou5c8SbSDBpx6H63nXjJ2CFX4fA0LtbeVUoCYUmLYeSlBz8oOPOv2nF BI+VKV5zqyCI/wtplm+z6xebinJOy9HnoOuo0pgVTQXyFu3KzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHeTGU92R7bRl6hZ5iV1gXuXY+3lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvZDQ1OWY0NWUtYTAwNi0z MzhjLTliMDgtYjEzMjdlYTk3MDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaMjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHushLG2iG0Ed19/HPr5EyLRYfvFZLb8TLn0ib4fHkiaOXywdvJqimwm 1nqHEMU40L7OZXJlOzq+fFWgje4RlTiFPE084DJmklZZJQp6bVbeAzbJ3gk5MBH+ hlT2BQ9lhrZpvrhaTm6b9/ibbkZVEPdrSrv/zRFsmgG19NaeUcAYdtTCH2stbxQF Xd0CdtcInYGq6NHDmKUPCdFaZ0k2/GQfMP8xIikovSLonQnP/PSLyM541937kbxm y7ug5NhaKP8LjVXfZ8vY6LPJ1fGrK3Y2W5QydEkb788Rb2Q+Ci1xxdwpVAM0NZl5 2/l807EY/CVsb8pFzMZx3pUAZouz2Es= -----END CERTIFICATE-----Generated at Fri Jul 11 04:38:02 2025 by rpki-client