$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/5225e9df-ff27-341c-bb4c-a55d2b37245e.roa File: 5225e9df-ff27-341c-bb4c-a55d2b37245e.roa (raw, json) Hash identifier: 8ZLNu1kRoVOZP5koabIbzMjDW7/UQ2znylTPVqZv3Mk= Subject key identifier: 12:E2:45:D8:35:73:02:BF:9D:5A:A5:7D:DC:84:F1:71:9B:86:18:FA Certificate issuer: /CN=a1b7e801-0cb9-4602-b697-f6df0c2beb40 Certificate serial: 010D0C9F43285849E91FA413DED0E0001BB37110 Authority key identifier: 98:6A:28:EE:B7:EC:65:16:13:49:EA:17:75:6F:A5:D3:07:5C:3B:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/5225e9df-ff27-341c-bb4c-a55d2b37245e.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 19257 IP address blocks: 104.255.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/a1b7e801-0cb9-4602-b697-f6df0c2beb40.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/a1b7e801-0cb9-4602-b697-f6df0c2beb40.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:a4:13:de:d0:e0:00:1b:b3:71:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b7e801-0cb9-4602-b697-f6df0c2beb40 Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=02061889-47db-4129-b2c0-47c16b1b898a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:74:8a:6f:4b:9d:ea:a8:4e:5a:e9:ab:eb:3e: 30:54:19:96:58:10:a6:8f:c1:a2:ae:a0:23:5e:bf: 9b:f4:93:de:4c:39:7c:1d:7c:23:ee:89:35:e5:86: 31:55:91:d8:84:60:ac:2f:03:36:55:2f:68:40:2d: be:fe:ab:d4:d7:79:2b:bc:35:3d:83:b1:09:b8:05: d1:e2:0e:1f:9b:4a:61:eb:28:62:d0:73:32:09:c1: 72:b5:a1:a9:d1:d6:43:25:0e:6a:17:ad:f7:3d:c2: 04:c4:e6:dd:57:d2:0e:9f:06:df:dc:30:fd:8c:f6: 9d:c5:82:2a:86:97:93:3e:22:3e:8d:24:c3:03:85: 3a:89:a2:da:25:c4:2c:c3:2c:24:bf:e8:a6:5b:29: 99:3d:9f:89:70:0d:dd:47:e0:1c:31:4d:6f:a9:ba: bb:47:99:41:f2:cf:5c:ec:5e:f1:8c:20:3f:ec:7b: dc:ac:47:ed:0e:e6:b2:d5:95:ab:7b:c0:5b:2e:99: c0:b5:27:ee:7a:72:24:34:e4:00:cf:09:46:24:4d: 5c:6a:2a:2d:34:0a:1b:01:d1:91:74:16:a1:05:a5: 11:00:27:e5:ca:f1:fc:bc:04:63:c9:35:31:fe:0d: 5a:c7:71:2e:44:3f:7e:05:9d:42:1e:78:e1:a9:f8: de:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E2:45:D8:35:73:02:BF:9D:5A:A5:7D:DC:84:F1:71:9B:86:18:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/5225e9df-ff27-341c-bb4c-a55d2b37245e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/a1b7e801-0cb9-4602-b697-f6df0c2beb40.crl X509v3 Authority Key Identifier: keyid:98:6A:28:EE:B7:EC:65:16:13:49:EA:17:75:6F:A5:D3:07:5C:3B:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40.cer sbgp-ipAddrBlock: critical IPv4: 104.255.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:54:6e:a6:33:5a:ca:a6:76:02:0e:4d:75:28:f0:c2:70:d6: 8f:46:44:93:b2:65:59:9e:88:e1:2c:d8:a4:f7:26:50:ae:df: 08:3b:c1:7b:e4:3e:01:80:ea:89:80:ef:5e:2f:53:fd:eb:44: be:ec:64:7e:94:c0:0d:74:61:cc:d5:26:62:a1:b5:2d:d1:4f: 8e:d8:08:57:cb:e4:cc:c1:b2:41:7c:01:d6:97:83:45:b8:b8: e7:e6:86:70:28:09:4f:44:9b:af:da:23:d9:e9:a1:b2:2a:0c: f1:6b:28:c5:6b:25:b1:b0:d1:7e:95:4c:10:49:94:56:b6:25: f9:90:cf:23:1b:0b:3e:41:8a:72:a1:ee:ef:f5:ef:e8:ef:ca: 05:3f:1c:de:e3:aa:46:ad:ed:e2:18:25:70:87:df:7f:83:d0: f6:87:07:9f:ba:86:38:71:bf:c0:1d:2a:4e:84:51:5b:69:d3: ca:f0:ff:58:c5:b3:58:ed:0b:40:4f:4d:e7:0c:a8:0e:ba:f9: a3:cd:9a:9a:58:dd:f8:52:c8:a3:1f:37:92:20:70:c1:65:85: be:dd:a3:61:31:aa:92:b0:cf:3f:9c:59:41:d7:77:fc:ca:14: d4:02:ce:41:13:03:ad:a1:79:da:68:3a:16:74:7f:f9:e0:a1: 07:58:9a:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH6QT3tDgABuzcRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiN2U4MDEtMGNiOS00NjAyLWI2OTctZjZkZjBjMmJl YjQwMB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk MDIwNjE4ODktNDdkYi00MTI5LWIyYzAtNDdjMTZiMWI4OThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nSKb0ud6qhOWumr6z4wVBmWWBCmj8GirqAj Xr+b9JPeTDl8HXwj7ok15YYxVZHYhGCsLwM2VS9oQC2+/qvU13krvDU9g7EJuAXR 4g4fm0ph6yhi0HMyCcFytaGp0dZDJQ5qF633PcIExObdV9IOnwbf3DD9jPadxYIq hpeTPiI+jSTDA4U6iaLaJcQswywkv+imWymZPZ+JcA3dR+AcMU1vqbq7R5lB8s9c 7F7xjCA/7HvcrEftDuay1ZWre8BbLpnAtSfuenIkNOQAzwlGJE1caiotNAobAdGR dBahBaURACflyvH8vARjyTUx/g1ax3EuRD9+BZ1CHnjhqfjeBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLiRdg1cwK/nVqlfdyE8XGbhhj6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMWI3 ZTgwMS0wY2I5LTQ2MDItYjY5Ny1mNmRmMGMyYmViNDAvNTIyNWU5ZGYtZmYyNy0z NDFjLWJiNGMtYTU1ZDJiMzcyNDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTFiN2U4MDEtMGNiOS00NjAyLWI2 OTctZjZkZjBjMmJlYjQwL2ExYjdlODAxLTBjYjktNDYwMi1iNjk3LWY2ZGYwYzJi ZWI0MC5jcmwwHwYDVR0jBBgwFoAUmGoo7rfsZRYTSeoXdW+l0wdcOzYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMWI3ZTgwMS0wY2I5LTQ2MDItYjY5Ny1mNmRm MGMyYmViNDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP+UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElUbqYzWsqmdgIOTXUo8MJw1o9GRJOyZVmeiOEs2KT3JlCu3wg7wXvk PgGA6omA714vU/3rRL7sZH6UwA10YczVJmKhtS3RT47YCFfL5MzBskF8AdaXg0W4 uOfmhnAoCU9Em6/aI9npobIqDPFrKMVrJbGw0X6VTBBJlFa2JfmQzyMbCz5BinKh 7u/17+jvygU/HN7jqkat7eIYJXCH33+D0PaHB5+6hjhxv8AdKk6EUVtp08rw/1jF s1jtC0BPTecMqA66+aPNmppY3fhSyKMfN5IgcMFlhb7do2ExqpKwzz+cWUHXd/zK FNQCzkETA62hedpoOhZ0f/ngoQdYmt0= -----END CERTIFICATE-----Generated at Sun Jun 8 03:53:43 2025 by rpki-client