$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/499cf111-e9c6-38d0-a6ba-d9d43accee6e.roa File: 499cf111-e9c6-38d0-a6ba-d9d43accee6e.roa (raw, json) Hash identifier: QBlNAB1HODpzJ3xXHUnRERS4Xk1BEQMn/mA+wqLqU/k= Subject key identifier: CD:46:0B:1C:A4:27:C0:CA:30:FB:EF:69:29:D5:1F:DD:F3:DD:FA:3F Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Certificate serial: 010D0C9F4328584A5FC5E464D6D841A83FD79000 Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/499cf111-e9c6-38d0-a6ba-d9d43accee6e.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 21559 IP address blocks: 104.218.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e4:64:d6:d8:41:a8:3f:d7:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=8a06f3a7-a193-4576-959f-df6f3897749b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0a:98:53:4b:0c:3b:99:ac:97:44:9e:02:55: 6a:39:22:eb:04:09:60:b0:9f:3b:00:d7:2f:6f:00: ce:bd:62:46:14:cd:35:90:48:5c:4d:02:c0:1e:90: 74:9c:9f:d3:80:fb:29:5d:21:ce:bf:30:6d:07:61: 6a:55:b6:4f:08:0c:f0:b2:b9:ff:11:f2:75:a6:ad: d4:e6:aa:44:0a:a2:bb:ee:0f:b3:89:93:a2:c7:80: a7:b3:df:56:a3:6f:29:40:cf:0f:85:e7:64:0a:ec: 43:b7:c3:fc:fa:f2:c5:a7:12:d8:74:9a:04:cc:4b: f9:cd:a4:fb:a0:3b:95:32:73:da:c7:d7:eb:64:ac: 31:e6:b9:fb:c2:f7:8d:73:6b:f7:28:6e:be:c8:1a: 18:24:d0:c6:97:c2:f4:83:d4:98:4c:6c:b8:c1:a1: 0f:63:e5:d2:65:29:ce:6c:96:cb:55:1b:52:8f:06: de:58:69:4f:73:ad:05:fd:21:56:e4:e0:40:e5:57: 13:aa:50:f8:ff:c1:20:64:b9:2f:b1:a2:af:3f:33: 8c:30:28:04:36:5f:f6:62:92:c9:fa:1a:2b:bf:23: 75:62:c3:84:fc:da:2b:8e:b1:ea:03:08:01:2c:0d: ed:4c:aa:a6:32:84:99:53:a0:e0:4e:2a:14:6e:96: 96:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:46:0B:1C:A4:27:C0:CA:30:FB:EF:69:29:D5:1F:DD:F3:DD:FA:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/499cf111-e9c6-38d0-a6ba-d9d43accee6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl X509v3 Authority Key Identifier: keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer sbgp-ipAddrBlock: critical IPv4: 104.218.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:a1:54:39:3a:fa:bc:51:27:23:8b:4b:f4:e7:70:4b:91:7b: 01:1c:e2:97:08:9e:b2:99:78:d8:3d:73:80:c6:65:fd:b1:36: ce:58:c0:0e:2a:42:46:f4:8f:86:f7:ce:a8:de:ce:a2:5d:a6: 96:96:f8:63:eb:aa:90:3f:6b:4d:86:b8:5a:11:d1:46:3e:37: a9:15:0e:0c:a6:b6:98:b6:1b:9a:2d:4c:24:f4:e3:e1:76:a8: 33:41:cc:a8:d4:2a:03:31:4f:f0:11:45:b0:e4:68:bd:d0:a0: a1:63:2f:53:5d:82:b1:47:32:06:c6:7d:e8:3c:04:50:8e:ea: 4d:6d:07:35:01:8d:02:aa:6e:ba:f2:a2:cd:83:6c:9d:d2:74: 20:20:ae:79:ea:7b:58:9c:9f:24:fe:b9:88:18:9d:65:91:ee: 0e:49:ff:85:e5:b9:c9:88:d3:37:81:3a:ae:f7:4f:2e:29:33: 5a:1f:97:17:fb:55:80:48:8d:3d:78:5a:bf:b3:79:f6:28:b8: 03:2f:14:e8:b8:f7:c5:ed:8b:74:c3:52:ce:e4:d4:21:5d:ff: c1:96:29:0e:63:18:15:b8:4a:c6:63:8a:65:ad:af:8a:fe:bf: 94:03:2c:9a:c0:e3:0f:6a:81:5e:26:0d:50:ee:16:23:d8:cc: 4d:5b:3f:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxeRk1thBqD/XkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5 ZDVhMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk OGEwNmYzYTctYTE5My00NTc2LTk1OWYtZGY2ZjM4OTc3NDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgqYU0sMO5msl0SeAlVqOSLrBAlgsJ87ANcv bwDOvWJGFM01kEhcTQLAHpB0nJ/TgPspXSHOvzBtB2FqVbZPCAzwsrn/EfJ1pq3U 5qpECqK77g+ziZOix4Cns99Wo28pQM8PhedkCuxDt8P8+vLFpxLYdJoEzEv5zaT7 oDuVMnPax9frZKwx5rn7wveNc2v3KG6+yBoYJNDGl8L0g9SYTGy4waEPY+XSZSnO bJbLVRtSjwbeWGlPc60F/SFW5OBA5VcTqlD4/8EgZLkvsaKvPzOMMCgENl/2YpLJ +horvyN1YsOE/NorjrHqAwgBLA3tTKqmMoSZU6DgTioUbpaWnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1GCxykJ8DKMPvvaSnVH93z3fo/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvNDk5Y2YxMTEtZTljNi0z OGQwLWE2YmEtZDlkNDNhY2NlZTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk ZjA3MjlkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaNrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6hVDk6+rxRJyOLS/TncEuRewEc4pcInrKZeNg9c4DGZf2xNs5YwA4q Qkb0j4b3zqjezqJdppaW+GPrqpA/a02GuFoR0UY+N6kVDgymtpi2G5otTCT04+F2 qDNBzKjUKgMxT/ARRbDkaL3QoKFjL1NdgrFHMgbGfeg8BFCO6k1tBzUBjQKqbrry os2DbJ3SdCAgrnnqe1icnyT+uYgYnWWR7g5J/4XlucmI0zeBOq73Ty4pM1oflxf7 VYBIjT14Wr+zefYouAMvFOi498Xti3TDUs7k1CFd/8GWKQ5jGBW4SsZjimWtr4r+ v5QDLJrA4w9qgV4mDVDuFiPYzE1bP68= -----END CERTIFICATE-----Generated at Tue Jul 1 14:45:26 2025 by rpki-client