$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1c27793f-3d01-3352-b2c2-2e7dc00191bc.roa File: 1c27793f-3d01-3352-b2c2-2e7dc00191bc.roa (raw, json) Hash identifier: Wlpcf00cIW/snPuklKUs5RJ99JUPFp0xOCgexNJuR9k= Subject key identifier: AD:BB:98:F3:A3:0B:73:76:1E:95:7E:60:88:A1:44:81:55:08:D4:CD Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584ADA6748606987B152603546C0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1c27793f-3d01-3352-b2c2-2e7dc00191bc.roa Signing time: Thu 14 Aug 2025 11:15:05 +0000 ROA not before: Thu 14 Aug 2025 11:15:05 +0000 ROA not after: Wed 12 Nov 2025 12:15:05 +0000 asID: 2914 IP address blocks: 104.206.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:67:48:60:69:87:b1:52:60:35:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Aug 14 11:15:05 2025 GMT Not After : Nov 12 12:15:05 2025 GMT Subject: CN=231d9fea-187f-48a0-bf5c-8452f8bf3ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fd:fd:30:75:a0:b5:fb:c3:de:a3:1a:cf:3b: f7:bb:f7:1f:66:ff:ca:d0:4c:0b:f4:6e:e2:60:92: ea:33:c9:8a:bd:3b:62:6c:d4:91:16:2f:24:b6:2b: 52:7b:1b:fe:0a:28:88:65:e2:4c:a2:d0:b4:c7:16: f1:d3:b9:38:a2:78:06:1d:73:31:8a:39:81:2f:51: b7:ae:61:96:24:da:73:3d:08:8c:ec:34:79:e3:4a: 1d:71:0c:da:2c:94:c4:eb:36:63:b7:c4:da:1c:5a: f2:0b:bc:c3:29:d4:6c:24:db:31:72:89:11:2c:86: be:0e:93:dc:e8:d2:9d:b6:15:62:5e:6d:dd:17:20: ae:e9:a9:0f:76:1b:7e:15:12:0d:e7:91:90:0a:c1: ec:74:58:7e:c1:dd:4e:b2:20:60:53:66:52:46:ff: 80:3c:92:0a:3d:cc:02:1d:f7:cc:89:fc:f8:24:f7: af:47:a9:c6:2a:a4:5c:f6:78:59:97:3f:05:5f:a1: 81:75:d7:58:dc:c1:14:34:86:f4:5a:c1:78:ec:6e: 44:3f:bb:08:51:a6:ba:6e:0d:c0:cd:46:3f:22:f6: 0d:52:84:6c:94:10:c2:66:67:31:4c:61:f1:cf:22: e7:83:0f:97:2d:89:bf:6d:2e:da:ae:96:8a:46:bc: 94:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BB:98:F3:A3:0B:73:76:1E:95:7E:60:88:A1:44:81:55:08:D4:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1c27793f-3d01-3352-b2c2-2e7dc00191bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 104.206.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:0a:48:69:60:e1:1c:a8:fe:01:3f:af:45:2c:8a:26:da:0d: c8:73:4b:b3:d9:b3:50:9c:22:56:1c:86:4c:8c:1e:78:3c:97: b7:2f:84:97:a9:c8:ff:43:82:49:cf:e9:d7:f6:99:b8:70:b8: 50:06:65:f4:6f:88:96:42:45:93:58:5f:1f:10:04:49:d2:e3: d2:f7:3f:51:ec:05:d5:8f:d6:19:88:de:b3:24:70:cf:80:16: 75:28:09:ec:ba:9f:6e:70:5e:45:90:58:af:8a:30:02:df:b9: 9a:e4:57:4b:19:8a:bd:bf:e8:bf:db:16:70:f8:f1:4e:e3:5e: 20:21:f6:75:2a:31:60:01:e8:36:e3:22:9f:13:a2:ef:eb:57: 6e:b9:f2:74:5b:9d:2c:80:0c:a9:4e:2e:dd:f0:f4:6b:1f:f5: 1b:f3:e1:2b:36:45:46:70:f8:5b:40:0a:48:34:1a:3f:03:2a: c0:9e:2d:41:a5:91:04:f6:84:72:99:03:e2:14:49:bb:c8:d2: 7c:40:a1:5a:6f:8a:c5:0d:9b:85:77:c9:bc:36:95:71:b5:13: 97:9e:38:33:67:dd:79:d8:13:25:0d:36:1f:a4:dc:86:6d:c5: 20:ee:90:7c:95:dd:f6:5c:f3:62:b8:28:4c:89:ce:b7:d2:b8: 60:8d:f2:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEraZ0hgaYexUmA1RsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDgxNDExMTUwNVoXDTI1MTExMjEyMTUwNVowLzEtMCsGA1UEAxMk MjMxZDlmZWEtMTg3Zi00OGEwLWJmNWMtODQ1MmY4YmYzY2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/39MHWgtfvD3qMazzv3u/cfZv/K0EwL9G7i YJLqM8mKvTtibNSRFi8ktitSexv+CiiIZeJMotC0xxbx07k4ongGHXMxijmBL1G3 rmGWJNpzPQiM7DR540odcQzaLJTE6zZjt8TaHFryC7zDKdRsJNsxcokRLIa+DpPc 6NKdthViXm3dFyCu6akPdht+FRIN55GQCsHsdFh+wd1OsiBgU2ZSRv+APJIKPcwC HffMifz4JPevR6nGKqRc9nhZlz8FX6GBdddY3MEUNIb0WsF47G5EP7sIUaa6bg3A zUY/IvYNUoRslBDCZmcxTGHxzyLngw+XLYm/bS7arpaKRryUNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK27mPOjC3N2HpV+YIihRIFVCNTNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMWMyNzc5M2YtM2QwMS0z MzUyLWIyYzItMmU3ZGMwMDE5MWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaM5MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYKSGlg4Ryo/gE/r0UsiibaDchzS7PZs1CcIlYchkyMHng8l7cvhJep yP9DgknP6df2mbhwuFAGZfRviJZCRZNYXx8QBEnS49L3P1HsBdWP1hmI3rMkcM+A FnUoCey6n25wXkWQWK+KMALfuZrkV0sZir2/6L/bFnD48U7jXiAh9nUqMWAB6Dbj Ip8Tou/rV2658nRbnSyADKlOLt3w9Gsf9Rvz4Ss2RUZw+FtACkg0Gj8DKsCeLUGl kQT2hHKZA+IUSbvI0nxAoVpvisUNm4V3ybw2lXG1E5eeODNn3XnYEyUNNh+k3IZt xSDukHyV3fZc82K4KEyJzrfSuGCN8pE= -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:05 2025 by rpki-client