$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/45a02249-463e-36e7-8fc1-dc479575b96c.roa File: 45a02249-463e-36e7-8fc1-dc479575b96c.roa (raw, json) Hash identifier: JHOPbagkmx1TdShjHIR8bNIIOjPRlmYyvslCW8SI55o= Subject key identifier: 02:C7:98:1A:E8:1D:0A:CC:69:2C:87:A1:45:66:34:BB:B9:09:4C:95 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584A045D974D11B4F74AF41095C0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/45a02249-463e-36e7-8fc1-dc479575b96c.roa Signing time: Thu 29 May 2025 19:12:34 +0000 ROA not before: Thu 29 May 2025 19:12:34 +0000 ROA not after: Wed 27 Aug 2025 19:12:34 +0000 asID: 62904 IP address blocks: 104.140.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:04:5d:97:4d:11:b4:f7:4a:f4:10:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: May 29 19:12:34 2025 GMT Not After : Aug 27 19:12:34 2025 GMT Subject: CN=e3548c5a-bc96-43ac-ae7d-2437ddab440f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5c:aa:d8:b1:fe:a7:9f:d2:13:42:f9:d3:d9: 01:25:53:1b:44:73:13:61:62:a8:bb:5c:e9:5c:cd: ce:f5:9d:75:08:96:80:ae:f6:6f:57:d7:93:27:0a: e1:25:72:62:a7:9f:15:26:4e:41:7c:41:41:37:ee: 74:d0:3e:16:62:5d:11:77:a0:7e:d8:bf:e0:58:42: 52:a7:0b:3b:6a:16:95:04:04:ce:b0:b1:59:58:10: 50:8a:76:a6:21:be:b8:85:56:f4:35:98:b9:e3:22: 48:34:51:1e:4c:00:c9:80:86:30:16:9b:db:5f:ee: b6:00:f2:b2:57:41:e6:24:41:cb:44:45:9c:85:b7: 78:c5:8c:a4:9c:71:ab:6d:c1:8c:87:c9:8f:67:72: 98:ad:4c:53:11:d4:fe:07:9e:a7:5f:d1:e9:f6:9f: a8:92:e7:10:27:55:61:a3:98:dc:0a:35:f6:9f:f8: e0:64:c3:05:f4:81:17:73:54:56:5b:00:1d:53:76: 99:0d:61:ab:ca:5d:1b:df:62:ff:4c:c6:a2:7e:2f: d8:0a:c0:e8:65:3a:46:55:68:8e:84:87:b2:fe:52: ca:04:15:99:9e:ae:d3:9a:eb:9a:39:09:c5:e4:62: 89:ba:b2:9b:19:1e:ed:24:b4:ff:6b:ae:f8:ce:3a: 53:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C7:98:1A:E8:1D:0A:CC:69:2C:87:A1:45:66:34:BB:B9:09:4C:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/45a02249-463e-36e7-8fc1-dc479575b96c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 104.140.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:f1:67:53:8c:fe:0f:cd:8e:db:a6:40:57:f2:83:dd:6f:65: 48:d1:7e:3b:bf:97:bb:c5:94:26:9f:53:f9:29:3d:c2:f7:87: d4:62:4b:b6:00:3b:74:b8:c7:e4:24:00:64:d5:92:b6:45:5a: 44:3c:ee:96:34:6e:44:18:ef:74:97:93:3e:85:c7:43:32:74: 4b:f5:90:f8:0b:0b:0b:8a:ee:df:40:6a:07:cb:aa:71:78:4f: f9:77:79:bd:f4:99:cc:38:68:21:dc:4d:a4:a0:c7:67:49:81: ae:f1:66:a5:83:84:1e:d3:34:52:d8:fd:07:39:f2:30:ed:fb: 91:c8:cf:93:c1:a4:ef:d4:e3:a9:4e:42:42:13:1f:e4:0f:ed: a5:44:07:3b:e2:3f:f1:65:91:a0:f0:3b:29:71:a9:4e:3d:3d: 1f:e0:49:dc:34:62:12:3b:0f:cf:89:58:c1:99:7f:6c:8d:2c: 1f:d7:d9:b0:35:b2:9f:bb:a8:8b:38:fc:9f:99:c9:c1:08:f8: fc:09:b9:ff:75:85:e2:82:96:9e:9e:60:f3:25:51:6c:7c:dc: 49:6e:22:1b:ca:c2:4a:71:af:fa:c4:f5:4c:ef:97:cf:02:00: 3a:e9:14:a4:a7:8e:26:53:d0:1a:a4:b0:68:a3:f5:69:fa:3d: c5:e2:71:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoEXZdNEbT3SvQQlcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDUyOTE5MTIzNFoXDTI1MDgyNzE5MTIzNFowLzEtMCsGA1UEAxMk ZTM1NDhjNWEtYmM5Ni00M2FjLWFlN2QtMjQzN2RkYWI0NDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Fyq2LH+p5/SE0L509kBJVMbRHMTYWKou1zp XM3O9Z11CJaArvZvV9eTJwrhJXJip58VJk5BfEFBN+500D4WYl0Rd6B+2L/gWEJS pws7ahaVBATOsLFZWBBQinamIb64hVb0NZi54yJINFEeTADJgIYwFpvbX+62APKy V0HmJEHLREWchbd4xYyknHGrbcGMh8mPZ3KYrUxTEdT+B56nX9Hp9p+okucQJ1Vh o5jcCjX2n/jgZMMF9IEXc1RWWwAdU3aZDWGryl0b32L/TMaifi/YCsDoZTpGVWiO hIey/lLKBBWZnq7TmuuaOQnF5GKJurKbGR7tJLT/a674zjpT8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALHmBroHQrMaSyHoUVmNLu5CUyVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNDVhMDIyNDktNDYzZS0z NmU3LThmYzEtZGM0Nzk1NzViOTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIx+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTxZ1OM/g/NjtumQFfyg91vZUjRfju/l7vFlCafU/kpPcL3h9RiS7YA O3S4x+QkAGTVkrZFWkQ87pY0bkQY73SXkz6Fx0MydEv1kPgLCwuK7t9AagfLqnF4 T/l3eb30mcw4aCHcTaSgx2dJga7xZqWDhB7TNFLY/Qc58jDt+5HIz5PBpO/U46lO QkITH+QP7aVEBzviP/FlkaDwOylxqU49PR/gSdw0YhI7D8+JWMGZf2yNLB/X2bA1 sp+7qIs4/J+ZycEI+PwJuf91heKClp6eYPMlUWx83EluIhvKwkpxr/rE9Uzvl88C ADrpFKSnjiZT0BqksGij9Wn6PcXicXk= -----END CERTIFICATE-----Generated at Mon Jun 9 00:19:09 2025 by rpki-client