$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/c2bf34f6-c7b4-370f-a50b-79802b09ef3b.roa File: c2bf34f6-c7b4-370f-a50b-79802b09ef3b.roa (raw, json) Hash identifier: etYXGtWlrIfBARJ0ika8/XKXb3/6g+OGhy92NiZE9iQ= Subject key identifier: 8E:49:5C:9F:2C:BD:45:B5:B3:D5:C6:34:2E:B6:4E:A0:51:89:98:70 Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Certificate serial: 010D0C9F4328584A58CB01B152DBA1C20CF637B4 Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/c2bf34f6-c7b4-370f-a50b-79802b09ef3b.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 54913 IP address blocks: 78.138.17.0/24 maxlen: 24 103.54.59.0/24 maxlen: 24 104.129.128.0/24 maxlen: 24 104.129.129.0/24 maxlen: 24 104.225.142.0/24 maxlen: 24 104.225.143.0/24 maxlen: 24 213.255.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:01:b1:52:db:a1:c2:0c:f6:37:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=24230b5e-67b9-4f50-95c1-90ab451f5cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d8:a0:33:cb:f8:cf:d5:9d:b3:bf:56:ed:7f: 2b:20:25:1d:2e:76:8b:9e:25:99:39:13:c2:69:31: 7e:2a:4e:f1:ba:50:b1:c3:ee:07:77:69:ef:89:f2: 2b:66:9c:8a:7b:6e:29:c9:a8:0e:13:e5:dc:b7:b9: bc:cd:f9:51:62:47:24:bb:84:51:cd:94:ab:f4:5d: 9f:72:b9:8e:5f:9f:e6:b4:4c:2d:86:7d:5c:ea:81: a1:4c:bc:4c:5e:e7:52:51:3e:13:82:55:c6:13:33: c6:36:4f:1b:cf:9b:85:51:68:b3:5f:8a:44:ff:36: 24:ec:ca:65:7a:70:a9:24:85:eb:9b:42:cd:66:bb: 46:58:2a:e0:58:5e:1a:64:a3:de:f2:3a:b2:fd:73: 54:fe:cf:29:3a:64:92:83:c3:cb:2c:dd:8a:c9:84: 4b:9f:d7:df:34:6d:84:82:2d:90:b7:43:6b:d5:1f: d3:32:e2:5d:d4:9f:de:96:c9:9b:eb:45:10:7e:9e: 48:0c:d5:a3:26:19:44:d8:eb:e1:50:d0:6e:45:7d: 75:47:3c:97:b9:08:e6:3d:b2:26:87:6b:4e:39:b4: c7:15:ca:98:14:8d:88:ef:92:a2:02:c0:4b:1b:d5: 90:e0:b8:bf:0d:20:a6:99:ce:39:f7:b6:b2:70:25: 4c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:49:5C:9F:2C:BD:45:B5:B3:D5:C6:34:2E:B6:4E:A0:51:89:98:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/c2bf34f6-c7b4-370f-a50b-79802b09ef3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl X509v3 Authority Key Identifier: keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer sbgp-ipAddrBlock: critical IPv4: 78.138.17.0/24 103.54.59.0/24 104.129.128.0/23 104.225.142.0/23 213.255.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:2d:12:49:da:12:8c:56:92:0b:07:d3:1c:10:a1:3d:85:f3: e5:3b:2c:c6:7c:41:3a:ca:a4:2e:54:42:23:2e:17:33:f0:73: 29:c2:c5:59:c7:fc:96:34:15:73:32:f9:20:4a:28:fc:74:ec: 7a:b2:8b:1a:0d:62:87:90:07:2a:28:e7:aa:64:97:d6:32:84: 7c:93:a0:08:ac:fd:5a:85:5f:0b:50:1c:13:26:35:a3:94:1b: a6:93:61:7e:26:4c:5d:9a:dc:98:d3:6f:a7:6d:ad:43:6a:fa: 57:6c:d5:fa:58:44:2f:bc:4f:6c:f5:ea:47:48:b7:1c:25:67: 28:29:eb:9c:c9:f6:1e:a9:a3:7c:85:97:ca:6d:81:69:bc:ed: b2:d0:99:43:8e:96:b8:b6:88:92:63:28:1e:d3:b5:20:63:97: ba:57:ad:dd:4b:a2:b0:73:23:2e:20:b1:21:45:c5:e3:0b:c7: 28:01:2a:84:2d:fa:5f:2f:0e:94:8b:59:e0:05:5b:8e:b0:01: 50:40:1d:2a:0f:bc:ea:47:52:02:af:42:9b:47:0d:4a:5e:04: 24:e1:00:b4:a7:6d:e2:e5:a9:ac:9e:c4:60:21:e2:c7:21:4f: 1f:29:c8:0b:fa:1a:27:ae:c8:b4:d1:98:17:bc:55:45:ad:5f: af:36:17:dd -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEpYywGxUtuhwgz2N7QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVkYzk3NDEtNTU5ZC00ZDliLTlmOGQtYmUzNTYwNzU0 ZmZkMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk MjQyMzBiNWUtNjdiOS00ZjUwLTk1YzEtOTBhYjQ1MWY1Y2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9igM8v4z9Wds79W7X8rICUdLnaLniWZORPC aTF+Kk7xulCxw+4Hd2nvifIrZpyKe24pyagOE+Xct7m8zflRYkcku4RRzZSr9F2f crmOX5/mtEwthn1c6oGhTLxMXudSUT4TglXGEzPGNk8bz5uFUWizX4pE/zYk7Mpl enCpJIXrm0LNZrtGWCrgWF4aZKPe8jqy/XNU/s8pOmSSg8PLLN2KyYRLn9ffNG2E gi2Qt0Nr1R/TMuJd1J/elsmb60UQfp5IDNWjJhlE2OvhUNBuRX11RzyXuQjmPbIm h2tOObTHFcqYFI2I75KiAsBLG9WQ4Li/DSCmmc4597aycCVMDQIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFI5JXJ8svUW1s9XGNC62TqBRiZhwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NWRj OTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1NjA3NTRmZmQvYzJiZjM0ZjYtYzdiNC0z NzBmLWE1MGItNzk4MDJiMDllZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTVkYzk3NDEtNTU5ZC00ZDliLTlm OGQtYmUzNTYwNzU0ZmZkLzk1ZGM5NzQxLTU1OWQtNGQ5Yi05ZjhkLWJlMzU2MDc1 NGZmZC5jcmwwHwYDVR0jBBgwFoAU6PV/ieoECgMeYW7fmRTMWxY4sJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NWRjOTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1 NjA3NTRmZmQuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATooRAwQA ZzY7AwQBaIGAAwQBaOGOAwQA1f/RMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHAtEknaEoxWkgsH0xwQoT2F 8+U7LMZ8QTrKpC5UQiMuFzPwcynCxVnH/JY0FXMy+SBKKPx07HqyixoNYoeQByoo 56pkl9YyhHyToAis/VqFXwtQHBMmNaOUG6aTYX4mTF2a3JjTb6dtrUNq+lds1fpY RC+8T2z16kdItxwlZygp65zJ9h6po3yFl8ptgWm87bLQmUOOlri2iJJjKB7TtSBj l7pXrd1LorBzIy4gsSFFxeMLxygBKoQt+l8vDpSLWeAFW46wAVBAHSoPvOpHUgKv QptHDUpeBCThALSnbeLlqayexGAh4schTx8pyAv6GieuyLTRmBe8VUWtX682F90= -----END CERTIFICATE-----Generated at Tue Jul 1 23:26:32 2025 by rpki-client