$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3ee1fb41-5754-35b9-bc75-ac0a951e7128.roa File: 3ee1fb41-5754-35b9-bc75-ac0a951e7128.roa (raw, json) Hash identifier: mqcKkM9B78AsZKTUbZAUGBmZikd/ozorQJvC6xz7RSQ= Subject key identifier: E3:6D:0C:05:6D:B1:52:A4:AE:F1:E1:27:F4:EB:30:11:49:A9:20:22 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584A549B1205F07CF1B5C5201580 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3ee1fb41-5754-35b9-bc75-ac0a951e7128.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 30036 IP address blocks: 104.201.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:12:05:f0:7c:f1:b5:c5:20:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=aed0e8fe-18e7-4fb1-a7c1-b89ee2d689d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:08:d3:87:f1:ff:a3:26:80:1d:5f:75:76:16: 2d:4e:73:c0:9f:b9:f4:f5:69:4e:4f:63:53:d6:f9: 52:df:71:81:d3:4c:aa:2e:77:1c:b2:d1:cc:64:3a: b7:d7:00:b1:81:52:b8:c6:b5:be:01:de:b2:0a:20: f7:90:ae:f9:16:19:83:02:47:f5:41:ca:9e:58:c5: 67:87:5e:e7:76:da:e9:5e:8d:97:d4:f7:5e:d3:46: 95:68:d9:71:9e:68:db:6d:e4:44:d7:cf:8d:36:e2: dd:c7:db:56:27:d1:1b:65:66:24:63:4e:dd:c0:40: 79:55:f6:c4:1a:ac:e6:94:8c:a5:e9:67:f6:db:b2: 16:f7:f4:e8:4f:94:cb:a1:ae:2f:23:f0:13:f9:af: 2d:b8:49:60:e5:52:90:b2:a7:f5:8d:0e:83:01:11: c8:f4:7b:a4:43:49:67:76:50:e9:c5:67:16:7d:fc: 44:3b:da:ab:2d:49:9a:88:a1:64:2a:5e:fa:df:98: a7:48:00:cf:80:2d:98:fc:a7:09:ed:22:06:59:03: 45:3d:92:8b:07:b0:1b:7e:90:b0:be:94:1f:ea:dd: ee:cd:15:2e:e1:b3:c7:d0:ef:27:12:55:f8:98:86: c7:c9:66:8a:0d:82:32:c6:34:ba:e4:10:f1:a7:38: ec:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6D:0C:05:6D:B1:52:A4:AE:F1:E1:27:F4:EB:30:11:49:A9:20:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3ee1fb41-5754-35b9-bc75-ac0a951e7128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:23:85:ca:e7:73:f8:c0:c9:14:d4:f9:04:9f:33:71:7a:0e: d0:62:1b:91:36:4f:84:ab:d2:a3:cc:95:3f:fd:7e:0a:68:7e: ae:57:ab:9c:31:0d:b9:dd:f2:64:75:65:f2:29:c6:15:ff:a0: 77:9c:af:ab:a2:b9:48:68:f6:04:7e:47:dc:76:fc:73:cf:31: 5c:cc:e7:c1:21:06:45:bb:84:e1:9a:a8:f7:5b:46:ba:37:79: b6:35:39:3b:ff:04:62:1b:6e:9d:f3:53:5b:3c:ab:8c:fc:00: b7:6f:12:29:d3:be:a0:6a:77:0a:0b:2e:7d:1a:46:64:ce:6e: 58:50:c2:9e:97:7b:f3:4f:d4:97:ef:3f:84:bb:2f:24:ca:39: 04:26:d5:e3:53:dc:b8:57:19:b5:94:19:87:8c:24:05:3d:e6: e0:f7:20:88:04:7b:8a:dc:f0:da:01:65:0d:2a:58:12:06:b2: c5:46:99:34:61:fe:e4:55:9c:a9:d7:ba:28:cd:08:49:08:6e: 6b:cc:c0:6a:00:c0:11:26:12:c4:ef:5b:d2:f5:48:80:c1:f1: 26:7d:95:29:73:90:3f:54:6b:8b:c3:06:c6:9a:ae:16:57:7e: 11:81:19:19:60:22:a0:b5:92:ad:42:12:7a:a9:33:db:1e:f6: 09:6a:64:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmxIF8HzxtcUgFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk YWVkMGU4ZmUtMThlNy00ZmIxLWE3YzEtYjg5ZWUyZDY4OWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQjTh/H/oyaAHV91dhYtTnPAn7n09WlOT2NT 1vlS33GB00yqLnccstHMZDq31wCxgVK4xrW+Ad6yCiD3kK75FhmDAkf1QcqeWMVn h17ndtrpXo2X1Pde00aVaNlxnmjbbeRE18+NNuLdx9tWJ9EbZWYkY07dwEB5VfbE GqzmlIyl6Wf227IW9/ToT5TLoa4vI/AT+a8tuElg5VKQsqf1jQ6DARHI9HukQ0ln dlDpxWcWffxEO9qrLUmaiKFkKl7635inSADPgC2Y/KcJ7SIGWQNFPZKLB7AbfpCw vpQf6t3uzRUu4bPH0O8nElX4mIbHyWaKDYIyxjS65BDxpzjskQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONtDAVtsVKkrvHhJ/TrMBFJqSAiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2VlMWZiNDEtNTc1NC0z NWI5LWJjNzUtYWMwYTk1MWU3MTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgjhcrnc/jAyRTU+QSfM3F6DtBiG5E2T4Sr0qPMlT/9fgpofq5Xq5wx Dbnd8mR1ZfIpxhX/oHecr6uiuUho9gR+R9x2/HPPMVzM58EhBkW7hOGaqPdbRro3 ebY1OTv/BGIbbp3zU1s8q4z8ALdvEinTvqBqdwoLLn0aRmTOblhQwp6Xe/NP1Jfv P4S7LyTKOQQm1eNT3LhXGbWUGYeMJAU95uD3IIgEe4rc8NoBZQ0qWBIGssVGmTRh /uRVnKnXuijNCEkIbmvMwGoAwBEmEsTvW9L1SIDB8SZ9lSlzkD9Ua4vDBsaarhZX fhGBGRlgIqC1kq1CEnqpM9se9glqZBg= -----END CERTIFICATE-----Generated at Mon Jun 30 21:05:42 2025 by rpki-client