$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/b8a9b5c7-196b-3c32-b1ec-182c5c0f0e22.roa File: b8a9b5c7-196b-3c32-b1ec-182c5c0f0e22.roa (raw, json) Hash identifier: rO6kg5kfW4wP+CGu6+JqMl1TlH1UXvC53nP80W4xBJ8= Subject key identifier: ED:9C:EE:72:86:E0:FF:62:9E:5C:6B:00:3A:FD:48:DA:26:67:DE:CF Certificate issuer: /CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8 Certificate serial: 010D0C9F4328584A3A1571C07606B9F6DCC6BF00 Authority key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/b8a9b5c7-196b-3c32-b1ec-182c5c0f0e22.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 7057 IP address blocks: 104.254.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:71:c0:76:06:b9:f6:dc:c6:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=3f32022d-e38e-48cc-9412-1003135a111e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bd:4f:28:61:c6:3f:18:c9:87:66:0e:2d:9a: 0d:57:45:8a:12:c7:91:35:65:6d:02:10:73:15:4e: e5:61:88:b6:0e:75:80:67:93:1f:94:34:41:dd:94: 7a:19:d3:2b:d8:ad:ab:b7:18:41:c0:34:a2:62:14: d9:53:36:20:28:84:39:e2:e1:24:de:c1:36:3f:75: cf:c6:15:6b:a1:81:1f:18:bf:45:f5:d5:a8:0c:76: a8:cb:b2:2f:54:55:05:e2:c3:5a:ca:2c:28:09:9b: 20:25:a7:1c:35:78:8f:63:5b:eb:1b:61:51:ba:14: 38:5b:43:1f:09:45:30:f3:2d:54:8a:ee:ff:4e:e8: 0e:45:a2:11:9d:95:51:e6:df:ff:96:3e:82:5e:1c: 26:fc:6c:bc:d6:6c:ac:7f:25:2f:c9:96:37:e7:29: d4:f9:60:3f:9e:8d:78:ee:fa:57:3b:48:76:bc:29: c5:aa:02:31:bc:26:93:cd:39:84:a8:a8:6d:2d:70: c3:40:09:3a:87:ec:99:eb:12:d2:8a:0c:a0:d0:e9: e4:78:24:d5:3d:5c:72:d6:01:f1:62:39:29:63:4b: 7a:13:3a:60:60:1f:55:7f:65:40:f7:26:af:d6:b3: 0a:18:2c:c5:fb:f0:a3:48:fa:5a:78:1f:1e:70:70: 98:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9C:EE:72:86:E0:FF:62:9E:5C:6B:00:3A:FD:48:DA:26:67:DE:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/b8a9b5c7-196b-3c32-b1ec-182c5c0f0e22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl X509v3 Authority Key Identifier: keyid:4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer sbgp-ipAddrBlock: critical IPv4: 104.254.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:e9:64:2f:92:ce:17:09:93:83:2c:70:75:9d:90:1a:33:ae: 0c:c9:57:6f:6c:36:f8:c1:47:b0:a8:6a:46:9f:11:97:d5:5f: 35:4b:95:83:79:88:8d:39:7f:70:02:6e:ac:4b:5a:c8:cf:ed: 11:f4:8f:3c:88:ef:7d:8e:fd:40:44:42:aa:6e:1c:bc:04:f2: 0f:f9:3d:68:5c:3c:74:9d:3b:0c:a0:df:f5:8c:20:14:35:dc: da:35:a4:88:14:44:0c:04:9b:50:3b:84:dc:98:10:46:56:24: 92:4c:b4:62:ce:2e:0c:e8:a8:fd:aa:6a:7f:12:31:c0:7c:b2: af:f7:68:44:a1:ae:91:64:44:fc:c0:c5:50:cf:10:cc:14:07: ce:8b:7d:57:2a:69:68:3a:91:10:b4:d3:f3:81:c9:00:fe:0d: 0b:5c:bc:3a:f0:0f:e2:7a:b9:96:b2:64:94:81:a2:d3:0c:04: d2:9a:da:5f:31:b2:05:47:84:fd:5c:ef:e0:19:b8:75:dd:6e: a5:b5:6d:3d:88:1d:84:c9:a3:48:58:fa:0f:74:de:f3:f0:51: 2b:e3:c8:16:2d:9a:4a:b1:0e:02:81:eb:90:d1:2c:c0:2e:be: 44:11:32:cc:44:4e:ca:24:0a:c5:48:cb:da:8c:26:a6:15:ed: 23:17:73:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FXHAdga59tzGvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU3YmMyOGQtMzdlNC00Yzc2LTg0ZDQtODQzMWRjOTIz OWM4MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk M2YzMjAyMmQtZTM4ZS00OGNjLTk0MTItMTAwMzEzNWExMTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA071PKGHGPxjJh2YOLZoNV0WKEseRNWVtAhBz FU7lYYi2DnWAZ5MflDRB3ZR6GdMr2K2rtxhBwDSiYhTZUzYgKIQ54uEk3sE2P3XP xhVroYEfGL9F9dWoDHaoy7IvVFUF4sNayiwoCZsgJaccNXiPY1vrG2FRuhQ4W0Mf CUUw8y1Uiu7/TugORaIRnZVR5t//lj6CXhwm/Gy81mysfyUvyZY35ynU+WA/no14 7vpXO0h2vCnFqgIxvCaTzTmEqKhtLXDDQAk6h+yZ6xLSigyg0OnkeCTVPVxy1gHx YjkpY0t6EzpgYB9Vf2VA9yav1rMKGCzF+/CjSPpaeB8ecHCYbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2c7nKG4P9inlxrADr9SNomZ97PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdi YzI4ZC0zN2U0LTRjNzYtODRkNC04NDMxZGM5MjM5YzgvYjhhOWI1YzctMTk2Yi0z YzMyLWIxZWMtMTgyYzVjMGYwZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWU3YmMyOGQtMzdlNC00Yzc2LTg0 ZDQtODQzMWRjOTIzOWM4LzFlN2JjMjhkLTM3ZTQtNGM3Ni04NGQ0LTg0MzFkYzky MzljOC5jcmwwHwYDVR0jBBgwFoAUT2hGCOzA/DWcXU1xd+vJ0MqBG1QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdiYzI4ZC0zN2U0LTRjNzYtODRkNC04NDMx ZGM5MjM5YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTpZC+SzhcJk4MscHWdkBozrgzJV29sNvjBR7CoakafEZfVXzVLlYN5 iI05f3ACbqxLWsjP7RH0jzyI732O/UBEQqpuHLwE8g/5PWhcPHSdOwyg3/WMIBQ1 3No1pIgURAwEm1A7hNyYEEZWJJJMtGLOLgzoqP2qan8SMcB8sq/3aEShrpFkRPzA xVDPEMwUB86LfVcqaWg6kRC00/OByQD+DQtcvDrwD+J6uZayZJSBotMMBNKa2l8x sgVHhP1c7+AZuHXdbqW1bT2IHYTJo0hY+g903vPwUSvjyBYtmkqxDgKB65DRLMAu vkQRMsxETsokCsVIy9qMJqYV7SMXc0Q= -----END CERTIFICATE-----Generated at Mon Jun 30 19:08:16 2025 by rpki-client