$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa File: a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa (raw, json) Hash identifier: hApmtoOV1nfbniRM90wjwjKoULlW1W5K6K+2v7FzFBc= Subject key identifier: 7A:EC:1C:AA:04:24:DB:A9:B8:DD:AA:FF:8E:53:E6:57:B1:71:01:F9 Certificate issuer: /CN=900920d7-dc26-412d-b92a-7af35af2cc24 Certificate serial: 010D0C9F43285849BDDA24BBCA04E604E2FC3100 Authority key identifier: D7:72:A6:9A:5A:9A:5E:31:05:1B:21:51:B8:3B:C7:48:89:48:D3:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 36694 IP address blocks: 104.219.228.0/22 maxlen: 24 2620:11d:1000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:24:bb:ca:04:e6:04:e2:fc:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900920d7-dc26-412d-b92a-7af35af2cc24 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=603cee39-10e9-48d9-af4d-e0aeb998cbcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b7:b5:7c:68:3f:03:19:51:de:5e:4d:bf:9e: ce:50:5d:8d:a4:cf:82:bd:60:30:50:cc:04:de:fe: bf:ce:af:d6:6c:57:3c:24:f5:67:17:32:c3:c2:e9: 0a:10:ca:48:11:87:13:a7:a6:a9:d6:29:47:20:1e: 83:84:e4:86:96:bc:d2:7b:0c:06:99:9b:32:64:4c: d5:78:36:ad:f9:cf:77:be:b9:2f:43:26:5b:19:7d: 1e:df:c7:88:3c:34:01:79:10:2a:c8:15:da:ec:71: 6b:5c:b0:dc:4d:b3:41:12:d2:cc:35:a5:86:03:93: 74:18:bf:93:6e:71:bb:07:b6:a1:ba:52:da:af:c9: c1:ea:57:7e:89:07:dd:e2:bf:a0:00:46:78:74:fc: 74:a4:d3:db:38:80:e7:6c:a7:8b:59:6d:17:ec:8d: 8d:c4:4a:f6:c2:43:d4:28:31:50:2f:a4:63:a9:82: 9f:ab:5b:b2:05:ed:cc:64:97:c4:15:a6:71:b3:4b: ad:25:9a:07:82:b3:d0:cb:03:8b:a5:8b:b0:26:c8: 37:54:e7:ba:02:c7:27:c3:0a:7a:15:37:d6:b6:f7: 97:da:31:e6:2c:24:46:7f:d9:fc:92:6d:78:b9:62: 6b:cd:22:6d:64:69:07:90:f3:1b:5a:ca:69:2d:8b: 56:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:EC:1C:AA:04:24:DB:A9:B8:DD:AA:FF:8E:53:E6:57:B1:71:01:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.crl X509v3 Authority Key Identifier: keyid:D7:72:A6:9A:5A:9A:5E:31:05:1B:21:51:B8:3B:C7:48:89:48:D3:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer sbgp-ipAddrBlock: critical IPv4: 104.219.228.0/22 IPv6: 2620:11d:1000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:92:27:12:bc:11:fc:84:91:a6:48:60:eb:fd:50:fe:f8:22: a0:47:94:b0:1d:e1:8e:f3:f8:9d:31:62:ad:fd:c2:c6:3e:57: 80:2f:4f:9c:67:cf:d6:4c:dc:61:f7:35:db:c8:93:87:85:a6: fb:9a:52:27:5a:3c:e8:0b:06:ed:83:ff:50:b8:3a:b4:5a:d6: 36:c5:81:ce:4a:3f:ff:59:e0:c9:fe:8f:d9:0d:b6:a3:67:cf: 5e:0f:fb:e2:b2:4f:52:d6:dd:bc:9d:95:2e:11:1e:74:4b:92: 64:b2:72:33:9d:e2:5c:9b:e8:f5:09:9c:26:5e:f2:b0:9a:91: f6:58:7e:88:e5:5e:51:e5:c6:b2:91:fc:e9:a5:e5:8d:6f:e3: 7a:06:45:d5:21:76:fd:bb:c9:d2:72:2d:69:87:0f:82:ff:8d: 09:58:19:c8:73:4a:33:f2:ca:e1:84:1e:7b:87:86:0c:4c:13: 3c:a0:2c:33:8e:72:e4:ce:4f:53:5e:6f:ec:72:bd:ab:17:f1: d1:99:2f:cf:76:3a:0c:3c:9a:1e:8a:bd:fd:9c:c7:6c:f0:ee: ed:f4:65:21:c1:64:17:99:07:80:d0:dc:c6:1e:c3:5e:d6:72: 5d:d3:f8:82:d5:19:b8:ec:41:f3:9a:dc:86:64:75:27:0e:e8: 77:cd:b4:61 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEm92iS7ygTmBOL8MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwOTIwZDctZGMyNi00MTJkLWI5MmEtN2FmMzVhZjJj YzI0MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NjAzY2VlMzktMTBlOS00OGQ5LWFmNGQtZTBhZWI5OThjYmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjre1fGg/AxlR3l5Nv57OUF2NpM+CvWAwUMwE 3v6/zq/WbFc8JPVnFzLDwukKEMpIEYcTp6ap1ilHIB6DhOSGlrzSewwGmZsyZEzV eDat+c93vrkvQyZbGX0e38eIPDQBeRAqyBXa7HFrXLDcTbNBEtLMNaWGA5N0GL+T bnG7B7ahulLar8nB6ld+iQfd4r+gAEZ4dPx0pNPbOIDnbKeLWW0X7I2NxEr2wkPU KDFQL6RjqYKfq1uyBe3MZJfEFaZxs0utJZoHgrPQywOLpYuwJsg3VOe6Ascnwwp6 FTfWtveX2jHmLCRGf9n8km14uWJrzSJtZGkHkPMbWsppLYtWYwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFHrsHKoEJNupuN2q/45T5lexcQH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDA5 MjBkNy1kYzI2LTQxMmQtYjkyYS03YWYzNWFmMmNjMjQvYTg2ZGVhNGYtNWY2Zi0z MmFlLThhMjUtZWFkNGE0ZGJhMmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTAwOTIwZDctZGMyNi00MTJkLWI5 MmEtN2FmMzVhZjJjYzI0LzkwMDkyMGQ3LWRjMjYtNDEyZC1iOTJhLTdhZjM1YWYy Y2MyNC5jcmwwHwYDVR0jBBgwFoAU13KmmlqaXjEFGyFRuDvHSIlI0+AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDA5MjBkNy1kYzI2LTQxMmQtYjkyYS03YWYz NWFmMmNjMjQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCaNvkMA8E AgACMAkDBwQmIAEdEAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA0ZInErwR/ISRpkhg6/1Q/vgioEeUsB3h jvP4nTFirf3Cxj5XgC9PnGfP1kzcYfc128iTh4Wm+5pSJ1o86AsG7YP/ULg6tFrW NsWBzko//1ngyf6P2Q22o2fPXg/74rJPUtbdvJ2VLhEedEuSZLJyM53iXJvo9Qmc Jl7ysJqR9lh+iOVeUeXGspH86aXljW/jegZF1SF2/bvJ0nItaYcPgv+NCVgZyHNK M/LK4YQee4eGDEwTPKAsM45y5M5PU15v7HK9qxfx0Zkvz3Y6DDyaHoq9/ZzHbPDu 7fRlIcFkF5kHgNDcxh7DXtZyXdP4gtUZuOxB85rchmR1Jw7od820YQ== -----END CERTIFICATE-----Generated at Mon May 12 11:12:16 2025 by rpki-client