$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/2cfc07a7-9790-3c1f-8f4a-56efc35ac620.roa File: 2cfc07a7-9790-3c1f-8f4a-56efc35ac620.roa (raw, json) Hash identifier: sXnWp/im1pI0LIMiHFMJN8kALsiYplzVaifnAKsrK8M= Subject key identifier: BF:EB:D6:C4:A1:EC:0D:20:FE:F8:04:72:A8:1D:2E:EB:47:FA:31:15 Certificate issuer: /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Certificate serial: 010D0C9F4328584A498019E4AB407A0F21E210C0 Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/2cfc07a7-9790-3c1f-8f4a-56efc35ac620.roa Signing time: Mon 23 Jun 2025 13:32:53 +0000 ROA not before: Mon 23 Jun 2025 13:32:53 +0000 ROA not after: Sun 21 Sep 2025 13:32:53 +0000 asID: 399244 IP address blocks: 104.204.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:80:19:e4:ab:40:7a:0f:21:e2:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Validity Not Before: Jun 23 13:32:53 2025 GMT Not After : Sep 21 13:32:53 2025 GMT Subject: CN=87a53c99-0033-49c3-a30c-5a1a2ea5b36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0f:14:57:d8:08:2f:ed:fb:64:9c:5e:f8:62: ab:b3:88:47:b5:2e:ea:92:f1:0d:f4:b3:62:91:af: 69:3f:af:af:5f:86:b8:aa:7d:9c:d1:58:e8:55:18: 6b:ac:74:aa:7f:2c:ef:5f:af:5c:3b:40:d9:96:89: 61:89:7b:76:3a:db:6e:af:18:3a:55:92:c4:3d:05: 19:08:1d:d8:a5:ac:48:ca:e0:dd:b6:fc:6b:c8:53: f3:42:0a:ff:db:7e:4f:de:39:84:b1:46:93:61:65: 0d:19:92:8f:28:d1:c6:ad:34:30:bb:cc:61:12:bb: ae:97:58:ff:a9:70:96:d1:26:fd:1c:45:b0:20:0b: c3:fb:00:4c:7c:fa:99:96:67:57:f1:70:21:ee:9e: ca:92:eb:7e:cc:ac:05:04:26:22:b0:c4:3e:4b:4e: 75:5c:dc:49:df:fc:e5:e5:2f:1c:10:5a:73:15:b6: ee:c1:7b:90:e6:e1:9b:35:fc:d8:ba:89:f2:3e:9e: 82:b5:43:a4:a9:00:17:15:c8:08:6e:45:52:83:88: 30:1c:bc:a1:bd:c9:a8:2f:ce:f6:90:9c:2d:df:e6: 59:e3:78:d4:34:d0:52:0f:3b:a9:7f:23:89:c5:2f: bd:17:bc:79:b9:c4:25:8c:0b:66:d0:fe:14:5a:22: 6c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EB:D6:C4:A1:EC:0D:20:FE:F8:04:72:A8:1D:2E:EB:47:FA:31:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/2cfc07a7-9790-3c1f-8f4a-56efc35ac620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl X509v3 Authority Key Identifier: keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer sbgp-ipAddrBlock: critical IPv4: 104.204.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:b9:34:d0:12:9e:aa:6b:fb:ac:6a:b2:8a:6a:db:95:b0:d2: 3e:e7:8d:f2:3e:68:a5:f1:29:84:cf:f5:10:99:b5:eb:0e:6b: 28:5f:80:09:28:06:db:13:96:a5:7f:dd:99:b6:8e:63:9a:b2: 92:ab:13:ff:da:31:04:b9:67:11:01:28:30:a5:7a:ab:48:3a: 60:dd:6d:43:8b:6e:4d:9e:40:3d:ac:69:69:b9:86:d4:a6:f1: d2:59:17:6e:ec:3e:42:b1:6b:9f:5a:fa:2c:5c:fb:a9:9d:f2: 8b:a0:65:7f:b8:3e:3b:6c:d1:e7:21:1d:08:d9:89:bb:36:09: 00:76:dd:8e:dd:78:fe:f5:35:f2:7d:65:f6:d5:4d:fa:8d:b9: ee:f4:b1:40:7e:7e:16:26:2f:92:35:17:c7:d6:6c:0e:7b:93: 25:e5:94:22:ae:46:ba:62:ef:3d:5e:2b:35:22:b0:01:4a:9a: 7d:e4:59:21:9b:93:55:6c:da:2d:7e:a3:54:19:cd:eb:fc:a9: c6:a8:3f:d6:db:b6:4e:3f:dc:e8:8a:5a:40:65:74:6b:60:c3: 22:81:84:52:8b:8a:16:e8:3d:9f:ca:77:2a:3e:d3:b2:a8:ac: 98:a9:85:18:41:04:8e:be:00:e3:36:d1:cb:e5:45:a5:44:85: d4:37:49:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJgBnkq0B6DyHiEMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh MzhkMB4XDTI1MDYyMzEzMzI1M1oXDTI1MDkyMTEzMzI1M1owLzEtMCsGA1UEAxMk ODdhNTNjOTktMDAzMy00OWMzLWEzMGMtNWExYTJlYTViMzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Q8UV9gIL+37ZJxe+GKrs4hHtS7qkvEN9LNi ka9pP6+vX4a4qn2c0VjoVRhrrHSqfyzvX69cO0DZlolhiXt2Otturxg6VZLEPQUZ CB3YpaxIyuDdtvxryFPzQgr/235P3jmEsUaTYWUNGZKPKNHGrTQwu8xhEruul1j/ qXCW0Sb9HEWwIAvD+wBMfPqZlmdX8XAh7p7Kkut+zKwFBCYisMQ+S051XNxJ3/zl 5S8cEFpzFbbuwXuQ5uGbNfzYuonyPp6CtUOkqQAXFcgIbkVSg4gwHLyhvcmoL872 kJwt3+ZZ43jUNNBSDzupfyOJxS+9F7x5ucQljAtm0P4UWiJscwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/r1sSh7A0g/vgEcqgdLutH+jEVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvMmNmYzA3YTctOTc5MC0z YzFmLThmNGEtNTZlZmMzNWFjNjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl MTU0YmEzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaMzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADm5NNASnqpr+6xqsopq25Ww0j7njfI+aKXxKYTP9RCZtesOayhfgAko BtsTlqV/3Zm2jmOaspKrE//aMQS5ZxEBKDCleqtIOmDdbUOLbk2eQD2saWm5htSm 8dJZF27sPkKxa59a+ixc+6md8ougZX+4Pjts0echHQjZibs2CQB23Y7deP71NfJ9 ZfbVTfqNue70sUB+fhYmL5I1F8fWbA57kyXllCKuRrpi7z1eKzUisAFKmn3kWSGb k1Vs2i1+o1QZzev8qcaoP9bbtk4/3OiKWkBldGtgwyKBhFKLihboPZ/Kdyo+07Ko rJiphRhBBI6+AOM20cvlRaVEhdQ3SYk= -----END CERTIFICATE-----Generated at Mon Jun 30 08:54:25 2025 by rpki-client