$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2dd4bca-e66a-376c-b4ff-789e9f0d2310.roa File: a2dd4bca-e66a-376c-b4ff-789e9f0d2310.roa (raw, json) Hash identifier: gBgnHFhzB4Lcr5n9c89/1SIpuX8Z6ToBoHU+MjLA41Y= Subject key identifier: 43:23:5D:07:9E:95:C9:35:77:45:DC:C3:E7:F5:DA:52:BA:68:16:9C Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584A4C3B1D538A15F7EB6D93C440 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2dd4bca-e66a-376c-b4ff-789e9f0d2310.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 26768 IP address blocks: 104.251.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:1d:53:8a:15:f7:eb:6d:93:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=362efa35-ef88-4b13-bc71-c49b36cd8af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e0:50:0c:4c:63:e8:ba:41:79:af:2e:07:3a: a6:d1:f1:19:99:1d:7f:e7:bf:9d:91:1f:83:6d:26: fa:f3:95:29:c6:42:1c:d8:0f:6f:8d:53:47:88:45: b4:aa:a4:6f:b2:3e:9b:49:72:26:d3:68:70:73:15: 1b:f0:cd:45:08:6b:9d:bd:fd:f3:ee:d0:9d:e7:0d: 86:82:b9:38:d1:df:c6:87:22:ea:af:07:06:13:b5: c9:29:95:5a:af:42:61:cd:5f:77:ea:ab:3a:b9:20: 32:ab:05:ca:c2:ac:94:f6:30:90:96:62:8d:f1:e7: e8:f7:ee:4b:3a:c4:7a:a7:58:84:0c:c9:ad:78:c5: 83:94:b0:b0:b7:b2:ca:35:34:ea:99:d6:29:16:e4: 08:d9:4f:3a:d5:e4:34:15:f3:26:12:ed:0b:b8:1f: a2:5c:64:12:a5:ef:ca:66:1a:d9:1d:33:84:b0:4d: ca:bf:2a:e8:ff:ba:cf:a1:99:cd:09:b5:da:79:ba: a1:19:4e:01:39:eb:9a:31:e0:11:c3:c3:13:14:51: 75:df:40:69:4f:eb:0c:59:20:ff:f1:74:b4:8d:c1: fe:70:7e:b7:86:01:1b:5c:59:78:02:29:c3:51:59: 72:68:ac:18:d8:ef:0f:a2:50:f3:5d:ac:43:c2:2a: b9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:23:5D:07:9E:95:C9:35:77:45:DC:C3:E7:F5:DA:52:BA:68:16:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2dd4bca-e66a-376c-b4ff-789e9f0d2310.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 104.251.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:84:e9:12:b2:de:2a:fd:5e:87:bf:0f:74:e3:2e:af:01:5f: 06:16:99:55:df:2a:7c:fc:71:8b:e6:17:e3:2e:4d:fd:8b:e7: c9:5c:d3:38:3e:22:44:bb:b0:51:49:5d:f3:54:7b:77:4e:ec: 86:38:32:79:44:0f:16:c5:f1:60:0f:cc:5b:df:18:7d:77:31: ee:fa:db:60:e6:4c:a9:30:b2:89:e3:53:6a:8a:7e:22:da:75: db:d5:23:7b:f2:99:fc:b2:75:cd:9b:21:b7:96:99:01:24:31: be:32:36:4a:0b:e6:91:b9:fa:d5:b7:15:7a:13:a9:ce:3d:c5: ac:da:88:02:06:16:0f:94:d9:94:bf:16:a7:e0:5c:ec:99:10: e9:86:7d:a8:e9:0e:02:49:f6:9d:56:e6:94:d0:34:e5:ad:45: d3:19:b7:5f:d4:ff:51:00:fc:6f:0e:53:c0:e7:68:86:e2:ab: e4:80:4d:47:21:db:e2:4d:25:fd:60:22:9d:ee:7a:49:61:d8: 58:57:b6:87:c4:66:d6:6c:6c:d7:61:78:3f:86:a3:dc:ba:5e: b4:9d:14:e9:00:1e:c8:80:96:63:91:6e:e9:fa:79:ab:d8:f3: 70:48:52:2a:b4:e5:1b:54:a1:3f:f4:3c:9e:1e:25:b5:1a:10: 47:ec:a8:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOx1TihX3622TxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk MzYyZWZhMzUtZWY4OC00YjEzLWJjNzEtYzQ5YjM2Y2Q4YWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneBQDExj6LpBea8uBzqm0fEZmR1/57+dkR+D bSb685UpxkIc2A9vjVNHiEW0qqRvsj6bSXIm02hwcxUb8M1FCGudvf3z7tCd5w2G grk40d/GhyLqrwcGE7XJKZVar0JhzV936qs6uSAyqwXKwqyU9jCQlmKN8efo9+5L OsR6p1iEDMmteMWDlLCwt7LKNTTqmdYpFuQI2U861eQ0FfMmEu0LuB+iXGQSpe/K ZhrZHTOEsE3Kvyro/7rPoZnNCbXaebqhGU4BOeuaMeARw8MTFFF130BpT+sMWSD/ 8XS0jcH+cH63hgEbXFl4AinDUVlyaKwY2O8PolDzXaxDwiq5JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMjXQeelck1d0Xcw+f12lK6aBacMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvYTJkZDRiY2EtZTY2YS0z NzZjLWI0ZmYtNzg5ZTlmMGQyMzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPvqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOE6RKy3ir9Xoe/D3TjLq8BXwYWmVXfKnz8cYvmF+MuTf2L58lc0zg+ IkS7sFFJXfNUe3dO7IY4MnlEDxbF8WAPzFvfGH13Me7622DmTKkwsonjU2qKfiLa ddvVI3vymfyydc2bIbeWmQEkMb4yNkoL5pG5+tW3FXoTqc49xazaiAIGFg+U2ZS/ FqfgXOyZEOmGfajpDgJJ9p1W5pTQNOWtRdMZt1/U/1EA/G8OU8DnaIbiq+SATUch 2+JNJf1gIp3ueklh2FhXtofEZtZsbNdheD+Go9y6XrSdFOkAHsiAlmORbun6eavY 83BIUiq05RtUoT/0PJ4eJbUaEEfsqJU= -----END CERTIFICATE-----Generated at Tue Jul 1 08:28:09 2025 by rpki-client