$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/6dfcd7af-de21-3ba3-b413-81d0d31cac48.roa File: 6dfcd7af-de21-3ba3-b413-81d0d31cac48.roa (raw, json) Hash identifier: I8VdshFqnhuUTT4WzXQIhYKIzddgQI+Om5bKHFgO6SM= Subject key identifier: C7:21:4B:7C:40:06:45:20:5C:49:17:4B:93:02:3A:30:2C:45:BB:1D Certificate issuer: /CN=67c32d4d-1a33-4637-a07d-fcaee3a3c83b Certificate serial: 010D0C9F4328584AD3A1107425F31F396B0ECE00 Authority key identifier: 0C:27:40:58:56:BC:42:98:19:65:4F:F1:F8:9F:79:32:47:C1:91:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/6dfcd7af-de21-3ba3-b413-81d0d31cac48.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 59362 IP address blocks: 104.193.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:10:74:25:f3:1f:39:6b:0e:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67c32d4d-1a33-4637-a07d-fcaee3a3c83b Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=8e3af7a5-d632-4f52-9b79-c799b0beb13e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:22:d7:a6:1b:cc:63:36:80:25:b1:17:96:0c: 18:1b:2a:6c:60:84:98:0b:29:63:18:cc:c7:97:48: 68:c4:5a:f1:f5:08:b8:95:c5:4f:be:46:bd:61:de: 10:4e:6e:38:22:44:8c:8a:80:b3:e3:fc:5e:0b:2a: 42:80:e7:54:bc:d5:93:f2:78:0b:a1:52:90:bb:e8: 4a:cb:c3:70:43:d8:d2:a9:e5:e8:1d:23:a4:f2:7e: c2:05:b4:42:ef:a4:05:da:f4:ac:51:8d:2a:be:9a: 86:e1:d8:34:28:3c:b0:85:f7:6f:df:02:f4:77:ac: 3f:37:54:02:c8:1d:ef:f0:c1:83:00:5f:08:66:16: b1:77:fb:6f:fa:31:bc:84:80:62:2f:d0:9d:a8:6a: 0d:9e:dd:8c:e2:84:2f:c3:18:57:13:f5:5d:50:2d: 62:74:67:20:ff:b7:a7:2b:d6:c6:39:9d:24:9b:60: a2:36:0e:de:db:94:67:c8:7a:ec:75:b3:6d:18:c1: 9d:c4:51:60:33:bd:92:1b:44:06:77:1f:10:40:39: 7d:aa:e3:8c:7c:a1:08:f6:db:03:a7:b6:47:87:17: b0:b7:f5:de:35:b1:f6:05:8d:4b:ed:f2:06:0b:23: 52:56:90:fc:35:a5:91:a5:c2:7a:f4:6d:fd:b1:0d: 64:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:21:4B:7C:40:06:45:20:5C:49:17:4B:93:02:3A:30:2C:45:BB:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/6dfcd7af-de21-3ba3-b413-81d0d31cac48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.crl X509v3 Authority Key Identifier: keyid:0C:27:40:58:56:BC:42:98:19:65:4F:F1:F8:9F:79:32:47:C1:91:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.cer sbgp-ipAddrBlock: critical IPv4: 104.193.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:fb:10:a5:8a:51:62:45:04:64:35:ec:c0:e9:9d:17:cf:26: 40:d2:68:9a:c7:fb:af:9b:d7:75:a8:4e:cb:99:34:44:e4:19: 73:fb:ef:4c:7e:fd:5f:fb:13:d7:a7:db:b1:04:bd:23:96:fe: 74:11:71:52:ab:ba:5f:1e:7d:16:62:c9:78:f0:d9:d1:d0:18: 47:22:f6:fa:6f:ac:42:b0:9b:e0:b6:0b:9c:45:70:52:a7:c9: 57:ba:94:80:cd:6e:08:74:78:f7:94:96:38:ec:2d:3d:3b:7e: 01:90:1a:66:56:b7:01:df:87:3b:e5:21:87:6b:64:52:71:fa: da:bd:71:37:f4:a0:0a:67:a0:d3:2a:95:17:5f:5a:98:21:a3: 4b:d3:07:ad:9f:21:90:64:b0:56:f3:bf:9e:f5:cf:65:aa:b0: 53:c3:e8:96:55:3d:20:3b:a1:3c:28:39:1e:66:cb:e0:c4:fa: b4:b9:5d:2d:c4:51:e6:0f:e1:26:56:05:8f:d1:11:9c:c8:93: 36:df:c1:ca:80:c0:19:69:28:8e:05:12:7c:ae:e5:25:fa:87: f6:2c:da:6e:73:d7:0b:47:6a:07:aa:ac:00:bd:ca:0c:59:c1: f8:0f:f6:20:63:b3:da:31:96:af:b0:c3:be:a2:b0:67:1d:0c: b2:6e:14:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToRB0JfMfOWsOzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdjMzJkNGQtMWEzMy00NjM3LWEwN2QtZmNhZWUzYTNj ODNiMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk OGUzYWY3YTUtZDYzMi00ZjUyLTliNzktYzc5OWIwYmViMTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCLXphvMYzaAJbEXlgwYGypsYISYCyljGMzH l0hoxFrx9Qi4lcVPvka9Yd4QTm44IkSMioCz4/xeCypCgOdUvNWT8ngLoVKQu+hK y8NwQ9jSqeXoHSOk8n7CBbRC76QF2vSsUY0qvpqG4dg0KDywhfdv3wL0d6w/N1QC yB3v8MGDAF8IZhaxd/tv+jG8hIBiL9CdqGoNnt2M4oQvwxhXE/VdUC1idGcg/7en K9bGOZ0km2CiNg7e25RnyHrsdbNtGMGdxFFgM72SG0QGdx8QQDl9quOMfKEI9tsD p7ZHhxewt/XeNbH2BY1L7fIGCyNSVpD8NaWRpcJ69G39sQ1klQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMchS3xABkUgXEkXS5MCOjAsRbsdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82N2Mz MmQ0ZC0xYTMzLTQ2MzctYTA3ZC1mY2FlZTNhM2M4M2IvNmRmY2Q3YWYtZGUyMS0z YmEzLWI0MTMtODFkMGQzMWNhYzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjdjMzJkNGQtMWEzMy00NjM3LWEw N2QtZmNhZWUzYTNjODNiLzY3YzMyZDRkLTFhMzMtNDYzNy1hMDdkLWZjYWVlM2Ez YzgzYi5jcmwwHwYDVR0jBBgwFoAUDCdAWFa8QpgZZU/x+J95MkfBkaEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82N2MzMmQ0ZC0xYTMzLTQ2MzctYTA3ZC1mY2Fl ZTNhM2M4M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMEkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAz7EKWKUWJFBGQ17MDpnRfPJkDSaJrH+6+b13WoTsuZNETkGXP770x+ /V/7E9en27EEvSOW/nQRcVKrul8efRZiyXjw2dHQGEci9vpvrEKwm+C2C5xFcFKn yVe6lIDNbgh0ePeUljjsLT07fgGQGmZWtwHfhzvlIYdrZFJx+tq9cTf0oApnoNMq lRdfWpgho0vTB62fIZBksFbzv571z2WqsFPD6JZVPSA7oTwoOR5my+DE+rS5XS3E UeYP4SZWBY/REZzIkzbfwcqAwBlpKI4FEnyu5SX6h/Ys2m5z1wtHageqrAC9ygxZ wfgP9iBjs9oxlq+ww76isGcdDLJuFBM= -----END CERTIFICATE-----Generated at Sun Aug 24 08:56:35 2025 by rpki-client