$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/52703a63-9fec-3c65-9164-84d0bb817028.roa File: 52703a63-9fec-3c65-9164-84d0bb817028.roa (raw, json) Hash identifier: wt1nFMFh95fIMVe6JqbHAMBk1TeBVoCxmlW4VSrnmdI= Subject key identifier: 67:D8:45:7A:8C:DE:49:8E:27:F4:0E:8C:F0:9D:43:4E:21:F0:AD:74 Certificate issuer: /CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580 Certificate serial: 010D0C9F4328584A2ABAEC826DFA54C514A9E380 Authority key identifier: 93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/52703a63-9fec-3c65-9164-84d0bb817028.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 396982 IP address blocks: 104.232.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:ec:82:6d:fa:54:c5:14:a9:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=5da6efc2-daf7-478e-ba3f-b10f2d9941e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2d:81:46:ed:9b:b7:a9:b5:53:47:66:72:6d: 48:75:bb:c2:dd:b7:b0:af:2b:f4:f9:13:eb:8e:1c: 7a:50:3d:ad:4a:1c:0b:39:13:35:48:b6:6c:30:17: 68:6e:1b:42:b2:1a:c0:78:74:32:ec:aa:11:67:6f: c2:7b:2a:c1:8c:b1:53:98:58:d5:8e:89:6f:ed:41: 17:3f:20:0f:07:b4:e2:91:55:a4:16:0a:35:b2:7c: e8:a1:20:06:04:40:e5:81:5a:19:28:95:e1:78:a5: 91:6a:9b:96:61:22:df:ed:05:5a:71:90:df:c8:cc: c9:2d:c4:9f:37:e9:b6:cf:1c:6f:c7:4e:9b:4c:55: 6f:d3:4e:f7:d7:09:d7:16:11:43:2d:b9:78:5e:d5: 19:a6:34:78:55:f0:33:35:17:29:ba:e6:8a:8a:cb: c3:a0:dc:ac:57:9c:2c:f0:02:6e:4a:25:27:29:28: 30:8f:ef:ed:43:e9:db:dc:71:7a:91:d2:4e:37:aa: 27:12:be:c8:35:d5:e7:34:9c:2f:0e:e3:a0:ec:88: f2:27:e0:75:61:d2:48:8c:de:9e:9a:da:83:09:c7: ee:05:d8:8e:1d:ee:39:65:11:01:00:5d:6c:5b:08: 1b:75:34:8b:6f:a9:e3:01:5b:3f:5c:85:94:d8:ed: d3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D8:45:7A:8C:DE:49:8E:27:F4:0E:8C:F0:9D:43:4E:21:F0:AD:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/52703a63-9fec-3c65-9164-84d0bb817028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl X509v3 Authority Key Identifier: keyid:93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer sbgp-ipAddrBlock: critical IPv4: 104.232.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:77:d7:54:bb:37:a9:06:a2:28:e7:c6:70:91:7a:f3:f0:c0: e0:14:83:4e:d2:fd:da:49:71:4d:7b:a0:78:02:45:be:56:99: 20:2d:c3:14:8f:b3:47:81:4c:52:31:a0:6f:a1:7e:35:2d:a0: 52:30:1a:ba:f3:67:d6:ed:84:b0:a9:87:79:a6:b7:ea:c0:71: 2b:3c:ea:93:aa:58:1b:eb:20:bd:6d:2c:65:f9:40:82:34:3b: ff:c2:98:c7:a9:f3:89:a3:69:b4:70:23:3e:01:bc:63:61:dc: 65:e4:6c:56:13:6f:1a:03:68:f6:09:e9:9f:a3:ca:27:2d:f1: 7c:5f:5b:83:f9:88:3c:e1:45:7d:b8:3b:cc:e2:71:08:aa:fd: c4:76:ea:16:d7:13:53:01:d3:7c:55:52:d6:9a:63:d7:c9:da: 6e:ee:9d:1c:f9:ed:7c:97:de:0a:d2:57:bf:9b:04:e4:34:48: 2e:20:de:b2:cf:e7:73:d7:1c:38:55:c4:d0:db:91:05:55:32: d5:5c:7e:a1:e2:5b:c6:2d:73:7e:6d:7c:06:09:ed:29:f5:45: 23:6c:5a:4d:60:9f:85:18:44:47:fc:0c:db:3f:5b:84:6c:7c: a7:b6:66:07:e3:82:f0:5e:45:66:83:ba:68:3b:76:4f:03:ce: 2c:7b:9d:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquuyCbfpUxRSp44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ2OWMyYTctZjdkNy00OGJiLWExNzctN2MwYjY3NjU0 NTgwMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk NWRhNmVmYzItZGFmNy00NzhlLWJhM2YtYjEwZjJkOTk0MWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhi2BRu2bt6m1U0dmcm1IdbvC3bewryv0+RPr jhx6UD2tShwLORM1SLZsMBdobhtCshrAeHQy7KoRZ2/CeyrBjLFTmFjVjolv7UEX PyAPB7TikVWkFgo1snzooSAGBEDlgVoZKJXheKWRapuWYSLf7QVacZDfyMzJLcSf N+m2zxxvx06bTFVv00731wnXFhFDLbl4XtUZpjR4VfAzNRcpuuaKisvDoNysV5ws 8AJuSiUnKSgwj+/tQ+nb3HF6kdJON6onEr7INdXnNJwvDuOg7IjyJ+B1YdJIjN6e mtqDCcfuBdiOHe45ZREBAF1sWwgbdTSLb6njAVs/XIWU2O3TBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfYRXqM3kmOJ/QOjPCdQ04h8K10MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZDY5 YzJhNy1mN2Q3LTQ4YmItYTE3Ny03YzBiNjc2NTQ1ODAvNTI3MDNhNjMtOWZlYy0z YzY1LTkxNjQtODRkMGJiODE3MDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWQ2OWMyYTctZjdkNy00OGJiLWEx NzctN2MwYjY3NjU0NTgwLzVkNjljMmE3LWY3ZDctNDhiYi1hMTc3LTdjMGI2NzY1 NDU4MC5jcmwwHwYDVR0jBBgwFoAUk9EPQIKTK6+/siB9xjyzAANfANQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZDY5YzJhNy1mN2Q3LTQ4YmItYTE3Ny03YzBi Njc2NTQ1ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaOgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHB311S7N6kGoijnxnCRevPwwOAUg07S/dpJcU17oHgCRb5WmSAtwxSP s0eBTFIxoG+hfjUtoFIwGrrzZ9bthLCph3mmt+rAcSs86pOqWBvrIL1tLGX5QII0 O//CmMep84mjabRwIz4BvGNh3GXkbFYTbxoDaPYJ6Z+jyict8XxfW4P5iDzhRX24 O8zicQiq/cR26hbXE1MB03xVUtaaY9fJ2m7unRz57XyX3grSV7+bBOQ0SC4g3rLP 53PXHDhVxNDbkQVVMtVcfqHiW8Ytc35tfAYJ7Sn1RSNsWk1gn4UYREf8DNs/W4Rs fKe2ZgfjgvBeRWaDumg7dk8Dzix7nb8= -----END CERTIFICATE-----Generated at Tue Jul 1 15:11:13 2025 by rpki-client