$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/b040a988-fc2f-3b79-b962-453ddd2ae85a.roa File: b040a988-fc2f-3b79-b962-453ddd2ae85a.roa (raw, json) Hash identifier: N8Ph7YM4R03IdQfdC59K/eudvfn0Hk7bjAKyaJelVTo= Subject key identifier: 41:0B:88:16:10:7D:A0:17:4D:8B:BB:EE:04:13:A2:FB:87:48:F6:35 Certificate issuer: /CN=657b5e5f-0699-429f-8c83-a39c9a7a0322 Certificate serial: 010D0C9F43285849E2253F28A036CCF60551B270 Authority key identifier: 85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/b040a988-fc2f-3b79-b962-453ddd2ae85a.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 16676 IP address blocks: 104.243.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:3f:28:a0:36:cc:f6:05:51:b2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=657b5e5f-0699-429f-8c83-a39c9a7a0322 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=967c1ca8-1e8f-489b-876f-9ff82905ffa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b0:99:eb:ec:5f:f5:37:99:0a:f8:22:09:a5: 4e:41:45:98:48:fd:3e:05:24:ca:c3:84:05:2d:e3: 36:a2:a9:80:c9:11:0c:ac:aa:b3:61:3b:8d:fd:23: 03:3e:7a:47:bd:84:13:06:b8:e7:eb:11:7f:0e:b4: ad:64:0a:c6:cb:cb:a2:b1:f0:d3:c2:07:6c:d0:6e: 72:71:bb:a2:d1:08:dd:2e:7f:82:39:82:a4:a3:17: f0:30:84:f5:c5:1c:74:76:38:db:3d:6c:77:c0:58: c4:83:80:2e:e1:82:4a:f2:1a:7a:5a:d1:e2:6f:72: 50:92:0d:54:3c:0a:9c:e0:42:d0:5f:0a:63:30:aa: 8d:ac:55:30:80:aa:c7:59:8c:82:95:e0:25:c0:38: f8:0c:50:8e:20:42:a0:34:5c:c5:e7:cc:95:45:0b: a4:88:9d:8b:ba:61:0b:80:c2:72:69:79:bf:8d:d0: 80:12:07:66:13:11:03:52:d0:4f:8c:8b:61:8e:64: f5:96:e4:0c:9b:97:37:34:d6:4d:f2:b7:9d:a9:80: 3c:b0:fa:38:01:ea:82:23:29:c1:b4:5f:dc:ba:d0: b7:17:3e:96:70:b4:41:21:9c:50:80:5c:a1:fb:79: 05:2e:88:63:c9:05:95:09:bc:5c:17:af:48:8c:24: 87:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0B:88:16:10:7D:A0:17:4D:8B:BB:EE:04:13:A2:FB:87:48:F6:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/b040a988-fc2f-3b79-b962-453ddd2ae85a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl X509v3 Authority Key Identifier: keyid:85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer sbgp-ipAddrBlock: critical IPv4: 104.243.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:6b:57:2e:c6:8e:65:af:7b:f8:91:11:0b:12:5c:6f:5c:ac: 27:14:df:7d:36:c5:8a:ba:a2:d2:a7:7d:1d:6b:2f:a4:ee:24: 8b:7a:d9:62:d9:15:de:73:1c:1e:20:ee:72:60:46:3b:e7:f7: 73:c0:09:54:fe:e2:8d:00:24:97:d0:46:6b:3e:44:a9:80:0f: 68:9e:e4:3a:ad:bc:e0:53:44:fa:56:0c:e7:9f:52:83:dd:db: 0b:84:b0:13:fc:f7:54:de:34:12:b1:dd:60:e1:c9:ce:ab:ee: 7a:7c:81:69:59:bd:64:29:ce:41:cd:2c:54:e1:c6:56:ae:cc: 9f:9a:3a:f1:7f:d6:6a:bc:5b:33:e2:9e:28:3c:04:5e:ac:22: 97:b2:35:a1:5d:21:29:ff:c4:58:4a:b8:4f:ca:3f:8b:d3:73: 68:e6:08:5e:79:7c:c9:ea:85:70:2a:c1:fe:16:cf:b1:cc:0a: bf:2c:15:1d:bb:dd:79:62:fc:bf:7d:26:32:98:54:ea:75:ac: 98:53:d0:d6:2f:e3:e1:ab:8c:d8:20:19:74:cd:92:d5:ef:8b: e1:4e:ae:3b:e7:c9:69:9f:63:8b:ac:6d:90:2e:43:be:5e:7c: f1:2c:5c:73:69:04:52:b9:43:17:97:87:e9:c0:81:82:61:70: 33:d7:e3:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJT8ooDbM9gVRsnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU3YjVlNWYtMDY5OS00MjlmLThjODMtYTM5YzlhN2Ew MzIyMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk OTY3YzFjYTgtMWU4Zi00ODliLTg3NmYtOWZmODI5MDVmZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbCZ6+xf9TeZCvgiCaVOQUWYSP0+BSTKw4QF LeM2oqmAyREMrKqzYTuN/SMDPnpHvYQTBrjn6xF/DrStZArGy8uisfDTwgds0G5y cbui0QjdLn+COYKkoxfwMIT1xRx0djjbPWx3wFjEg4Au4YJK8hp6WtHib3JQkg1U PAqc4ELQXwpjMKqNrFUwgKrHWYyCleAlwDj4DFCOIEKgNFzF58yVRQukiJ2LumEL gMJyaXm/jdCAEgdmExEDUtBPjIthjmT1luQMm5c3NNZN8redqYA8sPo4AeqCIynB tF/cutC3Fz6WcLRBIZxQgFyh+3kFLohjyQWVCbxcF69IjCSHwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEELiBYQfaAXTYu77gQTovuHSPY1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82NTdi NWU1Zi0wNjk5LTQyOWYtOGM4My1hMzljOWE3YTAzMjIvYjA0MGE5ODgtZmMyZi0z Yjc5LWI5NjItNDUzZGRkMmFlODVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjU3YjVlNWYtMDY5OS00MjlmLThj ODMtYTM5YzlhN2EwMzIyLzY1N2I1ZTVmLTA2OTktNDI5Zi04YzgzLWEzOWM5YTdh MDMyMi5jcmwwHwYDVR0jBBgwFoAUhSb8rQNqMi+Cj148GAC/WbmIDswwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82NTdiNWU1Zi0wNjk5LTQyOWYtOGM4My1hMzlj OWE3YTAzMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFrVy7GjmWve/iREQsSXG9crCcU3302xYq6otKnfR1rL6TuJIt62WLZ Fd5zHB4g7nJgRjvn93PACVT+4o0AJJfQRms+RKmAD2ie5DqtvOBTRPpWDOefUoPd 2wuEsBP891TeNBKx3WDhyc6r7np8gWlZvWQpzkHNLFThxlauzJ+aOvF/1mq8WzPi nig8BF6sIpeyNaFdISn/xFhKuE/KP4vTc2jmCF55fMnqhXAqwf4Wz7HMCr8sFR27 3Xli/L99JjKYVOp1rJhT0NYv4+GrjNggGXTNktXvi+FOrjvnyWmfY4usbZAuQ75e fPEsXHNpBFK5QxeXh+nAgYJhcDPX4zk= -----END CERTIFICATE-----Generated at Mon Jun 30 15:53:03 2025 by rpki-client