$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/70bad8da-e232-3ea8-a3d2-d925c20d60aa.roa File: 70bad8da-e232-3ea8-a3d2-d925c20d60aa.roa (raw, json) Hash identifier: ulTtK9y99fq+PVJtAStFBcm2hnjsV1iOpfZMh6J0uv0= Subject key identifier: 59:55:60:CE:9A:79:B5:D7:39:5E:A2:9A:CE:85:70:C6:A7:B1:70:F1 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584A2864E12EB9887F0723E3FB60 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/70bad8da-e232-3ea8-a3d2-d925c20d60aa.roa Signing time: Wed 11 Jun 2025 16:56:21 +0000 ROA not before: Wed 11 Jun 2025 16:56:21 +0000 ROA not after: Tue 09 Sep 2025 16:56:21 +0000 asID: 23473 IP address blocks: 104.145.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:28:64:e1:2e:b9:88:7f:07:23:e3:fb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jun 11 16:56:21 2025 GMT Not After : Sep 9 16:56:21 2025 GMT Subject: CN=3ad08c6f-fd24-4a27-a275-8e06dc569170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e3:f5:5b:b1:f5:3a:7b:6e:ed:36:0c:36:7e: f6:0b:06:66:86:c3:3c:80:eb:b9:8d:b6:e8:81:3d: f1:aa:99:a2:34:df:ed:dd:e8:aa:c9:3c:98:30:83: 1a:1b:c5:95:85:ed:c0:fe:fa:8b:ec:e4:e1:b6:1f: e2:56:34:48:ce:62:1c:a4:5c:a7:46:10:c7:ab:06: 3c:af:21:66:67:63:70:e0:88:fa:42:51:1c:13:2e: ec:e6:be:84:43:10:53:dd:7d:74:3f:2b:ed:3e:dd: a4:fb:26:a3:72:d9:fe:fa:b9:9f:15:c4:d8:35:30: fb:5f:6c:84:50:27:3a:1e:96:9e:bf:27:88:69:85: 93:a2:21:f2:ec:c8:82:7e:0c:b6:04:09:4d:a6:52: 7b:75:4b:b4:04:53:86:d5:8c:5b:06:55:04:3e:6f: 2d:2b:4d:03:65:a7:2f:cf:22:65:c0:b2:e8:bb:f9: ad:c3:5a:32:88:fc:39:20:6d:f5:f1:7a:03:83:e4: fe:83:63:78:a1:72:68:cb:4d:1c:72:e2:2f:6a:cc: 02:b9:d5:62:b6:46:74:1d:2a:8a:9a:6a:4f:1e:45: f2:b3:5f:f3:79:b7:19:c1:1e:d1:56:59:47:f6:bf: 23:6e:c2:cd:c0:5f:ad:e0:77:92:5f:7a:f6:22:71: 00:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:55:60:CE:9A:79:B5:D7:39:5E:A2:9A:CE:85:70:C6:A7:B1:70:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/70bad8da-e232-3ea8-a3d2-d925c20d60aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 104.145.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:2a:7d:13:5c:83:6d:38:71:ab:de:03:be:d4:ba:a9:ad:c0: 09:84:01:c9:53:90:58:9a:47:aa:ab:0a:29:2f:0e:02:a8:89: 20:39:dc:26:2b:56:6c:27:ba:a8:3b:88:04:82:1a:cd:05:45: e1:81:75:a8:85:3d:e8:72:86:c0:dd:56:06:c1:05:3a:fb:0e: 18:ba:7d:84:41:5d:4e:e7:05:fd:4e:ba:6e:ba:72:d9:50:be: a4:94:c3:3d:5b:aa:c8:02:cc:af:88:f4:31:06:7b:17:d9:39: 08:38:66:be:2c:4b:1c:2c:eb:e6:56:84:e1:98:ce:fe:3b:12: 71:13:11:89:7c:d2:12:0c:31:b1:43:1e:ca:e7:ca:05:48:59: 3a:ff:b6:a4:e4:10:3d:18:5c:f8:92:37:88:6a:96:7c:52:5b: 46:73:ba:9b:a2:58:c1:13:49:cf:c4:07:99:19:0f:ef:2c:48: 2b:a9:b3:ff:f7:40:bc:86:3a:45:73:5a:c8:03:84:43:f2:fc: 55:57:92:88:ad:8d:01:9a:1a:7c:ef:e3:84:16:2e:bf:91:50: 28:ea:80:78:2b:b0:f6:b6:07:74:ec:46:c8:17:1d:5f:00:ea: 16:a6:81:26:b7:1e:9a:22:a3:e3:4b:82:d2:6e:a9:57:04:6f: 4c:f0:cb:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEooZOEuuYh/ByPj+2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDYxMTE2NTYyMVoXDTI1MDkwOTE2NTYyMVowLzEtMCsGA1UEAxMk M2FkMDhjNmYtZmQyNC00YTI3LWEyNzUtOGUwNmRjNTY5MTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOP1W7H1Ontu7TYMNn72CwZmhsM8gOu5jbbo gT3xqpmiNN/t3eiqyTyYMIMaG8WVhe3A/vqL7OThth/iVjRIzmIcpFynRhDHqwY8 ryFmZ2Nw4Ij6QlEcEy7s5r6EQxBT3X10PyvtPt2k+yajctn++rmfFcTYNTD7X2yE UCc6HpaevyeIaYWToiHy7MiCfgy2BAlNplJ7dUu0BFOG1YxbBlUEPm8tK00DZacv zyJlwLLou/mtw1oyiPw5IG318XoDg+T+g2N4oXJoy00ccuIvaswCudVitkZ0HSqK mmpPHkXys1/zebcZwR7RVllH9r8jbsLNwF+t4HeSX3r2InEA4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlVYM6aebXXOV6ims6FcMansXDxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNzBiYWQ4ZGEtZTIzMi0z ZWE4LWEzZDItZDkyNWMyMGQ2MGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJFjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQqfRNcg204caveA77UuqmtwAmEAclTkFiaR6qrCikvDgKoiSA53CYr Vmwnuqg7iASCGs0FReGBdaiFPehyhsDdVgbBBTr7Dhi6fYRBXU7nBf1Oum66ctlQ vqSUwz1bqsgCzK+I9DEGexfZOQg4Zr4sSxws6+ZWhOGYzv47EnETEYl80hIMMbFD HsrnygVIWTr/tqTkED0YXPiSN4hqlnxSW0ZzupuiWMETSc/EB5kZD+8sSCups//3 QLyGOkVzWsgDhEPy/FVXkoitjQGaGnzv44QWLr+RUCjqgHgrsPa2B3TsRsgXHV8A 6hamgSa3Hpoio+NLgtJuqVcEb0zwy10= -----END CERTIFICATE-----Generated at Mon Jun 30 08:59:33 2025 by rpki-client