$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa File: 2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa (raw, json) Hash identifier: Hj9AM318bOaAIXRDUoot5AhItfyqlXhawHPNlQthn1o= Subject key identifier: 6E:82:11:68:E3:3E:5F:A2:4F:03:E1:25:40:30:DF:CC:19:CA:EC:40 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584A34801CA53281A6472AF0E920 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 4540 IP address blocks: 104.151.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:1c:a5:32:81:a6:47:2a:f0:e9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=7eef6b13-0ba3-4f44-8ee1-bafbe4127327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9a:33:e6:cf:32:7c:7b:62:af:ce:bd:0b:a0: 70:a3:87:04:df:df:1e:94:64:6d:2b:41:98:aa:88: 7f:6d:ed:72:94:e8:fd:5f:12:fb:6e:e9:07:3d:61: cd:bf:ae:f8:cf:4f:e9:a6:6b:9c:26:f2:6a:8e:83: b5:a8:0f:6a:c2:b3:f3:6c:00:38:3b:93:f8:90:ac: 47:95:fc:4e:0d:3f:0f:78:22:39:e3:09:51:c1:15: 75:c2:5e:70:a9:21:31:e2:57:51:f5:1f:e0:c8:37: aa:4f:16:a8:4a:87:73:49:2b:8f:70:37:ed:5d:2c: 1d:08:cb:0d:7e:7e:47:69:cc:3b:3d:cc:81:16:ad: bd:a7:76:1d:45:fb:91:7c:d0:2c:0a:c6:79:c1:24: 32:4a:d4:a7:c3:14:8d:1a:90:31:b5:3d:c4:f7:98: 82:8a:26:63:64:46:98:8f:c8:1b:6c:c2:e8:6e:67: ed:5a:78:39:65:ef:e2:1b:b0:e9:79:27:26:e6:93: 3a:6d:bb:bf:8e:51:75:8e:07:db:42:9c:f4:9e:26: 43:e4:cf:a2:79:e3:51:b5:8f:dd:19:da:1b:93:5d: 9a:23:17:0f:19:d4:48:a8:5d:89:95:53:21:b3:88: 64:ae:38:ad:e5:e7:33:25:70:1f:94:c0:9f:13:37: 7d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:82:11:68:E3:3E:5F:A2:4F:03:E1:25:40:30:DF:CC:19:CA:EC:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 104.151.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:a6:fb:32:cf:32:fa:67:c9:89:c4:8c:b8:ef:3b:51:cf:65: 84:4d:31:2f:f3:9d:92:4c:74:3a:14:5b:22:11:45:35:30:4f: 28:f6:2b:fa:00:51:8e:3c:8b:41:80:d6:c6:d8:95:e6:34:b8: 1d:27:8f:7c:d0:c1:c5:55:79:a0:a3:0b:17:6d:a6:06:21:16: 23:99:76:5d:05:d3:5f:bd:69:8b:bf:e7:51:f3:d2:57:98:a3: d7:82:2a:af:c6:b8:47:dc:72:68:5d:4f:ad:88:f3:fe:16:cf: 96:c9:ec:61:35:4d:62:4f:a5:21:21:14:a0:c2:a8:e1:1c:f0: c1:f5:1a:7f:ea:a8:8b:47:d9:6f:7f:43:d4:37:e8:49:26:d9: f7:57:52:ba:d4:cc:e5:2b:27:07:f1:ad:d3:52:b0:2e:b1:88: 46:de:a1:7e:58:01:f1:2f:7d:9d:0b:5e:fd:a3:8b:1d:29:d2: c3:03:e8:31:6d:2e:a9:b8:7b:a3:17:e5:d4:40:cc:40:ca:db: e0:98:ca:d8:70:46:ca:6f:c3:b6:b3:26:12:83:4e:e4:ca:b3: a0:51:e9:28:4c:02:e9:1d:80:3d:8d:f1:b6:b0:44:47:f9:8b: cd:34:26:e7:80:b7:8b:72:e1:18:56:7e:c7:fc:ae:8c:a5:ee: fd:02:74:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBylMoGmRyrw6SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk N2VlZjZiMTMtMGJhMy00ZjQ0LThlZTEtYmFmYmU0MTI3MzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpoz5s8yfHtir869C6Bwo4cE398elGRtK0GY qoh/be1ylOj9XxL7bukHPWHNv674z0/ppmucJvJqjoO1qA9qwrPzbAA4O5P4kKxH lfxODT8PeCI54wlRwRV1wl5wqSEx4ldR9R/gyDeqTxaoSodzSSuPcDftXSwdCMsN fn5Hacw7PcyBFq29p3YdRfuRfNAsCsZ5wSQyStSnwxSNGpAxtT3E95iCiiZjZEaY j8gbbMLobmftWng5Ze/iG7DpeScm5pM6bbu/jlF1jgfbQpz0niZD5M+ieeNRtY/d Gdobk12aIxcPGdRIqF2JlVMhs4hkrjit5eczJXAflMCfEzd9MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6CEWjjPl+iTwPhJUAw38wZyuxAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMjk0NmFjMjAtNTI5ZS0z YzhjLThkZmItNWJhZjQxZDBmMjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaJeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWm+zLPMvpnyYnEjLjvO1HPZYRNMS/znZJMdDoUWyIRRTUwTyj2K/oA UY48i0GA1sbYleY0uB0nj3zQwcVVeaCjCxdtpgYhFiOZdl0F01+9aYu/51Hz0leY o9eCKq/GuEfccmhdT62I8/4Wz5bJ7GE1TWJPpSEhFKDCqOEc8MH1Gn/qqItH2W9/ Q9Q36Ekm2fdXUrrUzOUrJwfxrdNSsC6xiEbeoX5YAfEvfZ0LXv2jix0p0sMD6DFt Lqm4e6MX5dRAzEDK2+CYythwRspvw7azJhKDTuTKs6BR6ShMAukdgD2N8bawREf5 i800JueAt4ty4RhWfsf8royl7v0CdG0= -----END CERTIFICATE-----Generated at Mon Jun 30 07:35:56 2025 by rpki-client