$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be100fde-04e7-343f-aeb3-e958fe113207.roa File: be100fde-04e7-343f-aeb3-e958fe113207.roa (raw, json) Hash identifier: 4a7tKf955PHgWBYG5KLJRMoWVZ9bqdcsLYZn2hwrSfQ= Subject key identifier: C6:77:5D:47:DE:11:56:C6:F0:A0:26:7D:40:BB:5D:15:8E:05:FA:D8 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AC2DC34D744641E3991156E80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be100fde-04e7-343f-aeb3-e958fe113207.roa Signing time: Wed 06 Aug 2025 00:51:16 +0000 ROA not before: Wed 06 Aug 2025 00:51:16 +0000 ROA not after: Tue 04 Nov 2025 01:51:16 +0000 asID: 152868 IP address blocks: 104.164.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:dc:34:d7:44:64:1e:39:91:15:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 6 00:51:16 2025 GMT Not After : Nov 4 01:51:16 2025 GMT Subject: CN=67fa9969-a623-43a6-934e-93ffb6b50277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b7:a1:2a:c9:be:81:fc:ea:3c:22:9c:99:47: 58:d4:81:50:e6:84:d9:36:e4:a2:e8:6e:69:96:6b: d9:40:71:5d:22:9c:63:69:59:13:25:03:42:0c:c2: 9f:72:8a:3d:70:4c:bc:70:2c:f8:3e:b1:19:ac:36: 03:27:80:72:94:c3:60:8d:ca:20:fd:72:9c:e5:4e: e2:92:db:c5:65:db:74:66:03:ce:69:e4:81:e4:c9: 21:d9:c8:da:5d:53:c7:f5:6a:2e:03:d1:9c:ac:ef: b0:b5:e7:87:e3:3e:c1:9f:7c:1a:d7:9e:5e:ea:95: 01:97:7d:d7:13:ef:c7:8f:e3:37:19:28:81:01:6c: 3a:01:4e:5f:7b:69:71:4c:e1:47:77:5a:fe:ce:22: 3e:25:c5:01:b6:44:6d:d8:6c:7b:c7:76:6a:f9:90: 54:8a:8e:69:4a:e9:f3:c7:d1:69:48:70:5e:05:b4: 0e:df:48:5b:37:c5:5f:cd:b9:45:65:a4:8e:b3:23: 93:40:99:38:73:f4:1b:5b:21:2e:39:ec:c4:13:42: d3:5c:a1:fa:f4:84:aa:2b:2b:16:47:98:b6:b1:ab: 46:44:ab:0a:c8:b7:d5:39:a4:ab:61:48:0e:9d:fa: 7b:55:4f:1e:e1:7b:3f:d8:4c:55:b2:66:6d:2a:74: f5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:77:5D:47:DE:11:56:C6:F0:A0:26:7D:40:BB:5D:15:8E:05:FA:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be100fde-04e7-343f-aeb3-e958fe113207.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.164.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:3c:96:27:4d:72:f6:c0:a9:56:ab:b8:01:28:60:16:ba:08: e6:5f:0f:1a:53:57:80:b0:2d:a4:e0:6c:93:68:ef:f4:2a:c7: 80:55:b6:e3:43:32:4a:51:4b:26:74:aa:be:94:e2:f2:7d:27: 34:72:80:6d:66:c4:a4:2f:0f:c4:17:17:d3:a9:3c:d1:0d:d9: ec:59:20:0d:e0:87:87:3d:fe:16:2a:a0:2e:9b:63:9e:b9:92: 7d:d2:77:00:d9:5f:58:28:fe:96:dc:93:07:4d:50:29:43:2b: 79:35:88:6b:4f:d5:a3:d0:7f:d5:5a:95:b2:97:8e:9c:19:51: 86:da:d3:60:33:87:a2:af:dc:1a:b6:75:30:a3:1d:08:ea:1e: 52:79:3f:d4:7b:a8:7a:b8:29:3e:76:39:42:16:5b:0b:99:de: 98:2e:d9:b9:f5:d9:c0:a7:3e:90:4a:c4:1c:fd:02:43:ea:75: 04:cd:3f:ee:8a:b3:dc:b9:06:21:d1:34:aa:f4:37:b6:73:43: c9:8c:5b:a2:4a:12:4f:59:ac:60:32:a1:41:a4:4c:5d:6b:59: dc:5b:bc:4a:b5:52:1c:cf:ca:77:b4:6a:07:5f:44:57:78:97: f3:0d:ed:6b:8c:aa:43:2f:97:52:9f:0a:36:b3:2b:73:c8:e1: 36:70:98:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC3DTXRGQeOZEVboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDgwNjAwNTExNloXDTI1MTEwNDAxNTExNlowLzEtMCsGA1UEAxMk NjdmYTk5NjktYTYyMy00M2E2LTkzNGUtOTNmZmI2YjUwMjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7ehKsm+gfzqPCKcmUdY1IFQ5oTZNuSi6G5p lmvZQHFdIpxjaVkTJQNCDMKfcoo9cEy8cCz4PrEZrDYDJ4BylMNgjcog/XKc5U7i ktvFZdt0ZgPOaeSB5Mkh2cjaXVPH9WouA9GcrO+wteeH4z7Bn3wa155e6pUBl33X E+/Hj+M3GSiBAWw6AU5fe2lxTOFHd1r+ziI+JcUBtkRt2Gx7x3Zq+ZBUio5pSunz x9FpSHBeBbQO30hbN8VfzblFZaSOsyOTQJk4c/QbWyEuOezEE0LTXKH69ISqKysW R5i2satGRKsKyLfVOaSrYUgOnfp7VU8e4Xs/2ExVsmZtKnT1tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZ3XUfeEVbG8KAmfUC7XRWOBfrYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYmUxMDBmZGUtMDRlNy0z NDNmLWFlYjMtZTk1OGZlMTEzMjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKQVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAg8lidNcvbAqVaruAEoYBa6COZfDxpTV4CwLaTgbJNo7/Qqx4BVtuND MkpRSyZ0qr6U4vJ9JzRygG1mxKQvD8QXF9OpPNEN2exZIA3gh4c9/hYqoC6bY565 kn3SdwDZX1go/pbckwdNUClDK3k1iGtP1aPQf9ValbKXjpwZUYba02Azh6Kv3Bq2 dTCjHQjqHlJ5P9R7qHq4KT52OUIWWwuZ3pgu2bn12cCnPpBKxBz9AkPqdQTNP+6K s9y5BiHRNKr0N7ZzQ8mMW6JKEk9ZrGAyoUGkTF1rWdxbvEq1UhzPyne0agdfRFd4 l/MN7WuMqkMvl1KfCjazK3PI4TZwmJA= -----END CERTIFICATE-----Generated at Sat Aug 23 16:30:58 2025 by rpki-client