$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8826a50e-07f1-350f-b2c5-f2670e55311e.roa File: 8826a50e-07f1-350f-b2c5-f2670e55311e.roa (raw, json) Hash identifier: 3hpGPRPL05OZYr0KKCp0JnXpeBtX59nlzqAQGxGos9o= Subject key identifier: E3:47:20:07:BC:87:95:0B:27:4F:23:2B:44:5C:5C:E8:D2:47:18:26 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A093A9EA552B4F8069D5EF200 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8826a50e-07f1-350f-b2c5-f2670e55311e.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 7018 IP address blocks: 104.244.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:9e:a5:52:b4:f8:06:9d:5e:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=02b2c1b3-fa2f-42e0-ac65-24313aeace93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:df:f8:0a:c8:3c:54:05:3c:04:c9:14:8b:fa: f3:08:0b:cd:82:98:98:2e:02:4c:b7:2b:44:af:dc: 7c:43:ad:0d:f9:fe:c0:01:67:9f:e1:f3:f1:64:7c: cb:89:7b:0b:8a:7b:68:83:14:2f:03:75:a7:76:25: af:ae:2b:38:bc:a0:62:83:11:0a:5e:f0:54:90:53: a5:99:89:97:68:95:53:8a:61:ae:fe:42:3d:9e:92: 4b:e2:82:bf:9e:be:6f:1d:af:10:a6:3d:ee:d6:bf: bf:76:f8:15:00:51:33:29:d2:5a:ad:c0:2f:ce:20: fa:9b:91:2c:68:1f:02:3e:ca:ee:e3:5d:d6:2a:fb: 42:bd:4b:1f:d4:28:86:30:3b:f7:e7:6e:b3:ad:bd: e6:aa:89:1d:85:d9:ad:81:f8:8d:a4:93:eb:78:25: 71:1a:0d:59:4a:83:01:05:b9:da:a0:8c:60:2c:ce: d3:39:9e:79:13:64:b4:1d:af:b7:ff:29:98:c1:d5: 81:c1:22:17:3f:1d:63:83:ca:36:92:21:74:e2:21: 3a:86:3a:4e:18:a4:17:95:dd:f4:c0:9d:6f:0f:f7: 3f:51:ba:bf:b0:7f:1e:04:6c:33:1c:76:cd:bc:da: 31:35:4c:44:82:b6:fb:3b:18:28:14:17:b6:e0:c0: f8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:47:20:07:BC:87:95:0B:27:4F:23:2B:44:5C:5C:E8:D2:47:18:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8826a50e-07f1-350f-b2c5-f2670e55311e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 104.244.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:62:ed:03:23:3e:fb:f9:26:2e:cc:3c:37:22:f7:b7:6f:22: d2:37:9c:6d:ee:a0:1e:57:67:e3:5a:01:3b:a9:1d:c5:16:08: e1:6c:99:b2:da:30:e9:6a:1d:17:92:fe:39:f5:09:da:ec:cf: 7c:3a:ce:60:b2:f6:3a:72:1c:58:0a:ae:3d:9d:7a:35:f8:ac: 18:b0:54:71:f3:2e:34:71:90:98:ce:2d:ac:94:a7:6b:79:5b: 02:20:f0:a8:73:65:f8:b3:63:7f:25:8f:01:7f:13:da:af:2d: 48:39:2e:1c:46:e0:85:38:b4:b9:52:e1:01:ff:40:7a:0d:67: 92:9e:9d:8a:7c:91:69:7f:49:00:3b:02:23:78:32:cc:9d:f7: a4:ff:0c:58:97:93:38:bc:34:53:5d:45:cc:51:5d:9e:70:d1: c1:4a:05:0a:06:6b:b5:b0:08:81:1b:52:6b:1e:8f:fb:ed:be: 71:c9:26:34:bc:1a:4a:44:b1:1d:72:58:04:4d:df:eb:95:81: 73:2a:32:c4:45:1c:84:9c:2a:f0:a2:05:93:26:f3:e3:e2:40: 4c:f5:d4:25:02:4a:07:ba:16:ef:e3:a2:0d:6e:48:5f:83:b8: bc:6b:d1:e4:68:6f:e4:20:1f:94:5b:72:2a:4e:1b:62:9b:b6: c4:a9:da:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOp6lUrT4Bp1e8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk MDJiMmMxYjMtZmEyZi00MmUwLWFjNjUtMjQzMTNhZWFjZTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt/4Csg8VAU8BMkUi/rzCAvNgpiYLgJMtytE r9x8Q60N+f7AAWef4fPxZHzLiXsLintogxQvA3WndiWvris4vKBigxEKXvBUkFOl mYmXaJVTimGu/kI9npJL4oK/nr5vHa8Qpj3u1r+/dvgVAFEzKdJarcAvziD6m5Es aB8CPsru413WKvtCvUsf1CiGMDv3526zrb3mqokdhdmtgfiNpJPreCVxGg1ZSoMB BbnaoIxgLM7TOZ55E2S0Ha+3/ymYwdWBwSIXPx1jg8o2kiF04iE6hjpOGKQXld30 wJ1vD/c/Ubq/sH8eBGwzHHbNvNoxNUxEgrb7OxgoFBe24MD4pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONHIAe8h5ULJ08jK0RcXOjSRxgmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvODgyNmE1MGUtMDdmMS0z NTBmLWIyYzUtZjI2NzBlNTUzMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPRmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJi7QMjPvv5Ji7MPDci97dvItI3nG3uoB5XZ+NaATupHcUWCOFsmbLa MOlqHReS/jn1Cdrsz3w6zmCy9jpyHFgKrj2dejX4rBiwVHHzLjRxkJjOLayUp2t5 WwIg8KhzZfizY38ljwF/E9qvLUg5LhxG4IU4tLlS4QH/QHoNZ5KenYp8kWl/SQA7 AiN4Msyd96T/DFiXkzi8NFNdRcxRXZ5w0cFKBQoGa7WwCIEbUmsej/vtvnHJJjS8 GkpEsR1yWARN3+uVgXMqMsRFHIScKvCiBZMm8+PiQEz11CUCSge6Fu/jog1uSF+D uLxr0eRob+QgH5RbcipOG2KbtsSp2og= -----END CERTIFICATE-----Generated at Tue Jul 1 22:39:13 2025 by rpki-client