$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7523ebb6-4152-3662-828a-5fb5d6e53cb2.roa File: 7523ebb6-4152-3662-828a-5fb5d6e53cb2.roa (raw, json) Hash identifier: EXr7SyiirQqPu1v/bVumyrrTOa2UrMsJvgWvc0+XIr8= Subject key identifier: AD:46:2A:4E:2C:52:D8:01:B3:13:57:31:A5:FE:AB:CE:72:22:F4:DE Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b Certificate serial: 010D0C9F43285849E22526748106318D8DD9D400 Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7523ebb6-4152-3662-828a-5fb5d6e53cb2.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 11260 IP address blocks: 104.37.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:26:74:81:06:31:8d:8d:d9:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=2a35e868-471a-413e-8ead-39d1bb2b45c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c0:38:c2:e5:fb:d4:5a:e0:25:cd:5a:5a:2a: 01:bb:65:04:ba:14:28:17:9a:0e:21:76:36:47:ab: 8f:18:73:6c:e2:91:bb:21:b2:77:62:d5:46:2b:db: f1:62:61:b8:fd:c3:32:30:b8:35:bc:a2:b7:94:bf: f3:d9:d4:d6:f0:b2:ed:d5:37:78:1d:d8:22:22:56: 4a:9d:8a:91:f4:18:97:cf:e9:de:a1:6e:68:38:66: 8f:a0:8f:64:5b:53:75:2e:80:07:fd:1a:68:18:45: 0a:fd:ae:49:77:27:a5:66:bf:78:e8:71:30:5f:95: 25:c8:13:2a:31:eb:58:43:49:5c:49:dc:73:b3:9c: 54:39:0e:1b:bd:a5:09:56:62:04:f3:10:6b:5f:ba: 01:c8:0d:37:eb:24:81:72:63:3f:65:ef:bd:ab:93: 2d:64:74:fe:5e:d7:63:c5:7c:ba:a3:3f:01:04:fa: 44:bd:6b:63:8d:c2:f1:5c:9b:45:81:e7:99:c5:da: f2:92:63:86:1a:00:2c:b0:30:d3:2d:e5:67:62:72: 71:ea:17:1a:e1:6b:88:46:cf:a4:e6:23:f2:9a:da: 1d:d9:9a:b0:ca:b6:bc:6f:54:53:1e:7c:c2:37:20: d3:be:4e:a7:8c:7c:73:3c:dd:53:71:b1:37:98:e2: f3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:46:2A:4E:2C:52:D8:01:B3:13:57:31:A5:FE:AB:CE:72:22:F4:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7523ebb6-4152-3662-828a-5fb5d6e53cb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl X509v3 Authority Key Identifier: keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer sbgp-ipAddrBlock: critical IPv4: 104.37.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:00:e5:8c:44:85:0e:2c:f2:84:55:81:91:f8:d0:a3:41:50: db:89:fa:3d:bb:a5:ec:b0:2e:ad:5d:ec:22:e8:c9:f1:36:3f: c5:27:a4:2c:dc:93:25:1d:c5:6e:1a:66:b4:3b:93:8e:da:55: 0d:53:80:95:50:04:f6:e0:f0:54:03:b0:6e:88:70:ed:af:8a: bb:cb:07:e8:19:35:fd:89:63:8b:cd:fa:f2:61:09:1a:28:76: c5:ef:bf:d2:ba:de:8f:36:64:40:01:c5:aa:ef:ad:24:77:3b: f3:82:66:e0:26:22:49:93:a5:c0:16:80:da:a8:e5:63:af:2b: 07:84:b9:0d:3d:f0:8d:b3:2b:8a:6f:ae:3f:7b:a9:03:df:44: 2a:88:5b:76:f8:24:1d:bf:63:91:b4:c5:f5:9a:84:ed:ff:33: b0:d8:08:58:e4:54:a6:69:e3:36:71:1a:2d:01:35:47:e4:fb: d7:f5:c1:f9:1e:62:f4:bd:3e:58:8d:2f:69:f7:1c:5d:8e:69: 70:a2:4a:6b:f9:3a:b7:0b:b3:de:b2:40:1f:25:ce:3c:34:a1: 6c:a8:6e:27:67:55:8b:35:d9:eb:98:c3:21:f6:63:81:45:b3: dd:11:cd:22:4c:46:2d:c6:fa:9a:c2:96:93:67:3b:70:de:9c: 73:ba:fd:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJSZ0gQYxjY3Z1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4 OTViMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk MmEzNWU4NjgtNDcxYS00MTNlLThlYWQtMzlkMWJiMmI0NWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsA4wuX71FrgJc1aWioBu2UEuhQoF5oOIXY2 R6uPGHNs4pG7IbJ3YtVGK9vxYmG4/cMyMLg1vKK3lL/z2dTW8LLt1Td4HdgiIlZK nYqR9BiXz+neoW5oOGaPoI9kW1N1LoAH/RpoGEUK/a5JdyelZr946HEwX5UlyBMq MetYQ0lcSdxzs5xUOQ4bvaUJVmIE8xBrX7oByA036ySBcmM/Ze+9q5MtZHT+Xtdj xXy6oz8BBPpEvWtjjcLxXJtFgeeZxdrykmOGGgAssDDTLeVnYnJx6hca4WuIRs+k 5iPymtod2Zqwyra8b1RTHnzCNyDTvk6njHxzPN1TcbE3mOLzzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1GKk4sUtgBsxNXMaX+q85yIvTeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4 MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvNzUyM2ViYjYtNDE1Mi0z NjYyLTgyOGEtNWZiNWQ2ZTUzY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaCUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIA5YxEhQ4s8oRVgZH40KNBUNuJ+j27peywLq1d7CLoyfE2P8UnpCzc kyUdxW4aZrQ7k47aVQ1TgJVQBPbg8FQDsG6IcO2virvLB+gZNf2JY4vN+vJhCRoo dsXvv9K63o82ZEABxarvrSR3O/OCZuAmIkmTpcAWgNqo5WOvKweEuQ098I2zK4pv rj97qQPfRCqIW3b4JB2/Y5G0xfWahO3/M7DYCFjkVKZp4zZxGi0BNUfk+9f1wfke YvS9PliNL2n3HF2OaXCiSmv5OrcLs96yQB8lzjw0oWyobidnVYs12euYwyH2Y4FF s90RzSJMRi3G+prClpNnO3DenHO6/Ro= -----END CERTIFICATE-----Generated at Tue Jul 1 04:42:08 2025 by rpki-client