$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/50ff23d6-c143-3056-90c8-553c1e77ad8a.roa File: 50ff23d6-c143-3056-90c8-553c1e77ad8a.roa (raw, json) Hash identifier: ancJKeXr6nhfTHMxOEeUD6h8wXxfozP3q5xAqWpC230= Subject key identifier: D2:A4:F3:63:9B:C1:1A:06:23:CC:80:6C:84:23:7A:10:DD:22:5F:C8 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584A5335A77B9D0D523963121830 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/50ff23d6-c143-3056-90c8-553c1e77ad8a.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 8100 IP address blocks: 104.238.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:a7:7b:9d:0d:52:39:63:12:18:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=09a2e31d-84f3-46f7-b262-e95c76b44a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ea:48:09:ad:e7:bb:cf:89:22:dc:81:49:34: db:c9:15:3a:38:9c:cd:68:2d:73:92:29:0a:2c:aa: 31:37:59:82:ac:ea:2b:a0:0a:66:bd:06:67:ee:15: 57:24:f0:39:6d:cb:ce:f1:0d:4f:95:f1:03:24:2e: c9:7a:cf:97:61:25:d4:2a:27:da:8a:7e:7b:dd:c2: 1f:55:83:5d:06:3d:c8:8a:b6:4a:73:ff:9d:57:ae: f7:e1:1e:d0:b6:83:ce:90:77:27:61:1f:8c:7a:e5: 4f:39:17:48:8d:67:5d:38:70:f5:8f:be:ab:95:bf: 56:6f:0e:6d:03:79:e5:a1:c4:9b:b1:f1:81:67:0a: 28:f6:07:bc:6a:a0:12:56:15:60:53:9e:fb:40:ac: ac:f8:af:35:77:38:69:20:43:f8:77:0c:9f:f8:4a: b4:0c:6a:64:69:b7:69:22:ab:1d:31:f0:44:5c:b6: 14:c7:62:70:d6:c7:c0:4d:e9:d9:b7:cc:05:cc:18: 51:28:f5:50:98:39:3d:4f:2e:4d:1d:22:60:18:d1: 6f:58:78:bd:c2:cd:a5:45:e0:01:5e:ee:e9:3a:ec: ca:83:ef:bd:7f:79:f0:97:43:af:1a:9f:6a:a9:9f: b2:f0:43:45:9b:27:91:bc:55:b0:17:51:ee:9d:ba: 1e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A4:F3:63:9B:C1:1A:06:23:CC:80:6C:84:23:7A:10:DD:22:5F:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/50ff23d6-c143-3056-90c8-553c1e77ad8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 104.238.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:fc:13:bc:ea:48:8d:11:39:d0:e5:4e:c7:64:2a:7f:95:8e: c7:0c:44:22:c0:10:54:b8:16:e9:72:93:3e:75:f0:17:50:7c: 64:aa:47:a7:0e:4e:36:55:8f:d3:aa:82:82:1c:c0:73:10:1d: e8:94:42:7d:fd:49:d3:e7:d8:d5:d8:80:7e:17:16:86:90:37: 46:b7:4a:57:a5:1b:41:5b:d1:af:d8:7d:52:83:5b:08:68:ba: 26:21:4e:c2:84:d6:ea:1f:4e:d6:17:3b:7e:c9:b2:6e:ec:bc: 60:12:11:e5:cb:cb:23:ec:74:c1:c5:69:de:4d:cb:2e:f5:a4: b2:65:70:12:6d:14:23:13:74:ad:fe:e9:db:b8:ef:b8:3d:85: 20:5c:b0:ef:4c:71:6d:c6:06:b1:a2:f4:bb:e8:df:f6:13:33: 31:9a:f7:f8:ab:da:e5:dc:dc:b1:3b:6a:c5:bf:13:6e:10:80: 53:67:5c:8b:f1:01:ac:7e:15:d3:e1:45:9c:a0:64:ec:fd:85: 9a:a4:d5:24:b6:47:7a:0f:2e:a6:62:6d:13:76:21:24:5a:57: a2:3b:37:1a:82:7a:eb:9d:79:79:10:79:c0:e3:8b:f7:79:4e: 22:eb:f3:b1:b8:88:e1:4d:f1:d0:51:c7:0c:ad:51:7b:18:75: bf:ee:0d:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNad7nQ1SOWMSGDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk MDlhMmUzMWQtODRmMy00NmY3LWIyNjItZTk1Yzc2YjQ0YTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+pICa3nu8+JItyBSTTbyRU6OJzNaC1zkikK LKoxN1mCrOoroApmvQZn7hVXJPA5bcvO8Q1PlfEDJC7Jes+XYSXUKifain573cIf VYNdBj3IirZKc/+dV6734R7QtoPOkHcnYR+MeuVPORdIjWddOHD1j76rlb9Wbw5t A3nlocSbsfGBZwoo9ge8aqASVhVgU577QKys+K81dzhpIEP4dwyf+Eq0DGpkabdp IqsdMfBEXLYUx2Jw1sfATenZt8wFzBhRKPVQmDk9Ty5NHSJgGNFvWHi9ws2lReAB Xu7pOuzKg++9f3nwl0OvGp9qqZ+y8ENFmyeRvFWwF1HunboexQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKk82ObwRoGI8yAbIQjehDdIl/IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNTBmZjIzZDYtYzE0My0z MDU2LTkwYzgtNTUzYzFlNzdhZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO75MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABv8E7zqSI0ROdDlTsdkKn+VjscMRCLAEFS4Fulykz518BdQfGSqR6cO TjZVj9OqgoIcwHMQHeiUQn39SdPn2NXYgH4XFoaQN0a3SlelG0Fb0a/YfVKDWwho uiYhTsKE1uofTtYXO37Jsm7svGASEeXLyyPsdMHFad5Nyy71pLJlcBJtFCMTdK3+ 6du477g9hSBcsO9McW3GBrGi9Lvo3/YTMzGa9/ir2uXc3LE7asW/E24QgFNnXIvx Aax+FdPhRZygZOz9hZqk1SS2R3oPLqZibRN2ISRaV6I7NxqCeuudeXkQecDji/d5 TiLr87G4iOFN8dBRxwytUXsYdb/uDZo= -----END CERTIFICATE-----Generated at Tue Jul 1 01:10:23 2025 by rpki-client