$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/9a380ce2-8038-318b-a975-39bee35aa94f.roa File: 9a380ce2-8038-318b-a975-39bee35aa94f.roa (raw, json) Hash identifier: HthcJ8ums7uVIcqAIpwTwzEij/jI5IiPZZjnr9+93jQ= Subject key identifier: 2C:0A:E3:7A:FE:C3:2D:C0:EF:86:53:4B:A1:63:92:3A:16:54:8E:FC Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584A38B039878E13759AA9E14000 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/9a380ce2-8038-318b-a975-39bee35aa94f.roa Signing time: Tue 17 Jun 2025 13:01:05 +0000 ROA not before: Tue 17 Jun 2025 13:01:05 +0000 ROA not after: Mon 15 Sep 2025 13:01:05 +0000 asID: 22653 IP address blocks: 104.238.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:38:b0:39:87:8e:13:75:9a:a9:e1:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Jun 17 13:01:05 2025 GMT Not After : Sep 15 13:01:05 2025 GMT Subject: CN=23581c75-2c9c-4515-b01a-51a90a3b0871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b3:c6:a0:ad:5f:03:84:2d:65:4d:d4:6e:44: 02:a9:80:fe:1a:01:0a:7b:a8:3c:bb:00:cc:24:91: d9:59:3e:3b:37:41:cd:86:34:1b:31:67:fd:b4:6a: 4b:02:25:c9:9b:39:6b:a5:2e:71:fa:89:98:4a:81: 98:ed:e9:e3:9e:b6:2b:2a:73:f5:93:bb:cf:56:6e: ee:89:ac:d7:2b:a8:c5:93:2b:ab:7e:3c:de:ec:f7: 2a:4d:cd:a8:8f:98:90:61:0f:37:e5:8f:cc:bb:59: 39:e4:40:05:b6:99:79:d3:3f:0d:9c:20:ca:dc:4f: f0:66:46:15:85:9e:8c:99:8c:48:41:a0:a0:26:01: 6f:d9:f9:61:64:0e:6e:31:e1:ca:96:0d:5b:40:f8: 39:2d:b9:da:a3:59:20:7c:8e:b0:59:48:75:7e:67: c0:00:a8:b3:36:1e:86:92:b0:6d:45:93:5f:3f:66: d6:5a:e6:44:46:0b:59:21:ba:98:74:29:47:af:d4: 14:4a:f0:47:40:51:20:91:c1:50:93:ec:a3:c5:85: 5e:3f:13:ad:c4:17:96:0a:97:6d:5d:b0:c8:52:94: 00:8f:db:24:2e:69:14:83:4a:07:ef:a9:3b:3a:1d: 8f:8b:a7:7d:f2:d4:64:e9:5e:e9:c7:bd:5e:60:db: c3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0A:E3:7A:FE:C3:2D:C0:EF:86:53:4B:A1:63:92:3A:16:54:8E:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/9a380ce2-8038-318b-a975-39bee35aa94f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 104.238.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:5c:8b:ad:61:0c:65:c6:1e:1c:fa:70:e4:10:6b:5b:48:70: 6a:3b:6c:39:7f:ae:27:5a:3e:aa:c9:ef:6d:85:9e:e4:b4:2f: 60:58:bb:72:0a:ab:ea:41:ca:3a:54:81:80:a5:fd:ed:0d:ba: e1:a7:27:34:ef:fe:6b:99:c8:ae:06:ea:69:f3:b9:fd:2c:15: 45:32:18:96:05:4e:da:01:9c:20:d8:33:6b:80:89:53:a7:bf: a8:93:80:24:fd:a9:5f:2c:bc:ce:07:83:02:5c:58:9e:af:ec: 61:67:fc:c7:ce:87:65:30:03:70:b7:c9:97:8a:92:1c:ba:81: 27:89:d7:c5:95:79:1e:de:42:7a:5e:10:ab:8b:7e:4f:ec:dc: 41:74:0c:48:5c:7d:3c:ca:25:ac:ed:d5:7f:92:88:fb:86:29: 7c:81:09:44:d2:15:58:9e:f6:2d:98:50:a8:f7:31:93:ab:67: f0:2b:d8:17:e3:36:ee:d7:07:03:2d:38:68:a2:67:55:0e:30: 1d:a5:ae:1d:eb:4d:9a:1a:e2:e2:f8:65:91:06:90:05:ea:d4: 47:27:98:5f:d0:66:2e:2a:e0:f9:c8:bd:cc:92:ec:24:96:91: 32:30:4e:45:8e:77:4b:2e:8c:f5:e2:21:82:33:5c:77:59:80: 91:b2:14:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo4sDmHjhN1mqnhQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDYxNzEzMDEwNVoXDTI1MDkxNTEzMDEwNVowLzEtMCsGA1UEAxMk MjM1ODFjNzUtMmM5Yy00NTE1LWIwMWEtNTFhOTBhM2IwODcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLPGoK1fA4QtZU3UbkQCqYD+GgEKe6g8uwDM JJHZWT47N0HNhjQbMWf9tGpLAiXJmzlrpS5x+omYSoGY7enjnrYrKnP1k7vPVm7u iazXK6jFkyurfjze7PcqTc2oj5iQYQ835Y/Mu1k55EAFtpl50z8NnCDK3E/wZkYV hZ6MmYxIQaCgJgFv2flhZA5uMeHKlg1bQPg5Lbnao1kgfI6wWUh1fmfAAKizNh6G krBtRZNfP2bWWuZERgtZIbqYdClHr9QUSvBHQFEgkcFQk+yjxYVePxOtxBeWCpdt XbDIUpQAj9skLmkUg0oH76k7Oh2Pi6d98tRk6V7px71eYNvDPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwK43r+wy3A74ZTS6FjkjoWVI78MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvOWEzODBjZTItODAzOC0z MThiLWE5NzUtMzliZWUzNWFhOTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO74MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALlci61hDGXGHhz6cOQQa1tIcGo7bDl/ridaPqrJ722FnuS0L2BYu3IK q+pByjpUgYCl/e0NuuGnJzTv/muZyK4G6mnzuf0sFUUyGJYFTtoBnCDYM2uAiVOn v6iTgCT9qV8svM4HgwJcWJ6v7GFn/MfOh2UwA3C3yZeKkhy6gSeJ18WVeR7eQnpe EKuLfk/s3EF0DEhcfTzKJazt1X+SiPuGKXyBCUTSFVie9i2YUKj3MZOrZ/Ar2Bfj Nu7XBwMtOGiiZ1UOMB2lrh3rTZoa4uL4ZZEGkAXq1EcnmF/QZi4q4PnIvcyS7CSW kTIwTkWOd0sujPXiIYIzXHdZgJGyFJc= -----END CERTIFICATE-----Generated at Tue Jul 1 20:16:34 2025 by rpki-client