$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/54ea31e2-f508-38e4-965e-d1d16af3f58e.roa File: 54ea31e2-f508-38e4-965e-d1d16af3f58e.roa (raw, json) Hash identifier: KnX+IYe9o8IRw2mrc8E21Cm5WelNbJE4w9vs82pAbgc= Subject key identifier: CB:C7:F3:E3:E4:91:F3:4C:34:D2:4E:E3:D1:73:BB:5F:B9:CE:36:F3 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACB40E40B9B3ECCA5E19E5180 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/54ea31e2-f508-38e4-965e-d1d16af3f58e.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 19437 IP address blocks: 104.254.235.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:e4:0b:9b:3e:cc:a5:e1:9e:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=7aa1c139-47c3-4755-9974-145f7b9aec86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fd:09:34:3b:8e:9b:3d:23:76:6c:ed:73:22: 65:c6:da:f4:00:97:b9:53:57:ee:c8:a8:80:de:20: db:02:68:4c:bd:3c:87:5f:20:0c:27:2a:b4:4e:e0: 7e:3e:17:b5:c9:bf:83:01:cc:22:13:6f:6d:14:3b: 69:9b:3d:24:ce:3f:70:b7:81:f4:51:78:4f:7c:47: 55:3c:36:2f:40:74:0b:b3:d1:3b:8b:be:fd:d1:51: 92:27:4b:96:fe:9a:40:4c:57:87:e1:12:7a:37:87: 77:3a:f5:f0:25:27:d4:a5:16:a3:c4:86:b3:3b:1f: d8:00:e3:cc:11:95:e1:c8:5d:db:7d:19:95:bf:31: fa:dc:3d:d3:5a:b7:36:d4:f5:b7:41:1a:c7:a3:ea: 45:98:40:7c:d3:84:fb:de:dd:45:27:e7:fe:4a:18: 1e:ee:04:f1:8c:fe:67:71:3c:24:de:26:67:e0:01: c7:6f:c1:e4:26:dd:3d:1b:f9:0b:60:ac:55:87:e8: 55:5a:52:db:a8:0a:f9:1f:48:de:10:95:39:99:54: 61:20:65:3a:c5:c8:d6:d3:11:20:ca:d0:c5:fe:4f: fb:ef:39:25:95:73:e8:10:f2:05:91:d4:9d:1d:8b: 53:2c:9a:6e:ba:79:90:5f:96:cf:b7:15:bb:7b:65: 62:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C7:F3:E3:E4:91:F3:4C:34:D2:4E:E3:D1:73:BB:5F:B9:CE:36:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/54ea31e2-f508-38e4-965e-d1d16af3f58e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 104.254.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f1:bd:cb:12:ce:a5:22:26:08:0b:27:6c:a7:af:26:45:78: d2:ff:54:c0:6b:25:4a:12:14:fc:df:9a:6e:24:29:35:98:ca: 06:81:71:13:f8:94:a3:b7:90:d5:81:78:c5:c5:92:98:20:bc: 90:2e:65:ba:61:67:1d:f1:22:0b:1b:53:57:b8:cc:d0:26:59: 18:d8:0a:e8:92:6b:1a:cf:fc:6e:85:7c:d5:04:0e:f9:a9:81: ad:26:a5:cc:3a:b8:06:3e:11:ff:59:ba:2a:de:e5:d0:b5:8f: b7:0a:c2:e4:8f:4f:da:90:b2:5a:f9:75:c6:81:43:42:94:ba: f9:8f:4d:f6:3d:5a:bd:a1:93:25:df:cc:45:88:51:de:46:18: dd:5f:58:34:ed:62:5f:6b:b3:59:83:7a:2f:e5:95:47:dd:0e: 0f:3f:62:d8:79:c5:17:23:f4:54:24:82:c9:fd:4b:d9:aa:5d: 40:b0:42:e7:84:5a:dd:2d:b4:b8:92:4c:39:9f:59:e0:5c:88: 50:02:96:1e:2c:7a:17:7a:19:9a:1d:39:60:94:d8:db:3e:86: fd:d4:62:bd:7a:9d:c7:0a:45:ee:72:cc:ce:ba:9e:9f:72:60: 4b:11:fa:ed:0d:f2:62:ff:77:91:45:44:92:80:23:ac:5f:f8: 81:9f:9d:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQOQLmz7MpeGeUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk N2FhMWMxMzktNDdjMy00NzU1LTk5NzQtMTQ1ZjdiOWFlYzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/0JNDuOmz0jdmztcyJlxtr0AJe5U1fuyKiA 3iDbAmhMvTyHXyAMJyq0TuB+Phe1yb+DAcwiE29tFDtpmz0kzj9wt4H0UXhPfEdV PDYvQHQLs9E7i7790VGSJ0uW/ppATFeH4RJ6N4d3OvXwJSfUpRajxIazOx/YAOPM EZXhyF3bfRmVvzH63D3TWrc21PW3QRrHo+pFmEB804T73t1FJ+f+Shge7gTxjP5n cTwk3iZn4AHHb8HkJt09G/kLYKxVh+hVWlLbqAr5H0jeEJU5mVRhIGU6xcjW0xEg ytDF/k/77zkllXPoEPIFkdSdHYtTLJpuunmQX5bPtxW7e2ViawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvH8+PkkfNMNNJO49Fzu1+5zjbzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNTRlYTMxZTItZjUwOC0z OGU0LTk2NWUtZDFkMTZhZjNmNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP7rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvxvcsSzqUiJggLJ2ynryZFeNL/VMBrJUoSFPzfmm4kKTWYygaBcRP4 lKO3kNWBeMXFkpggvJAuZbphZx3xIgsbU1e4zNAmWRjYCuiSaxrP/G6FfNUEDvmp ga0mpcw6uAY+Ef9Zuire5dC1j7cKwuSPT9qQslr5dcaBQ0KUuvmPTfY9Wr2hkyXf zEWIUd5GGN1fWDTtYl9rs1mDei/llUfdDg8/Yth5xRcj9FQkgsn9S9mqXUCwQueE Wt0ttLiSTDmfWeBciFAClh4sehd6GZodOWCU2Ns+hv3UYr16nccKRe5yzM66np9y YEsR+u0N8mL/d5FFRJKAI6xf+IGfnV4= -----END CERTIFICATE-----Generated at Sat Aug 23 14:47:18 2025 by rpki-client