$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9d2999d7-a1bb-3446-acf4-a09d095fef48.roa File: 9d2999d7-a1bb-3446-acf4-a09d095fef48.roa (raw, json) Hash identifier: WcK3ZRwyIOe0UETU81xYY9H5ggrXCdHj0HIH4K4dwoo= Subject key identifier: 21:44:64:1A:85:BE:9E:BD:B6:77:38:F3:CE:DE:2C:A4:3E:D0:1B:07 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACB40E836FF204EA9195DBA80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9d2999d7-a1bb-3446-acf4-a09d095fef48.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 19437 IP address blocks: 104.254.238.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:e8:36:ff:20:4e:a9:19:5d:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=bcc69996-d2d5-40c7-aa87-fafa7d527302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c1:82:a2:32:eb:0e:1f:39:d8:c5:db:5a:81: 44:22:87:de:ad:dd:e1:db:ec:ef:f9:6f:cc:41:0b: df:50:e1:10:5b:b6:77:49:d7:b2:9f:51:1b:9f:80: 25:68:88:67:05:38:1f:0d:41:5c:b9:0c:3e:a7:eb: 2c:be:13:63:dd:b7:6c:43:87:66:55:84:90:fa:5d: 19:b2:bc:14:a2:a7:fa:88:ab:f1:e9:95:8d:f5:e8: 33:73:bd:a2:e1:15:d8:ea:b3:e1:5e:39:0b:d1:4d: a3:09:e8:94:5d:d0:21:35:ce:0d:5b:7a:97:92:b2: fd:c1:a7:24:29:d8:66:8e:07:cd:6f:00:e6:8a:58: 59:31:23:70:2d:25:e1:a9:c2:ab:f7:f2:f5:65:1c: 69:7f:6b:99:9d:9d:81:58:46:40:0d:b9:7d:3e:56: a0:51:13:c3:55:9b:bf:74:f0:37:44:8f:48:4a:53: d2:d9:da:02:92:f5:32:51:56:f0:f5:f6:df:12:d7: 65:69:ab:d8:9f:4b:c2:38:02:4d:d2:96:45:82:a8: 42:c6:54:e1:e0:db:61:2b:f4:db:dd:29:dc:a3:8c: fa:ca:da:a9:a9:21:b6:41:c8:fb:27:8d:db:b7:1e: 54:54:eb:3c:37:21:be:55:dc:ff:fa:eb:8b:fd:38: 92:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:44:64:1A:85:BE:9E:BD:B6:77:38:F3:CE:DE:2C:A4:3E:D0:1B:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9d2999d7-a1bb-3446-acf4-a09d095fef48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 104.254.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:41:6b:ef:af:0c:14:d6:9b:f7:24:9c:3f:41:7d:45:7b:9a: 30:90:54:25:e7:64:6e:64:0a:e5:9c:49:b8:0b:b6:46:ab:fd: 1a:80:bf:01:59:66:8b:38:76:c9:c6:ad:80:b7:87:bb:85:1d: 12:8c:6b:67:96:76:a7:7d:59:a3:9e:79:27:b2:33:a9:73:dd: 7e:46:5d:ae:60:39:42:d6:40:64:9b:b5:56:40:43:4c:d3:b9: d5:3f:ff:d5:7c:9f:3f:30:b9:00:bd:23:95:1d:52:0c:3c:07: 1d:fd:e4:86:76:e4:b1:78:d8:7a:a7:1d:b4:cf:9e:c7:a3:66: cb:9e:56:10:64:5b:a1:40:5c:61:d5:66:38:2b:6d:58:b8:86: 13:04:bc:44:df:4b:83:15:cd:50:75:6a:de:66:dc:87:f3:33: 91:34:e5:25:71:20:16:fd:71:8c:cb:2a:ce:a9:55:f0:b3:c1: 72:e6:a7:1a:0b:1a:2b:95:af:25:7e:f2:bb:b3:cb:e6:08:3d: 48:a3:e4:ca:b3:3f:54:bc:e4:92:ef:ef:02:e3:7e:53:9a:e0: 49:c8:30:0e:1e:88:8c:71:46:3d:fd:54:af:40:f0:d1:7f:28: c6:d8:ea:a3:b4:cc:a4:71:d2:2c:13:18:9d:8b:08:01:ce:cb: c6:72:7b:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQOg2/yBOqRlduoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk YmNjNjk5OTYtZDJkNS00MGM3LWFhODctZmFmYTdkNTI3MzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8GCojLrDh852MXbWoFEIoferd3h2+zv+W/M QQvfUOEQW7Z3Sdeyn1Ebn4AlaIhnBTgfDUFcuQw+p+ssvhNj3bdsQ4dmVYSQ+l0Z srwUoqf6iKvx6ZWN9egzc72i4RXY6rPhXjkL0U2jCeiUXdAhNc4NW3qXkrL9wack KdhmjgfNbwDmilhZMSNwLSXhqcKr9/L1ZRxpf2uZnZ2BWEZADbl9PlagURPDVZu/ dPA3RI9ISlPS2doCkvUyUVbw9fbfEtdlaavYn0vCOAJN0pZFgqhCxlTh4NthK/Tb 3Snco4z6ytqpqSG2Qcj7J43btx5UVOs8NyG+Vdz/+uuL/TiScwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFEZBqFvp69tnc4887eLKQ+0BsHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvOWQyOTk5ZDctYTFiYi0z NDQ2LWFjZjQtYTA5ZDA5NWZlZjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP7uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlBa++vDBTWm/cknD9BfUV7mjCQVCXnZG5kCuWcSbgLtkar/RqAvwFZ Zos4dsnGrYC3h7uFHRKMa2eWdqd9WaOeeSeyM6lz3X5GXa5gOULWQGSbtVZAQ0zT udU//9V8nz8wuQC9I5UdUgw8Bx395IZ25LF42HqnHbTPnsejZsueVhBkW6FAXGHV ZjgrbVi4hhMEvETfS4MVzVB1at5m3IfzM5E05SVxIBb9cYzLKs6pVfCzwXLmpxoL GiuVryV+8ruzy+YIPUij5MqzP1S85JLv7wLjflOa4EnIMA4eiIxxRj39VK9A8NF/ KMbY6qO0zKRx0iwTGJ2LCAHOy8Zye3Q= -----END CERTIFICATE-----Generated at Sat Aug 23 13:02:20 2025 by rpki-client