$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa File: 3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa (raw, json) Hash identifier: fa7T/obmogTXiJNSFb/KpZLU4uDIYY5P74+ICrNBoo8= Subject key identifier: F1:AF:C7:8A:22:9A:86:B1:08:68:17:94:3D:8B:78:98:0C:22:74:9D Certificate issuer: /CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a Certificate serial: 010D0C9F4328584A5335AC76251271133FE7FF00 Authority key identifier: 2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 9712 IP address blocks: 104.251.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:ac:76:25:12:71:13:3f:e7:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=68ee811b-0c65-4589-9d5e-3bb9b0e2a0e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:25:49:93:91:31:03:a5:51:d6:05:67:f6:d4: 47:81:d0:d7:c7:0c:55:81:4c:7e:ef:87:5e:5f:25: 7c:43:43:81:da:cc:6d:d9:ca:56:d1:87:16:d0:47: 3f:39:3a:24:aa:a1:38:56:ed:18:e0:24:41:56:23: de:6b:a4:c1:1f:f3:0e:26:f1:6f:a6:8b:22:bd:54: 88:68:af:48:e8:f2:d9:04:4c:9f:36:d3:66:1e:de: 43:ab:80:1b:9c:0a:2b:b2:f7:4b:42:47:92:59:ff: 91:a4:d0:4f:e4:05:a3:5c:21:ad:32:3d:88:d9:bf: fd:65:af:e5:b4:a3:19:24:d2:c0:f2:3c:36:3d:24: 8d:05:f7:df:f0:6b:fd:44:15:b4:95:3e:33:6c:f4: 6f:9f:66:b3:02:55:3e:c7:c2:f4:28:28:20:d7:6f: 9e:83:ba:d0:1f:f1:10:6d:8f:3c:8e:ac:40:80:cc: 73:be:f2:7c:3d:6c:4e:90:59:11:91:2c:d8:09:2d: 24:36:69:e1:85:94:fc:55:10:66:06:37:f0:71:89: af:12:aa:c9:a8:e8:8d:78:7d:f0:d8:05:b6:ee:d3: 82:1e:b4:c0:35:4f:ce:d3:9f:d1:aa:58:08:be:9d: 10:d0:74:be:94:95:f9:b0:6f:da:00:dd:1e:d7:ab: 34:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AF:C7:8A:22:9A:86:B1:08:68:17:94:3D:8B:78:98:0C:22:74:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.crl X509v3 Authority Key Identifier: keyid:2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer sbgp-ipAddrBlock: critical IPv4: 104.251.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:e5:4a:89:6e:cf:0e:28:e8:08:80:d3:26:da:86:7a:72:70: aa:d9:5a:27:e7:1a:4c:7b:9d:23:ba:ea:33:7b:10:0e:d3:93: ec:64:ba:08:25:4a:67:55:2d:e9:69:7d:f2:62:65:e1:c1:73: 02:0d:a8:91:1d:d7:96:ed:40:20:38:c1:70:b9:c9:6b:24:4a: 6a:f6:b8:e6:f7:ac:50:5c:df:ac:db:70:c7:d3:65:8f:eb:65: 32:04:a0:f7:54:ee:de:21:7d:8d:85:02:31:d4:90:8c:1d:0b: 78:3d:1e:18:48:da:db:e1:21:b8:30:ff:fa:cc:6b:cd:c7:a4: c5:2e:1f:7a:93:5e:50:7e:02:71:46:7e:b2:de:c2:85:5c:17: fb:6b:a8:23:cb:a5:a4:b7:6f:c6:ca:32:a0:2c:41:cb:35:49: d1:87:21:c0:d3:82:25:3c:44:f8:e1:9f:01:e8:ce:02:fa:37: 56:42:cb:9e:75:48:8e:e1:8a:27:50:82:ed:94:0c:18:7d:ae: be:5f:b7:f1:e3:37:26:ec:ca:91:09:3c:1a:e0:7d:76:73:fa: e8:b9:87:3c:e7:46:a1:82:c1:c4:a5:f9:7f:f5:fb:33:5b:6b: e7:1e:c2:64:9b:1f:6e:89:c6:dc:13:ef:f3:89:6a:64:fd:e1: d3:78:13:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNax2JRJxEz/n/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFiZGUwN2ItMjg4OC00NTkyLTgxNDUtZjRiY2QzZTNh MTJhMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk NjhlZTgxMWItMGM2NS00NTg5LTlkNWUtM2JiOWIwZTJhMGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCVJk5ExA6VR1gVn9tRHgdDXxwxVgUx+74de XyV8Q0OB2sxt2cpW0YcW0Ec/OTokqqE4Vu0Y4CRBViPea6TBH/MOJvFvposivVSI aK9I6PLZBEyfNtNmHt5Dq4AbnAorsvdLQkeSWf+RpNBP5AWjXCGtMj2I2b/9Za/l tKMZJNLA8jw2PSSNBfff8Gv9RBW0lT4zbPRvn2azAlU+x8L0KCgg12+eg7rQH/EQ bY88jqxAgMxzvvJ8PWxOkFkRkSzYCS0kNmnhhZT8VRBmBjfwcYmvEqrJqOiNeH3w 2AW27tOCHrTANU/O05/RqlgIvp0Q0HS+lJX5sG/aAN0e16s05wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGvx4oimoaxCGgXlD2LeJgMInSdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMWJk ZTA3Yi0yODg4LTQ1OTItODE0NS1mNGJjZDNlM2ExMmEvM2ExNDAzZjEtMDFiYy0z MmY5LTk3MzQtYjFkZmM2ZGNkNmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjFiZGUwN2ItMjg4OC00NTkyLTgx NDUtZjRiY2QzZTNhMTJhL2IxYmRlMDdiLTI4ODgtNDU5Mi04MTQ1LWY0YmNkM2Uz YTEyYS5jcmwwHwYDVR0jBBgwFoAUK+RPWssBQtxS7Wsbo+me/XzGY7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMWJkZTA3Yi0yODg4LTQ1OTItODE0NS1mNGJj ZDNlM2ExMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaPs4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrlSoluzw4o6AiA0ybahnpycKrZWifnGkx7nSO66jN7EA7Tk+xkuggl SmdVLelpffJiZeHBcwINqJEd15btQCA4wXC5yWskSmr2uOb3rFBc36zbcMfTZY/r ZTIEoPdU7t4hfY2FAjHUkIwdC3g9HhhI2tvhIbgw//rMa83HpMUuH3qTXlB+AnFG frLewoVcF/trqCPLpaS3b8bKMqAsQcs1SdGHIcDTgiU8RPjhnwHozgL6N1ZCy551 SI7hiidQgu2UDBh9rr5ft/HjNybsypEJPBrgfXZz+ui5hzznRqGCwcSl+X/1+zNb a+cewmSbH26JxtwT7/OJamT94dN4E7E= -----END CERTIFICATE-----Generated at Wed Jul 2 05:00:42 2025 by rpki-client