$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/ad3cac97-50c6-306d-a306-8a017943b7f3.roa File: ad3cac97-50c6-306d-a306-8a017943b7f3.roa (raw, json) Hash identifier: ai2H2J4ZLQcjE9i4FR3UXDnHD5fabM8I0tTZ1N1/WWo= Subject key identifier: EA:24:16:D3:B8:12:FD:67:6D:E1:A2:DC:2C:54:D5:44:D2:51:62:60 Certificate issuer: /CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c Certificate serial: 010D0C9F4328584A4AD5999B1F06D71B00FBC780 Authority key identifier: E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/ad3cac97-50c6-306d-a306-8a017943b7f3.roa Signing time: Tue 24 Jun 2025 01:00:50 +0000 ROA not before: Tue 24 Jun 2025 01:00:50 +0000 ROA not after: Mon 22 Sep 2025 01:00:50 +0000 asID: 40244 IP address blocks: 104.129.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:d5:99:9b:1f:06:d7:1b:00:fb:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c Validity Not Before: Jun 24 01:00:50 2025 GMT Not After : Sep 22 01:00:50 2025 GMT Subject: CN=a20d8f2b-b973-49d8-a72e-02204072a783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f6:f0:29:8e:15:ca:63:5b:0c:8f:32:96:82: 9b:1e:3f:bd:80:64:b2:84:09:a1:6d:a2:b4:d3:3f: cf:f2:4b:0c:11:75:5b:bc:b5:36:9f:db:f6:a7:56: 0c:eb:80:7d:da:1b:c9:db:63:66:37:40:ec:66:73: 28:77:c8:3f:b7:28:18:e1:ea:4f:ca:64:ef:78:9d: 38:b9:7b:cd:5a:a1:7c:9e:73:b5:83:04:0d:c2:d5: c2:b0:11:56:f9:5c:7f:c2:46:e9:85:3c:8c:81:14: 43:da:c7:2c:12:05:4e:d9:eb:8b:d2:e4:1a:d1:84: 82:53:ec:5f:88:0b:63:00:13:be:5f:f6:a4:e2:a1: 7e:9e:e5:35:bc:d8:f3:b5:19:3b:bc:27:85:7f:1e: 59:03:1f:4e:6c:79:3d:8f:9d:2f:79:05:87:80:ee: 34:87:c5:c8:3a:7e:56:62:75:be:a0:11:39:78:5b: 0c:7d:bd:4f:a0:ce:78:a8:58:6c:c1:01:1d:3a:0a: 0d:e8:66:7e:07:68:87:fd:62:67:6b:c0:e1:e7:b7: 83:d6:c2:6e:a3:e2:bd:0c:77:65:cf:ef:39:fd:21: e0:d6:ed:19:ee:e3:2d:3f:e1:28:9e:46:00:47:20: 07:b8:0b:26:d0:d1:02:7c:e6:a0:fe:20:9b:f4:d9: b6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:24:16:D3:B8:12:FD:67:6D:E1:A2:DC:2C:54:D5:44:D2:51:62:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/ad3cac97-50c6-306d-a306-8a017943b7f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl X509v3 Authority Key Identifier: keyid:E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer sbgp-ipAddrBlock: critical IPv4: 104.129.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:d6:74:02:e3:66:82:3b:28:80:a3:2a:9e:37:78:76:22:ce: 96:be:7d:c2:a1:8e:1f:77:75:3c:43:ba:56:dc:77:82:77:2a: e3:4d:99:07:c6:66:2c:b7:f4:57:13:91:eb:59:f9:89:8f:c3: 10:fc:f8:4f:12:d1:d3:8d:ac:4a:3a:01:fd:5f:56:a5:dd:09: da:27:f7:51:ac:e4:17:cc:23:65:40:d4:99:10:c9:43:3d:39: 74:b0:ac:72:46:d3:a2:3f:55:ed:bd:85:4c:8b:07:40:7d:88: 79:ef:bc:2f:c8:ac:10:9d:19:62:92:e9:f6:dd:6c:b3:42:e1: 0c:e3:ff:43:90:c6:96:58:f5:f3:fd:41:39:4a:96:d5:16:1a: c6:d3:00:e0:1f:48:67:bb:e6:86:09:53:cb:e3:88:5a:26:45: c1:9d:86:aa:45:f0:f7:64:ab:f1:fe:35:f3:31:e7:11:df:db: 53:c5:27:85:76:fe:43:db:b7:ca:63:3e:61:87:34:4a:74:1f: 5d:19:16:29:9f:e8:4a:21:f0:df:3d:0e:8e:ac:9f:4f:f2:72: 7e:6c:94:57:2c:ce:02:ac:cb:66:2f:70:9b:d0:b1:4a:d3:63: 4e:18:37:9c:c8:6f:7a:17:95:9a:48:a9:a2:26:88:24:d1:dc: 3a:39:55:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpK1ZmbHwbXGwD7x4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc0OTdhM2ItYTBmOS00NWJkLWFiMGItNGU3MzdjODgw NjNjMB4XDTI1MDYyNDAxMDA1MFoXDTI1MDkyMjAxMDA1MFowLzEtMCsGA1UEAxMk YTIwZDhmMmItYjk3My00OWQ4LWE3MmUtMDIyMDQwNzJhNzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvbwKY4VymNbDI8yloKbHj+9gGSyhAmhbaK0 0z/P8ksMEXVbvLU2n9v2p1YM64B92hvJ22NmN0DsZnMod8g/tygY4epPymTveJ04 uXvNWqF8nnO1gwQNwtXCsBFW+Vx/wkbphTyMgRRD2scsEgVO2euL0uQa0YSCU+xf iAtjABO+X/ak4qF+nuU1vNjztRk7vCeFfx5ZAx9ObHk9j50veQWHgO40h8XIOn5W YnW+oBE5eFsMfb1PoM54qFhswQEdOgoN6GZ+B2iH/WJna8Dh57eD1sJuo+K9DHdl z+85/SHg1u0Z7uMtP+EonkYARyAHuAsm0NECfOag/iCb9Nm29wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOokFtO4Ev1nbeGi3CxU1UTSUWJgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzQ5 N2EzYi1hMGY5LTQ1YmQtYWIwYi00ZTczN2M4ODA2M2MvYWQzY2FjOTctNTBjNi0z MDZkLWEzMDYtOGEwMTc5NDNiN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjc0OTdhM2ItYTBmOS00NWJkLWFi MGItNGU3MzdjODgwNjNjL2I3NDk3YTNiLWEwZjktNDViZC1hYjBiLTRlNzM3Yzg4 MDYzYy5jcmwwHwYDVR0jBBgwFoAU5diIGp8HiJED/JAy72HfTKkW/RYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzQ5N2EzYi1hMGY5LTQ1YmQtYWIwYi00ZTcz N2M4ODA2M2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXWdALjZoI7KICjKp43eHYizpa+fcKhjh93dTxDulbcd4J3KuNNmQfG Ziy39FcTketZ+YmPwxD8+E8S0dONrEo6Af1fVqXdCdon91Gs5BfMI2VA1JkQyUM9 OXSwrHJG06I/Ve29hUyLB0B9iHnvvC/IrBCdGWKS6fbdbLNC4Qzj/0OQxpZY9fP9 QTlKltUWGsbTAOAfSGe75oYJU8vjiFomRcGdhqpF8Pdkq/H+NfMx5xHf21PFJ4V2 /kPbt8pjPmGHNEp0H10ZFimf6Eoh8N89Do6sn0/ycn5slFcszgKsy2YvcJvQsUrT Y04YN5zIb3oXlZpIqaImiCTR3Do5Vfk= -----END CERTIFICATE-----Generated at Sun Jun 29 06:29:32 2025 by rpki-client