$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/240d63aa-87cf-3d6a-8f75-4c140ab4562b.roa File: 240d63aa-87cf-3d6a-8f75-4c140ab4562b.roa (raw, json) Hash identifier: yYisWykFmDl9DdzYPJRgTFsGattuSozPLYAwra6dWZE= Subject key identifier: 97:4E:F7:85:C2:CD:A2:1F:E2:5F:07:89:63:82:87:BD:69:60:D6:ED Certificate issuer: /CN=d25f3fa9-8b52-4f17-8aca-6740ded73683 Certificate serial: 010D0C9F4328584A4CB176AB7E513A990ED1E620 Authority key identifier: 8E:B5:84:9A:70:4E:11:B0:46:6B:AD:9D:D3:5B:7B:FC:11:F0:B1:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/240d63aa-87cf-3d6a-8f75-4c140ab4562b.roa Signing time: Tue 24 Jun 2025 16:59:46 +0000 ROA not before: Tue 24 Jun 2025 16:59:46 +0000 ROA not after: Mon 22 Sep 2025 16:59:46 +0000 asID: 399487 IP address blocks: 104.166.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d25f3fa9-8b52-4f17-8aca-6740ded73683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d25f3fa9-8b52-4f17-8aca-6740ded73683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:b1:76:ab:7e:51:3a:99:0e:d1:e6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d25f3fa9-8b52-4f17-8aca-6740ded73683 Validity Not Before: Jun 24 16:59:46 2025 GMT Not After : Sep 22 16:59:46 2025 GMT Subject: CN=a1b0345a-4dd9-4c28-a17b-2a57156bf75b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:aa:f9:94:37:f4:72:95:2c:af:92:7d:77:e8: d2:dc:fe:13:10:4d:82:c7:86:f8:d9:15:c0:fb:f7: 2f:8a:8a:41:42:08:ba:e1:4c:49:05:6f:50:77:bb: 31:2a:c5:2f:d5:43:5b:c9:25:ba:90:d8:f8:fb:9a: 65:16:a0:14:08:c5:61:91:22:26:9e:d4:1e:6e:85: 92:44:df:8c:50:2d:f1:23:c1:7b:6f:c7:be:a1:c6: 44:49:f6:f9:f5:4c:8f:ec:1b:7c:f5:48:8a:4c:73: e5:59:32:8d:63:60:31:26:a3:0d:fd:7e:fb:91:1d: 2f:77:23:9b:13:12:20:88:3f:22:28:f9:44:7e:29: 0c:ab:7a:57:01:a4:ce:c9:a1:21:05:e9:ff:ee:61: ed:16:06:8e:07:3e:71:e1:80:2d:bc:54:51:1d:00: 7a:98:89:52:e7:fc:0d:6d:58:27:97:f7:e7:99:4d: 4e:d2:91:7a:03:e5:21:5f:31:ea:07:17:e2:4c:ec: a1:54:ae:9b:e2:e3:d1:e1:12:0a:51:55:23:db:99: 47:f3:3e:fb:86:ff:da:68:35:a4:60:df:e1:32:32: e5:93:d8:3b:1a:b2:16:ec:77:ab:a1:a2:f1:2e:51: 28:fc:c0:39:76:32:8e:c2:b8:70:a7:47:49:48:62: 74:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4E:F7:85:C2:CD:A2:1F:E2:5F:07:89:63:82:87:BD:69:60:D6:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/240d63aa-87cf-3d6a-8f75-4c140ab4562b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d25f3fa9-8b52-4f17-8aca-6740ded73683.crl X509v3 Authority Key Identifier: keyid:8E:B5:84:9A:70:4E:11:B0:46:6B:AD:9D:D3:5B:7B:FC:11:F0:B1:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683.cer sbgp-ipAddrBlock: critical IPv4: 104.166.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a9:f9:20:6c:77:d1:a3:b3:e6:2c:d0:b3:59:06:b2:89:8a: 19:a5:93:e0:9c:62:72:20:f4:48:fa:1b:a0:3b:25:fd:db:d4: 26:58:cf:19:31:ba:23:2b:22:43:e2:f4:bc:c3:29:20:e9:66: 52:01:f2:16:b0:1e:9b:db:62:d2:d5:9a:9b:e6:c4:f4:79:91: a5:7e:60:d3:c2:e3:ba:5a:d1:06:a8:c8:9f:0d:52:50:8a:71: 99:64:0b:ae:2e:e4:e3:4a:1a:f2:fa:62:c0:1c:59:4f:df:32: 20:f7:fe:55:75:e1:30:dd:94:f2:38:c7:6d:1d:3c:13:6e:df: bb:8e:92:fa:a1:35:10:9d:f9:02:14:2a:30:55:3b:e9:36:7a: 2c:e7:0c:cb:38:f3:2e:60:49:4f:c8:54:ef:46:e5:a4:2b:e6: 2b:66:76:ab:f1:3d:5b:a6:d8:53:43:84:e7:4d:f5:92:e0:b5: 94:3b:f8:89:c0:90:51:61:d6:5d:27:14:de:c2:26:67:14:ad: 0e:51:c1:f4:78:12:dd:89:5b:a7:f1:39:38:79:ed:a0:cd:f7: 30:e8:ca:f7:fe:c1:a7:eb:ea:4f:57:3f:3a:09:c7:9f:b9:67: 54:e7:a0:72:cf:0b:9c:95:5e:21:dd:cd:81:07:8d:ad:3a:23: 0e:d9:1c:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMsXarflE6mQ7R5iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI1ZjNmYTktOGI1Mi00ZjE3LThhY2EtNjc0MGRlZDcz NjgzMB4XDTI1MDYyNDE2NTk0NloXDTI1MDkyMjE2NTk0NlowLzEtMCsGA1UEAxMk YTFiMDM0NWEtNGRkOS00YzI4LWExN2ItMmE1NzE1NmJmNzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqr5lDf0cpUsr5J9d+jS3P4TEE2Cx4b42RXA +/cviopBQgi64UxJBW9Qd7sxKsUv1UNbySW6kNj4+5plFqAUCMVhkSImntQeboWS RN+MUC3xI8F7b8e+ocZESfb59UyP7Bt89UiKTHPlWTKNY2AxJqMN/X77kR0vdyOb ExIgiD8iKPlEfikMq3pXAaTOyaEhBen/7mHtFgaOBz5x4YAtvFRRHQB6mIlS5/wN bVgnl/fnmU1O0pF6A+UhXzHqBxfiTOyhVK6b4uPR4RIKUVUj25lH8z77hv/aaDWk YN/hMjLlk9g7GrIW7HeroaLxLlEo/MA5djKOwrhwp0dJSGJ0iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdO94XCzaIf4l8HiWOCh71pYNbtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjVm M2ZhOS04YjUyLTRmMTctOGFjYS02NzQwZGVkNzM2ODMvMjQwZDYzYWEtODdjZi0z ZDZhLThmNzUtNGMxNDBhYjQ1NjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDI1ZjNmYTktOGI1Mi00ZjE3LThh Y2EtNjc0MGRlZDczNjgzL2QyNWYzZmE5LThiNTItNGYxNy04YWNhLTY3NDBkZWQ3 MzY4My5jcmwwHwYDVR0jBBgwFoAUjrWEmnBOEbBGa62d01t7/BHwsTYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjVmM2ZhOS04YjUyLTRmMTctOGFjYS02NzQw ZGVkNzM2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKZtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqp+SBsd9Gjs+Ys0LNZBrKJihmlk+CcYnIg9Ej6G6A7Jf3b1CZYzxkx uiMrIkPi9LzDKSDpZlIB8hawHpvbYtLVmpvmxPR5kaV+YNPC47pa0QaoyJ8NUlCK cZlkC64u5ONKGvL6YsAcWU/fMiD3/lV14TDdlPI4x20dPBNu37uOkvqhNRCd+QIU KjBVO+k2eiznDMs48y5gSU/IVO9G5aQr5itmdqvxPVum2FNDhOdN9ZLgtZQ7+InA kFFh1l0nFN7CJmcUrQ5RwfR4Et2JW6fxOTh57aDN9zDoyvf+wafr6k9XPzoJx5+5 Z1TnoHLPC5yVXiHdzYEHja06Iw7ZHCI= -----END CERTIFICATE-----Generated at Tue Jul 1 20:51:25 2025 by rpki-client