$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7950ff86-7690-33fa-bde4-a5e2852ee979.roa File: 7950ff86-7690-33fa-bde4-a5e2852ee979.roa (raw, json) Hash identifier: F8kkke3NKPEEZbX+PEP5sngTcrl/XwxYi2JaxbbcM1g= Subject key identifier: 2F:DA:6D:DB:CB:89:67:4D:2D:70:5A:7A:9A:A6:6B:DF:E2:F2:59:FF Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAF1659455C32CF090A07C Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7950ff86-7690-33fa-bde4-a5e2852ee979.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 54858 IP address blocks: 104.220.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:f1:65:94:55:c3:2c:f0:90:a0:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=8e6e7e81-9aa6-4bec-a74a-245fc9c4e99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f8:b7:53:5b:f1:7b:17:c6:15:4b:3b:23:2d: fa:f3:e5:75:20:2a:fc:de:45:1b:54:9c:d6:ad:63: 8f:19:67:33:10:c2:6d:2e:27:44:8a:12:9c:05:1f: 4d:61:c2:55:da:8f:92:5f:57:e0:35:41:cf:6c:c6: 4d:fd:75:80:78:c2:c4:47:2e:da:09:66:6b:a4:22: 2f:51:09:98:b8:cb:2a:8d:73:2f:52:7c:7e:70:fa: 43:8a:11:7d:34:cc:83:e8:80:85:a6:03:32:12:24: 0b:11:9d:94:b0:04:8e:fd:62:60:8b:4b:7e:45:1f: ab:fa:ac:96:a3:74:b4:e7:96:06:8a:b1:09:37:45: 59:a4:a5:ef:d9:d7:91:33:2e:7e:62:6f:69:fd:49: bf:1b:7a:8f:72:83:3e:e3:35:da:bf:53:4c:4f:42: 9d:5a:68:cd:ff:54:be:3c:b7:79:f2:56:93:41:25: 66:ca:74:67:b7:b6:b6:0c:10:0e:f0:91:b8:52:8c: 29:a4:bc:8a:03:2d:4d:dd:b2:a5:6a:4a:7a:06:0e: ef:15:3d:05:e9:37:fa:68:b6:fa:5f:13:c9:c5:f1: 3d:71:40:b2:97:58:21:7b:d8:60:31:f8:a9:10:c2: 44:82:ff:20:42:ef:cd:be:ee:6b:5a:46:7c:41:fc: e5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DA:6D:DB:CB:89:67:4D:2D:70:5A:7A:9A:A6:6B:DF:E2:F2:59:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7950ff86-7690-33fa-bde4-a5e2852ee979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.220.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:50:27:8d:f9:2d:98:c1:54:8f:77:ee:4d:f4:49:20:2f:64: ad:de:3c:45:08:0e:ff:28:a4:30:94:32:43:5d:e2:38:8e:d2: 27:65:1f:06:84:87:9b:f5:9a:b5:5f:8a:07:9d:8e:b0:09:c3: 2c:ca:7a:0b:22:80:da:3c:ad:53:f1:b6:63:b0:c9:86:76:24: 25:b2:13:23:46:97:25:97:d0:01:54:14:eb:04:bb:58:13:12: 45:46:f7:6c:d5:7e:8e:8a:3a:bb:90:8c:92:bb:30:7f:4f:2a: cf:79:d2:a1:79:28:c5:bf:e0:4a:18:7c:30:a1:c2:e1:0b:a4: c5:3d:f1:b2:86:48:4e:b1:58:70:e7:82:09:be:86:00:f0:b1: 7a:b5:13:c1:ca:b1:2b:21:58:99:24:e8:92:df:ac:64:8f:20: 7f:ac:83:9f:ef:90:ba:9e:18:2e:f5:af:5f:cc:72:84:19:2d: 4e:54:aa:b2:a5:eb:8e:47:42:71:8e:48:b7:7e:5f:69:a4:b8: 28:29:24:de:dd:70:ea:1b:b1:fd:e2:12:b1:5f:eb:24:7c:a4: 2a:26:91:52:87:1f:7a:7f:8b:36:75:d6:ef:79:5a:ea:14:97: 9d:6f:a2:7c:6b:aa:65:75:30:8a:b3:da:b1:f0:7e:36:02:e7: cc:f1:e0:4b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoquvFllFXDLPCQoHwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk OGU2ZTdlODEtOWFhNi00YmVjLWE3NGEtMjQ1ZmM5YzRlOTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvi3U1vxexfGFUs7Iy368+V1ICr83kUbVJzW rWOPGWczEMJtLidEihKcBR9NYcJV2o+SX1fgNUHPbMZN/XWAeMLERy7aCWZrpCIv UQmYuMsqjXMvUnx+cPpDihF9NMyD6ICFpgMyEiQLEZ2UsASO/WJgi0t+RR+r+qyW o3S055YGirEJN0VZpKXv2deRMy5+Ym9p/Um/G3qPcoM+4zXav1NMT0KdWmjN/1S+ PLd58laTQSVmynRnt7a2DBAO8JG4UowppLyKAy1N3bKlakp6Bg7vFT0F6Tf6aLb6 XxPJxfE9cUCyl1ghe9hgMfipEMJEgv8gQu/Nvu5rWkZ8QfzlmQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFC/abdvLiWdNLXBaepqma9/i8ln/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNzk1MGZmODYtNzY5MC0z M2ZhLWJkZTQtYTVlMjg1MmVlOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAaNwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAb1AnjfktmMFUj3fuTfRJIC9krd48RQgO/yikMJQyQ13iOI7SJ2UfBoSH m/WatV+KB52OsAnDLMp6CyKA2jytU/G2Y7DJhnYkJbITI0aXJZfQAVQU6wS7WBMS RUb3bNV+joo6u5CMkrswf08qz3nSoXkoxb/gShh8MKHC4QukxT3xsoZITrFYcOeC Cb6GAPCxerUTwcqxKyFYmSTokt+sZI8gf6yDn++Qup4YLvWvX8xyhBktTlSqsqXr jkdCcY5It35faaS4KCkk3t1w6hux/eISsV/rJHykKiaRUocfen+LNnXW73la6hSX nW+ifGuqZXUwirPasfB+NgLnzPHgSw== -----END CERTIFICATE-----Generated at Sun Jun 29 17:09:09 2025 by rpki-client