$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62/f7967a59-1c07-39dc-a959-9b6ab6129975.roa File: f7967a59-1c07-39dc-a959-9b6ab6129975.roa (raw, json) Hash identifier: ktjrgRf8bTMVI9rKOhTO7sitnLT3Rp2UY+nMDv2lDZI= Subject key identifier: 62:0A:D3:6F:83:5A:B9:4A:08:CC:AB:1A:B1:59:44:2B:D0:5D:63:71 Certificate issuer: /CN=3d2a810f-f980-4f77-8ab7-d979958ffb62 Certificate serial: 010D0C9F4328584A41106323744BE82FA00E2A00 Authority key identifier: 0F:A4:68:0E:03:74:A1:ED:83:CB:18:96:2B:BF:8D:D2:47:D6:13:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62/f7967a59-1c07-39dc-a959-9b6ab6129975.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 25937 IP address blocks: 104.244.128.0/21 maxlen: 21 2606:3a40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62/3d2a810f-f980-4f77-8ab7-d979958ffb62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62/3d2a810f-f980-4f77-8ab7-d979958ffb62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:63:23:74:4b:e8:2f:a0:0e:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d2a810f-f980-4f77-8ab7-d979958ffb62 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=99d0dd0c-61aa-45cc-b28a-045b2a6fc059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6c:a3:a2:7a:b1:4e:a6:d7:24:c5:46:8b:db: fe:1c:c5:2e:83:c8:80:0f:28:b3:f9:3e:f5:1b:85: 21:5d:3f:f1:3b:91:ed:d8:23:c9:1d:39:e1:8b:94: ee:da:fc:dc:f5:81:5f:e0:65:74:fd:dc:b5:f5:8d: bc:3d:95:3f:ef:a5:54:c7:c4:01:23:d8:55:f4:ec: 19:a4:69:f4:ad:fe:e9:6b:7d:9b:c4:b1:54:4b:f4: c1:94:05:dc:9a:69:0c:b2:b6:36:64:ec:b7:29:00: 12:a0:cd:57:10:70:44:fc:f3:60:4b:60:0b:d9:9d: c3:58:3c:ee:92:ac:85:28:55:bd:7a:e7:45:0f:91: fb:72:fd:96:07:2c:59:ce:0b:9a:56:ba:8b:1d:90: 1c:20:d7:4c:8b:19:ae:bb:9b:e6:fd:9a:06:bc:c5: 88:23:5f:72:8c:a9:98:8c:ee:67:0b:7f:c1:82:f8: e3:80:78:a6:73:a7:ae:12:6d:7e:4a:35:19:1e:42: cf:b6:78:a7:5f:76:27:54:62:0e:30:34:69:b1:2c: 8b:3e:61:10:ae:af:32:74:e8:c9:b5:6b:cf:6a:38: 2c:b0:37:f9:a2:a0:d8:2b:f3:4f:d9:4b:1a:0d:6a: 5c:6d:18:77:cd:c1:a8:7d:67:a4:69:90:ed:22:36: ee:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0A:D3:6F:83:5A:B9:4A:08:CC:AB:1A:B1:59:44:2B:D0:5D:63:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62/f7967a59-1c07-39dc-a959-9b6ab6129975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62/3d2a810f-f980-4f77-8ab7-d979958ffb62.crl X509v3 Authority Key Identifier: keyid:0F:A4:68:0E:03:74:A1:ED:83:CB:18:96:2B:BF:8D:D2:47:D6:13:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62.cer sbgp-ipAddrBlock: critical IPv4: 104.244.128.0/21 IPv6: 2606:3a40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:d5:19:62:aa:3e:f9:a7:b5:23:61:63:17:49:74:cc:c2:8d: 2e:e2:98:bf:aa:c6:7d:95:65:ea:48:48:1d:d9:1d:84:22:3f: 40:39:66:0c:dd:63:3b:f8:61:fe:4d:d4:07:e7:eb:ca:ac:21: e4:61:5a:c8:69:e8:d0:50:81:5e:29:9d:db:c3:f9:6c:87:22: 33:d9:2b:a0:75:45:27:a9:fe:ae:00:88:fe:2f:1f:41:c7:10: 42:77:1f:d4:72:13:ae:d8:f2:ac:c4:50:32:48:8d:d4:0c:6e: 16:d2:63:fb:ee:50:30:09:4f:69:ed:50:33:ab:e3:c3:a7:1a: 2d:93:01:30:7d:03:95:51:c8:55:32:24:2d:a0:b4:98:dc:68: ce:96:21:0c:c8:a7:dd:d7:5c:ac:db:d0:c2:61:bb:3f:26:05: 53:f6:d5:b9:69:a9:5b:d2:b5:48:e0:be:00:57:e2:da:30:9e: a4:c6:a4:0b:42:4c:79:3e:1b:86:5f:6b:e9:52:2e:43:17:65: 86:d4:78:e5:d6:47:98:18:c3:e4:f6:40:a6:a3:75:62:26:cb: c4:17:9e:84:63:69:ff:91:cb:94:27:7b:a8:61:7e:7e:b1:cc: cb:b3:cd:8b:06:63:a2:72:e3:43:ac:e5:74:de:6e:29:5f:b7: f9:85:ce:1e -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEpBEGMjdEvoL6AOKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyYTgxMGYtZjk4MC00Zjc3LThhYjctZDk3OTk1OGZm YjYyMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk OTlkMGRkMGMtNjFhYS00NWNjLWIyOGEtMDQ1YjJhNmZjMDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGyjonqxTqbXJMVGi9v+HMUug8iADyiz+T71 G4UhXT/xO5Ht2CPJHTnhi5Tu2vzc9YFf4GV0/dy19Y28PZU/76VUx8QBI9hV9OwZ pGn0rf7pa32bxLFUS/TBlAXcmmkMsrY2ZOy3KQASoM1XEHBE/PNgS2AL2Z3DWDzu kqyFKFW9eudFD5H7cv2WByxZzguaVrqLHZAcINdMixmuu5vm/ZoGvMWII19yjKmY jO5nC3/BgvjjgHimc6euEm1+SjUZHkLPtninX3YnVGIOMDRpsSyLPmEQrq8ydOjJ tWvPajgssDf5oqDYK/NP2UsaDWpcbRh3zcGofWekaZDtIjbukQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFGIK02+DWrlKCMyrGrFZRCvQXWNxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDJh ODEwZi1mOTgwLTRmNzctOGFiNy1kOTc5OTU4ZmZiNjIvZjc5NjdhNTktMWMwNy0z OWRjLWE5NTktOWI2YWI2MTI5OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2QyYTgxMGYtZjk4MC00Zjc3LThh YjctZDk3OTk1OGZmYjYyLzNkMmE4MTBmLWY5ODAtNGY3Ny04YWI3LWQ5Nzk5NThm ZmI2Mi5jcmwwHwYDVR0jBBgwFoAUD6RoDgN0oe2DyxiWK7+N0kfWE4QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDJhODEwZi1mOTgwLTRmNzctOGFiNy1kOTc5 OTU4ZmZiNjIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDaPSAMA0E AgACMAcDBQAmBjpAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAFHVGWKqPvmntSNhYxdJdMzCjS7imL+qxn2V ZepISB3ZHYQiP0A5ZgzdYzv4Yf5N1Afn68qsIeRhWshp6NBQgV4pndvD+WyHIjPZ K6B1RSep/q4AiP4vH0HHEEJ3H9RyE67Y8qzEUDJIjdQMbhbSY/vuUDAJT2ntUDOr 48OnGi2TATB9A5VRyFUyJC2gtJjcaM6WIQzIp93XXKzb0MJhuz8mBVP21blpqVvS tUjgvgBX4townqTGpAtCTHk+G4Zfa+lSLkMXZYbUeOXWR5gYw+T2QKajdWImy8QX noRjaf+Ry5Qne6hhfn6xzMuzzYsGY6Jy40Os5XTebilft/mFzh4= -----END CERTIFICATE-----Generated at Mon Jun 30 19:00:27 2025 by rpki-client