$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/c0061223-367e-304e-b257-a101e5234c0c.roa File: c0061223-367e-304e-b257-a101e5234c0c.roa (raw, json) Hash identifier: XaJ43YImDYirEQAY9HPDcIM3ZwB3leMo7qU/rVbjL68= Subject key identifier: 23:BC:0E:32:0E:6D:83:2F:A6:57:90:F3:A7:66:37:78:60:49:BB:C7 Certificate issuer: /CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca Certificate serial: 010D0C9F4328584A2ABADFE2F8946EF26AC7D600 Authority key identifier: 53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/c0061223-367e-304e-b257-a101e5234c0c.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 205220 IP address blocks: 104.193.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:df:e2:f8:94:6e:f2:6a:c7:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=2101b3a5-a57b-4f66-a41b-90a14478b2e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cf:22:e8:4b:6e:99:07:22:7b:94:bb:5c:13: 80:01:2b:1f:41:95:1f:0d:a4:16:49:b2:b5:38:38: 47:50:dc:71:1d:c2:f2:d5:de:ae:e8:9c:ce:ab:91: f7:a4:ad:d0:43:61:21:32:0b:42:09:86:02:2f:33: 88:33:dd:f2:cf:8f:cf:f4:69:34:a5:75:bb:be:af: 87:cb:cd:b8:f2:63:ab:64:fd:b3:ad:6e:fd:7e:5a: e1:76:68:84:91:9d:30:99:42:5d:96:71:94:6f:1f: c7:e4:b1:21:49:9d:73:04:ea:5e:bf:7f:f8:e2:4a: 7d:e8:9e:da:01:06:d1:4c:5c:54:ba:e6:73:f7:36: b2:ac:bd:6d:66:00:60:65:b4:74:11:c5:87:16:82: ec:1c:e9:1e:6b:28:ef:85:36:99:a6:d5:1c:7b:37: 7f:5d:95:f2:59:8b:ba:5b:ac:5b:28:18:29:e4:72: c3:d5:74:59:b0:23:db:2b:7a:9e:77:65:56:bb:66: 24:ba:10:34:2d:96:74:ff:7e:42:cc:75:fa:b5:3b: 7e:2b:27:f6:ec:7a:04:57:fc:8a:70:8b:46:f7:db: 69:82:1d:7a:ff:d6:1e:4c:4a:4e:dc:57:fa:aa:44: 8d:8a:28:83:71:c5:92:ec:c5:8f:67:be:e9:fe:0b: 7f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BC:0E:32:0E:6D:83:2F:A6:57:90:F3:A7:66:37:78:60:49:BB:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/c0061223-367e-304e-b257-a101e5234c0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.crl X509v3 Authority Key Identifier: keyid:53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer sbgp-ipAddrBlock: critical IPv4: 104.193.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:03:4b:e2:c3:e0:a5:30:52:7d:8f:1b:f8:03:de:c5:fe:aa: 92:35:5a:8d:66:53:52:b3:c8:b4:e5:3d:48:42:48:9c:17:0a: 08:80:f4:4a:29:f8:59:c8:d8:d4:7d:fb:a6:40:55:24:23:42: 02:37:f6:fb:64:cf:ca:e8:e6:30:54:aa:d0:00:fa:e6:5a:0d: 3b:4a:3d:58:36:22:03:2d:9e:97:be:2e:42:c0:73:36:8b:05: 65:e5:87:be:3a:4c:75:5e:2b:c6:76:fe:2c:9b:07:be:d5:5a: 37:7c:86:b9:0b:fb:3f:40:d9:0c:a1:0b:69:15:43:82:6b:95: 0a:42:07:7c:d9:75:f0:fa:cc:bd:e2:ad:00:5d:5b:38:a1:b3: 53:f6:74:24:a6:1e:83:ff:41:51:de:bb:3f:07:e5:94:ae:50: ad:ef:0d:b0:f9:8d:24:93:1a:c0:36:14:c4:9d:7b:eb:b4:86: 60:6c:c4:1f:ca:f2:fd:66:af:76:9a:3e:95:18:5d:9c:d0:8a: ad:85:a5:f8:cb:73:b9:cc:9c:c8:c8:17:f9:4d:22:fb:5e:ac: d3:69:11:55:e8:80:56:84:2e:2a:a3:9e:88:df:93:8d:f0:7d: e8:52:e6:9d:89:5c:f6:9b:28:07:fc:e6:81:d3:ad:75:c4:ca: b3:60:e2:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqut/i+JRu8mrH1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlYTEyZmYtZjk1NC00MjI5LTg4YTItZDJjNjY1NmEw ZWNhMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk MjEwMWIzYTUtYTU3Yi00ZjY2LWE0MWItOTBhMTQ0NzhiMmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls8i6EtumQcie5S7XBOAASsfQZUfDaQWSbK1 ODhHUNxxHcLy1d6u6JzOq5H3pK3QQ2EhMgtCCYYCLzOIM93yz4/P9Gk0pXW7vq+H y8248mOrZP2zrW79flrhdmiEkZ0wmUJdlnGUbx/H5LEhSZ1zBOpev3/44kp96J7a AQbRTFxUuuZz9zayrL1tZgBgZbR0EcWHFoLsHOkeayjvhTaZptUcezd/XZXyWYu6 W6xbKBgp5HLD1XRZsCPbK3qed2VWu2YkuhA0LZZ0/35CzHX6tTt+Kyf27HoEV/yK cItG99tpgh16/9YeTEpO3Ff6qkSNiiiDccWS7MWPZ77p/gt/cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCO8DjIObYMvpleQ86dmN3hgSbvHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMGVh MTJmZi1mOTU0LTQyMjktODhhMi1kMmM2NjU2YTBlY2EvYzAwNjEyMjMtMzY3ZS0z MDRlLWIyNTctYTEwMWU1MjM0YzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDBlYTEyZmYtZjk1NC00MjI5LTg4 YTItZDJjNjY1NmEwZWNhL2QwZWExMmZmLWY5NTQtNDIyOS04OGEyLWQyYzY2NTZh MGVjYS5jcmwwHwYDVR0jBBgwFoAUU0R/CWOSUHfPZabuD30f5r3OpLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMGVhMTJmZi1mOTU0LTQyMjktODhhMi1kMmM2 NjU2YTBlY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJADS+LD4KUwUn2PG/gD3sX+qpI1Wo1mU1KzyLTlPUhCSJwXCgiA9Eop +FnI2NR9+6ZAVSQjQgI39vtkz8ro5jBUqtAA+uZaDTtKPVg2IgMtnpe+LkLAczaL BWXlh746THVeK8Z2/iybB77VWjd8hrkL+z9A2QyhC2kVQ4JrlQpCB3zZdfD6zL3i rQBdWzihs1P2dCSmHoP/QVHeuz8H5ZSuUK3vDbD5jSSTGsA2FMSde+u0hmBsxB/K 8v1mr3aaPpUYXZzQiq2FpfjLc7nMnMjIF/lNIvterNNpEVXogFaELiqjnojfk43w fehS5p2JXPabKAf85oHTrXXEyrNg4mc= -----END CERTIFICATE-----Generated at Sun Jun 29 16:25:43 2025 by rpki-client