$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/3e2fbd50-7212-31b5-b944-be9ef7c52b2b.roa File: 3e2fbd50-7212-31b5-b944-be9ef7c52b2b.roa (raw, json) Hash identifier: mvjGiLGiT3xmRev3GCaraTGzhsU7m6zpxToE84avY3s= Subject key identifier: 24:8C:5B:57:88:37:C4:6C:BC:86:EE:DD:FB:EE:FD:02:A9:8B:AD:D0 Certificate issuer: /CN=c3cd4625-6034-4b3b-9d8b-5417ca97c839 Certificate serial: 010D0C9F4328584A3CE023EFD812A10B8ED04C80 Authority key identifier: 96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/3e2fbd50-7212-31b5-b944-be9ef7c52b2b.roa Signing time: Thu 19 Jun 2025 01:00:50 +0000 ROA not before: Thu 19 Jun 2025 01:00:50 +0000 ROA not after: Wed 17 Sep 2025 01:00:50 +0000 asID: 13438 IP address blocks: 104.232.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:e0:23:ef:d8:12:a1:0b:8e:d0:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3cd4625-6034-4b3b-9d8b-5417ca97c839 Validity Not Before: Jun 19 01:00:50 2025 GMT Not After : Sep 17 01:00:50 2025 GMT Subject: CN=9791fa14-c21f-4ec8-a304-9d428a4c6159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:71:e9:79:be:73:e3:14:77:93:43:92:dd:a3: f9:fd:bd:ac:31:a6:c7:8c:dc:89:29:d3:22:c4:ec: e6:34:f5:75:4e:41:a7:0f:c6:ba:44:88:57:50:7c: eb:7a:36:bf:6b:f7:bc:0f:49:95:61:7a:da:e7:87: 24:d3:48:16:7f:bd:0b:5c:b0:66:85:5b:da:18:65: 41:9f:cf:aa:62:c7:6c:76:ec:01:a0:d0:66:91:5c: 8e:41:6b:00:ba:59:a6:c2:e4:0a:87:3d:a1:8d:ae: 31:85:57:3e:00:92:6d:d9:75:d0:3f:9d:04:25:02: 6e:e9:87:f3:6c:f7:fc:14:42:3e:f8:1b:82:30:4d: ca:9e:40:f2:be:b8:2b:53:a8:72:e3:2a:de:55:22: 79:84:40:fc:16:ec:24:f5:ce:1b:d7:ac:cc:97:83: cd:1d:4a:a4:61:14:b5:98:2a:e2:c5:0b:26:11:d4: dd:1a:d7:4f:d8:7c:5d:49:b0:74:d0:44:2e:01:0a: 25:96:76:93:06:32:5a:86:63:d1:44:03:99:45:32: df:28:7a:d2:16:8c:75:48:b1:38:f3:8a:8d:93:27: cf:aa:d7:14:b3:18:5c:a6:44:51:1f:d0:76:91:80: 3b:71:31:37:9f:70:49:2c:80:6b:e9:6e:35:57:e2: 14:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8C:5B:57:88:37:C4:6C:BC:86:EE:DD:FB:EE:FD:02:A9:8B:AD:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/3e2fbd50-7212-31b5-b944-be9ef7c52b2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.crl X509v3 Authority Key Identifier: keyid:96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer sbgp-ipAddrBlock: critical IPv4: 104.232.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:91:65:de:ee:93:8b:eb:16:24:f4:a6:d9:1f:ac:c1:be:01: b6:4a:6a:2f:81:a4:91:31:19:9b:02:ca:ac:3f:2c:41:4b:2a: ec:02:15:7e:5a:00:a1:40:c9:e4:5e:33:4f:14:1b:c4:59:8f: d2:26:a0:db:0c:79:4d:be:92:5d:44:51:a3:7d:d9:e4:0e:66: 13:69:73:39:8d:d9:5f:e1:96:a7:9b:85:e7:37:4b:a3:51:61: 96:e2:da:30:5f:05:52:10:e3:08:7c:26:ef:d4:f9:96:cf:d1: 9b:71:ae:f1:de:fc:6f:61:99:2b:11:24:74:dd:97:f1:c5:47: 42:40:db:96:0e:f5:a0:65:8b:6d:be:80:ff:a5:d0:11:fd:e4: 28:cc:db:5c:30:38:d1:5a:2f:ed:7d:e8:d8:fb:6e:78:8e:f3: e9:96:e0:74:87:7b:aa:36:c1:64:0a:b7:b2:42:e3:26:0f:26: f3:0d:5f:71:56:27:0a:67:a0:5b:63:6b:ee:16:3d:56:b7:91: d2:f7:5a:59:4a:a6:0e:74:63:a7:3b:25:2c:74:1a:b0:a5:e6: 74:3f:1d:0c:e8:b4:fc:91:26:0d:87:4f:7f:11:38:a1:d4:06: 8d:06:f6:3b:26:53:75:bc:ba:dd:11:b4:87:49:cd:ae:41:ab: e8:5f:10:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo84CPv2BKhC47QTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNjZDQ2MjUtNjAzNC00YjNiLTlkOGItNTQxN2NhOTdj ODM5MB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk OTc5MWZhMTQtYzIxZi00ZWM4LWEzMDQtOWQ0MjhhNGM2MTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3Hpeb5z4xR3k0OS3aP5/b2sMabHjNyJKdMi xOzmNPV1TkGnD8a6RIhXUHzreja/a/e8D0mVYXra54ck00gWf70LXLBmhVvaGGVB n8+qYsdsduwBoNBmkVyOQWsAulmmwuQKhz2hja4xhVc+AJJt2XXQP50EJQJu6Yfz bPf8FEI++BuCME3KnkDyvrgrU6hy4yreVSJ5hED8Fuwk9c4b16zMl4PNHUqkYRS1 mCrixQsmEdTdGtdP2HxdSbB00EQuAQollnaTBjJahmPRRAOZRTLfKHrSFox1SLE4 84qNkyfPqtcUsxhcpkRRH9B2kYA7cTE3n3BJLIBr6W41V+IUSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSMW1eIN8RsvIbu3fvu/QKpi63QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jM2Nk NDYyNS02MDM0LTRiM2ItOWQ4Yi01NDE3Y2E5N2M4MzkvM2UyZmJkNTAtNzIxMi0z MWI1LWI5NDQtYmU5ZWY3YzUyYjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzNjZDQ2MjUtNjAzNC00YjNiLTlk OGItNTQxN2NhOTdjODM5L2MzY2Q0NjI1LTYwMzQtNGIzYi05ZDhiLTU0MTdjYTk3 YzgzOS5jcmwwHwYDVR0jBBgwFoAUluTtbp4/i42uv7q7CCGjw5vRbtgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jM2NkNDYyNS02MDM0LTRiM2ItOWQ4Yi01NDE3 Y2E5N2M4MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOgqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKRZd7uk4vrFiT0ptkfrMG+AbZKai+BpJExGZsCyqw/LEFLKuwCFX5a AKFAyeReM08UG8RZj9ImoNsMeU2+kl1EUaN92eQOZhNpczmN2V/hlqebhec3S6NR YZbi2jBfBVIQ4wh8Ju/U+ZbP0ZtxrvHe/G9hmSsRJHTdl/HFR0JA25YO9aBli22+ gP+l0BH95CjM21wwONFaL+196Nj7bniO8+mW4HSHe6o2wWQKt7JC4yYPJvMNX3FW JwpnoFtja+4WPVa3kdL3WllKpg50Y6c7JSx0GrCl5nQ/HQzotPyRJg2HT38ROKHU Bo0G9jsmU3W8ut0RtIdJza5Bq+hfEN0= -----END CERTIFICATE-----Generated at Tue Jul 1 08:46:30 2025 by rpki-client