$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/d237ff63-e29a-334e-8728-d9c0b2284c14.roa File: d237ff63-e29a-334e-8728-d9c0b2284c14.roa (raw, json) Hash identifier: oQpjsTgAxAzZowPYg8I5Ce4Vb57x0JI4q/rXinNONmA= Subject key identifier: E6:FE:30:D1:1C:74:A2:11:97:A7:67:87:A6:B8:A2:4C:68:4C:96:2E Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F4328584A45403F7F6FF04379A11BB280 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/d237ff63-e29a-334e-8728-d9c0b2284c14.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 26512 IP address blocks: 104.244.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:3f:7f:6f:f0:43:79:a1:1b:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=1e50553c-ebb7-4026-a763-fe5807e73f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:01:f2:9a:cd:8d:c4:51:42:b8:fa:36:c5:3f: ee:18:2e:1d:d5:d2:9a:f2:33:02:65:cc:e8:96:ed: b0:d1:11:2b:b1:5e:3f:6c:0b:34:46:81:b8:9c:1e: c5:31:a9:c9:c8:cc:ae:9c:6b:3f:c5:aa:ad:3d:f2: 08:03:5a:be:c1:55:0d:24:9e:c6:f2:5a:b6:57:eb: 72:ed:18:8b:fa:20:e0:54:25:80:09:97:dc:80:bc: 44:65:5e:7c:33:b3:34:21:67:fa:44:9c:50:97:e8: f5:54:3b:0c:c8:42:6b:29:33:30:4c:64:a4:93:6c: 02:b0:21:18:db:08:cd:58:86:0e:fa:5d:54:c8:9b: eb:17:18:23:83:9a:dc:61:84:39:bb:6e:f1:73:2f: 5d:b1:36:aa:dc:5e:b1:c5:79:c9:42:43:a4:51:2b: 4b:20:74:4c:36:37:89:11:27:61:0e:79:cf:90:d9: a4:b4:81:29:31:f8:da:26:c1:61:bd:5f:a3:87:03: 4c:f5:5e:d8:0d:5e:ae:20:18:d1:7d:59:09:75:17: f0:b4:87:70:5c:c0:00:e4:b6:f4:7e:fd:cb:24:51: d9:3c:d1:16:bf:01:7d:72:94:08:5b:f7:51:e2:03: d4:3d:23:96:25:ce:f5:f1:3d:30:ea:1f:38:ca:e4: 46:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FE:30:D1:1C:74:A2:11:97:A7:67:87:A6:B8:A2:4C:68:4C:96:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/d237ff63-e29a-334e-8728-d9c0b2284c14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.244.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:e9:1f:c4:74:5d:c7:63:8a:07:51:d3:eb:e9:f8:c9:92:8b: 94:1d:92:a2:c3:ae:e7:24:9a:90:cf:7a:c4:23:75:77:78:92: 28:1a:17:32:0d:05:be:1f:cf:7f:de:d2:94:15:66:5f:58:96: fb:48:c7:30:6e:1e:b8:2f:af:8f:ec:16:2e:78:16:3d:d1:ed: e6:06:7a:cb:e7:11:15:d0:ee:9c:82:8c:1d:28:12:4a:26:29: 1c:3d:11:9d:74:4d:c8:a8:7a:37:8d:3b:66:31:2d:0f:c0:a0: e8:2e:7a:11:1b:87:e6:29:0b:03:c5:82:6e:d4:47:85:48:70: ef:a1:17:ff:1a:65:6f:bc:63:c9:a6:c9:d1:b1:75:25:cf:5b: 07:b6:fd:60:ab:8e:f7:b6:cd:03:ab:52:79:0f:0b:48:e5:3f: e5:44:a7:0d:8f:cc:2f:ab:d7:aa:0d:09:1a:f9:bc:9b:3e:3f: b5:4e:e4:b1:ad:b8:a8:00:9f:89:77:f9:ab:3f:06:27:e0:a0: e0:21:48:22:9d:af:bf:64:78:a3:b8:45:8e:a6:1c:fc:7d:08: e9:90:07:22:de:57:3d:9b:de:d9:f6:74:32:b4:a1:c6:72:5d: c1:34:d4:ab:93:fc:43:83:f3:c4:dc:ea:d1:f3:13:34:29:dc: 3d:dc:69:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQD9/b/BDeaEbsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk MWU1MDU1M2MtZWJiNy00MDI2LWE3NjMtZmU1ODA3ZTczZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQHyms2NxFFCuPo2xT/uGC4d1dKa8jMCZczo lu2w0RErsV4/bAs0RoG4nB7FManJyMyunGs/xaqtPfIIA1q+wVUNJJ7G8lq2V+ty 7RiL+iDgVCWACZfcgLxEZV58M7M0IWf6RJxQl+j1VDsMyEJrKTMwTGSkk2wCsCEY 2wjNWIYO+l1UyJvrFxgjg5rcYYQ5u27xcy9dsTaq3F6xxXnJQkOkUStLIHRMNjeJ ESdhDnnPkNmktIEpMfjaJsFhvV+jhwNM9V7YDV6uIBjRfVkJdRfwtIdwXMAA5Lb0 fv3LJFHZPNEWvwF9cpQIW/dR4gPUPSOWJc718T0w6h84yuRG9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOb+MNEcdKIRl6dnh6a4okxoTJYuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvZDIzN2ZmNjMtZTI5YS0z MzRlLTg3MjgtZDljMGIyMjg0YzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPQRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnpH8R0XcdjigdR0+vp+MmSi5QdkqLDruckmpDPesQjdXd4kigaFzIN Bb4fz3/e0pQVZl9YlvtIxzBuHrgvr4/sFi54Fj3R7eYGesvnERXQ7pyCjB0oEkom KRw9EZ10TcioejeNO2YxLQ/AoOguehEbh+YpCwPFgm7UR4VIcO+hF/8aZW+8Y8mm ydGxdSXPWwe2/WCrjve2zQOrUnkPC0jlP+VEpw2PzC+r16oNCRr5vJs+P7VO5LGt uKgAn4l3+as/BifgoOAhSCKdr79keKO4RY6mHPx9COmQByLeVz2b3tn2dDK0ocZy XcE01KuT/EOD88Tc6tHzEzQp3D3caYg= -----END CERTIFICATE-----Generated at Mon Jun 30 08:18:26 2025 by rpki-client