$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1cd03f73-c2eb-3271-91b1-9de65564f3a8.roa File: 1cd03f73-c2eb-3271-91b1-9de65564f3a8.roa (raw, json) Hash identifier: 78kgnMaf+dUp4gyLayvRAJLsnc5qe9VWQEt3Rx5wuEw= Subject key identifier: 13:A4:AC:10:06:20:FE:8A:32:6D:28:32:F5:F9:3E:D7:6C:2D:D4:E3 Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Certificate serial: 010D0C9F4328584A3A15854D259B2B8418DE4700 Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1cd03f73-c2eb-3271-91b1-9de65564f3a8.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 40788 IP address blocks: 104.193.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:85:4d:25:9b:2b:84:18:de:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=2cdd3d56-f67f-4ec2-877f-ecadf36a2905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0e:05:60:98:60:25:60:77:fa:a9:9d:ab:bc: e7:60:9d:c5:0d:d8:37:62:d3:b1:92:9a:29:f3:e9: b0:df:eb:10:0a:76:0a:3b:ec:58:fb:a7:dd:4f:11: 86:31:ba:8d:2e:e6:e7:c7:39:04:af:6e:b0:a8:9a: db:a3:6e:01:34:8b:37:81:37:12:81:9f:61:9a:8d: b3:6e:1c:ce:53:47:0d:d3:65:b2:17:ae:65:58:d4: f1:0b:38:a1:57:0c:62:68:5e:b0:25:76:bd:9b:1b: 45:a2:b9:3f:da:47:58:2c:60:d1:04:2c:6e:71:52: b6:33:37:e5:83:52:ef:dd:ff:26:b7:ef:b4:78:35: 77:2d:b2:13:94:86:f9:43:ab:cb:9b:9a:83:0c:5f: c7:12:2c:79:c5:37:97:ab:0f:5a:47:76:76:cd:f8: ed:d2:36:84:8c:36:29:e1:dd:e4:e0:fc:92:85:62: a5:da:34:c6:19:fb:99:c3:c1:25:9e:9d:92:4a:a9: 47:48:3e:24:27:2d:62:e3:50:dc:71:7c:aa:e4:8d: 5c:90:1e:c8:d5:e8:2a:d1:de:45:b2:92:ba:0f:64: 01:68:a5:6a:f3:56:2b:40:1a:2d:44:9c:d9:0b:b5: 97:71:cb:ec:5a:de:2d:1c:59:7d:f0:28:39:9b:99: 4f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A4:AC:10:06:20:FE:8A:32:6D:28:32:F5:F9:3E:D7:6C:2D:D4:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1cd03f73-c2eb-3271-91b1-9de65564f3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl X509v3 Authority Key Identifier: keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer sbgp-ipAddrBlock: critical IPv4: 104.193.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ec:5a:e8:e1:8d:df:12:47:05:06:02:97:d6:ae:7e:35:f3: 5c:0f:37:9d:cb:d7:c0:73:62:d4:eb:68:ef:cd:28:0e:4b:e9: af:ce:81:a8:24:8e:0d:6e:75:18:f4:66:86:ca:84:88:26:f8: 47:ff:0c:80:88:ca:72:2e:26:b9:e4:f2:fc:90:39:8f:90:6e: 50:ef:ba:b4:99:d5:07:50:04:aa:bf:bb:2e:3e:27:c0:2c:d7: 7a:61:26:f5:02:c6:59:99:a1:fe:89:83:18:86:e9:6d:ae:96: 1b:ea:6a:6b:06:e4:cb:64:2b:85:cc:68:0b:1a:d3:f0:4a:0a: 2e:b4:93:a0:4b:f9:52:1c:86:51:92:18:d5:e4:d1:ea:77:5c: d4:a9:d4:ad:5a:c7:b9:be:e5:bb:b6:3a:46:a4:c0:d4:8a:a6: 05:1a:ed:2c:da:3b:ae:c3:f4:54:19:a2:53:f1:e8:4d:2b:bf: 86:3d:25:eb:b0:8b:84:1d:8e:98:6b:a0:f0:7e:63:6a:45:1c: e3:ca:c0:fb:db:89:24:6e:73:76:57:3d:55:4e:e7:29:8c:2f: c8:19:41:f9:14:7b:2c:71:9d:93:51:13:90:b0:ad:30:b7:80: b9:03:32:bc:55:d8:18:21:f0:67:5b:6e:00:54:75:70:11:5c: c1:e6:42:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FYVNJZsrhBjeRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl MDU5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk MmNkZDNkNTYtZjY3Zi00ZWMyLTg3N2YtZWNhZGYzNmEyOTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow4FYJhgJWB3+qmdq7znYJ3FDdg3YtOxkpop 8+mw3+sQCnYKO+xY+6fdTxGGMbqNLubnxzkEr26wqJrbo24BNIs3gTcSgZ9hmo2z bhzOU0cN02WyF65lWNTxCzihVwxiaF6wJXa9mxtFork/2kdYLGDRBCxucVK2Mzfl g1Lv3f8mt++0eDV3LbITlIb5Q6vLm5qDDF/HEix5xTeXqw9aR3Z2zfjt0jaEjDYp 4d3k4PyShWKl2jTGGfuZw8Elnp2SSqlHSD4kJy1i41DccXyq5I1ckB7I1egq0d5F spK6D2QBaKVq81YrQBotRJzZC7WXccvsWt4tHFl98Cg5m5lPfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOkrBAGIP6KMm0oMvX5PtdsLdTjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5 YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvMWNkMDNmNzMtYzJlYi0z MjcxLTkxYjEtOWRlNjU1NjRmM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaME4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHsWujhjd8SRwUGApfWrn4181wPN53L18BzYtTraO/NKA5L6a/Ogagk jg1udRj0ZobKhIgm+Ef/DICIynIuJrnk8vyQOY+QblDvurSZ1QdQBKq/uy4+J8As 13phJvUCxlmZof6JgxiG6W2ulhvqamsG5MtkK4XMaAsa0/BKCi60k6BL+VIchlGS GNXk0ep3XNSp1K1ax7m+5bu2OkakwNSKpgUa7SzaO67D9FQZolPx6E0rv4Y9Jeuw i4QdjphroPB+Y2pFHOPKwPvbiSRuc3ZXPVVO5ymML8gZQfkUeyxxnZNRE5CwrTC3 gLkDMrxV2Bgh8GdbbgBUdXARXMHmQrs= -----END CERTIFICATE-----Generated at Mon Jun 30 10:22:13 2025 by rpki-client