$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/0227100c-57dc-3035-9ad0-7ea5aa7a6622.roa File: 0227100c-57dc-3035-9ad0-7ea5aa7a6622.roa (raw, json) Hash identifier: b/uhCWrQ04P0OeH5hwUii1cRFcWGH4x4o0Q/0ZYvCgU= Subject key identifier: 79:C9:FE:91:98:34:3B:F6:8B:15:3F:88:85:40:5E:88:50:25:ED:7D Certificate issuer: /CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d Certificate serial: 010D0C9F4328584AC87639F7657B8CC6BEBAFE00 Authority key identifier: F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/0227100c-57dc-3035-9ad0-7ea5aa7a6622.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 398823 IP address blocks: 104.219.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:39:f7:65:7b:8c:c6:be:ba:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=e865c58b-ee82-4e92-b1cf-5f043debf26d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c2:f9:60:b6:16:bb:10:ba:d0:03:02:56:6b: b9:e9:44:59:f7:a9:f5:f7:f6:0e:2b:0b:89:58:0e: 35:84:db:fe:37:f8:51:e9:76:0f:8c:6a:dd:47:c7: 99:36:c9:49:16:4d:4d:60:45:5d:ac:ca:16:a5:2d: b7:7a:45:28:65:0d:b8:82:9e:30:cf:98:73:21:4e: ef:fa:da:f3:9a:64:3f:2a:1b:87:c4:1e:15:02:5b: 17:17:06:3f:c4:c3:71:eb:9a:e9:c1:3a:90:15:88: 60:93:9f:9e:a9:96:38:74:aa:a7:8d:b8:ad:3e:85: 31:c5:b9:2f:d5:86:15:16:1e:5a:5d:e1:4d:6d:5c: f7:ae:23:c9:32:66:4c:98:9a:b5:d7:bc:db:19:77: ee:ed:21:ac:59:b2:e6:1e:a6:4c:7c:6e:a7:a4:ae: 52:ec:6f:6c:dc:01:84:20:65:a5:ac:e2:1d:b9:42: 37:6e:67:25:70:ca:cb:ce:0e:29:7d:44:01:0c:f7: 1b:a5:ff:88:7c:07:95:5c:54:de:db:d7:08:85:6d: d0:fe:2d:b0:89:fd:9e:cb:6f:b0:15:0d:69:b8:88: 00:04:5e:c7:e5:e4:53:13:36:ac:6d:2b:cc:41:d7: fc:78:a9:c5:a2:67:8f:ad:68:5f:eb:88:db:fa:ff: d1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C9:FE:91:98:34:3B:F6:8B:15:3F:88:85:40:5E:88:50:25:ED:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/0227100c-57dc-3035-9ad0-7ea5aa7a6622.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl X509v3 Authority Key Identifier: keyid:F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer sbgp-ipAddrBlock: critical IPv4: 104.219.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:51:cc:51:6e:05:5b:8f:97:56:10:90:2f:e6:dd:c5:98:14: 4b:b8:29:ee:ec:45:cb:f5:3b:fd:25:ce:42:0d:45:40:3b:d2: 3e:0f:48:60:97:f0:18:d9:e4:e2:3a:62:23:8d:71:3f:ca:60: b8:2b:6a:83:4e:c1:8a:1a:57:f2:c2:3b:8c:b4:15:20:9c:ca: 6e:b4:a4:7f:12:58:64:68:5e:f5:b7:16:f0:ba:77:46:da:eb: dc:a6:99:d2:85:5f:31:86:9e:2b:e7:42:95:b4:01:5f:b1:cb: d0:e1:91:5b:82:01:fb:0a:1b:c7:c5:65:5a:a9:f4:c5:9f:35: bd:f1:df:dc:6c:31:01:a6:03:b7:c6:bc:2b:8b:e3:9d:08:45: d6:28:dd:ff:52:3b:37:38:78:c4:9c:f7:5b:1a:47:c3:bb:48: 9e:2c:e9:ca:58:47:58:fb:52:84:33:c2:08:15:b7:11:34:ae: 9b:bd:2b:11:99:ea:c5:f2:91:49:45:82:57:28:e1:c6:36:f7: 70:08:32:b9:40:97:0a:23:fc:99:fc:5d:73:f6:51:65:17:de: f0:a7:53:d7:e9:d4:3a:4c:66:f9:01:d1:72:37:ef:3a:88:55: fc:03:fc:76:18:d7:a8:5c:48:fe:c1:89:1b:9a:f9:2d:dc:ac: 7a:f8:3c:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdjn3ZXuMxr66/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjNiM2ZjZDktZjkwZC00ZjIwLTk2ZWMtZDRkMzI4NTE3 YzBkMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZTg2NWM1OGItZWU4Mi00ZTkyLWIxY2YtNWYwNDNkZWJmMjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosL5YLYWuxC60AMCVmu56URZ96n19/YOKwuJ WA41hNv+N/hR6XYPjGrdR8eZNslJFk1NYEVdrMoWpS23ekUoZQ24gp4wz5hzIU7v +trzmmQ/KhuHxB4VAlsXFwY/xMNx65rpwTqQFYhgk5+eqZY4dKqnjbitPoUxxbkv 1YYVFh5aXeFNbVz3riPJMmZMmJq117zbGXfu7SGsWbLmHqZMfG6npK5S7G9s3AGE IGWlrOIduUI3bmclcMrLzg4pfUQBDPcbpf+IfAeVXFTe29cIhW3Q/i2wif2ey2+w FQ1puIgABF7H5eRTEzasbSvMQdf8eKnFomePrWhf64jb+v/RJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnJ/pGYNDv2ixU/iIVAXohQJe19MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82M2Iz ZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQzMjg1MTdjMGQvMDIyNzEwMGMtNTdkYy0z MDM1LTlhZDAtN2VhNWFhN2E2NjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjNiM2ZjZDktZjkwZC00ZjIwLTk2 ZWMtZDRkMzI4NTE3YzBkLzYzYjNmY2Q5LWY5MGQtNGYyMC05NmVjLWQ0ZDMyODUx N2MwZC5jcmwwHwYDVR0jBBgwFoAU85szvqOxj6FrnsAlnz3NKvxiOA0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82M2IzZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQz Mjg1MTdjMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaNvUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtRzFFuBVuPl1YQkC/m3cWYFEu4Ke7sRcv1O/0lzkINRUA70j4PSGCX 8BjZ5OI6YiONcT/KYLgraoNOwYoaV/LCO4y0FSCcym60pH8SWGRoXvW3FvC6d0ba 69ymmdKFXzGGnivnQpW0AV+xy9DhkVuCAfsKG8fFZVqp9MWfNb3x39xsMQGmA7fG vCuL450IRdYo3f9SOzc4eMSc91saR8O7SJ4s6cpYR1j7UoQzwggVtxE0rpu9KxGZ 6sXykUlFglco4cY293AIMrlAlwoj/Jn8XXP2UWUX3vCnU9fp1DpMZvkB0XI37zqI VfwD/HYY16hcSP7BiRua+S3crHr4PIQ= -----END CERTIFICATE-----Generated at Sat Aug 23 15:40:25 2025 by rpki-client