$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/b96fa30c-800a-3f27-bbe0-a0466bba322b.roa File: b96fa30c-800a-3f27-bbe0-a0466bba322b.roa (raw, json) Hash identifier: Vt9V+Nmx3EMXQXz1jR/FxiNH0sXpnat+GrihcVjqMc4= Subject key identifier: 88:1D:D4:2C:AB:D0:C5:B6:59:81:1F:B0:2A:8F:65:AE:C3:1F:1B:03 Certificate issuer: /CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d Certificate serial: 010D0C9F43285849D85F82EA503D7906AB897D80 Authority key identifier: F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/b96fa30c-800a-3f27-bbe0-a0466bba322b.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 398993 IP address blocks: 104.219.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:82:ea:50:3d:79:06:ab:89:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=b7e2eb05-9ea3-4c58-8b84-48eb3c0f7912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f9:77:ba:43:d3:33:7b:eb:bc:de:92:df:4b: f0:17:78:fb:c8:04:37:10:d8:8e:99:75:ed:3f:d0: 9d:fa:3f:67:e5:b4:0b:b4:d9:63:df:82:59:82:09: 76:78:02:af:70:48:da:37:4d:7a:6a:46:07:4a:93: c5:6a:17:31:27:26:1f:d2:5d:11:11:72:0c:68:f5: 9e:4e:9a:32:30:65:be:fd:01:07:d9:4e:53:0c:e8: 27:0e:14:a7:68:d2:b7:2d:59:80:2e:0a:48:87:ee: 61:e8:99:93:3e:4b:20:ab:71:5d:14:ce:37:e1:e9: ab:77:3b:df:2b:68:25:1a:f1:b2:34:f1:07:60:63: 1d:46:66:b9:79:9e:52:97:a5:74:20:bc:74:29:c6: 6f:14:52:d6:ee:6e:30:c1:05:09:70:e0:05:9f:5f: 56:e3:45:ae:b4:bb:67:0d:19:ba:1b:96:0b:3a:c1: d7:fc:0a:50:33:59:42:22:dc:b8:8f:87:be:c7:86: c5:ce:24:f8:a7:0c:e1:3a:5b:81:fa:92:29:2d:23: 3d:ac:ea:86:fb:ad:50:8b:79:48:df:62:43:ee:94: a1:91:a6:0d:26:aa:5a:73:6a:7d:9c:3c:45:f1:8e: 30:34:ff:b9:20:c7:ae:93:d1:a3:6e:c6:6b:af:40: 7a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1D:D4:2C:AB:D0:C5:B6:59:81:1F:B0:2A:8F:65:AE:C3:1F:1B:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/b96fa30c-800a-3f27-bbe0-a0466bba322b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl X509v3 Authority Key Identifier: keyid:F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer sbgp-ipAddrBlock: critical IPv4: 104.219.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:2c:3c:ae:e5:fb:4b:2b:4f:37:d8:b0:f8:c4:50:80:04:07: fd:1b:a4:09:65:1d:17:2e:aa:49:ed:dd:3f:96:a4:0e:c9:37: 0c:2e:c3:aa:6f:d6:0d:ac:fc:0a:91:fb:d7:cb:75:bd:e1:fe: 3e:02:7e:08:19:e3:6b:d5:67:48:0f:2b:32:53:d2:89:1b:5a: fd:38:af:11:1e:74:3d:7c:a9:f7:4f:49:9d:40:d3:0a:ff:1e: e3:22:32:03:9a:f8:d7:e4:19:98:ec:7d:4e:58:eb:ce:9d:16: cf:65:1e:96:bb:b0:77:f9:47:bb:6c:7a:eb:11:73:c5:f5:41: ff:77:d1:05:69:e6:6b:fb:6f:f2:25:43:b2:d4:b9:98:dd:7b: 74:d7:3b:a7:26:91:fe:d5:bd:f1:76:e9:99:9a:e8:be:f5:56: aa:f6:7f:16:87:e3:5a:d7:51:75:10:89:3a:95:5a:e9:d2:27: f6:53:13:52:c7:20:2f:0b:de:92:9a:b1:3f:97:fb:cc:34:06: e9:84:a2:67:4b:e6:86:ed:b0:46:f0:b8:15:5d:a7:b0:33:81: ac:f5:a0:65:6e:9a:e1:7d:c7:3d:5b:6c:2d:d1:4a:02:10:63: 43:9a:dc:45:f9:1b:7e:84:97:29:d1:f0:75:1a:88:ba:3e:b1: e0:c6:66:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX4LqUD15BquJfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjNiM2ZjZDktZjkwZC00ZjIwLTk2ZWMtZDRkMzI4NTE3 YzBkMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YjdlMmViMDUtOWVhMy00YzU4LThiODQtNDhlYjNjMGY3OTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/l3ukPTM3vrvN6S30vwF3j7yAQ3ENiOmXXt P9Cd+j9n5bQLtNlj34JZggl2eAKvcEjaN016akYHSpPFahcxJyYf0l0REXIMaPWe TpoyMGW+/QEH2U5TDOgnDhSnaNK3LVmALgpIh+5h6JmTPksgq3FdFM434emrdzvf K2glGvGyNPEHYGMdRma5eZ5Sl6V0ILx0KcZvFFLW7m4wwQUJcOAFn19W40WutLtn DRm6G5YLOsHX/ApQM1lCIty4j4e+x4bFziT4pwzhOluB+pIpLSM9rOqG+61Qi3lI 32JD7pShkaYNJqpac2p9nDxF8Y4wNP+5IMeuk9GjbsZrr0B64wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgd1Cyr0MW2WYEfsCqPZa7DHxsDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82M2Iz ZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQzMjg1MTdjMGQvYjk2ZmEzMGMtODAwYS0z ZjI3LWJiZTAtYTA0NjZiYmEzMjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjNiM2ZjZDktZjkwZC00ZjIwLTk2 ZWMtZDRkMzI4NTE3YzBkLzYzYjNmY2Q5LWY5MGQtNGYyMC05NmVjLWQ0ZDMyODUx N2MwZC5jcmwwHwYDVR0jBBgwFoAU85szvqOxj6FrnsAlnz3NKvxiOA0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82M2IzZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQz Mjg1MTdjMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaNvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcsPK7l+0srTzfYsPjEUIAEB/0bpAllHRcuqknt3T+WpA7JNwwuw6pv 1g2s/AqR+9fLdb3h/j4CfggZ42vVZ0gPKzJT0okbWv04rxEedD18qfdPSZ1A0wr/ HuMiMgOa+NfkGZjsfU5Y686dFs9lHpa7sHf5R7tseusRc8X1Qf930QVp5mv7b/Il Q7LUuZjde3TXO6cmkf7VvfF26Zma6L71Vqr2fxaH41rXUXUQiTqVWunSJ/ZTE1LH IC8L3pKasT+X+8w0BumEomdL5obtsEbwuBVdp7Azgaz1oGVumuF9xz1bbC3RSgIQ Y0Oa3EX5G36ElynR8HUaiLo+seDGZtk= -----END CERTIFICATE-----Generated at Mon Jun 30 03:56:16 2025 by rpki-client