$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/bdea95b5-6ac6-3343-8c09-ca296bac4953.roa File: bdea95b5-6ac6-3343-8c09-ca296bac4953.roa (raw, json) Hash identifier: QElIGiOA9+7hpg0LvfS/ZPX/nUIRBYugibIMAposWfc= Subject key identifier: C7:0E:BC:8D:17:AD:C1:B2:BB:89:FD:8F:B7:A3:28:F1:F0:B4:96:EC Certificate issuer: /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Certificate serial: 010D0C9F4328584A0C054DD0B6FEDF4934ED2CC0 Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/bdea95b5-6ac6-3343-8c09-ca296bac4953.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 36601 IP address blocks: 104.243.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:4d:d0:b6:fe:df:49:34:ed:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=efe246fc-d5c7-4200-84bd-5a6efe866473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a0:5c:47:88:5a:d1:33:d8:60:d5:fd:35:7b: d1:ae:63:2b:7b:9e:2a:d2:91:cc:a4:ef:ff:b1:58: a1:28:f2:4b:c5:c9:57:44:19:4d:61:58:d4:3f:62: 62:9f:ed:e5:15:d8:77:0d:af:57:28:bc:6f:6b:1d: 4c:32:4d:c8:d9:5e:fa:d4:b9:56:be:84:97:31:2e: a7:cf:b0:98:27:fe:02:24:a8:4e:bd:cd:a7:f2:a6: 3c:4f:b9:34:21:82:e9:5c:1b:38:c6:fd:ef:5a:88: 28:33:21:d3:1d:7d:e8:8c:12:a5:9e:14:73:a7:07: 83:da:23:9a:75:b6:36:e7:f4:bf:d7:47:5d:94:1d: 11:53:d2:c3:1c:19:d6:fb:c9:d0:38:3c:29:42:0b: 36:c0:2b:e7:ab:c6:96:6c:8d:76:ff:8e:d5:99:01: 8b:60:eb:27:d8:fa:c6:45:a5:43:13:a3:1a:9a:80: a8:cd:e1:1f:81:54:c4:cd:f7:69:15:29:c9:95:59: eb:7c:2b:32:27:a3:82:0d:67:34:3e:06:6c:c9:dc: 71:12:9c:e6:e3:50:a0:d2:18:e4:43:87:3b:b8:0d: 5a:51:1d:d5:80:61:83:f1:a6:f2:26:1b:73:21:0a: c2:c4:ae:e2:64:01:e5:2d:27:cc:cb:9e:6a:61:51: b7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0E:BC:8D:17:AD:C1:B2:BB:89:FD:8F:B7:A3:28:F1:F0:B4:96:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/bdea95b5-6ac6-3343-8c09-ca296bac4953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl X509v3 Authority Key Identifier: keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer sbgp-ipAddrBlock: critical IPv4: 104.243.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:ff:66:62:d5:be:39:9e:f3:07:8f:41:2b:27:c7:a8:f3:da: 76:87:a9:c6:9a:2c:26:17:95:85:33:71:7d:c0:2e:4e:17:54: 95:5d:ba:9b:f0:03:85:61:e6:d3:55:2b:27:6e:f3:07:aa:14: f2:bf:62:4d:8d:10:90:ad:86:bc:d0:10:c9:a0:21:2f:59:56: f8:36:f1:08:4a:52:ff:6d:ba:cb:48:6d:11:dc:46:6d:4b:a6: 9d:1d:47:1d:58:6b:82:a0:a9:45:fc:ee:cd:d3:73:85:11:7f: 1c:e1:95:fe:cb:ed:70:93:0b:b0:ea:02:d6:7d:60:5c:d4:01: 73:90:21:23:f8:59:62:0d:04:40:1a:00:2f:37:f1:4f:04:66: 3b:8d:23:4e:a7:ab:9f:26:d6:53:87:2e:68:10:00:30:83:f3: 38:aa:0e:e2:42:df:a0:c4:de:47:4a:a5:51:c8:05:97:d5:1b: 31:28:a5:94:e3:a6:13:04:f1:af:10:e3:9d:03:87:f1:38:a9: 29:c0:e2:3b:ba:ae:68:23:e3:f9:4b:42:ec:d3:a2:13:58:5f: cd:79:a8:c4:40:87:57:28:6b:d6:4d:b1:39:19:19:84:3b:ca: ad:31:1d:61:23:cf:16:04:af:ca:03:6f:e8:37:ab:ce:1c:53: 84:22:ca:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBU3Qtv7fSTTtLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3 ZTFhMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZWZlMjQ2ZmMtZDVjNy00MjAwLTg0YmQtNWE2ZWZlODY2NDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6BcR4ha0TPYYNX9NXvRrmMre54q0pHMpO// sVihKPJLxclXRBlNYVjUP2Jin+3lFdh3Da9XKLxvax1MMk3I2V761LlWvoSXMS6n z7CYJ/4CJKhOvc2n8qY8T7k0IYLpXBs4xv3vWogoMyHTHX3ojBKlnhRzpweD2iOa dbY25/S/10ddlB0RU9LDHBnW+8nQODwpQgs2wCvnq8aWbI12/47VmQGLYOsn2PrG RaVDE6MamoCozeEfgVTEzfdpFSnJlVnrfCsyJ6OCDWc0PgZsydxxEpzm41Cg0hjk Q4c7uA1aUR3VgGGD8abyJhtzIQrCxK7iZAHlLSfMy55qYVG3pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcOvI0XrcGyu4n9j7ejKPHwtJbsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvYmRlYTk1YjUtNmFjNi0z MzQzLThjMDktY2EyOTZiYWM0OTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi MDYwMDdlMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALj/ZmLVvjme8wePQSsnx6jz2naHqcaaLCYXlYUzcX3ALk4XVJVdupvw A4Vh5tNVKydu8weqFPK/Yk2NEJCthrzQEMmgIS9ZVvg28QhKUv9tustIbRHcRm1L pp0dRx1Ya4KgqUX87s3Tc4URfxzhlf7L7XCTC7DqAtZ9YFzUAXOQISP4WWINBEAa AC838U8EZjuNI06nq58m1lOHLmgQADCD8ziqDuJC36DE3kdKpVHIBZfVGzEopZTj phME8a8Q450Dh/E4qSnA4ju6rmgj4/lLQuzTohNYX815qMRAh1coa9ZNsTkZGYQ7 yq0xHWEjzxYEr8oDb+g3q84cU4QiyqI= -----END CERTIFICATE-----Generated at Sun Jun 29 22:16:03 2025 by rpki-client