$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/a868cfd1-aaa4-36cb-a4af-402b7c912911.roa File: a868cfd1-aaa4-36cb-a4af-402b7c912911.roa (raw, json) Hash identifier: 1JsiLvDTWhh/45r+Dif3qGJe+AaD7wNC0WR4ERvuZgk= Subject key identifier: 26:DB:7F:E2:BC:D9:58:D4:4C:61:B6:7A:27:02:FD:63:F4:11:7B:9A Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584A45403C57AF5D048F4731DD00 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/a868cfd1-aaa4-36cb-a4af-402b7c912911.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 46450 IP address blocks: 104.192.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:3c:57:af:5d:04:8f:47:31:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=5ba2b0a1-71c3-45d9-8829-13d7439c9660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:15:ff:11:61:ee:36:b2:b6:d1:05:f3:42:f1: a1:de:07:94:02:e2:d7:7e:1a:8f:a0:5d:aa:46:57: f7:2a:0e:59:0b:74:ab:34:5c:be:c4:bf:5b:d1:9c: 9d:94:1a:0b:5b:2c:b8:db:11:84:ff:da:d4:80:d1: 08:8d:22:f1:60:c9:a8:c5:27:ed:c5:3d:f2:b6:48: 95:57:60:19:b5:d0:8b:82:9c:cf:34:08:3f:96:20: 65:7f:a8:01:ef:54:dd:49:af:af:ef:64:fd:62:00: d3:db:f1:dc:e3:3c:cb:a7:d5:47:0a:1b:ce:2c:85: b8:60:42:a1:5d:3e:69:b8:72:c0:c9:c8:ca:ab:fb: 93:d6:14:2d:41:4b:f1:d7:32:7e:f8:86:b0:d7:98: f3:53:ae:ba:12:96:92:be:82:59:05:f4:d4:2c:2b: 7b:99:34:d4:8c:1d:27:80:f4:75:1d:1e:44:5d:30: 2d:83:65:c6:42:51:5f:d1:36:eb:94:3b:43:4f:2c: f1:56:91:60:bb:e1:76:7d:52:45:8a:7b:d1:e0:45: c2:35:cf:b9:7f:f2:f2:00:bf:32:eb:a5:91:da:1c: aa:9c:82:b1:69:b4:4c:a3:f0:ad:d6:dd:e9:f0:58: e3:f7:06:e9:b7:dc:19:76:76:05:a4:7d:a3:67:65: 0f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:DB:7F:E2:BC:D9:58:D4:4C:61:B6:7A:27:02:FD:63:F4:11:7B:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/a868cfd1-aaa4-36cb-a4af-402b7c912911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 104.192.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:6b:d1:6a:24:32:38:0b:9e:d5:0b:cf:0d:fa:56:fe:ef:d2: ad:a4:58:08:ef:ff:0b:57:4c:3f:a9:8d:9f:2c:92:8c:77:5f: a1:e5:1a:8b:52:6e:9c:96:48:ce:0c:d1:10:28:42:5c:6a:63: 42:c8:9b:b3:08:0b:7f:18:41:ff:7b:77:0c:c1:e3:2b:3b:f4: 2f:77:bc:7a:77:93:79:01:04:7b:16:d9:59:70:76:b1:b6:c0: e6:78:af:64:76:1c:5a:be:7a:6e:c5:d6:f2:03:08:ff:31:03: 52:15:13:b7:63:02:d1:01:e3:2e:79:e2:09:51:30:da:44:0c: 7e:04:9d:43:df:77:16:a6:31:c3:51:27:05:47:37:ab:04:ba: 79:b9:d0:22:05:43:60:48:9f:df:fc:07:90:c4:b2:71:fc:b4: 3e:fb:66:79:b6:75:84:5d:76:0b:50:4c:b8:41:ed:1f:b8:0c: 0b:3c:1d:f7:b5:51:37:3d:f6:4c:5d:93:b1:14:46:a9:e8:a7: 21:12:16:c3:94:22:02:4e:cf:a7:93:88:48:6a:7c:8b:86:3d: fc:02:6c:0b:51:0e:d8:60:7d:9f:b0:0f:27:d7:83:a9:b8:b2: a8:af:96:c3:85:23:fd:4a:fe:8f:1f:e6:4d:e4:c3:b8:7b:f9: 63:98:bd:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQDxXr10Ej0cx3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk NWJhMmIwYTEtNzFjMy00NWQ5LTg4MjktMTNkNzQzOWM5NjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixX/EWHuNrK20QXzQvGh3geUAuLXfhqPoF2q Rlf3Kg5ZC3SrNFy+xL9b0ZydlBoLWyy42xGE/9rUgNEIjSLxYMmoxSftxT3ytkiV V2AZtdCLgpzPNAg/liBlf6gB71TdSa+v72T9YgDT2/Hc4zzLp9VHChvOLIW4YEKh XT5puHLAycjKq/uT1hQtQUvx1zJ++Iaw15jzU666EpaSvoJZBfTULCt7mTTUjB0n gPR1HR5EXTAtg2XGQlFf0TbrlDtDTyzxVpFgu+F2fVJFinvR4EXCNc+5f/LyAL8y 66WR2hyqnIKxabRMo/Ct1t3p8Fjj9wbpt9wZdnYFpH2jZ2UPawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbbf+K82VjUTGG2eicC/WP0EXuaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvYTg2OGNmZDEtYWFhNC0z NmNiLWE0YWYtNDAyYjdjOTEyOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaMDYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRr0WokMjgLntULzw36Vv7v0q2kWAjv/wtXTD+pjZ8skox3X6HlGotS bpyWSM4M0RAoQlxqY0LIm7MIC38YQf97dwzB4ys79C93vHp3k3kBBHsW2VlwdrG2 wOZ4r2R2HFq+em7F1vIDCP8xA1IVE7djAtEB4y554glRMNpEDH4EnUPfdxamMcNR JwVHN6sEunm50CIFQ2BIn9/8B5DEsnH8tD77Znm2dYRddgtQTLhB7R+4DAs8Hfe1 UTc99kxdk7EURqnopyESFsOUIgJOz6eTiEhqfIuGPfwCbAtRDthgfZ+wDyfXg6m4 sqivlsOFI/1K/o8f5k3kw7h7+WOYvT4= -----END CERTIFICATE-----Generated at Sun Jun 29 23:05:11 2025 by rpki-client