$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/c9d7f4b0-07ef-3c63-9739-79d59d8a974e.roa File: c9d7f4b0-07ef-3c63-9739-79d59d8a974e.roa (raw, json) Hash identifier: NSZW4kDP3c14SC3mNhVfqijdUnQv5SAFh7p/tgG6vNM= Subject key identifier: 97:E9:4C:10:59:FC:AB:84:78:22:F8:6F:97:64:18:5B:59:5E:11:3A Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584A45403C66DD0F8CEC30DF49C0 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/c9d7f4b0-07ef-3c63-9739-79d59d8a974e.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 46450 IP address blocks: 104.225.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:3c:66:dd:0f:8c:ec:30:df:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=7b163539-609b-4d5e-8c66-d77fdc7e49cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:af:29:2b:b0:ae:7e:f3:84:18:2e:0a:e6:5f: 8a:eb:79:f6:79:da:1f:4f:dc:26:e2:cf:09:b7:48: 38:35:e9:26:e9:78:57:4f:25:14:f7:99:0c:c8:10: 06:c4:b7:7f:8f:df:6d:ab:ac:d2:9b:ab:7b:43:31: 5b:d2:d7:b6:3b:bb:e0:10:74:3e:c5:cb:93:d5:22: 48:9f:c3:07:65:5a:06:97:2f:5f:18:a7:e5:73:88: 92:fe:51:99:d1:a9:ab:3a:90:c4:ab:3b:ce:f3:84: cc:b3:41:21:80:d1:cc:8f:81:39:46:2d:3c:57:51: 8f:39:12:29:50:40:11:2d:fa:ab:31:19:d6:e5:9e: 67:2f:2e:22:1b:b2:16:11:6a:ee:22:7d:99:5e:a2: 31:53:5c:1f:88:ce:82:da:1b:d8:68:c2:ad:e1:f9: 1a:18:49:aa:72:b4:29:81:74:d1:4a:af:11:d5:f4: 10:c9:98:66:4a:8f:5f:2b:c5:8d:f0:da:37:a8:d8: ea:3f:c7:2e:6f:43:2b:cb:26:88:f1:bc:37:8d:dc: da:6c:ff:f1:9b:f7:03:f1:e8:b2:00:52:eb:b4:1c: 13:4f:a3:89:a1:78:a9:99:8d:b1:44:b6:66:93:b1: 76:da:8f:4a:5b:04:97:80:f4:51:17:51:54:c8:30: f1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E9:4C:10:59:FC:AB:84:78:22:F8:6F:97:64:18:5B:59:5E:11:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/c9d7f4b0-07ef-3c63-9739-79d59d8a974e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 104.225.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ab:96:05:f5:26:66:d2:aa:c5:0e:94:42:f1:35:cc:b3:f0: 25:d1:52:a5:d0:f6:d3:eb:c7:d2:8f:cb:c6:4d:f1:6b:18:01: b2:4b:aa:e7:ec:a3:b6:57:3d:e9:e0:ec:c8:dd:32:0c:be:b4: b6:98:7c:84:c8:60:d8:69:92:fb:52:ed:04:72:06:f8:55:12: 3b:3d:69:40:6d:66:ce:8e:28:cf:6e:52:c5:bb:9e:ec:4c:4c: be:5c:40:75:fa:83:4d:b0:c8:19:c8:cf:2f:d1:61:d0:52:10: dc:64:5c:19:5f:b0:f3:93:c2:ef:ba:32:13:64:16:6a:01:87: 54:15:62:11:9d:a9:98:e2:29:ec:11:16:47:fe:9c:0b:65:d1: d7:45:ce:25:e5:fb:e6:f8:e0:e7:53:ed:9c:f6:08:0c:2e:9a: ce:10:7a:53:ba:e6:5b:20:e6:e1:de:13:8f:df:55:0b:8d:6f: e5:1e:97:36:dc:06:8b:0f:23:f1:53:00:95:62:74:08:7f:79: 5f:08:14:6b:90:86:fb:22:e2:21:b8:f4:a4:55:5d:65:db:77: fd:df:23:5a:f5:46:62:a3:c4:d2:81:e5:f9:75:fc:67:85:c0: 09:b3:9b:69:3c:ac:4b:29:ef:bc:f9:ee:a2:ce:de:dc:32:de: 35:3b:0b:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQDxm3Q+M7DDfScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk N2IxNjM1MzktNjA5Yi00ZDVlLThjNjYtZDc3ZmRjN2U0OWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK8pK7CufvOEGC4K5l+K63n2edofT9wm4s8J t0g4Nekm6XhXTyUU95kMyBAGxLd/j99tq6zSm6t7QzFb0te2O7vgEHQ+xcuT1SJI n8MHZVoGly9fGKflc4iS/lGZ0amrOpDEqzvO84TMs0EhgNHMj4E5Ri08V1GPORIp UEARLfqrMRnW5Z5nLy4iG7IWEWruIn2ZXqIxU1wfiM6C2hvYaMKt4fkaGEmqcrQp gXTRSq8R1fQQyZhmSo9fK8WN8No3qNjqP8cub0MryyaI8bw3jdzabP/xm/cD8eiy AFLrtBwTT6OJoXipmY2xRLZmk7F22o9KWwSXgPRRF1FUyDDxPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfpTBBZ/KuEeCL4b5dkGFtZXhE6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvYzlkN2Y0YjAtMDdlZi0z YzYzLTk3MzktNzlkNTlkOGE5NzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaOHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACirlgX1JmbSqsUOlELxNcyz8CXRUqXQ9tPrx9KPy8ZN8WsYAbJLqufs o7ZXPeng7MjdMgy+tLaYfITIYNhpkvtS7QRyBvhVEjs9aUBtZs6OKM9uUsW7nuxM TL5cQHX6g02wyBnIzy/RYdBSENxkXBlfsPOTwu+6MhNkFmoBh1QVYhGdqZjiKewR Fkf+nAtl0ddFziXl++b44OdT7Zz2CAwums4QelO65lsg5uHeE4/fVQuNb+Uelzbc BosPI/FTAJVidAh/eV8IFGuQhvsi4iG49KRVXWXbd/3fI1r1RmKjxNKB5fl1/GeF wAmzm2k8rEsp77z57qLO3twy3jU7Cyo= -----END CERTIFICATE-----Generated at Sun Jun 29 22:08:45 2025 by rpki-client