$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3132e54d-3fe8-35dd-8703-eae748695c8e.roa File: 3132e54d-3fe8-35dd-8703-eae748695c8e.roa (raw, json) Hash identifier: Gy8O0z/9lOLbXLczmleboqMpniydEsZMh5hY3GHhnIQ= Subject key identifier: 4F:75:83:50:B7:71:BC:F2:43:B2:0F:89:C5:6E:FA:5C:3D:F5:DA:D7 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AC2E11CA0E9612137F4C1F260 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3132e54d-3fe8-35dd-8703-eae748695c8e.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 104.201.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:1c:a0:e9:61:21:37:f4:c1:f2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=1d36a737-4c25-4bab-afd4-efd26e060b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:14:60:13:e7:b8:ee:6c:50:84:70:2a:c8:68: 35:3a:39:63:30:4e:90:0c:57:b3:cf:22:2c:06:61: 92:15:89:d6:9f:66:83:23:9f:d0:00:81:32:fb:70: 2c:c2:50:03:e5:3c:2d:ef:6c:38:53:77:10:0a:82: bc:bf:ab:46:d1:75:8e:d7:04:f3:7a:8f:ae:23:53: 75:4a:7f:f6:ff:ef:9e:4d:08:41:b5:89:12:fd:cd: 5e:ee:01:9f:d2:32:92:75:c0:7e:8c:5d:17:0f:2e: af:83:a4:5c:16:37:2d:c4:14:ea:03:77:36:36:c1: 95:34:ff:0d:17:89:a3:41:5b:7b:88:ba:f1:99:22: 50:95:58:ae:5c:50:ff:62:c2:2b:98:f4:95:ef:96: d8:8a:c5:e9:48:bb:81:18:74:62:c5:0a:92:96:ff: 29:e1:15:f6:a1:30:5e:15:94:a7:25:0d:6a:82:ab: 5f:13:c2:b6:9e:2c:80:f9:1f:a2:15:1e:de:f8:7c: e9:a9:d0:8d:19:88:64:24:54:78:d1:c0:a6:37:f8: 5f:1d:28:3d:68:db:ac:4c:1f:c0:bc:41:d5:d4:11: 7a:c9:ee:88:04:b9:d4:f4:27:16:f9:11:72:50:f3: f7:cd:43:e5:3d:b5:1d:44:72:c3:e8:2c:dc:19:52: 97:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:75:83:50:B7:71:BC:F2:43:B2:0F:89:C5:6E:FA:5C:3D:F5:DA:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3132e54d-3fe8-35dd-8703-eae748695c8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:d2:0a:04:c9:c1:74:0e:33:8a:c3:06:87:99:46:8f:7c:e7: 0e:8b:75:33:7d:5b:2e:3d:94:35:9d:8e:75:85:23:13:57:2d: e1:75:dd:f3:1b:d0:ec:98:ea:a7:07:bb:58:9e:ad:2c:20:7c: 6c:ef:d0:2b:fb:d3:47:42:27:59:3a:24:e2:02:6b:37:be:5e: 71:51:c1:a9:b2:89:ab:ff:1f:ad:22:33:43:60:00:a7:1b:c4: d0:96:27:80:3e:fd:27:1a:40:b6:d4:19:72:2a:6a:89:99:69: 3f:50:42:89:3c:92:5d:61:1c:12:ca:f4:e4:44:93:10:31:76: 57:59:9d:5e:e0:bc:29:00:70:b5:8c:f8:bc:07:78:af:4d:76: 31:89:87:15:88:fe:bf:b5:9c:02:a5:b2:88:09:4b:6a:ee:0a: 50:67:8a:1f:ca:6b:bb:17:48:88:18:e1:09:a0:84:f5:64:cb: b4:57:b4:34:b4:41:31:66:2f:4a:a2:e4:f5:51:cd:82:05:6a: 25:98:ee:5c:fc:70:42:f7:f3:d1:54:22:f8:14:47:2b:31:72: 36:6c:cb:1c:6b:bc:d5:78:b6:0a:a2:ce:ea:a8:78:34:1b:30: cc:17:d8:4f:99:ac:28:e4:01:80:d2:70:16:34:98:31:01:56: 4d:41:d5:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Ryg6WEhN/TB8mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MWQzNmE3MzctNGMyNS00YmFiLWFmZDQtZWZkMjZlMDYwYjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihRgE+e47mxQhHAqyGg1OjljME6QDFezzyIs BmGSFYnWn2aDI5/QAIEy+3AswlAD5Twt72w4U3cQCoK8v6tG0XWO1wTzeo+uI1N1 Sn/2/++eTQhBtYkS/c1e7gGf0jKSdcB+jF0XDy6vg6RcFjctxBTqA3c2NsGVNP8N F4mjQVt7iLrxmSJQlViuXFD/YsIrmPSV75bYisXpSLuBGHRixQqSlv8p4RX2oTBe FZSnJQ1qgqtfE8K2niyA+R+iFR7e+HzpqdCNGYhkJFR40cCmN/hfHSg9aNusTB/A vEHV1BF6ye6IBLnU9CcW+RFyUPP3zUPlPbUdRHLD6CzcGVKXcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE91g1C3cbzyQ7IPicVu+lw99drXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzEzMmU1NGQtM2ZlOC0z NWRkLTg3MDMtZWFlNzQ4Njk1YzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMl7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbSCgTJwXQOM4rDBoeZRo985w6LdTN9Wy49lDWdjnWFIxNXLeF13fMb 0OyY6qcHu1ierSwgfGzv0Cv700dCJ1k6JOICaze+XnFRwamyiav/H60iM0NgAKcb xNCWJ4A+/ScaQLbUGXIqaomZaT9QQok8kl1hHBLK9OREkxAxdldZnV7gvCkAcLWM +LwHeK9NdjGJhxWI/r+1nAKlsogJS2ruClBnih/Ka7sXSIgY4QmghPVky7RXtDS0 QTFmL0qi5PVRzYIFaiWY7lz8cEL389FUIvgURysxcjZsyxxrvNV4tgqizuqoeDQb MMwX2E+ZrCjkAYDScBY0mDEBVk1B1TM= -----END CERTIFICATE-----Generated at Thu Aug 7 04:35:29 2025 by rpki-client