$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/a896a9f3-afd2-38fb-9e10-2e738ea71c53.roa File: a896a9f3-afd2-38fb-9e10-2e738ea71c53.roa (raw, json) Hash identifier: lX5V2n65MHEhecXzUsQwrB+aPrf0La6gvbr/s9QKKF4= Subject key identifier: 70:30:87:A9:9B:E2:D3:DF:B8:6F:E0:F3:6A:0B:B8:2C:9B:FF:98:11 Certificate issuer: /CN=0215b589-0229-401c-98ef-53194fd5e2a5 Certificate serial: 010D0C9F4328584AADF1251DD0A0F64BBCCD32B0 Authority key identifier: 7B:C8:33:EC:28:50:49:DE:DF:E1:DE:79:F6:39:28:E0:24:48:B8:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/a896a9f3-afd2-38fb-9e10-2e738ea71c53.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 46455 IP address blocks: 104.255.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/0215b589-0229-401c-98ef-53194fd5e2a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/0215b589-0229-401c-98ef-53194fd5e2a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:25:1d:d0:a0:f6:4b:bc:cd:32:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0215b589-0229-401c-98ef-53194fd5e2a5 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=591e68f8-211c-4ac6-ac65-6a9a7e40a4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8f:49:74:41:7f:a4:4b:ea:22:a5:22:b2:8a: 8b:15:7e:e9:21:6a:64:54:ad:b1:b4:f9:c5:d4:c1: 64:25:1b:ea:2b:d3:03:71:e0:75:e2:96:56:8e:6a: 8e:fe:7d:0d:f5:2f:ce:45:af:7f:3e:4f:5e:23:70: 92:be:72:4e:48:b9:d9:55:d0:0d:40:5e:0a:c3:a2: d8:67:87:1d:53:99:3b:86:1b:08:ed:b7:93:07:20: dc:c4:8a:95:2c:5c:b8:14:04:e9:e7:3e:72:f5:74: ef:c5:b0:61:78:6e:a2:b8:10:2e:53:3b:3e:28:46: b2:2e:d6:6a:ca:31:18:6a:d0:a9:64:9b:23:1a:08: 36:48:29:3b:52:67:ef:11:82:e2:ab:b6:49:6b:a3: aa:05:93:10:e1:2d:f1:4b:1e:05:67:8c:45:4a:ef: e8:20:93:0b:62:31:d6:c6:a8:9c:c9:c2:c7:59:a1: 1e:18:65:e4:a0:c9:e9:31:30:c0:0b:0c:52:2e:5a: a6:ad:f1:2f:fb:f6:88:34:ec:27:80:55:7f:1a:e0: c9:f8:b4:8b:3d:44:66:29:c6:f9:b8:28:8c:73:9f: 4b:62:49:c0:8b:22:7d:32:ea:3d:31:2a:18:ac:45: e7:95:c9:11:13:83:97:6c:bf:cb:93:9d:49:30:54: 66:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:30:87:A9:9B:E2:D3:DF:B8:6F:E0:F3:6A:0B:B8:2C:9B:FF:98:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/a896a9f3-afd2-38fb-9e10-2e738ea71c53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/0215b589-0229-401c-98ef-53194fd5e2a5.crl X509v3 Authority Key Identifier: keyid:7B:C8:33:EC:28:50:49:DE:DF:E1:DE:79:F6:39:28:E0:24:48:B8:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5.cer sbgp-ipAddrBlock: critical IPv4: 104.255.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c7:59:4c:af:6d:f9:7f:42:95:18:23:8b:c5:6d:f7:d9:0c: 7f:e3:e1:64:79:1d:7a:94:52:4e:36:52:0c:9d:19:5e:8d:e5: 73:c2:21:32:33:db:30:b4:f6:ad:8b:90:b6:7f:c0:2a:65:02: 3c:6e:11:eb:6e:db:b0:36:45:43:9c:c6:3d:32:23:84:11:1a: 25:f4:2c:ec:da:ba:ed:35:de:e9:f4:c2:e7:f2:78:49:d6:00: f9:8d:9b:f4:1b:7b:40:99:8f:11:07:1f:84:74:d9:63:0d:4e: 49:89:9c:b1:40:65:ce:f5:cf:9b:4c:f9:85:4a:56:40:ac:02: 27:8b:08:27:8d:79:69:5e:2c:cd:56:cc:c4:40:b3:43:e6:f8: 93:6b:f3:a7:2f:16:82:91:95:8e:be:37:69:74:a9:fd:1f:f6: e2:96:3c:10:00:e5:ed:b7:af:56:6b:9f:7a:d5:9b:d1:af:6c: ee:8a:50:8b:36:d5:ed:39:7b:51:95:63:e1:b3:46:14:ca:29: 3a:a9:e3:12:f2:1f:87:d8:6c:49:16:ce:04:38:b3:48:a8:4e: 39:f4:10:b1:6f:92:a0:ff:ce:7d:a4:41:9f:99:60:a7:0b:18: 7c:9c:70:59:62:96:8c:be:e1:0b:19:5b:26:56:b5:37:91:05: 0a:ec:a2:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8SUd0KD2S7zNMrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDIxNWI1ODktMDIyOS00MDFjLTk4ZWYtNTMxOTRmZDVl MmE1MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk NTkxZTY4ZjgtMjExYy00YWM2LWFjNjUtNmE5YTdlNDBhNGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo9JdEF/pEvqIqUisoqLFX7pIWpkVK2xtPnF 1MFkJRvqK9MDceB14pZWjmqO/n0N9S/ORa9/Pk9eI3CSvnJOSLnZVdANQF4Kw6LY Z4cdU5k7hhsI7beTByDcxIqVLFy4FATp5z5y9XTvxbBheG6iuBAuUzs+KEayLtZq yjEYatCpZJsjGgg2SCk7UmfvEYLiq7ZJa6OqBZMQ4S3xSx4FZ4xFSu/oIJMLYjHW xqicycLHWaEeGGXkoMnpMTDACwxSLlqmrfEv+/aINOwngFV/GuDJ+LSLPURmKcb5 uCiMc59LYknAiyJ9Muo9MSoYrEXnlckRE4OXbL/Lk51JMFRmCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAwh6mb4tPfuG/g82oLuCyb/5gRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wMjE1 YjU4OS0wMjI5LTQwMWMtOThlZi01MzE5NGZkNWUyYTUvYTg5NmE5ZjMtYWZkMi0z OGZiLTllMTAtMmU3MzhlYTcxYzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDIxNWI1ODktMDIyOS00MDFjLTk4 ZWYtNTMxOTRmZDVlMmE1LzAyMTViNTg5LTAyMjktNDAxYy05OGVmLTUzMTk0ZmQ1 ZTJhNS5jcmwwHwYDVR0jBBgwFoAUe8gz7ChQSd7f4d559jko4CRIuAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wMjE1YjU4OS0wMjI5LTQwMWMtOThlZi01MzE5 NGZkNWUyYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP9IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/HWUyvbfl/QpUYI4vFbffZDH/j4WR5HXqUUk42UgydGV6N5XPCITIz 2zC09q2LkLZ/wCplAjxuEetu27A2RUOcxj0yI4QRGiX0LOzauu013un0wufyeEnW APmNm/Qbe0CZjxEHH4R02WMNTkmJnLFAZc71z5tM+YVKVkCsAieLCCeNeWleLM1W zMRAs0Pm+JNr86cvFoKRlY6+N2l0qf0f9uKWPBAA5e23r1Zrn3rVm9GvbO6KUIs2 1e05e1GVY+GzRhTKKTqp4xLyH4fYbEkWzgQ4s0ioTjn0ELFvkqD/zn2kQZ+ZYKcL GHyccFliloy+4QsZWyZWtTeRBQrsogo= -----END CERTIFICATE-----Generated at Wed Aug 6 08:00:26 2025 by rpki-client