$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/1e85c596-69bf-373d-9906-1d381b3d01ef.roa File: 1e85c596-69bf-373d-9906-1d381b3d01ef.roa (raw, json) Hash identifier: ydDITjG7X7MsRkD+O+EdW8CH0eBMWAVdI9+QaixjM9g= Subject key identifier: 74:5F:7C:5E:BB:D7:45:B0:77:F3:99:7D:69:AE:A1:E5:FF:74:FF:71 Certificate issuer: /CN=0d76e4c1-4951-48f9-a654-18ee7c98157a Certificate serial: 010D0C9F4328584AB386235ECA12F1EC2334E7C0 Authority key identifier: BC:A6:71:B7:AE:35:D0:B0:02:05:BF:4F:20:43:46:F6:C8:54:C8:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/1e85c596-69bf-373d-9906-1d381b3d01ef.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 8987 IP address blocks: 104.254.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/0d76e4c1-4951-48f9-a654-18ee7c98157a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/0d76e4c1-4951-48f9-a654-18ee7c98157a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:23:5e:ca:12:f1:ec:23:34:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d76e4c1-4951-48f9-a654-18ee7c98157a Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=339e7305-5136-4467-a654-83957f35765d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a4:32:fb:1e:ca:99:6a:b0:e1:86:e4:4d:4f: 8c:34:dd:ca:e6:0d:a5:55:be:e4:bd:0a:40:ee:06: 6b:87:f9:37:69:74:9f:57:76:b8:58:e3:68:27:39: 28:8e:d4:e5:fc:95:e6:e1:c4:02:88:49:0f:9e:d8: 12:14:17:30:26:cc:2f:3e:a5:67:c0:39:b0:c8:a3: dd:b8:8b:f9:f0:04:00:57:b9:ed:47:cd:a4:db:ed: eb:f8:c0:3e:26:67:9b:d4:05:bd:c8:ed:ab:7e:e9: d0:72:49:ea:43:6a:3b:ac:c8:b9:63:3c:03:f4:e1: f8:89:5b:b4:85:c4:58:50:7c:9a:c5:16:20:ff:d5: 4f:33:74:6b:39:98:58:a8:ad:37:5d:30:f8:10:1d: 9a:56:29:1f:23:48:9e:84:a8:17:ae:88:e1:fd:37: 66:96:56:b7:18:fb:19:6d:26:c7:b0:fa:bd:01:34: cb:47:37:3b:b0:e0:52:da:3f:87:84:33:b4:45:88: 0f:c5:67:7e:f1:07:c9:05:7a:31:78:87:4c:39:55: 5c:2c:eb:2b:67:f5:96:aa:ba:6e:a0:77:e5:8a:5f: 60:17:b8:f6:c1:b7:06:19:e3:a7:d7:b0:ba:40:ed: 31:6c:60:c5:2d:b0:6c:e0:9a:5a:1c:09:aa:23:11: eb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:5F:7C:5E:BB:D7:45:B0:77:F3:99:7D:69:AE:A1:E5:FF:74:FF:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/1e85c596-69bf-373d-9906-1d381b3d01ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/0d76e4c1-4951-48f9-a654-18ee7c98157a.crl X509v3 Authority Key Identifier: keyid:BC:A6:71:B7:AE:35:D0:B0:02:05:BF:4F:20:43:46:F6:C8:54:C8:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a.cer sbgp-ipAddrBlock: critical IPv4: 104.254.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:34:88:5c:c3:f8:2a:f8:4d:f0:f2:89:12:cd:be:e6:da:b6: 1c:a8:13:8b:8f:0d:00:e3:22:bd:a7:18:36:e7:28:e4:6d:e3: bb:6f:5a:e6:62:fa:ee:b0:89:67:0a:21:c0:7d:2f:80:45:a4: 46:e2:65:83:e1:f2:18:75:75:0f:1a:10:7c:f4:57:35:ea:51: 16:11:8f:60:38:54:8d:4d:12:34:34:91:61:7e:8b:d5:16:90: 88:33:ff:fd:bc:f6:14:96:80:b6:8d:3b:fe:ae:36:59:45:49: d1:88:bf:66:f0:0e:05:6e:da:58:0d:1a:51:cf:73:93:c3:3c: d3:f8:4f:5a:bb:aa:28:ac:2d:a9:14:5b:12:9e:24:03:07:95: e1:75:e8:52:9a:74:ff:3b:3e:a0:2c:55:37:68:02:f3:64:76: 30:eb:90:c2:e8:9a:03:46:84:39:73:2f:84:0c:fe:60:0e:2f: 3d:56:c6:d2:82:ae:25:93:cf:f7:e7:d4:ad:a7:de:e4:eb:4f: 72:15:0b:22:00:e9:00:00:7e:ee:ea:48:b1:40:70:d3:a3:cb: 3e:6e:09:61:bd:a4:11:a7:f4:73:72:33:c6:de:7f:51:96:28: d2:c4:5d:eb:13:1e:86:82:49:b4:a5:47:6d:49:74:a2:c5:07: 8b:d2:00:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhiNeyhLx7CM058AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3NmU0YzEtNDk1MS00OGY5LWE2NTQtMThlZTdjOTgx NTdhMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk MzM5ZTczMDUtNTEzNi00NDY3LWE2NTQtODM5NTdmMzU3NjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaQy+x7KmWqw4YbkTU+MNN3K5g2lVb7kvQpA 7gZrh/k3aXSfV3a4WONoJzkojtTl/JXm4cQCiEkPntgSFBcwJswvPqVnwDmwyKPd uIv58AQAV7ntR82k2+3r+MA+Jmeb1AW9yO2rfunQcknqQ2o7rMi5YzwD9OH4iVu0 hcRYUHyaxRYg/9VPM3RrOZhYqK03XTD4EB2aVikfI0iehKgXrojh/Tdmlla3GPsZ bSbHsPq9ATTLRzc7sOBS2j+HhDO0RYgPxWd+8QfJBXoxeIdMOVVcLOsrZ/WWqrpu oHflil9gF7j2wbcGGeOn17C6QO0xbGDFLbBs4JpaHAmqIxHrpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRffF6710Wwd/OZfWmuoeX/dP9xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wZDc2 ZTRjMS00OTUxLTQ4ZjktYTY1NC0xOGVlN2M5ODE1N2EvMWU4NWM1OTYtNjliZi0z NzNkLTk5MDYtMWQzODFiM2QwMWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGQ3NmU0YzEtNDk1MS00OGY5LWE2 NTQtMThlZTdjOTgxNTdhLzBkNzZlNGMxLTQ5NTEtNDhmOS1hNjU0LTE4ZWU3Yzk4 MTU3YS5jcmwwHwYDVR0jBBgwFoAUvKZxt6410LACBb9PIENG9shUyDowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wZDc2ZTRjMS00OTUxLTQ4ZjktYTY1NC0xOGVl N2M5ODE1N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP6NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKo0iFzD+Cr4TfDyiRLNvubathyoE4uPDQDjIr2nGDbnKORt47tvWuZi +u6wiWcKIcB9L4BFpEbiZYPh8hh1dQ8aEHz0VzXqURYRj2A4VI1NEjQ0kWF+i9UW kIgz//289hSWgLaNO/6uNllFSdGIv2bwDgVu2lgNGlHPc5PDPNP4T1q7qiisLakU WxKeJAMHleF16FKadP87PqAsVTdoAvNkdjDrkMLomgNGhDlzL4QM/mAOLz1WxtKC riWTz/fn1K2n3uTrT3IVCyIA6QAAfu7qSLFAcNOjyz5uCWG9pBGn9HNyM8bef1GW KNLEXesTHoaCSbSlR21JdKLFB4vSALY= -----END CERTIFICATE-----Generated at Wed Aug 6 14:20:20 2025 by rpki-client