$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/688f045d-3b75-3901-9cb6-bf1137c2b9ab.roa File: 688f045d-3b75-3901-9cb6-bf1137c2b9ab.roa (raw, json) Hash identifier: R2udW46goH9JhRglkt/+N9+zNp+c4+ak8XG2jaEcqgs= Subject key identifier: F0:80:5B:A8:E7:82:0E:CE:FD:DC:C7:22:73:E8:B7:07:70:B0:6E:0E Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F43285849F87A7B4060677E89D3FB0380 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/688f045d-3b75-3901-9cb6-bf1137c2b9ab.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 23473 IP address blocks: 104.145.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:7b:40:60:67:7e:89:d3:fb:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=f72b9ea0-1957-4d27-975c-f25a416860b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:70:a3:f3:2e:1e:d6:c6:74:c0:a1:54:a0:b7: 8a:62:03:30:b0:71:d7:dd:bd:60:72:11:93:53:c3: a5:74:e2:91:c8:f9:e2:33:0b:90:a9:05:14:1b:c7: 73:c5:f1:f1:c5:f8:ad:ab:35:a5:62:74:b7:18:7b: c8:84:70:63:20:46:04:30:39:f7:ad:d4:1e:99:97: 39:40:53:a4:2c:2e:e2:ef:bc:9b:72:af:d7:c9:63: cd:95:fa:69:89:39:65:0a:9f:99:42:2d:57:7d:ba: 53:61:ff:4b:88:ab:81:fb:64:79:31:ca:2a:13:40: 24:f1:fd:be:83:2f:c1:43:8d:8f:23:c0:66:70:bb: 35:1a:5e:72:99:3a:7a:d9:be:f2:62:61:88:26:3f: 6d:74:01:07:34:5c:c1:b7:d4:92:8d:ea:f9:63:fa: 29:67:20:50:92:d6:d4:50:af:22:ee:c8:df:ae:86: 15:43:ed:f9:96:6d:cb:ba:e9:71:9d:a3:17:a0:d8: 80:06:cc:0f:d6:f2:6c:ba:86:fe:22:89:8d:f6:e9: f2:2c:dd:2c:86:53:a2:e7:dd:e5:62:08:f8:ba:77: a7:96:99:8f:b9:12:20:5b:de:63:d9:76:44:12:57: 11:7e:41:19:ae:57:90:ad:01:8d:89:a3:e8:d9:5c: c4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:80:5B:A8:E7:82:0E:CE:FD:DC:C7:22:73:E8:B7:07:70:B0:6E:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/688f045d-3b75-3901-9cb6-bf1137c2b9ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 104.145.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:bb:40:6c:bf:c1:ae:ea:4f:e3:dc:d3:6d:1d:2d:05:76:d4: e2:67:e1:49:49:44:96:c3:b8:5c:45:64:30:01:06:98:b6:59: cf:68:19:cb:8b:5e:7e:35:4b:73:e9:31:ac:f3:0a:5e:0e:bd: da:a2:cd:da:58:6c:56:48:1f:5c:00:b6:6f:ec:94:60:a7:c8: f3:68:4a:1a:c8:21:5b:bf:5a:d6:db:c7:0e:3b:57:0a:b7:47: 6c:28:71:97:de:0b:84:05:d2:da:95:c9:17:99:fd:9f:89:49: 5f:0a:1c:63:ee:70:4c:38:60:de:6d:14:39:ec:8e:72:2f:be: f1:7d:2c:24:98:04:32:d6:ba:90:6f:c0:47:fa:ed:c8:c2:c2: 56:6a:2c:83:50:bb:3e:27:47:22:4e:54:9b:4f:23:9a:13:02: 94:e6:84:c0:d9:61:2a:34:24:e0:45:fa:d8:08:71:1d:57:f8: 78:e6:8a:47:98:32:67:86:49:5e:18:32:dc:18:97:08:0c:ca: 50:c6:f4:00:e7:2a:02:32:36:dc:45:a4:af:90:4a:26:4d:3a: 37:10:82:11:bd:96:8a:00:21:bd:51:73:d0:47:00:22:e0:82: c6:50:e6:d6:f5:d0:a0:2a:9a:af:c6:2f:37:fb:40:49:a7:b8: fb:9e:33:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4entAYGd+idP7A4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk ZjcyYjllYTAtMTk1Ny00ZDI3LTk3NWMtZjI1YTQxNjg2MGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnCj8y4e1sZ0wKFUoLeKYgMwsHHX3b1gchGT U8OldOKRyPniMwuQqQUUG8dzxfHxxfitqzWlYnS3GHvIhHBjIEYEMDn3rdQemZc5 QFOkLC7i77ybcq/XyWPNlfppiTllCp+ZQi1XfbpTYf9LiKuB+2R5McoqE0Ak8f2+ gy/BQ42PI8BmcLs1Gl5ymTp62b7yYmGIJj9tdAEHNFzBt9SSjer5Y/opZyBQktbU UK8i7sjfroYVQ+35lm3LuulxnaMXoNiABswP1vJsuob+IomN9unyLN0shlOi593l Ygj4unenlpmPuRIgW95j2XZEElcRfkEZrleQrQGNiaPo2VzE4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCAW6jngg7O/dzHInPotwdwsG4OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNjg4ZjA0NWQtM2I3NS0z OTAxLTljYjYtYmYxMTM3YzJiOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJFlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABu7QGy/wa7qT+Pc020dLQV21OJn4UlJRJbDuFxFZDABBpi2Wc9oGcuL Xn41S3PpMazzCl4OvdqizdpYbFZIH1wAtm/slGCnyPNoShrIIVu/Wtbbxw47Vwq3 R2wocZfeC4QF0tqVyReZ/Z+JSV8KHGPucEw4YN5tFDnsjnIvvvF9LCSYBDLWupBv wEf67cjCwlZqLINQuz4nRyJOVJtPI5oTApTmhMDZYSo0JOBF+tgIcR1X+HjmikeY MmeGSV4YMtwYlwgMylDG9ADnKgIyNtxFpK+QSiZNOjcQghG9looAIb1Rc9BHACLg gsZQ5tb10KAqmq/GLzf7QEmnuPueMyk= -----END CERTIFICATE-----Generated at Mon Jun 16 13:13:43 2025 by rpki-client