$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/7454f8ef-50a0-3be6-ad8a-80f181155e30.roa File: 7454f8ef-50a0-3be6-ad8a-80f181155e30.roa (raw, json) Hash identifier: R7lVbBayH8jyMwHdiAgB6iUwtf/NK53VvC6JCMp7zLc= Subject key identifier: 66:19:1B:22:1D:2B:FA:CE:B5:E4:C1:1A:C7:5A:44:5F:AF:5B:07:7D Certificate issuer: /CN=509fd691-d18e-4244-b269-cdbfdf5bdf42 Certificate serial: 010D0C9F43285849FCAA7D16FCAB66D0A465D680 Authority key identifier: 2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/7454f8ef-50a0-3be6-ad8a-80f181155e30.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 62533 IP address blocks: 104.219.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:7d:16:fc:ab:66:d0:a4:65:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509fd691-d18e-4244-b269-cdbfdf5bdf42 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=0b570996-cff4-4520-aeb6-72d7e44461b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:36:44:b8:19:2b:cf:f5:b4:90:6a:80:e3:f9: 0c:f8:70:13:53:d6:ef:c6:dd:09:63:94:13:57:fe: b6:1e:8f:cb:49:47:54:5b:27:da:98:b8:ac:3d:2c: a0:a3:81:1e:db:17:2c:05:70:7b:35:69:76:6a:be: 9d:89:bc:85:c0:46:27:82:e1:89:68:3a:37:c3:c2: 93:dd:06:3e:a1:f9:ae:4b:90:e0:de:89:95:ab:c1: ca:bc:a5:97:af:ac:af:42:b9:2c:75:9b:21:58:d7: 5f:7c:c0:ec:4a:1a:c1:6e:e6:93:28:99:03:7a:2a: b5:19:be:e9:08:a7:41:b2:fe:a4:f6:89:f6:2b:e9: 63:69:6f:2a:64:36:9c:2b:4c:db:19:e0:1b:fe:ea: e3:83:fa:b2:c6:10:34:64:ca:1e:53:ec:21:fa:68: 21:48:80:c8:28:6f:3b:5b:d2:5d:f4:19:0e:1f:0b: 20:1d:f7:eb:37:73:01:95:32:c6:25:55:0f:7f:7f: c4:0e:34:a8:bd:63:10:eb:29:04:e2:93:e3:f3:48: b6:ef:2f:2f:71:b7:08:99:1c:49:e5:13:1f:f8:9c: 3c:c0:9d:da:2a:04:c4:65:cf:1d:6c:3f:be:4f:62: 47:08:5e:8b:71:03:ec:db:56:b7:fe:63:21:93:ab: e3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:19:1B:22:1D:2B:FA:CE:B5:E4:C1:1A:C7:5A:44:5F:AF:5B:07:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/7454f8ef-50a0-3be6-ad8a-80f181155e30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl X509v3 Authority Key Identifier: keyid:2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer sbgp-ipAddrBlock: critical IPv4: 104.219.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:b5:0c:5c:10:5a:e6:8d:b9:19:b2:08:6a:43:1a:04:98:fe: 32:7e:00:b5:b8:50:ce:c9:7a:31:08:7c:18:ae:3f:be:0b:f0: 01:8f:02:39:8b:e9:b4:e1:32:9f:d8:59:8e:99:63:d3:23:a5: 01:b2:fb:a5:63:93:9a:fc:7d:a0:cb:4f:d7:d8:5a:8d:06:84: a6:0a:ff:3e:ad:e3:69:3c:21:3f:34:c9:36:b0:51:e3:23:c6: e6:9d:56:1b:52:82:a0:80:e5:87:bf:97:f3:00:85:f6:1f:bb: 22:19:72:e0:32:3c:b4:22:f1:de:0d:3c:17:a3:93:5e:cf:76: 6f:9c:6f:45:9d:c6:d3:70:1d:72:12:cd:51:21:65:59:c1:f2: ea:43:b5:b0:d2:12:59:18:cb:5f:cd:58:45:87:b9:b2:7a:f6: 0d:1a:a8:f7:40:68:55:a5:d9:c4:5f:d7:1d:af:e3:4f:50:4d: 0a:5d:f5:65:fe:85:9a:f0:6f:2c:b8:87:d7:33:53:e2:88:61: 99:66:b3:72:79:35:3d:3e:8c:53:10:d8:4d:1c:ea:8b:7c:46: ab:bb:f1:3b:4f:be:0f:8f:80:dd:ec:57:a1:1d:99:95:2f:a3: a6:4e:2c:1b:4a:8d:ad:cf:a8:8e:3c:ad:95:61:ec:d6:c4:2a: fa:1e:bc:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qn0W/Ktm0KRl1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5ZmQ2OTEtZDE4ZS00MjQ0LWIyNjktY2RiZmRmNWJk ZjQyMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk MGI1NzA5OTYtY2ZmNC00NTIwLWFlYjYtNzJkN2U0NDQ2MWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizZEuBkrz/W0kGqA4/kM+HATU9bvxt0JY5QT V/62Ho/LSUdUWyfamLisPSygo4Ee2xcsBXB7NWl2ar6dibyFwEYnguGJaDo3w8KT 3QY+ofmuS5Dg3omVq8HKvKWXr6yvQrksdZshWNdffMDsShrBbuaTKJkDeiq1Gb7p CKdBsv6k9on2K+ljaW8qZDacK0zbGeAb/urjg/qyxhA0ZMoeU+wh+mghSIDIKG87 W9Jd9BkOHwsgHffrN3MBlTLGJVUPf3/EDjSovWMQ6ykE4pPj80i27y8vcbcImRxJ 5RMf+Jw8wJ3aKgTEZc8dbD++T2JHCF6LcQPs21a3/mMhk6vjDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYZGyIdK/rOteTBGsdaRF+vWwd9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MDlm ZDY5MS1kMThlLTQyNDQtYjI2OS1jZGJmZGY1YmRmNDIvNzQ1NGY4ZWYtNTBhMC0z YmU2LWFkOGEtODBmMTgxMTU1ZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTA5ZmQ2OTEtZDE4ZS00MjQ0LWIy NjktY2RiZmRmNWJkZjQyLzUwOWZkNjkxLWQxOGUtNDI0NC1iMjY5LWNkYmZkZjVi ZGY0Mi5jcmwwHwYDVR0jBBgwFoAUKgvAII8ic+yaPpVzcRJ1fNUDG8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81MDlmZDY5MS1kMThlLTQyNDQtYjI2OS1jZGJm ZGY1YmRmNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaNtGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB21DFwQWuaNuRmyCGpDGgSY/jJ+ALW4UM7JejEIfBiuP74L8AGPAjmL 6bThMp/YWY6ZY9MjpQGy+6Vjk5r8faDLT9fYWo0GhKYK/z6t42k8IT80yTawUeMj xuadVhtSgqCA5Ye/l/MAhfYfuyIZcuAyPLQi8d4NPBejk17Pdm+cb0WdxtNwHXIS zVEhZVnB8upDtbDSElkYy1/NWEWHubJ69g0aqPdAaFWl2cRf1x2v409QTQpd9WX+ hZrwbyy4h9czU+KIYZlms3J5NT0+jFMQ2E0c6ot8Rqu78TtPvg+PgN3sV6EdmZUv o6ZOLBtKja3PqI48rZVh7NbEKvoevHc= -----END CERTIFICATE-----Generated at Tue Jun 17 23:03:14 2025 by rpki-client