$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/bf34a922-0471-34af-bb29-1cebd856cee0.roa File: bf34a922-0471-34af-bb29-1cebd856cee0.roa (raw, json) Hash identifier: p65pW0D6GQlV6zh3+SFmTLtHu94tQ9Nu4YoG3VmFy7Q= Subject key identifier: D0:70:0A:E1:63:3E:49:35:36:A8:09:7C:0D:BD:5E:F2:5E:CB:D6:BF Certificate issuer: /CN=509fd691-d18e-4244-b269-cdbfdf5bdf42 Certificate serial: 010D0C9F43285849FCAA7D059BA07E8733C2EC40 Authority key identifier: 2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/bf34a922-0471-34af-bb29-1cebd856cee0.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 62533 IP address blocks: 104.219.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:7d:05:9b:a0:7e:87:33:c2:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509fd691-d18e-4244-b269-cdbfdf5bdf42 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=9660bf80-abd1-4398-8d17-c62d9e8c45d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a9:ae:ca:4b:cf:5e:01:c8:5a:b1:e7:a7:93: dc:3a:f4:06:67:8b:af:07:0b:0e:56:be:d8:e1:d9: 6a:5a:88:b4:6d:76:f3:4d:15:04:19:8c:e8:25:9b: 08:cb:55:62:7e:d9:c3:77:69:d1:88:de:f1:c6:18: b5:73:0b:bf:09:a5:b2:72:aa:41:dd:93:c0:ab:1b: 72:5f:d0:64:35:fc:8b:8c:d5:c8:dc:61:9e:6a:eb: 47:7a:79:a6:37:30:b6:5c:73:3e:d4:2e:02:1a:5c: e0:17:8b:fe:7b:19:51:57:be:b6:b4:fa:aa:9a:95: 8b:63:0c:21:67:e2:03:81:f6:6c:7e:f8:d6:27:aa: 3d:a4:94:42:26:bf:46:81:4b:70:cf:36:57:75:9a: 1a:b2:ed:67:63:8f:59:c2:2c:1a:7e:5b:59:65:d0: 6d:4a:a2:12:79:dd:af:e7:bb:5b:fe:05:85:98:7e: c2:aa:09:fb:69:a6:24:b2:b2:dd:5f:11:94:c1:a1: 5f:94:4a:7c:8c:97:a3:f0:11:78:f5:cb:c3:55:bf: d5:49:9b:aa:51:fa:6d:c2:47:5c:fd:5e:bd:61:d4: 26:be:0e:d5:1e:4e:dc:7a:17:05:a0:7a:f7:a4:e8: 2a:ff:0e:dd:3e:bf:fc:fd:13:77:b4:40:05:4b:53: 2c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:70:0A:E1:63:3E:49:35:36:A8:09:7C:0D:BD:5E:F2:5E:CB:D6:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/bf34a922-0471-34af-bb29-1cebd856cee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl X509v3 Authority Key Identifier: keyid:2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer sbgp-ipAddrBlock: critical IPv4: 104.219.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:29:bb:a8:7f:9a:f9:9f:f4:29:d7:fe:61:42:b3:16:c6:d9: 18:32:2a:4d:6d:28:cc:9b:e6:36:2a:64:c6:8c:e0:2e:02:1f: 69:8b:e9:f2:17:9f:1f:70:83:2d:3b:81:57:f9:7b:fc:b0:52: 4a:f4:c8:8c:ed:bc:8b:80:05:54:79:cd:58:b5:d3:3a:43:cf: 1b:39:3b:c0:76:da:d5:f2:b5:1d:ca:c5:8f:7d:7a:f3:b7:4c: bc:25:0b:43:c7:4d:e7:c8:1f:d2:a3:5f:0c:10:7c:e1:fd:93: b1:e6:d7:aa:ae:db:de:b1:ae:e2:17:f2:35:d4:11:cf:6d:0e: de:87:e2:42:62:89:75:51:f8:6b:fa:e0:67:ea:7a:95:2a:41: a6:8d:3d:6a:be:d5:38:f1:9f:7d:97:0e:9f:a0:e6:4d:e7:2b: 24:3c:dd:4e:47:35:7f:a7:95:b7:16:0f:d6:1b:1e:30:53:92: 4b:fe:bc:9f:1a:c7:d9:74:c4:39:0e:f2:3b:6e:3c:d2:f4:06: 71:9b:99:c2:7d:d5:e9:7a:d7:36:3f:2e:89:d2:23:8a:ec:b1: 5d:12:17:0e:df:09:c0:9a:61:10:b1:85:ee:ab:72:86:07:ce: 17:5f:d5:86:30:6c:1b:f7:87:81:bf:f3:34:c3:2a:de:09:0b: 42:f5:04:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qn0Fm6B+hzPC7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5ZmQ2OTEtZDE4ZS00MjQ0LWIyNjktY2RiZmRmNWJk ZjQyMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk OTY2MGJmODAtYWJkMS00Mzk4LThkMTctYzYyZDllOGM0NWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhamuykvPXgHIWrHnp5PcOvQGZ4uvBwsOVr7Y 4dlqWoi0bXbzTRUEGYzoJZsIy1ViftnDd2nRiN7xxhi1cwu/CaWycqpB3ZPAqxty X9BkNfyLjNXI3GGeautHenmmNzC2XHM+1C4CGlzgF4v+exlRV762tPqqmpWLYwwh Z+IDgfZsfvjWJ6o9pJRCJr9GgUtwzzZXdZoasu1nY49ZwiwafltZZdBtSqISed2v 57tb/gWFmH7Cqgn7aaYksrLdXxGUwaFflEp8jJej8BF49cvDVb/VSZuqUfptwkdc /V69YdQmvg7VHk7cehcFoHr3pOgq/w7dPr/8/RN3tEAFS1MshQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBwCuFjPkk1NqgJfA29XvJey9a/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MDlm ZDY5MS1kMThlLTQyNDQtYjI2OS1jZGJmZGY1YmRmNDIvYmYzNGE5MjItMDQ3MS0z NGFmLWJiMjktMWNlYmQ4NTZjZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTA5ZmQ2OTEtZDE4ZS00MjQ0LWIy NjktY2RiZmRmNWJkZjQyLzUwOWZkNjkxLWQxOGUtNDI0NC1iMjY5LWNkYmZkZjVi ZGY0Mi5jcmwwHwYDVR0jBBgwFoAUKgvAII8ic+yaPpVzcRJ1fNUDG8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81MDlmZDY5MS1kMThlLTQyNDQtYjI2OS1jZGJm ZGY1YmRmNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNtEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMEpu6h/mvmf9CnX/mFCsxbG2RgyKk1tKMyb5jYqZMaM4C4CH2mL6fIX nx9wgy07gVf5e/ywUkr0yIztvIuABVR5zVi10zpDzxs5O8B22tXytR3KxY99evO3 TLwlC0PHTefIH9KjXwwQfOH9k7Hm16qu296xruIX8jXUEc9tDt6H4kJiiXVR+Gv6 4GfqepUqQaaNPWq+1Tjxn32XDp+g5k3nKyQ83U5HNX+nlbcWD9YbHjBTkkv+vJ8a x9l0xDkO8jtuPNL0BnGbmcJ91el61zY/LonSI4rssV0SFw7fCcCaYRCxhe6rcoYH zhdf1YYwbBv3h4G/8zTDKt4JC0L1BBE= -----END CERTIFICATE-----Generated at Wed Jun 18 17:07:52 2025 by rpki-client