$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa File: 871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa (raw, json) Hash identifier: WOba/r6hPKeS99eiA6MwYMi9c+KkrdaKXCSM76u7ER4= Subject key identifier: 86:08:D7:4C:F0:FE:71:AB:23:44:DF:1C:67:11:78:72:A3:16:12:69 Certificate issuer: /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Certificate serial: 010D0C9F43285849E22527C4956F789972839DC0 Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 41378 IP address blocks: 104.249.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:27:c4:95:6f:78:99:72:83:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=128acda9-d808-4968-9192-daf15c83197e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f7:bb:43:6c:8e:3e:77:72:82:ca:10:35:80: ba:ed:22:dd:ba:e1:8f:30:12:8e:ec:e0:9a:b0:78: 7d:33:cc:c0:fc:1c:ce:1c:8e:d0:5a:f5:b3:60:e7: 3c:73:30:d4:f3:6b:8b:b4:df:35:30:e2:6b:0f:91: 67:0e:0e:c0:00:f2:bd:30:e2:36:68:d1:5e:e2:bf: 22:b2:f2:21:55:c2:0f:ce:9b:15:48:04:cd:98:3d: b6:1c:00:ed:0d:b1:4b:c8:41:b2:3c:ca:ea:84:1f: 23:f3:d1:3e:aa:d6:90:43:48:c2:36:7a:fb:e7:f2: 46:05:0b:1e:9d:67:e0:ae:ad:df:5e:93:b2:49:dc: 97:b0:0b:55:5a:ef:07:9d:d4:05:e9:19:06:31:b8: 41:02:41:7e:5d:49:d0:b6:dc:97:82:ca:c2:01:56: cc:77:73:f4:e4:4d:c7:88:c3:7c:b5:30:35:f1:c1: 82:24:02:12:be:cd:52:05:a3:5b:bf:a1:41:16:f8: ae:53:a1:66:b1:c2:e0:47:94:58:0b:8f:cd:80:27: f0:81:e3:39:88:ea:a5:bd:d0:26:87:c9:73:5c:27: a6:bf:f7:82:00:35:14:fa:1e:cd:72:82:34:db:fb: 04:5d:1c:af:0e:b2:84:30:1c:10:e6:d1:31:38:30: 17:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:08:D7:4C:F0:FE:71:AB:23:44:DF:1C:67:11:78:72:A3:16:12:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl X509v3 Authority Key Identifier: keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer sbgp-ipAddrBlock: critical IPv4: 104.249.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:ed:ef:45:4f:08:90:0c:4b:db:73:b5:01:72:d4:fa:58:b0: ad:48:8f:1f:32:4c:3e:75:e9:8e:7c:3d:7c:0c:6b:71:d7:eb: 2a:7b:93:c7:10:46:f7:54:8a:21:6e:ea:04:cc:e3:a4:fd:58: 16:85:5e:87:48:55:48:2b:d5:e1:ed:33:21:3e:1d:e8:59:57: c7:3f:4d:09:39:76:2f:95:c2:2c:83:5b:9e:4d:c0:2a:c1:bf: 05:77:2d:9c:fe:55:b4:18:1c:1f:b6:11:ef:11:4b:6a:77:ff: 18:da:dd:d2:fa:c0:c4:80:14:c8:df:96:87:63:64:da:6e:11: 99:60:39:73:5c:ed:d9:5d:c7:65:b4:c6:81:61:a6:58:0c:3d: 24:91:b8:dd:d7:ce:ce:07:47:66:46:19:07:bd:26:9c:77:07: 87:4d:6f:9d:eb:33:4c:59:44:a6:97:70:ed:1b:fc:90:50:ff: a9:6f:f4:f3:c5:fc:d7:c1:cb:7a:09:39:1e:a4:1e:45:cd:51: d2:e9:22:90:40:77:68:82:1c:31:44:56:89:bd:7a:4a:76:74: 01:1a:31:c0:ed:f6:ac:f6:4d:da:7b:b3:fc:04:4f:0b:72:89: 9d:e0:6c:83:33:14:bc:20:5e:d9:eb:27:e9:1c:0c:af:cb:40: 81:18:0f:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJSfElW94mXKDncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3ZmY1Y2MtZThhZS00MGY4LWJjYjktMzkwODEwZWI4 MjFlMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk MTI4YWNkYTktZDgwOC00OTY4LTkxOTItZGFmMTVjODMxOTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPe7Q2yOPndygsoQNYC67SLduuGPMBKO7OCa sHh9M8zA/BzOHI7QWvWzYOc8czDU82uLtN81MOJrD5FnDg7AAPK9MOI2aNFe4r8i svIhVcIPzpsVSATNmD22HADtDbFLyEGyPMrqhB8j89E+qtaQQ0jCNnr75/JGBQse nWfgrq3fXpOySdyXsAtVWu8HndQF6RkGMbhBAkF+XUnQttyXgsrCAVbMd3P05E3H iMN8tTA18cGCJAISvs1SBaNbv6FBFviuU6FmscLgR5RYC4/NgCfwgeM5iOqlvdAm h8lzXCemv/eCADUU+h7NcoI02/sEXRyvDrKEMBwQ5tExODAX+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYI10zw/nGrI0TfHGcReHKjFhJpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdm ZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4MTBlYjgyMWUvODcxNjY0ZGEtNGM0Yy0z ZDlkLTljZWUtYWJkZTNmNWE5ZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWE3ZmY1Y2MtZThhZS00MGY4LWJj YjktMzkwODEwZWI4MjFlLzFhN2ZmNWNjLWU4YWUtNDBmOC1iY2I5LTM5MDgxMGVi ODIxZS5jcmwwHwYDVR0jBBgwFoAUjcqIVSKcOh2gFz9eNrHSpw0vYCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdmZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4 MTBlYjgyMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTt70VPCJAMS9tztQFy1PpYsK1Ijx8yTD516Y58PXwMa3HX6yp7k8cQ RvdUiiFu6gTM46T9WBaFXodIVUgr1eHtMyE+HehZV8c/TQk5di+VwiyDW55NwCrB vwV3LZz+VbQYHB+2Ee8RS2p3/xja3dL6wMSAFMjflodjZNpuEZlgOXNc7dldx2W0 xoFhplgMPSSRuN3Xzs4HR2ZGGQe9Jpx3B4dNb53rM0xZRKaXcO0b/JBQ/6lv9PPF /NfBy3oJOR6kHkXNUdLpIpBAd2iCHDFEVom9ekp2dAEaMcDt9qz2Tdp7s/wETwty iZ3gbIMzFLwgXtnrJ+kcDK/LQIEYDwU= -----END CERTIFICATE-----Generated at Mon Jun 16 03:25:50 2025 by rpki-client