$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/d08aa6cc-8a95-3103-a3f7-7471c8794eab.roa File: d08aa6cc-8a95-3103-a3f7-7471c8794eab.roa (raw, json) Hash identifier: +Dqm/l6JwdlUQq7D7PfKwglQT5B6QiYpysZTR28aWsI= Subject key identifier: 4B:52:B1:25:72:FD:E1:18:7C:11:2E:05:C5:40:76:EC:1B:B3:0C:C2 Certificate issuer: /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Certificate serial: 010D0C9F43285849FE0FEEF1B70C3778E31FB780 Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/d08aa6cc-8a95-3103-a3f7-7471c8794eab.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 210781 IP address blocks: 104.249.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:ee:f1:b7:0c:37:78:e3:1f:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=427f86b3-1611-4bc7-b585-aff2058a2d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:85:6b:6a:40:f4:c4:e8:3d:02:1e:a2:07:62: 0c:e6:12:68:13:25:71:78:0b:87:e7:f6:92:35:ac: 03:a8:c1:6c:28:15:33:48:cb:9c:bb:84:4e:e8:62: 22:6a:7d:d5:c6:27:7c:87:6b:a7:4e:0c:53:a9:22: 5c:8f:ef:11:7b:6d:a4:13:37:95:a7:5e:03:d8:82: 0c:47:fb:6f:24:43:2e:68:1f:27:44:b7:fb:c0:7f: 38:40:31:b8:79:41:b7:4d:04:92:1b:dd:14:d8:3b: 27:9e:cb:15:a0:29:49:b2:aa:f2:d6:1e:7c:fd:2e: b1:8c:36:f9:ac:ce:fe:39:f4:e9:76:b7:4c:ab:6a: 16:ed:53:1e:11:09:75:ef:e1:2c:47:50:ce:e5:8c: ff:d5:af:13:77:14:95:74:07:64:40:f7:a4:b6:ab: 8f:41:9d:85:87:37:11:47:3f:9d:27:f7:bb:0f:ac: a8:21:ae:bf:b0:88:d3:9d:c6:17:54:f0:cf:7d:f7: 5b:e6:c1:6c:23:3a:e7:6c:ba:f7:6c:ad:41:90:08: 7b:b6:dc:f3:09:2e:4e:d6:fc:f5:67:a5:87:db:8f: 41:a9:df:22:35:18:1d:89:d9:eb:67:f9:43:11:f0: 6d:0e:fc:a0:39:79:35:ae:21:fb:5a:7e:bc:96:7a: 4b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:52:B1:25:72:FD:E1:18:7C:11:2E:05:C5:40:76:EC:1B:B3:0C:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/d08aa6cc-8a95-3103-a3f7-7471c8794eab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl X509v3 Authority Key Identifier: keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer sbgp-ipAddrBlock: critical IPv4: 104.249.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:73:bc:70:de:fb:0b:89:a3:7c:e1:69:96:85:47:8c:74:da: 55:7a:40:ed:a5:ba:cf:3f:35:06:60:e3:bb:07:fa:4c:27:63: b4:ab:a4:21:b7:29:0b:e6:16:65:58:59:77:52:4a:39:ab:15: a9:03:57:bb:72:17:a9:b2:76:00:78:cd:a2:e2:f9:87:d3:fd: 2e:36:e1:21:c5:e6:cf:d5:f5:23:7b:03:63:7b:0a:c8:34:bb: 9a:52:0f:44:7c:48:b9:3a:6e:a9:d6:f3:69:ca:ae:fb:13:75: 16:af:2c:be:fc:d5:96:1f:d8:35:fc:da:07:84:58:c1:8b:6b: 95:38:95:dd:02:91:d6:94:84:16:1a:13:03:13:40:68:ad:18: c0:0a:7d:41:b2:1d:43:bc:fc:07:fc:8e:bd:cb:4a:79:55:51: 5a:9a:50:57:0e:f8:c5:61:c8:66:a5:56:b5:1c:9c:09:3a:37: 54:32:10:d7:93:5f:9b:b0:d6:3f:48:0d:55:d5:f7:3d:72:8d: fd:ee:d6:da:a6:c8:43:31:34:bd:48:66:82:94:0a:d8:68:b7: 25:d6:cd:25:9c:64:58:e7:be:8b:48:08:5b:62:50:e6:3b:56: f3:e4:11:c6:f6:cc:7b:0e:77:57:52:81:21:17:5a:e2:99:e3: 78:fb:fa:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D+7xtww3eOMft4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3ZmY1Y2MtZThhZS00MGY4LWJjYjktMzkwODEwZWI4 MjFlMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk NDI3Zjg2YjMtMTYxMS00YmM3LWI1ODUtYWZmMjA1OGEyZDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoVrakD0xOg9Ah6iB2IM5hJoEyVxeAuH5/aS NawDqMFsKBUzSMucu4RO6GIian3Vxid8h2unTgxTqSJcj+8Re22kEzeVp14D2IIM R/tvJEMuaB8nRLf7wH84QDG4eUG3TQSSG90U2DsnnssVoClJsqry1h58/S6xjDb5 rM7+OfTpdrdMq2oW7VMeEQl17+EsR1DO5Yz/1a8TdxSVdAdkQPektquPQZ2FhzcR Rz+dJ/e7D6yoIa6/sIjTncYXVPDPffdb5sFsIzrnbLr3bK1BkAh7ttzzCS5O1vz1 Z6WH249Bqd8iNRgdidnrZ/lDEfBtDvygOXk1riH7Wn68lnpLyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtSsSVy/eEYfBEuBcVAduwbswzCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdm ZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4MTBlYjgyMWUvZDA4YWE2Y2MtOGE5NS0z MTAzLWEzZjctNzQ3MWM4Nzk0ZWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWE3ZmY1Y2MtZThhZS00MGY4LWJj YjktMzkwODEwZWI4MjFlLzFhN2ZmNWNjLWU4YWUtNDBmOC1iY2I5LTM5MDgxMGVi ODIxZS5jcmwwHwYDVR0jBBgwFoAUjcqIVSKcOh2gFz9eNrHSpw0vYCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdmZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4 MTBlYjgyMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFzvHDe+wuJo3zhaZaFR4x02lV6QO2lus8/NQZg47sH+kwnY7SrpCG3 KQvmFmVYWXdSSjmrFakDV7tyF6mydgB4zaLi+YfT/S424SHF5s/V9SN7A2N7Csg0 u5pSD0R8SLk6bqnW82nKrvsTdRavLL781ZYf2DX82geEWMGLa5U4ld0CkdaUhBYa EwMTQGitGMAKfUGyHUO8/Af8jr3LSnlVUVqaUFcO+MVhyGalVrUcnAk6N1QyENeT X5uw1j9IDVXV9z1yjf3u1tqmyEMxNL1IZoKUCthotyXWzSWcZFjnvotICFtiUOY7 VvPkEcb2zHsOd1dSgSEXWuKZ43j7+ts= -----END CERTIFICATE-----Generated at Sun Jun 15 21:21:21 2025 by rpki-client