$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/7dc5f10e-ddce-3970-80f8-6a11e52e6c28.roa File: 7dc5f10e-ddce-3970-80f8-6a11e52e6c28.roa (raw, json) Hash identifier: vqR1Lrp0rO+0LAZuGHqbHMCUnOlJ0Lb448rngA2wAwE= Subject key identifier: 92:F3:F9:40:DA:A6:71:EF:FE:CE:DD:F9:15:FB:E3:90:6D:00:4C:99 Certificate issuer: /CN=5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306 Certificate serial: 010D0C9F43285849B844BC0D57E812FE2126AF80 Authority key identifier: A0:92:D8:21:7C:49:33:E4:FA:A7:F1:31:06:BB:75:92:C6:C8:0F:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/7dc5f10e-ddce-3970-80f8-6a11e52e6c28.roa Signing time: Fri 02 May 2025 13:01:00 +0000 ROA not before: Fri 02 May 2025 13:01:00 +0000 ROA not after: Thu 31 Jul 2025 13:01:00 +0000 asID: 399213 IP address blocks: 104.167.227.0/24 maxlen: 24 2602:f8d9::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b8:44:bc:0d:57:e8:12:fe:21:26:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306 Validity Not Before: May 2 13:01:00 2025 GMT Not After : Jul 31 13:01:00 2025 GMT Subject: CN=3d564b1d-7356-487a-ba7c-3b8c1af00610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:51:c7:22:2e:60:30:96:7c:09:de:43:f4:15: 6b:e4:1c:99:4a:42:4d:3a:86:32:1c:f8:89:5e:4b: dd:10:07:e0:e8:1a:76:95:92:64:d5:44:6a:fd:d6: aa:45:ac:8e:3e:7f:02:ce:84:d8:27:3a:cf:a9:60: c4:47:e0:50:23:24:cb:d7:69:af:65:7e:f8:a8:d4: aa:19:c3:7a:6d:d8:ca:9f:71:3c:3f:cc:0f:32:4e: cb:0d:c4:73:78:69:99:ce:0f:d1:06:0b:5b:a4:f3: d0:4b:d2:29:1a:ea:51:ad:6d:3d:cc:d6:b0:aa:8f: eb:6b:8f:58:5c:e3:ae:10:21:bc:a3:ec:79:e8:8c: c5:aa:47:f6:3d:a4:cb:51:a2:6d:05:29:30:0a:fb: c1:91:fd:92:26:ae:f2:bd:f1:f2:0c:73:7a:5e:04: d6:3e:fd:c4:9d:47:88:17:05:2c:7c:20:bb:2c:81: 19:ee:f3:1f:1e:73:18:bd:48:a5:95:9f:ff:a7:51: 5d:40:ee:31:e5:78:fc:a9:0e:8b:ee:fd:56:3f:c0: f0:54:62:35:84:69:41:27:a5:fa:4c:08:c7:5b:70: b9:13:24:34:9d:61:57:5e:92:bf:fe:14:f2:0c:c6: 09:e2:19:8c:c4:14:e4:d9:03:ae:9a:7e:94:b6:7a: 13:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F3:F9:40:DA:A6:71:EF:FE:CE:DD:F9:15:FB:E3:90:6D:00:4C:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/7dc5f10e-ddce-3970-80f8-6a11e52e6c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.crl X509v3 Authority Key Identifier: keyid:A0:92:D8:21:7C:49:33:E4:FA:A7:F1:31:06:BB:75:92:C6:C8:0F:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.cer sbgp-ipAddrBlock: critical IPv4: 104.167.227.0/24 IPv6: 2602:f8d9::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:f9:3d:8f:84:c7:9c:49:33:60:96:c6:a1:92:90:b0:0a:f4: 6d:9e:62:da:e3:66:4f:c8:05:90:bc:55:ad:90:8e:16:8e:42: dd:a0:e8:3d:71:78:1d:c0:96:33:47:8a:f8:42:ed:e2:ec:d0: 76:9a:f1:5a:a6:f9:50:02:d8:3e:9f:e8:3c:f2:52:83:95:f5: 7d:76:86:17:f1:d0:76:f3:d7:b3:d8:a4:b7:4c:6f:41:e2:32: 06:11:58:b4:f6:97:ee:aa:b2:e8:23:a3:72:38:0c:0b:d1:e6: 4d:0f:5a:68:73:b3:63:05:2b:10:fe:ff:74:b9:2e:59:6c:f2: 04:df:50:f4:c2:1f:89:7d:87:c4:40:48:85:e5:64:b5:aa:99: 37:fe:49:3e:10:5d:8d:07:03:df:65:7a:b2:56:ec:61:56:0c: 91:07:f5:6a:9a:2a:60:67:0f:7c:85:4b:ca:68:f5:ec:79:7e: 8a:2d:58:5e:cd:1b:41:26:c9:cd:b5:cf:fa:36:a2:6f:6e:6b: 2b:cb:9e:46:c4:7d:98:dd:2c:e9:43:89:7c:47:5f:94:d1:97: 70:06:a3:08:cd:c7:fd:e8:df:22:ff:ad:f1:3e:ce:cf:a0:ca: 1a:d1:c0:26:24:93:ca:bb:2e:69:13:94:48:8c:fb:ed:2a:ec: 83:18:a3:81 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEm4RLwNV+gS/iEmr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ2YTVkN2EtNTFhMi00YTgzLWI1YjUtZDhjMTU0Yjhk MzA2MB4XDTI1MDUwMjEzMDEwMFoXDTI1MDczMTEzMDEwMFowLzEtMCsGA1UEAxMk M2Q1NjRiMWQtNzM1Ni00ODdhLWJhN2MtM2I4YzFhZjAwNjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFHHIi5gMJZ8Cd5D9BVr5ByZSkJNOoYyHPiJ XkvdEAfg6Bp2lZJk1URq/daqRayOPn8CzoTYJzrPqWDER+BQIyTL12mvZX74qNSq GcN6bdjKn3E8P8wPMk7LDcRzeGmZzg/RBgtbpPPQS9IpGupRrW09zNawqo/ra49Y XOOuECG8o+x56IzFqkf2PaTLUaJtBSkwCvvBkf2SJq7yvfHyDHN6XgTWPv3EnUeI FwUsfCC7LIEZ7vMfHnMYvUillZ//p1FdQO4x5Xj8qQ6L7v1WP8DwVGI1hGlBJ6X6 TAjHW3C5EyQ0nWFXXpK//hTyDMYJ4hmMxBTk2QOumn6UtnoTfQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJLz+UDapnHv/s7d+RX745BtAEyZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81ZDZh NWQ3YS01MWEyLTRhODMtYjViNS1kOGMxNTRiOGQzMDYvN2RjNWYxMGUtZGRjZS0z OTcwLTgwZjgtNmExMWU1MmU2YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWQ2YTVkN2EtNTFhMi00YTgzLWI1 YjUtZDhjMTU0YjhkMzA2LzVkNmE1ZDdhLTUxYTItNGE4My1iNWI1LWQ4YzE1NGI4 ZDMwNi5jcmwwHwYDVR0jBBgwFoAUoJLYIXxJM+T6p/ExBrt1ksbID2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81ZDZhNWQ3YS01MWEyLTRhODMtYjViNS1kOGMx NTRiOGQzMDYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAaKfjMA4E AgACMAgDBgAmAvjZADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAd+T2PhMecSTNglsahkpCwCvRtnmLa42ZP yAWQvFWtkI4WjkLdoOg9cXgdwJYzR4r4Qu3i7NB2mvFapvlQAtg+n+g88lKDlfV9 doYX8dB289ez2KS3TG9B4jIGEVi09pfuqrLoI6NyOAwL0eZND1poc7NjBSsQ/v90 uS5ZbPIE31D0wh+JfYfEQEiF5WS1qpk3/kk+EF2NBwPfZXqyVuxhVgyRB/Vqmipg Zw98hUvKaPXseX6KLVhezRtBJsnNtc/6NqJvbmsry55GxH2Y3SzpQ4l8R1+U0Zdw BqMIzcf96N8i/63xPs7PoMoa0cAmJJPKuy5pE5RIjPvtKuyDGKOB -----END CERTIFICATE-----Generated at Mon Jun 16 03:28:18 2025 by rpki-client