$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5846edab-0650-3c94-acc8-bcb993d9bf61.roa File: 5846edab-0650-3c94-acc8-bcb993d9bf61.roa (raw, json) Hash identifier: KLJfqDWKTrI/cbVWAf3tb5UkDs54DmdA74vAH6FmZw8= Subject key identifier: 60:EA:D2:26:CD:98:CE:24:DE:F4:61:D1:50:B1:46:78:60:1A:D0:12 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F43285849F715093BE4C2C4C4B1A6EB00 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5846edab-0650-3c94-acc8-bcb993d9bf61.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 40676 IP address blocks: 104.238.248.0/24 maxlen: 24 104.238.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:09:3b:e4:c2:c4:c4:b1:a6:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=b32237a4-757e-43dc-bd04-528ad63f1c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ba:9c:fa:dc:75:5b:43:d9:28:c5:88:0f:ef: 75:11:cb:a7:d9:de:23:ca:35:c1:b9:d1:7b:81:74: 7f:0a:f3:5a:f2:fe:ad:c0:a5:10:70:3d:4c:87:ee: 07:51:6d:77:db:2f:d5:4f:60:9e:ad:ff:12:75:70: 07:ab:97:54:4f:6b:ce:ad:2e:4d:0a:a8:0d:4e:e1: 31:64:60:5b:f1:4d:fd:cf:33:a5:62:d3:78:68:25: d4:fc:dc:cb:f0:bd:e6:d3:97:43:80:ee:c7:fd:da: 84:1a:2f:04:33:0e:50:1d:8a:8c:76:40:b1:b6:96: 77:dc:81:c7:e9:c6:4f:14:ba:dd:9e:03:0f:6b:0e: b1:3d:37:3a:46:a1:e2:b7:a5:4c:06:3f:82:a5:fa: bb:c0:50:86:75:ca:d6:37:be:30:9a:0d:8e:4d:30: 1b:75:61:f7:51:2d:99:f7:d5:9c:a4:59:4b:3d:29: e5:9c:75:7b:94:c5:ef:fc:ab:67:6e:ea:15:0c:fe: c6:bc:a5:c6:66:99:04:fd:7f:a4:46:46:b9:7b:53: e3:33:c3:8f:da:ad:57:72:0c:d7:43:dc:61:37:1f: d9:3e:e2:dc:e9:ee:97:d4:3a:02:90:cb:86:a6:2d: 2e:a3:9b:d0:45:d5:d3:f0:f8:5c:88:e5:65:02:d0: 7f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EA:D2:26:CD:98:CE:24:DE:F4:61:D1:50:B1:46:78:60:1A:D0:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5846edab-0650-3c94-acc8-bcb993d9bf61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 104.238.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:cd:b8:9a:c0:7b:30:04:18:10:45:18:e2:cf:29:92:0f:9c: c2:40:4f:a9:bd:6c:99:e4:a1:1f:07:69:08:ec:3a:e3:2b:11: a2:ef:c8:10:31:27:0a:a3:6e:c4:7a:39:57:16:93:6a:04:1a: e8:27:3d:78:c5:8f:e2:28:22:7d:08:41:85:f4:99:44:93:11: 3a:35:47:a6:d9:cf:48:52:34:61:39:81:9e:df:11:ce:77:7e: fb:18:e2:bb:16:9e:2d:29:c6:4c:81:c5:73:e0:b1:76:b7:9d: b0:47:5f:0a:af:f3:83:05:42:42:ae:38:7b:04:07:67:a6:60: 9a:1b:98:c0:fe:ef:c5:be:70:7c:c1:f3:23:91:ad:0b:1a:a4: be:e3:e6:29:5e:fc:04:6a:99:51:37:b2:ac:62:4c:3d:de:36: 70:f4:92:13:8d:0f:fe:59:3a:88:1f:33:2d:ae:a0:f0:83:a1: ee:ef:0d:fd:ef:f5:ec:1d:70:66:3f:2a:31:48:d4:ae:0f:25: e8:22:27:f9:7a:65:31:15:2a:ae:26:42:2f:83:32:ba:72:23: b8:c2:fe:44:85:69:90:00:1a:4c:4d:02:79:e2:70:ac:e6:80: a4:2f:ed:18:09:c2:97:a8:46:85:ce:79:b9:98:41:d7:95:03: 84:63:76:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FQk75MLExLGm6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk YjMyMjM3YTQtNzU3ZS00M2RjLWJkMDQtNTI4YWQ2M2YxYzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbqc+tx1W0PZKMWID+91Ecun2d4jyjXBudF7 gXR/CvNa8v6twKUQcD1Mh+4HUW132y/VT2Cerf8SdXAHq5dUT2vOrS5NCqgNTuEx ZGBb8U39zzOlYtN4aCXU/NzL8L3m05dDgO7H/dqEGi8EMw5QHYqMdkCxtpZ33IHH 6cZPFLrdngMPaw6xPTc6RqHit6VMBj+Cpfq7wFCGdcrWN74wmg2OTTAbdWH3US2Z 99WcpFlLPSnlnHV7lMXv/KtnbuoVDP7GvKXGZpkE/X+kRka5e1PjM8OP2q1XcgzX Q9xhNx/ZPuLc6e6X1DoCkMuGpi0uo5vQRdXT8PhciOVlAtB/bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDq0ibNmM4k3vRh0VCxRnhgGtASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNTg0NmVkYWItMDY1MC0z Yzk0LWFjYzgtYmNiOTkzZDliZjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaO74MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHNuJrAezAEGBBFGOLPKZIPnMJAT6m9bJnkoR8HaQjsOuMrEaLvyBAx JwqjbsR6OVcWk2oEGugnPXjFj+IoIn0IQYX0mUSTETo1R6bZz0hSNGE5gZ7fEc53 fvsY4rsWni0pxkyBxXPgsXa3nbBHXwqv84MFQkKuOHsEB2emYJobmMD+78W+cHzB 8yORrQsapL7j5ile/ARqmVE3sqxiTD3eNnD0khOND/5ZOogfMy2uoPCDoe7vDf3v 9ewdcGY/KjFI1K4PJegiJ/l6ZTEVKq4mQi+DMrpyI7jC/kSFaZAAGkxNAnnicKzm gKQv7RgJwpeoRoXOebmYQdeVA4RjdoA= -----END CERTIFICATE-----Generated at Sun Jun 15 19:13:06 2025 by rpki-client