$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b1f8fb3b-a82a-3540-813b-3f7707cf6368.roa File: b1f8fb3b-a82a-3540-813b-3f7707cf6368.roa (raw, json) Hash identifier: lPor+Jbef/Mcnikj1s+hFcbONnbpU+yjUCwxdxOaKf0= Subject key identifier: 8C:0B:D4:C4:EC:30:EF:A4:08:82:87:05:F2:47:00:E0:64:51:B2:DF Certificate issuer: /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35 Certificate serial: 010D0C9F4328584A90A0AD321EE5796362A4E540 Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b1f8fb3b-a82a-3540-813b-3f7707cf6368.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 399045 IP address blocks: 104.167.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ad:32:1e:e5:79:63:62:a4:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=f0f947c3-8639-4cdf-9758-5d7cf197627d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:34:50:37:1a:be:65:02:87:f7:a9:11:be:c6: 89:09:60:c4:a2:96:45:34:f8:80:2a:c5:ce:53:3c: 91:7a:ac:1a:dc:f6:9d:1c:51:86:8f:a9:4f:a3:71: 6a:aa:a3:c9:56:1f:26:c9:43:f6:95:01:b3:23:13: a2:fd:a7:3f:3a:8d:06:11:5e:8d:1c:da:ad:1c:f3: 05:82:68:57:e1:78:a0:7b:1f:5e:a0:e1:81:75:4b: e0:38:fa:f7:3d:05:1c:85:f3:c5:c8:34:1a:4f:c9: 16:6f:a0:33:86:3c:00:97:f3:c4:b1:4e:dd:a3:79: d1:84:7c:c4:be:4c:58:82:37:4c:d8:f2:93:27:b0: 92:50:bc:65:76:f0:0e:13:0b:0f:2d:f0:f7:a8:44: 5f:65:0b:d9:35:9a:ec:28:dc:39:f5:3b:a7:bb:a1: 94:f7:92:a9:e8:33:6b:2e:0e:c3:f7:f2:7d:a6:ed: 02:a0:96:ce:8b:55:db:4f:dd:18:16:3d:b1:1e:86: 45:d3:f1:36:44:6a:50:1e:85:7b:34:78:c6:47:1c: 94:cb:0d:a6:2d:26:a4:18:9b:c7:dc:18:67:fc:1a: 66:12:73:e6:e7:5c:a7:2d:29:58:2e:59:b0:08:dc: 51:12:45:01:36:67:13:ed:a7:42:0f:03:e2:5b:39: 91:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0B:D4:C4:EC:30:EF:A4:08:82:87:05:F2:47:00:E0:64:51:B2:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b1f8fb3b-a82a-3540-813b-3f7707cf6368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl X509v3 Authority Key Identifier: keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer sbgp-ipAddrBlock: critical IPv4: 104.167.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:6e:42:47:d7:51:f3:21:49:5b:bd:73:bd:d3:1d:d0:c8:4b: bb:14:74:5c:22:42:90:3d:2a:fd:8e:4d:de:ec:1d:a6:5a:1d: b2:11:ae:4f:85:82:b8:90:96:d2:58:f2:fe:fa:a3:34:c0:42: 05:70:3f:0d:ed:5c:8c:e2:8b:33:2b:3d:fd:0d:77:41:da:08: 58:dd:66:c4:6d:a2:93:f4:bb:6c:2d:eb:91:32:74:6b:58:cd: ba:07:3e:1b:49:3b:4d:df:5b:fd:f6:99:42:f5:ba:25:c6:43: 28:5f:cc:08:4e:5d:5d:1d:06:07:cb:de:f3:8c:08:10:ab:ba: 3d:4a:f6:a9:ee:d7:6d:0b:52:48:bc:64:4c:d4:5a:99:80:62: b6:5b:85:7a:65:39:34:ea:8c:b4:6b:b6:fb:53:6a:0a:32:ce: cc:21:f5:d0:72:7d:2c:39:f8:89:d9:38:74:09:6d:3e:84:49: 69:96:89:2f:48:07:2f:79:d8:0b:0b:a9:dc:d4:58:bc:e0:8b: 1d:e0:c4:76:41:34:29:50:cd:c4:dc:bd:fd:17:19:df:ab:45: 4a:83:55:2a:95:1d:d6:51:b6:6b:af:a5:96:c1:51:2a:39:89: d4:f4:cc:75:d6:6e:f3:49:09:cd:95:06:6e:8c:89:4b:ee:58: 79:3a:27:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoK0yHuV5Y2Kk5UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU0OWI0YzYtNGQ1OC00MmUwLWFiZTItOTM3NTRmZGNk YTM1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZjBmOTQ3YzMtODYzOS00Y2RmLTk3NTgtNWQ3Y2YxOTc2MjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTRQNxq+ZQKH96kRvsaJCWDEopZFNPiAKsXO UzyReqwa3PadHFGGj6lPo3FqqqPJVh8myUP2lQGzIxOi/ac/Oo0GEV6NHNqtHPMF gmhX4Xigex9eoOGBdUvgOPr3PQUchfPFyDQaT8kWb6AzhjwAl/PEsU7do3nRhHzE vkxYgjdM2PKTJ7CSULxldvAOEwsPLfD3qERfZQvZNZrsKNw59Tunu6GU95Kp6DNr Lg7D9/J9pu0CoJbOi1XbT90YFj2xHoZF0/E2RGpQHoV7NHjGRxyUyw2mLSakGJvH 3Bhn/BpmEnPm51ynLSlYLlmwCNxREkUBNmcT7adCDwPiWzmRVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwL1MTsMO+kCIKHBfJHAOBkUbLfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5 YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1NGZkY2RhMzUvYjFmOGZiM2ItYTgyYS0z NTQwLTgxM2ItM2Y3NzA3Y2Y2MzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU0OWI0YzYtNGQ1OC00MmUwLWFi ZTItOTM3NTRmZGNkYTM1LzhlNDliNGM2LTRkNTgtNDJlMC1hYmUyLTkzNzU0ZmRj ZGEzNS5jcmwwHwYDVR0jBBgwFoAUCkkYlphvz9SNs+aiIifBJlnS62swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1 NGZkY2RhMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaKfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5uQkfXUfMhSVu9c73THdDIS7sUdFwiQpA9Kv2OTd7sHaZaHbIRrk+F griQltJY8v76ozTAQgVwPw3tXIziizMrPf0Nd0HaCFjdZsRtopP0u2wt65EydGtY zboHPhtJO03fW/32mUL1uiXGQyhfzAhOXV0dBgfL3vOMCBCruj1K9qnu120LUki8 ZEzUWpmAYrZbhXplOTTqjLRrtvtTagoyzswh9dByfSw5+InZOHQJbT6ESWmWiS9I By952AsLqdzUWLzgix3gxHZBNClQzcTcvf0XGd+rRUqDVSqVHdZRtmuvpZbBUSo5 idT0zHXWbvNJCc2VBm6MiUvuWHk6JwM= -----END CERTIFICATE-----Generated at Wed Aug 6 13:14:57 2025 by rpki-client