$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/2acba3df-9f0a-3582-b2f6-62a24560f8a1.roa File: 2acba3df-9f0a-3582-b2f6-62a24560f8a1.roa (raw, json) Hash identifier: gwLQglp78cgXVn0b2jD0IkwxVjh9Ub22XHIxLwB5L+w= Subject key identifier: 02:2E:C3:FF:D5:B0:0E:9E:28:0B:C1:22:78:AF:C2:0B:8C:F8:D1:D0 Certificate issuer: /CN=8fe40320-74dc-4444-a6ef-bd88d604a876 Certificate serial: 010D0C9F43285849DC8FA909439BBA913E6808C0 Authority key identifier: 06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/2acba3df-9f0a-3582-b2f6-62a24560f8a1.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 33387 IP address blocks: 104.224.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:a9:09:43:9b:ba:91:3e:68:08:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fe40320-74dc-4444-a6ef-bd88d604a876 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=90937419-7363-4fe4-97dd-6f3b61c7b81b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:72:e0:24:b8:f1:13:ed:5a:d2:55:0f:89:54: ad:78:aa:e7:83:72:e0:b8:38:f4:cd:3e:ba:8f:4f: 3d:46:ae:dd:21:16:64:31:f3:96:af:cd:ed:fb:89: b4:3d:fa:6b:91:a2:c1:b5:b1:04:52:23:5a:23:cb: 5e:65:83:15:3f:b4:30:a0:b5:99:e9:e7:e1:fc:f8: 82:dc:d5:97:37:05:8e:c5:8c:ee:27:4f:3e:c2:cd: 1b:1f:c9:d8:1f:16:a4:7f:ee:ae:a0:d4:c2:92:14: 9d:bb:8a:d5:32:9a:07:7f:f8:1f:49:11:23:57:37: a3:08:28:11:ca:5e:e6:f6:85:f9:f6:88:4d:c5:5e: d8:42:69:b3:24:2a:a9:e4:38:ff:df:bf:4f:86:d9: d5:6c:f5:58:12:2b:cb:85:71:b8:7e:e9:7b:68:49: 89:7f:e2:b3:5e:59:75:41:7f:da:86:4e:12:86:6e: 57:a5:a4:af:66:50:ac:1f:48:6c:cc:d0:fc:4e:a9: 5b:58:06:61:44:b4:09:d9:ae:61:e8:c9:f1:2d:49: 2a:ba:93:e8:5e:a6:c1:59:ee:b5:f3:c0:8a:40:0a: 5a:60:86:01:9c:3d:d3:c2:24:2a:4a:47:ad:c3:a4: f6:39:af:2a:e3:43:bf:61:cd:46:cf:b1:a8:e0:f9: ec:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2E:C3:FF:D5:B0:0E:9E:28:0B:C1:22:78:AF:C2:0B:8C:F8:D1:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/2acba3df-9f0a-3582-b2f6-62a24560f8a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl X509v3 Authority Key Identifier: keyid:06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer sbgp-ipAddrBlock: critical IPv4: 104.224.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:6f:56:ae:73:6e:a9:48:85:ed:02:6d:5c:05:c7:0c:59:35: c7:15:1d:64:26:04:02:ce:59:2c:e6:92:39:99:11:0a:dd:91: 72:fc:73:93:a9:b3:d2:38:f5:1e:5f:12:d4:f7:af:17:0e:77: d7:ab:dd:7d:ac:87:b3:39:d4:92:56:60:cd:c4:bd:04:ce:f2: d9:50:b3:12:4e:eb:6d:63:89:bd:0e:6e:b4:dc:32:fb:c8:aa: df:e9:a7:c9:5b:08:7b:cc:fa:cc:3f:f6:a1:34:41:1a:66:34: 7b:c6:dd:c8:c5:78:85:60:b8:9f:aa:4d:8f:a8:72:d7:b3:6a: f9:ea:75:34:7e:ba:bb:f2:14:8a:71:7d:17:b7:76:23:ea:c8: b2:d4:51:97:54:af:f5:db:a1:2c:6e:9d:e8:ac:72:65:94:68: cf:dd:eb:45:e8:7b:9d:49:8c:d9:f5:c3:ef:34:b7:de:6b:06: fe:5d:07:3d:e9:ab:89:9e:68:62:4f:bd:d9:b9:45:c8:26:47: be:52:0d:da:a2:00:d1:77:fe:7d:5d:43:e9:c7:3b:84:fc:5d: 8a:4b:6e:53:fa:89:99:8b:13:fe:0d:e9:37:24:8f:92:28:1c: e3:aa:39:2b:89:75:32:7d:ac:81:10:dc:5e:84:24:f0:8a:ba: 88:a1:24:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj6kJQ5u6kT5oCMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZlNDAzMjAtNzRkYy00NDQ0LWE2ZWYtYmQ4OGQ2MDRh ODc2MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk OTA5Mzc0MTktNzM2My00ZmU0LTk3ZGQtNmYzYjYxYzdiODFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HLgJLjxE+1a0lUPiVSteKrng3LguDj0zT66 j089Rq7dIRZkMfOWr83t+4m0PfprkaLBtbEEUiNaI8teZYMVP7QwoLWZ6efh/PiC 3NWXNwWOxYzuJ08+ws0bH8nYHxakf+6uoNTCkhSdu4rVMpoHf/gfSREjVzejCCgR yl7m9oX59ohNxV7YQmmzJCqp5Dj/379PhtnVbPVYEivLhXG4ful7aEmJf+KzXll1 QX/ahk4Shm5XpaSvZlCsH0hszND8TqlbWAZhRLQJ2a5h6MnxLUkqupPoXqbBWe61 88CKQApaYIYBnD3TwiQqSketw6T2Oa8q40O/Yc1Gz7Go4PnsiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIuw//VsA6eKAvBInivwguM+NHQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZmU0 MDMyMC03NGRjLTQ0NDQtYTZlZi1iZDg4ZDYwNGE4NzYvMmFjYmEzZGYtOWYwYS0z NTgyLWIyZjYtNjJhMjQ1NjBmOGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGZlNDAzMjAtNzRkYy00NDQ0LWE2 ZWYtYmQ4OGQ2MDRhODc2LzhmZTQwMzIwLTc0ZGMtNDQ0NC1hNmVmLWJkODhkNjA0 YTg3Ni5jcmwwHwYDVR0jBBgwFoAUBpspmYh8dDlJyy1jHEtRwUvXMnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZmU0MDMyMC03NGRjLTQ0NDQtYTZlZi1iZDg4 ZDYwNGE4NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOANMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlvVq5zbqlIhe0CbVwFxwxZNccVHWQmBALOWSzmkjmZEQrdkXL8c5Op s9I49R5fEtT3rxcOd9er3X2sh7M51JJWYM3EvQTO8tlQsxJO621jib0ObrTcMvvI qt/pp8lbCHvM+sw/9qE0QRpmNHvG3cjFeIVguJ+qTY+octezavnqdTR+urvyFIpx fRe3diPqyLLUUZdUr/XboSxuneiscmWUaM/d60Xoe51JjNn1w+80t95rBv5dBz3p q4meaGJPvdm5RcgmR75SDdqiANF3/n1dQ+nHO4T8XYpLblP6iZmLE/4N6Tckj5Io HOOqOSuJdTJ9rIEQ3F6EJPCKuoihJNI= -----END CERTIFICATE-----Generated at Mon Jun 16 13:16:04 2025 by rpki-client