$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/6e86b93b-2a30-3a25-8c6e-210cf5593a9d.roa File: 6e86b93b-2a30-3a25-8c6e-210cf5593a9d.roa (raw, json) Hash identifier: EmLwHQTXsoAOuPzGxfa06f7y2cQqXP9wbGgBo+rs/9E= Subject key identifier: BC:59:75:C9:89:7F:37:F0:86:1B:31:D5:F2:26:22:88:1B:32:F6:8B Certificate issuer: /CN=8fe40320-74dc-4444-a6ef-bd88d604a876 Certificate serial: 010D0C9F43285849DC8FA917E5D988739D3AEF40 Authority key identifier: 06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/6e86b93b-2a30-3a25-8c6e-210cf5593a9d.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 18450 IP address blocks: 104.224.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:a9:17:e5:d9:88:73:9d:3a:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fe40320-74dc-4444-a6ef-bd88d604a876 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=ff4c08eb-a5d9-4e7b-a4a6-5075345100b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:24:b0:c2:c6:6a:6a:d3:12:a6:32:8c:93: 09:96:4f:b6:33:d2:53:f5:b6:56:a8:b5:25:74:41: 7c:3c:55:36:18:09:8f:4d:7a:7b:98:25:33:d4:a5: f3:49:3b:ff:31:33:25:a1:5c:da:6c:cf:e2:48:9e: 24:17:04:84:c5:e8:75:e5:d8:7a:38:a8:a3:f1:6b: 27:74:20:30:f0:3f:1c:69:ec:8e:5e:ed:2e:de:fa: 71:bc:91:74:a5:a4:7d:0e:b6:e1:3d:02:ee:d8:82: 8a:6c:a3:bb:0a:9b:5d:15:40:1f:db:aa:90:e0:18: 65:b4:9e:56:df:16:e7:04:29:bc:d0:ea:15:72:70: ce:5c:68:52:f8:68:fe:28:e8:f9:a6:b5:b0:68:1d: ce:bd:10:2c:e1:aa:dd:da:59:7b:c1:68:70:53:0b: 0d:8b:60:e5:41:50:0b:82:ab:68:c6:5a:5b:01:d0: 4b:bc:f1:9d:b1:3a:10:9d:c5:23:71:8a:4c:ed:4b: 7b:58:12:46:49:b6:25:b2:ff:12:39:7a:da:6a:4d: 35:30:c1:47:d0:7a:be:35:00:7d:75:a4:0b:bb:90: 52:ff:ca:54:2e:57:41:33:03:7f:44:d3:0b:4a:51: d5:fc:22:58:de:f0:1e:6f:97:de:88:7c:c2:39:ff: 7d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:59:75:C9:89:7F:37:F0:86:1B:31:D5:F2:26:22:88:1B:32:F6:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/6e86b93b-2a30-3a25-8c6e-210cf5593a9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl X509v3 Authority Key Identifier: keyid:06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer sbgp-ipAddrBlock: critical IPv4: 104.224.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ef:24:6b:d5:74:9e:1b:05:f8:74:cb:1e:59:df:7a:e7:19: 2e:e0:b9:98:a8:d1:00:75:8e:77:16:3d:88:1b:d5:44:63:e1: 9a:c6:e5:d1:08:63:16:40:87:f9:ed:36:a9:02:06:eb:c1:21: c4:85:c7:1f:37:2c:13:48:a0:fc:c8:a5:19:f1:fe:9b:4b:82: 5f:1d:4f:0f:0f:47:d5:f7:02:6c:38:d5:94:13:7e:4f:f5:d8: 5b:11:0b:61:38:02:82:bd:4f:e8:df:6f:a8:d1:44:4b:fd:7f: 58:d4:4c:e2:a3:11:f4:2b:fe:f8:04:13:6b:ed:99:90:93:d3: f1:a2:b9:60:ed:43:8a:cd:22:55:60:0f:ed:93:7e:44:9e:99: 04:65:96:70:cb:02:ee:c1:dc:53:a5:d1:87:cf:f6:21:e7:8d: ae:f6:1d:2c:17:25:bf:b8:ec:ec:19:a7:fd:68:e8:de:17:05: cc:e9:66:b4:be:8e:ee:9b:37:4e:c7:3f:53:3f:02:3e:93:85: 96:a6:ff:5a:91:ee:bd:b5:e1:bb:49:71:83:cc:5e:d6:2c:8c: 9c:ba:a0:5c:e5:90:a0:53:7a:61:d6:49:c2:98:44:c8:ee:41: 5c:00:11:8a:af:7f:24:12:b6:ec:e0:8f:12:72:2b:e7:7a:be: e7:0b:a5:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj6kX5dmIc50670AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZlNDAzMjAtNzRkYy00NDQ0LWE2ZWYtYmQ4OGQ2MDRh ODc2MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk ZmY0YzA4ZWItYTVkOS00ZTdiLWE0YTYtNTA3NTM0NTEwMGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoIksMLGamrTEqYyjJMJlk+2M9JT9bZWqLUl dEF8PFU2GAmPTXp7mCUz1KXzSTv/MTMloVzabM/iSJ4kFwSExeh15dh6OKij8Wsn dCAw8D8caeyOXu0u3vpxvJF0paR9DrbhPQLu2IKKbKO7CptdFUAf26qQ4BhltJ5W 3xbnBCm80OoVcnDOXGhS+Gj+KOj5prWwaB3OvRAs4ard2ll7wWhwUwsNi2DlQVAL gqtoxlpbAdBLvPGdsToQncUjcYpM7Ut7WBJGSbYlsv8SOXraak01MMFH0Hq+NQB9 daQLu5BS/8pULldBMwN/RNMLSlHV/CJY3vAeb5feiHzCOf993wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxZdcmJfzfwhhsx1fImIogbMvaLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZmU0 MDMyMC03NGRjLTQ0NDQtYTZlZi1iZDg4ZDYwNGE4NzYvNmU4NmI5M2ItMmEzMC0z YTI1LThjNmUtMjEwY2Y1NTkzYTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGZlNDAzMjAtNzRkYy00NDQ0LWE2 ZWYtYmQ4OGQ2MDRhODc2LzhmZTQwMzIwLTc0ZGMtNDQ0NC1hNmVmLWJkODhkNjA0 YTg3Ni5jcmwwHwYDVR0jBBgwFoAUBpspmYh8dDlJyy1jHEtRwUvXMnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZmU0MDMyMC03NGRjLTQ0NDQtYTZlZi1iZDg4 ZDYwNGE4NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOAOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnvJGvVdJ4bBfh0yx5Z33rnGS7guZio0QB1jncWPYgb1URj4ZrG5dEI YxZAh/ntNqkCBuvBIcSFxx83LBNIoPzIpRnx/ptLgl8dTw8PR9X3Amw41ZQTfk/1 2FsRC2E4AoK9T+jfb6jRREv9f1jUTOKjEfQr/vgEE2vtmZCT0/GiuWDtQ4rNIlVg D+2TfkSemQRllnDLAu7B3FOl0YfP9iHnja72HSwXJb+47OwZp/1o6N4XBczpZrS+ ju6bN07HP1M/Aj6ThZam/1qR7r214btJcYPMXtYsjJy6oFzlkKBTemHWScKYRMju QVwAEYqvfyQStuzgjxJyK+d6vucLpQ0= -----END CERTIFICATE-----Generated at Mon Jun 16 12:30:26 2025 by rpki-client