$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fba7741f-d7cd-3d32-850c-1efffef1bce5.roa File: fba7741f-d7cd-3d32-850c-1efffef1bce5.roa (raw, json) Hash identifier: jMV0YvtCebHrQMoHHENrXZ0S0rcnEl1DDsryG4yW2W0= Subject key identifier: BE:F5:93:64:39:8E:92:78:67:27:60:3C:9A:1F:C2:28:1D:C0:4A:5C Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584A07D531E368C19E198D228AE0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fba7741f-d7cd-3d32-850c-1efffef1bce5.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 1239 IP address blocks: 104.218.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:31:e3:68:c1:9e:19:8d:22:8a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=04427e4a-5090-4437-935f-60aced1d3b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:41:d4:b9:50:9b:50:40:22:67:b7:44:20:9b: fc:c4:dc:f3:f9:20:78:6f:62:ca:68:ee:ac:31:4d: 20:60:08:e5:70:72:3b:a4:49:b1:02:8b:b8:94:3c: 17:d6:14:bc:22:a9:7f:d9:51:de:ed:c5:7b:70:e2: 1f:a7:85:5a:50:f9:a9:51:31:12:c9:31:05:5a:5e: ba:a7:cc:e2:31:1d:03:82:6c:c6:44:a5:a1:3c:c2: 70:3b:e6:f2:3b:81:d6:ed:c5:19:d6:9a:84:74:ec: dd:4a:a8:1d:f8:fe:4b:08:b7:ec:87:44:47:6a:35: 1c:f8:00:37:71:75:d3:8b:ac:7f:0a:e5:c2:5b:c8: 4c:4b:6d:1f:50:23:86:d1:0a:c3:7b:ae:4d:8d:a9: 95:eb:6a:d8:91:34:59:5f:c1:7a:ba:f7:2a:70:45: 76:a7:85:21:44:b4:dd:3b:76:e1:3c:d4:0d:65:d2: ed:f1:9e:48:ca:c4:4f:f7:bc:cb:e3:31:85:51:47: b9:84:fe:10:55:80:dc:a2:9b:08:07:05:e6:e3:7b: 1c:1c:17:4a:c2:e2:a0:28:63:af:eb:6a:0d:69:43: 3d:5a:af:b5:8b:07:53:20:e6:fa:f5:0e:05:68:8b: eb:5c:4a:9d:a0:72:7d:2e:f5:5f:f8:e1:20:bd:76: 89:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F5:93:64:39:8E:92:78:67:27:60:3C:9A:1F:C2:28:1D:C0:4A:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fba7741f-d7cd-3d32-850c-1efffef1bce5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.218.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:82:35:dd:2d:02:fa:3c:25:16:d9:a1:3e:85:bb:a7:26:62: 0a:4b:59:67:ee:86:7d:5f:5d:6b:ab:5b:04:e6:0b:f7:37:1b: 18:70:fe:72:a2:b9:19:f4:f4:2f:fe:d9:61:e2:22:34:d2:c5: 21:6c:ac:2c:44:19:8b:0d:1c:bc:30:1a:25:76:8e:35:39:2e: 40:c7:36:bc:4a:9b:49:82:1f:4f:e8:ae:a0:17:48:24:0f:a9: 0c:d8:fd:d3:d1:49:ae:76:57:7d:a1:86:ce:56:4d:c7:26:ce: 40:36:73:55:b8:75:52:f9:7e:84:1d:22:54:e1:bc:4b:e3:09: 4a:00:8d:8c:d2:10:cd:b0:4d:7a:f7:5f:99:fb:34:40:a6:b9: b0:ca:9e:b3:06:c3:09:2c:12:74:bc:33:1e:a0:a0:a2:98:e5: 48:53:7c:12:66:4f:55:65:ef:18:d9:fa:7f:da:78:67:92:0e: 7b:f8:8b:35:30:a8:49:46:77:d3:95:94:97:83:11:bb:57:f3: b2:63:a9:70:40:98:2d:43:73:97:ca:64:1f:a4:2f:32:ad:2e: d0:24:fb:ab:7f:09:ae:e1:75:e6:00:d5:8a:b9:dc:4f:ff:b9: 84:f5:70:21:6d:e9:20:60:a7:38:97:cb:f0:e3:0c:14:67:5e: b7:28:75:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1THjaMGeGY0iiuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk MDQ0MjdlNGEtNTA5MC00NDM3LTkzNWYtNjBhY2VkMWQzYjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUHUuVCbUEAiZ7dEIJv8xNzz+SB4b2LKaO6s MU0gYAjlcHI7pEmxAou4lDwX1hS8Iql/2VHe7cV7cOIfp4VaUPmpUTESyTEFWl66 p8ziMR0DgmzGRKWhPMJwO+byO4HW7cUZ1pqEdOzdSqgd+P5LCLfsh0RHajUc+AA3 cXXTi6x/CuXCW8hMS20fUCOG0QrDe65NjamV62rYkTRZX8F6uvcqcEV2p4UhRLTd O3bhPNQNZdLt8Z5IysRP97zL4zGFUUe5hP4QVYDcopsIBwXm43scHBdKwuKgKGOv 62oNaUM9Wq+1iwdTIOb69Q4FaIvrXEqdoHJ9LvVf+OEgvXaJnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL71k2Q5jpJ4ZydgPJofwigdwEpcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZmJhNzc0MWYtZDdjZC0z ZDMyLTg1MGMtMWVmZmZlZjFiY2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNrBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuCNd0tAvo8JRbZoT6Fu6cmYgpLWWfuhn1fXWurWwTmC/c3Gxhw/nKi uRn09C/+2WHiIjTSxSFsrCxEGYsNHLwwGiV2jjU5LkDHNrxKm0mCH0/orqAXSCQP qQzY/dPRSa52V32hhs5WTccmzkA2c1W4dVL5foQdIlThvEvjCUoAjYzSEM2wTXr3 X5n7NECmubDKnrMGwwksEnS8Mx6goKKY5UhTfBJmT1Vl7xjZ+n/aeGeSDnv4izUw qElGd9OVlJeDEbtX87JjqXBAmC1Dc5fKZB+kLzKtLtAk+6t/Ca7hdeYA1Yq53E// uYT1cCFt6SBgpziXy/DjDBRnXrcodZU= -----END CERTIFICATE-----Generated at Sun Jun 15 11:54:38 2025 by rpki-client