$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/fc03f7df-9064-3b4a-8629-009d7f845cbb.roa File: fc03f7df-9064-3b4a-8629-009d7f845cbb.roa (raw, json) Hash identifier: 25vLjWQEP2l9G3imEyzZWL18r+jVBRfe1vHZs6PJBLM= Subject key identifier: 4D:20:36:42:BD:EA:41:23:B4:5C:67:12:D1:C4:E6:58:AA:24:74:9E Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAFE13B05CCD92555A0320 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/fc03f7df-9064-3b4a-8629-009d7f845cbb.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 54858 IP address blocks: 104.244.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:fe:13:b0:5c:cd:92:55:5a:03:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=2cb2bfde-dd22-4e5e-8ae3-9bf3665cc0dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4d:92:0b:c7:84:58:b2:bf:76:05:14:03:49: 91:7d:35:b6:de:da:2b:0f:42:39:11:63:d2:5a:9b: cf:f1:a1:6c:7e:2e:9a:da:44:17:24:5d:aa:f8:55: 39:9f:25:dc:46:80:43:85:b6:64:e7:0e:df:7a:a0: 24:7f:62:1f:0f:8a:44:ac:cd:8d:b9:50:37:3a:d0: 69:99:fa:a8:fb:e0:b0:5f:db:3c:28:c0:8f:a1:e1: b9:c1:ab:db:30:d5:73:3c:b7:b3:79:a8:9b:5f:ec: 5b:e5:47:b1:4b:f0:51:f1:2b:3f:26:14:7c:99:c9: 17:02:2b:55:f6:7b:12:d6:71:c9:d0:c8:2f:33:5c: 23:e3:f8:d8:50:f1:ef:a2:64:44:f1:f0:fa:db:ec: 1b:b6:9f:83:90:70:38:51:0b:0d:da:98:97:05:b1: b4:55:96:53:9e:e6:bd:3f:e5:ed:f6:23:1b:ad:70: 68:8b:2d:5c:a3:7a:f5:ad:41:81:08:5f:74:24:c9: ad:f0:0b:92:07:1d:41:02:f2:c2:14:a4:44:e0:0b: 2d:a5:8f:1e:a9:a8:10:7b:97:9d:76:ec:06:d2:c7: 0c:ed:8b:64:70:ec:5f:cb:8e:30:3b:36:6d:96:6b: 55:1c:b1:6a:b8:4a:0c:ed:77:8e:84:48:9b:52:61: 93:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:20:36:42:BD:EA:41:23:B4:5C:67:12:D1:C4:E6:58:AA:24:74:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/fc03f7df-9064-3b4a-8629-009d7f845cbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.244.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:6c:98:d9:02:bf:7d:df:48:6a:8c:87:6d:90:92:c6:63:cb: 8e:d4:f9:8d:34:ae:a0:d3:5b:0c:02:53:f5:c3:83:60:7f:6d: af:12:34:bf:e5:03:2d:92:19:cf:69:83:fd:ee:df:8d:b9:e9: f0:b2:28:0a:9f:ac:15:70:d7:a8:48:e2:2e:87:24:9c:02:d9: c7:a7:27:75:dc:ec:05:ab:fc:43:ba:04:86:63:e0:42:4a:18: 0c:6d:b6:30:ed:e1:ea:e4:cf:2b:70:61:37:a0:c6:04:17:24: aa:91:d3:d4:41:1e:68:3b:bf:5d:38:27:b6:a8:0c:20:93:5e: 22:fb:cb:65:61:cb:01:2e:d3:16:40:e4:73:be:cf:9a:80:6d: cd:fb:70:28:c2:b2:c8:5b:50:a1:cd:d5:a7:76:82:35:a1:ef: e3:f4:9b:bb:43:42:8e:3a:c4:4e:6f:97:2e:d5:3b:ce:1b:1e: cd:63:df:a9:91:9d:72:08:ea:4d:eb:dc:d7:99:a7:d0:35:32: fc:46:0e:74:85:7e:a0:30:a2:e7:d3:f5:0d:96:30:74:31:0c: f3:83:2b:69:ca:1b:0f:fb:29:e7:99:a9:9e:55:3b:a5:07:e2: d0:8b:de:84:97:b5:fe:45:1d:7c:e2:3a:ba:e3:25:27:1d:09: 0c:8f:f9:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquv4TsFzNklVaAyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk MmNiMmJmZGUtZGQyMi00ZTVlLThhZTMtOWJmMzY2NWNjMGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk2SC8eEWLK/dgUUA0mRfTW23torD0I5EWPS WpvP8aFsfi6a2kQXJF2q+FU5nyXcRoBDhbZk5w7feqAkf2IfD4pErM2NuVA3OtBp mfqo++CwX9s8KMCPoeG5wavbMNVzPLezeaibX+xb5UexS/BR8Ss/JhR8mckXAitV 9nsS1nHJ0MgvM1wj4/jYUPHvomRE8fD62+wbtp+DkHA4UQsN2piXBbG0VZZTnua9 P+Xt9iMbrXBoiy1co3r1rUGBCF90JMmt8AuSBx1BAvLCFKRE4AstpY8eqagQe5ed duwG0scM7YtkcOxfy44wOzZtlmtVHLFquEoM7XeOhEibUmGToQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0gNkK96kEjtFxnEtHE5liqJHSeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZmMwM2Y3ZGYtOTA2NC0z YjRhLTg2MjktMDA5ZDdmODQ1Y2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPTcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdsmNkCv33fSGqMh22QksZjy47U+Y00rqDTWwwCU/XDg2B/ba8SNL/l Ay2SGc9pg/3u34256fCyKAqfrBVw16hI4i6HJJwC2cenJ3Xc7AWr/EO6BIZj4EJK GAxttjDt4erkzytwYTegxgQXJKqR09RBHmg7v104J7aoDCCTXiL7y2VhywEu0xZA 5HO+z5qAbc37cCjCsshbUKHN1ad2gjWh7+P0m7tDQo46xE5vly7VO84bHs1j36mR nXII6k3r3NeZp9A1MvxGDnSFfqAwoufT9Q2WMHQxDPODK2nKGw/7KeeZqZ5VO6UH 4tCL3oSXtf5FHXziOrrjJScdCQyP+fQ= -----END CERTIFICATE-----Generated at Sun Jun 15 15:34:07 2025 by rpki-client