$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/2907c952-cf20-3bfb-8136-ffafc5c6844a.roa File: 2907c952-cf20-3bfb-8136-ffafc5c6844a.roa (raw, json) Hash identifier: PmggKBCOG6uhXUEhIyx/gxhAJPVX7byrgU6xi6NUCxA= Subject key identifier: 63:A3:EB:10:CC:0B:03:78:B5:03:5F:84:A8:2E:F8:2B:07:62:28:B0 Certificate issuer: /CN=985592b9-8e7b-4ccb-87dc-e1de2e98bd81 Certificate serial: 010D0C9F4328584A6DBB3AC09D35347D1C14AC60 Authority key identifier: CB:40:36:C1:CA:DF:FE:8A:89:4B:F4:4B:3D:84:0B:4D:86:7F:DB:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/2907c952-cf20-3bfb-8136-ffafc5c6844a.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 62668 IP address blocks: 104.167.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:3a:c0:9d:35:34:7d:1c:14:ac:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=985592b9-8e7b-4ccb-87dc-e1de2e98bd81 Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=89656da4-66bc-457b-9e74-689d48031c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:82:06:be:5e:45:58:17:c7:1c:06:c7:64:4c: c8:5e:24:62:f7:f4:e6:71:2f:dc:31:c7:25:52:e0: 74:4e:14:51:84:28:f4:a8:74:0b:2d:2f:f3:d5:b4: 6b:5a:91:ae:52:b9:ba:ed:90:62:5c:10:69:11:67: 3b:e2:ba:d2:dd:f9:d3:d2:2e:92:bb:07:b2:48:c1: 5d:1e:22:5a:d0:86:fb:93:71:3f:14:3f:09:c1:cc: cb:89:c2:22:a7:00:75:11:b1:b9:8d:30:33:de:ec: de:26:c7:e4:b4:de:b4:e8:d4:74:89:3f:7f:a9:75: 9d:60:30:96:c4:2a:a6:2b:a5:7b:15:e4:8e:cc:ba: a9:26:3e:71:3a:e0:36:be:fc:1f:60:47:7f:ff:05: 80:95:5a:5e:dd:ae:5e:cc:76:d3:a8:f0:06:38:28: ce:ee:36:a5:f8:b4:e2:c1:39:33:1f:e1:ff:87:8b: 04:66:50:1c:92:14:0f:d2:91:19:c0:8a:df:85:18: c4:7a:4b:01:2f:28:c6:a1:67:c8:de:c4:e5:35:6d: 53:66:40:f8:b0:0c:6e:dc:12:d7:e9:86:73:ee:5a: e4:28:f6:9a:c7:e2:f8:23:45:85:1e:eb:c5:77:ab: 4f:9f:f2:aa:21:3e:33:46:1e:b9:d7:ea:fd:c5:1b: b7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A3:EB:10:CC:0B:03:78:B5:03:5F:84:A8:2E:F8:2B:07:62:28:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/2907c952-cf20-3bfb-8136-ffafc5c6844a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.crl X509v3 Authority Key Identifier: keyid:CB:40:36:C1:CA:DF:FE:8A:89:4B:F4:4B:3D:84:0B:4D:86:7F:DB:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer sbgp-ipAddrBlock: critical IPv4: 104.167.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:4e:2f:4e:08:24:80:e1:e3:ee:0f:3a:85:30:8e:2f:72:37: 10:56:c5:22:b5:3b:c8:01:f2:95:be:d4:26:14:48:8c:57:54: 95:53:6a:71:85:10:d8:1e:64:35:42:a5:0c:b2:59:b6:c1:dd: 4a:0b:a0:5c:04:f7:c5:21:1c:b0:59:ba:4d:61:97:c2:a7:a9: ab:47:b0:f7:5d:59:65:52:0e:e4:9a:23:ec:ed:6b:07:e3:8c: aa:78:00:82:31:06:c5:fa:46:76:9a:fd:91:44:17:ee:cb:00: e0:ec:3a:0c:9f:53:4e:6a:1f:5d:b6:e6:26:bc:84:ac:9f:c0: 86:e7:58:2d:f7:8b:9e:ae:3b:3e:e0:40:ce:a2:dc:d0:28:97: c3:dc:3b:9d:8d:75:c1:41:ef:af:a2:86:e8:d7:6b:03:2d:c1: 71:cb:90:f5:a7:47:40:28:91:ca:9d:4f:5d:97:aa:e3:4f:6a: 59:f4:65:be:9a:be:c8:f7:b1:24:2c:ed:a6:23:e2:2a:69:ca: ba:87:3c:03:c8:83:ce:d4:d5:1a:e4:78:37:dd:3c:6d:9d:0c: 37:c8:ba:12:76:a6:4c:61:63:0f:05:1d:54:5d:82:00:25:cd: 9e:40:b5:10:0f:9a:49:a7:0b:26:03:ad:86:7e:6e:61:ec:69: d7:2a:23:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptuzrAnTU0fRwUrGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg1NTkyYjktOGU3Yi00Y2NiLTg3ZGMtZTFkZTJlOThi ZDgxMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk ODk2NTZkYTQtNjZiYy00NTdiLTllNzQtNjg5ZDQ4MDMxYzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoIGvl5FWBfHHAbHZEzIXiRi9/TmcS/cMccl UuB0ThRRhCj0qHQLLS/z1bRrWpGuUrm67ZBiXBBpEWc74rrS3fnT0i6SuweySMFd HiJa0Ib7k3E/FD8JwczLicIipwB1EbG5jTAz3uzeJsfktN606NR0iT9/qXWdYDCW xCqmK6V7FeSOzLqpJj5xOuA2vvwfYEd//wWAlVpe3a5ezHbTqPAGOCjO7jal+LTi wTkzH+H/h4sEZlAckhQP0pEZwIrfhRjEeksBLyjGoWfI3sTlNW1TZkD4sAxu3BLX 6YZz7lrkKPaax+L4I0WFHuvFd6tPn/KqIT4zRh651+r9xRu30wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOj6xDMCwN4tQNfhKgu+CsHYiiwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODU1 OTJiOS04ZTdiLTRjY2ItODdkYy1lMWRlMmU5OGJkODEvMjkwN2M5NTItY2YyMC0z YmZiLTgxMzYtZmZhZmM1YzY4NDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTg1NTkyYjktOGU3Yi00Y2NiLTg3 ZGMtZTFkZTJlOThiZDgxLzk4NTU5MmI5LThlN2ItNGNjYi04N2RjLWUxZGUyZTk4 YmQ4MS5jcmwwHwYDVR0jBBgwFoAUy0A2wcrf/oqJS/RLPYQLTYZ/2xYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODU1OTJiOS04ZTdiLTRjY2ItODdkYy1lMWRl MmU5OGJkODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaKf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1OL04IJIDh4+4POoUwji9yNxBWxSK1O8gB8pW+1CYUSIxXVJVTanGF ENgeZDVCpQyyWbbB3UoLoFwE98UhHLBZuk1hl8KnqatHsPddWWVSDuSaI+ztawfj jKp4AIIxBsX6Rnaa/ZFEF+7LAODsOgyfU05qH1225ia8hKyfwIbnWC33i56uOz7g QM6i3NAol8PcO52NdcFB76+ihujXawMtwXHLkPWnR0AokcqdT12XquNPaln0Zb6a vsj3sSQs7aYj4ippyrqHPAPIg87U1RrkeDfdPG2dDDfIuhJ2pkxhYw8FHVRdggAl zZ5AtRAPmkmnCyYDrYZ+bmHsadcqI1o= -----END CERTIFICATE-----Generated at Wed Aug 6 00:57:46 2025 by rpki-client