$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/cb0085db-84a3-3eed-9a41-b2fb4a2b89f5.roa File: cb0085db-84a3-3eed-9a41-b2fb4a2b89f5.roa (raw, json) Hash identifier: uSWh7x5Hgg2rzsU6Bxx73NwPUlOVBeayNldge3rPYLo= Subject key identifier: CD:AE:AD:F5:F7:E8:6F:01:9B:71:02:1B:93:D4:24:A7:88:E5:04:0C Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F4328584A77808D0C9011981F5269B9F4 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/cb0085db-84a3-3eed-9a41-b2fb4a2b89f5.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 26512 IP address blocks: 104.244.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:8d:0c:90:11:98:1f:52:69:b9:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=ec6f5368-a9a9-43c8-9aef-294004d29fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b6:96:29:da:a3:95:8e:f3:79:9c:d3:0c:70: 19:f0:6b:52:6c:58:0a:3c:c9:5b:83:01:cc:c6:ef: 63:8b:61:fd:55:48:0a:5f:0a:88:24:06:d3:ca:02: da:ca:a4:0f:ce:e4:d5:89:3c:f6:e0:a8:c1:48:4e: 1c:1f:71:2f:9f:ef:f0:5a:6e:8d:8b:46:db:47:6a: f7:6d:6e:a9:f8:74:e9:39:3f:5c:da:02:0d:94:bc: 0c:84:4b:fa:68:75:56:c6:64:c8:19:a3:03:98:17: b6:69:57:2c:28:c3:cf:ed:5c:96:77:8c:8a:56:05: 54:6c:74:a0:ab:6f:84:47:ea:3c:38:1b:07:91:fe: cb:5c:56:3c:75:23:b4:50:66:f6:d8:be:55:de:02: e0:d6:19:af:f7:1e:d9:1d:a2:ff:d8:0e:37:31:7a: b3:59:5e:75:72:5b:b0:9f:f0:db:04:84:b7:7d:af: ce:57:36:e1:bd:d6:81:21:f2:ec:0d:f5:11:c2:80: 89:b0:e0:10:13:d1:a6:0c:4c:86:c7:21:6d:81:8b: 77:98:78:f0:01:ba:45:12:2b:8e:56:fa:86:0a:0b: db:4d:46:ec:9e:9f:d1:49:de:e1:37:a3:89:c6:bc: f9:6d:9e:a6:f6:bb:e8:9f:bc:bb:25:14:7b:1f:61: a4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AE:AD:F5:F7:E8:6F:01:9B:71:02:1B:93:D4:24:A7:88:E5:04:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/cb0085db-84a3-3eed-9a41-b2fb4a2b89f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.244.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:83:2f:96:d0:de:3d:23:c1:a7:79:94:a1:07:67:7d:57:6b: a2:17:6b:2a:17:0a:cb:20:5f:2a:44:8e:6d:62:8f:53:50:30: 45:6a:d9:bf:da:ca:4f:1c:3e:c5:cc:72:f6:c6:61:aa:13:8f: e5:ba:0b:ed:af:2e:0d:23:92:fb:c8:c6:da:ce:c0:74:95:f8: 1e:10:cb:d9:8f:11:e1:7f:a6:6e:fa:82:31:92:6c:19:34:87: e2:f4:a8:f0:b4:70:75:f3:a0:bd:8f:2d:42:e2:20:cf:a4:21: d6:67:bf:17:3f:01:27:09:82:8d:bd:04:4b:71:e8:3b:31:0e: 85:25:4f:db:26:f3:1c:00:15:b0:8c:b0:4a:9f:84:bc:56:79: 51:f4:44:7f:23:2d:94:f2:01:c4:8c:c4:8e:1f:68:27:9b:1b: cc:f7:e8:8c:ac:19:43:98:9d:3a:af:41:6b:57:38:0e:d1:84: c9:b1:ca:65:34:78:df:ae:63:3c:e4:24:32:93:d9:7a:99:a0: 6a:46:36:82:11:27:9f:a4:6f:d0:a7:9a:ca:d6:bb:13:b9:2b: db:32:23:5c:9e:41:d2:b3:d5:44:4e:db:24:1c:ba:bb:71:77: d8:17:2f:57:12:50:2c:79:37:bb:d2:0e:de:dc:af:5d:df:b9: 3a:62:14:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gI0MkBGYH1JpufQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk ZWM2ZjUzNjgtYTlhOS00M2M4LTlhZWYtMjk0MDA0ZDI5ZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8baWKdqjlY7zeZzTDHAZ8GtSbFgKPMlbgwHM xu9ji2H9VUgKXwqIJAbTygLayqQPzuTViTz24KjBSE4cH3Evn+/wWm6Ni0bbR2r3 bW6p+HTpOT9c2gINlLwMhEv6aHVWxmTIGaMDmBe2aVcsKMPP7VyWd4yKVgVUbHSg q2+ER+o8OBsHkf7LXFY8dSO0UGb22L5V3gLg1hmv9x7ZHaL/2A43MXqzWV51cluw n/DbBIS3fa/OVzbhvdaBIfLsDfURwoCJsOAQE9GmDEyGxyFtgYt3mHjwAbpFEiuO VvqGCgvbTUbsnp/RSd7hN6OJxrz5bZ6m9rvon7y7JRR7H2GkwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2urfX36G8Bm3ECG5PUJKeI5QQMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvY2IwMDg1ZGItODRhMy0z ZWVkLTlhNDEtYjJmYjRhMmI4OWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPQTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiDL5bQ3j0jwad5lKEHZ31Xa6IXayoXCssgXypEjm1ij1NQMEVq2b/a yk8cPsXMcvbGYaoTj+W6C+2vLg0jkvvIxtrOwHSV+B4Qy9mPEeF/pm76gjGSbBk0 h+L0qPC0cHXzoL2PLULiIM+kIdZnvxc/AScJgo29BEtx6DsxDoUlT9sm8xwAFbCM sEqfhLxWeVH0RH8jLZTyAcSMxI4faCebG8z36IysGUOYnTqvQWtXOA7RhMmxymU0 eN+uYzzkJDKT2XqZoGpGNoIRJ5+kb9CnmsrWuxO5K9syI1yeQdKz1URO2yQcurtx d9gXL1cSUCx5N7vSDt7cr13fuTpiFBI= -----END CERTIFICATE-----Generated at Thu Aug 7 17:25:16 2025 by rpki-client