$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/cf64dd3f-c7b9-3d06-b121-e72c561a89da.roa File: cf64dd3f-c7b9-3d06-b121-e72c561a89da.roa (raw, json) Hash identifier: nv/cPVJo5vxtnEiPMY5czoL352KmRu/Bn8Y0bR2SjRo= Subject key identifier: 5D:8A:20:EB:B3:9E:9C:99:A0:3D:C1:80:75:D5:DF:7B:A0:06:D3:19 Certificate issuer: /CN=b32ded34-63dd-4272-9a22-5524e5e4ab15 Certificate serial: 010D0C9F43285849CE9A5093C050D75FC1652E80 Authority key identifier: 95:F6:91:74:F3:9D:AA:FF:0E:3E:47:55:39:37:38:C3:90:74:6B:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/cf64dd3f-c7b9-3d06-b121-e72c561a89da.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 14618 IP address blocks: 104.171.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/b32ded34-63dd-4272-9a22-5524e5e4ab15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/b32ded34-63dd-4272-9a22-5524e5e4ab15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:50:93:c0:50:d7:5f:c1:65:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32ded34-63dd-4272-9a22-5524e5e4ab15 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=0e1df23a-3618-4246-9625-dcdc3f27a466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:fa:39:2c:ed:f2:b6:1f:c7:6d:ad:c7:2f:4b: c4:39:3e:39:1c:0c:72:fd:2e:12:1a:05:bd:a3:52: 98:d5:e3:f0:5e:b8:a5:c7:93:42:fb:b7:f1:7b:d3: cf:f1:e7:38:74:22:e8:a0:16:3a:5a:11:34:f1:ac: 1e:cd:00:d3:aa:bb:1a:ec:d9:cd:7f:03:a2:b1:bd: 9d:c7:cd:06:22:62:ed:21:10:07:14:4c:0d:a7:8d: 0b:90:df:a3:c2:2c:3f:5d:5c:dd:4f:06:6d:f7:84: 96:60:98:88:5f:10:aa:22:1a:2c:29:03:ec:84:3d: 27:36:d6:42:ba:06:81:f4:31:5a:ee:64:ac:79:19: 27:8b:75:1b:d8:a1:3b:15:75:24:26:64:70:5c:31: ff:c8:f3:4d:80:65:ee:36:58:7a:b7:4b:f8:5d:97: 6a:e1:cf:27:f4:59:47:02:84:06:67:49:70:5c:2f: 5d:48:95:f0:df:53:68:a9:2d:cf:15:4b:d6:10:a4: 15:6b:e1:a1:c3:db:f7:24:3d:8f:00:a7:b1:68:8d: e9:30:ca:7c:f6:c1:38:0a:04:21:7e:c2:b2:74:9f: a2:26:8c:12:d0:4e:27:a6:3f:0c:70:6f:1a:f4:ad: 6a:37:f0:e5:02:a7:c0:4d:d7:3f:95:5e:dc:ef:34: a3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8A:20:EB:B3:9E:9C:99:A0:3D:C1:80:75:D5:DF:7B:A0:06:D3:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/cf64dd3f-c7b9-3d06-b121-e72c561a89da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/b32ded34-63dd-4272-9a22-5524e5e4ab15.crl X509v3 Authority Key Identifier: keyid:95:F6:91:74:F3:9D:AA:FF:0E:3E:47:55:39:37:38:C3:90:74:6B:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15.cer sbgp-ipAddrBlock: critical IPv4: 104.171.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:46:c4:26:d4:fa:f8:cd:e2:fa:cf:67:11:fc:32:d8:5d:ab: 86:a3:00:c9:3c:64:1b:2f:b6:83:17:fc:0c:8b:e3:0d:ce:76: 3f:9c:19:41:c7:d1:62:9e:ef:ee:14:5f:a6:2c:5a:60:0d:a4: fe:59:4c:cf:03:af:1c:84:27:f1:d4:2f:e5:64:bf:df:6a:47: a6:6e:7c:07:4c:50:3a:e4:05:ef:18:5e:c6:14:5a:a4:96:a2: 89:a5:6f:1a:29:f4:76:98:51:25:07:da:7a:cb:63:f7:e6:f0: f9:f0:c2:84:3c:5b:6f:1a:5e:ad:9a:2c:f5:92:98:5e:83:a6: 84:35:96:a9:f4:09:61:90:2f:c8:60:21:ef:c3:11:c4:bb:41: 46:f7:84:ad:8f:31:c9:2e:c4:d1:42:4d:cd:38:c2:78:65:16: 1e:bf:4a:bd:bd:ee:0e:cd:11:3d:ae:8d:35:da:a9:0e:51:1e: f7:f8:b5:d1:30:98:71:38:dd:e1:13:33:1d:f8:84:1f:55:30: ad:61:7f:4e:fe:be:d3:98:eb:ec:4f:3c:da:70:89:f3:d8:2a: 34:61:f0:fa:ae:13:b3:c9:01:42:e6:8f:04:b7:26:7e:7f:08: 84:55:3b:90:d0:b7:2f:0e:46:03:f3:4c:7e:f0:aa:a2:3d:87: 0e:95:37:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmlCTwFDXX8FlLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjMyZGVkMzQtNjNkZC00MjcyLTlhMjItNTUyNGU1ZTRh YjE1MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MGUxZGYyM2EtMzYxOC00MjQ2LTk2MjUtZGNkYzNmMjdhNDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/o5LO3yth/Hba3HL0vEOT45HAxy/S4SGgW9 o1KY1ePwXrilx5NC+7fxe9PP8ec4dCLooBY6WhE08awezQDTqrsa7NnNfwOisb2d x80GImLtIRAHFEwNp40LkN+jwiw/XVzdTwZt94SWYJiIXxCqIhosKQPshD0nNtZC ugaB9DFa7mSseRkni3Ub2KE7FXUkJmRwXDH/yPNNgGXuNlh6t0v4XZdq4c8n9FlH AoQGZ0lwXC9dSJXw31NoqS3PFUvWEKQVa+Ghw9v3JD2PAKexaI3pMMp89sE4CgQh fsKydJ+iJowS0E4npj8McG8a9K1qN/DlAqfATdc/lV7c7zSjnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2KIOuznpyZoD3BgHXV33ugBtMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMzJk ZWQzNC02M2RkLTQyNzItOWEyMi01NTI0ZTVlNGFiMTUvY2Y2NGRkM2YtYzdiOS0z ZDA2LWIxMjEtZTcyYzU2MWE4OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjMyZGVkMzQtNjNkZC00MjcyLTlh MjItNTUyNGU1ZTRhYjE1L2IzMmRlZDM0LTYzZGQtNDI3Mi05YTIyLTU1MjRlNWU0 YWIxNS5jcmwwHwYDVR0jBBgwFoAUlfaRdPOdqv8OPkdVOTc4w5B0a5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMzJkZWQzNC02M2RkLTQyNzItOWEyMi01NTI0 ZTVlNGFiMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKvGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFGxCbU+vjN4vrPZxH8Mthdq4ajAMk8ZBsvtoMX/AyL4w3Odj+cGUHH 0WKe7+4UX6YsWmANpP5ZTM8DrxyEJ/HUL+Vkv99qR6ZufAdMUDrkBe8YXsYUWqSW oomlbxop9HaYUSUH2nrLY/fm8PnwwoQ8W28aXq2aLPWSmF6DpoQ1lqn0CWGQL8hg Ie/DEcS7QUb3hK2PMckuxNFCTc04wnhlFh6/Sr297g7NET2ujTXaqQ5RHvf4tdEw mHE43eETMx34hB9VMK1hf07+vtOY6+xPPNpwifPYKjRh8PquE7PJAULmjwS3Jn5/ CIRVO5DQty8ORgPzTH7wqqI9hw6VNxs= -----END CERTIFICATE-----Generated at Sun Jun 15 08:58:58 2025 by rpki-client