$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/90e30d69-d192-3d3b-af69-a1564717f280.roa File: 90e30d69-d192-3d3b-af69-a1564717f280.roa (raw, json) Hash identifier: 4oIITewTmXgkjmJMThmxhbPkV8ydF7D2AQrFpsCuByc= Subject key identifier: A5:2F:A9:6E:0E:13:E1:24:17:B4:B4:C1:69:02:F4:D8:66:A5:78:76 Certificate issuer: /CN=3681ef63-b03c-48af-8191-e13ce8cb78c3 Certificate serial: 010D0C9F4328584A79B944C132C86F3C654F1980 Authority key identifier: 7B:B8:74:AC:94:43:89:50:D9:20:1E:3B:BD:36:E6:81:97:D1:3E:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/90e30d69-d192-3d3b-af69-a1564717f280.roa Signing time: Thu 10 Jul 2025 20:06:52 +0000 ROA not before: Thu 10 Jul 2025 20:06:52 +0000 ROA not after: Wed 08 Oct 2025 20:06:52 +0000 asID: 30580 IP address blocks: 104.249.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/3681ef63-b03c-48af-8191-e13ce8cb78c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/3681ef63-b03c-48af-8191-e13ce8cb78c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:79:b9:44:c1:32:c8:6f:3c:65:4f:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3681ef63-b03c-48af-8191-e13ce8cb78c3 Validity Not Before: Jul 10 20:06:52 2025 GMT Not After : Oct 8 20:06:52 2025 GMT Subject: CN=da1df2a2-75f2-4ec9-9457-e7f386cbd378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b8:8e:d3:c1:ca:70:fd:b4:d8:63:3d:86:bd: 74:21:12:5e:59:be:5f:dd:6d:c0:07:b7:c3:ff:13: 74:ed:65:23:d1:15:29:81:45:45:5b:ce:c0:c8:21: 63:d4:85:a9:8c:42:fd:3f:2d:43:83:47:b9:fc:00: 85:a1:ea:7e:63:09:65:64:b8:e9:36:f3:4b:21:14: eb:67:39:c8:72:1c:25:6b:ce:13:9e:25:67:8d:bc: dc:69:ce:7e:b3:f1:7f:3a:5a:83:13:fa:3b:ec:06: 59:d8:31:42:13:f0:be:46:82:d0:ac:e3:e3:37:a3: 7d:fc:5c:f2:a8:69:7a:2d:76:8e:36:fc:a9:b8:44: 19:a4:fe:3c:a4:fd:50:53:ba:ed:55:98:bb:80:b3: 6a:17:70:a7:2e:80:5d:7f:ef:2b:4e:47:16:b9:f5: 27:f7:cd:09:48:2a:fd:0a:82:ed:cf:70:89:6d:37: 68:79:24:de:30:4f:cc:e8:fa:fe:18:e0:a7:40:d5: b5:e8:0e:53:3f:c3:fc:40:21:b4:71:96:00:18:0a: 4d:a3:8f:74:08:0b:2f:38:e8:01:a7:e4:42:32:2c: 6f:53:43:3f:23:1b:2f:8f:ec:ff:13:ce:7e:11:7e: 4c:a0:80:85:b9:b8:e7:29:83:36:c8:f5:46:53:19: fe:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2F:A9:6E:0E:13:E1:24:17:B4:B4:C1:69:02:F4:D8:66:A5:78:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/90e30d69-d192-3d3b-af69-a1564717f280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/3681ef63-b03c-48af-8191-e13ce8cb78c3.crl X509v3 Authority Key Identifier: keyid:7B:B8:74:AC:94:43:89:50:D9:20:1E:3B:BD:36:E6:81:97:D1:3E:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3.cer sbgp-ipAddrBlock: critical IPv4: 104.249.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:52:2d:05:39:3a:3f:06:24:5b:70:26:34:31:9d:98:95:b2: 1c:64:11:56:a8:d7:03:e5:b0:36:00:56:e3:07:25:43:aa:fa: 03:c6:69:02:7e:ae:54:68:4d:a2:a5:7e:d0:b8:5e:29:86:b5: fe:00:bb:2e:d1:58:2e:c9:dd:43:a9:ab:19:90:c1:3b:0d:cf: 3c:06:13:62:67:af:de:ee:a9:9d:c8:36:26:fd:c0:ff:a4:78: 07:6e:2f:b3:63:be:07:40:c6:7e:48:3d:50:13:00:4d:90:b7: e0:6f:93:ff:18:1a:4a:85:44:b4:f2:e8:52:d3:43:5a:c3:37: fe:8f:3a:84:cf:17:1e:27:42:f2:52:4c:65:21:c8:5a:3e:29: 9b:b5:72:4f:db:a8:3d:ae:25:f3:7e:a0:9a:fc:05:d3:5f:89: aa:4e:7e:ec:ae:02:cd:4a:f0:d7:cf:95:9f:ad:cd:16:be:09: 32:27:82:bb:e9:a3:13:da:9f:43:c8:b9:32:ac:0c:dc:6c:24: e0:d1:dc:f5:b7:c2:cd:2b:4f:98:92:4d:2f:5a:78:a8:18:9a: e3:d3:63:50:fb:77:b1:a0:8b:b9:74:de:b7:67:f5:53:25:81: ba:04:ac:61:e5:29:e3:46:d7:57:d2:8a:60:57:ee:f5:44:4d: 75:0c:86:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp5uUTBMshvPGVPGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4MWVmNjMtYjAzYy00OGFmLTgxOTEtZTEzY2U4Y2I3 OGMzMB4XDTI1MDcxMDIwMDY1MloXDTI1MTAwODIwMDY1MlowLzEtMCsGA1UEAxMk ZGExZGYyYTItNzVmMi00ZWM5LTk0NTctZTdmMzg2Y2JkMzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLiO08HKcP202GM9hr10IRJeWb5f3W3AB7fD /xN07WUj0RUpgUVFW87AyCFj1IWpjEL9Py1Dg0e5/ACFoep+YwllZLjpNvNLIRTr ZznIchwla84TniVnjbzcac5+s/F/OlqDE/o77AZZ2DFCE/C+RoLQrOPjN6N9/Fzy qGl6LXaONvypuEQZpP48pP1QU7rtVZi7gLNqF3CnLoBdf+8rTkcWufUn980JSCr9 CoLtz3CJbTdoeSTeME/M6Pr+GOCnQNW16A5TP8P8QCG0cZYAGApNo490CAsvOOgB p+RCMixvU0M/Ixsvj+z/E85+EX5MoICFubjnKYM2yPVGUxn+VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUvqW4OE+EkF7S0wWkC9NhmpXh2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNjgx ZWY2My1iMDNjLTQ4YWYtODE5MS1lMTNjZThjYjc4YzMvOTBlMzBkNjktZDE5Mi0z ZDNiLWFmNjktYTE1NjQ3MTdmMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzY4MWVmNjMtYjAzYy00OGFmLTgx OTEtZTEzY2U4Y2I3OGMzLzM2ODFlZjYzLWIwM2MtNDhhZi04MTkxLWUxM2NlOGNi NzhjMy5jcmwwHwYDVR0jBBgwFoAUe7h0rJRDiVDZIB47vTbmgZfRPg8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNjgxZWY2My1iMDNjLTQ4YWYtODE5MS1lMTNj ZThjYjc4YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5SLQU5Oj8GJFtwJjQxnZiVshxkEVao1wPlsDYAVuMHJUOq+gPGaQJ+ rlRoTaKlftC4XimGtf4Auy7RWC7J3UOpqxmQwTsNzzwGE2Jnr97uqZ3INib9wP+k eAduL7NjvgdAxn5IPVATAE2Qt+Bvk/8YGkqFRLTy6FLTQ1rDN/6POoTPFx4nQvJS TGUhyFo+KZu1ck/bqD2uJfN+oJr8BdNfiapOfuyuAs1K8NfPlZ+tzRa+CTIngrvp oxPan0PIuTKsDNxsJODR3PW3ws0rT5iSTS9aeKgYmuPTY1D7d7Ggi7l03rdn9VMl gboErGHlKeNG11fSimBX7vVETXUMhkI= -----END CERTIFICATE-----Generated at Sun Aug 10 19:47:25 2025 by rpki-client