$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/eaf7e485-7ab8-383a-af6e-1d1d48e46da5.roa File: eaf7e485-7ab8-383a-af6e-1d1d48e46da5.roa (raw, json) Hash identifier: db4zcEt0+3zWhp82xups3eUGwO6IM9/U1ukPNxMUGe8= Subject key identifier: 68:14:7A:14:45:48:F5:D0:2C:DD:73:7E:1C:A5:CA:EB:5E:1B:D5:B6 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584A8575F853CBC1269FF6123A80 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/eaf7e485-7ab8-383a-af6e-1d1d48e46da5.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 21743 IP address blocks: 104.247.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:f8:53:cb:c1:26:9f:f6:12:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=3db539c1-d36c-4a66-af0e-dd30d711d9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6a:5f:17:c2:4b:3d:7f:de:cb:4d:d4:3b:4e: 1e:dd:67:cb:d1:4f:63:63:42:b9:36:a1:c3:05:42: 36:6b:f0:78:3e:7c:d4:53:1a:d2:56:7f:b5:fd:82: 3f:26:18:1b:c5:a3:61:1e:63:1e:da:f8:8d:d8:9a: 48:a3:b6:4b:fb:b3:70:ce:cc:64:d9:a5:3f:d3:6e: c3:31:9a:c9:5a:9f:5e:92:7f:5c:f3:22:37:0a:60: 59:2d:83:c1:3e:c7:89:18:f6:0c:f7:82:1d:b7:97: 58:29:34:dc:3c:5c:c2:04:73:a8:56:bf:cf:7c:5b: cd:99:b6:90:ea:e2:cf:01:1a:43:00:0f:ff:ea:0d: 4e:84:bf:48:4e:bb:c3:6f:59:dd:55:43:57:8b:41: 33:c0:54:4b:bd:8c:33:9b:35:f8:51:e2:b4:04:4e: 82:e6:ef:bd:3d:c6:f2:ce:38:3b:c4:d5:a7:92:39: c1:0f:38:86:d2:20:80:86:6c:5c:ae:46:32:58:27: 04:73:41:c2:aa:0c:44:99:86:6a:05:0c:aa:18:5e: c7:8a:04:d8:03:06:15:8a:cc:66:d6:b2:04:5a:3a: 9e:31:8f:5e:42:3a:43:b0:6f:03:43:15:88:ac:c7: 26:b4:11:6d:0d:57:13:d2:e0:c4:2a:cf:1e:a5:65: 8c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:14:7A:14:45:48:F5:D0:2C:DD:73:7E:1C:A5:CA:EB:5E:1B:D5:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/eaf7e485-7ab8-383a-af6e-1d1d48e46da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 104.247.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:8a:2c:05:08:fe:5a:cb:d3:71:df:33:77:47:73:f5:67:77: c1:17:1d:fa:31:7b:43:9d:fa:a9:1b:b2:d5:29:b0:2f:41:a9: 21:18:f9:09:7e:ce:bb:46:96:72:22:bf:11:49:5e:76:99:76: 26:1b:77:54:61:1d:c4:63:56:cb:01:09:80:71:2c:7c:92:75: 20:94:3c:f6:62:bc:3f:bd:fd:7a:f5:02:4b:ca:f8:02:90:9a: 20:da:91:01:88:83:03:eb:53:df:f1:77:9e:ea:66:15:49:94: 8c:c5:5a:9c:cf:96:6f:d3:7a:c3:51:a8:a5:e7:e0:43:11:bf: 92:6a:40:8c:9e:8c:6a:b8:5b:1c:2e:e2:45:05:1e:de:5d:69: fc:ab:0d:8a:d9:6b:51:7c:b0:98:3c:fc:b3:75:5d:02:b8:fb: 04:da:a1:88:e4:71:74:82:1e:70:87:9d:9a:e5:0a:82:0a:c4: 00:00:ff:4f:f6:20:b3:56:15:7c:10:6a:47:a5:21:99:34:1e: 06:64:06:f1:b4:bb:7f:0a:cd:30:ef:25:93:f0:60:f1:84:a6: cf:89:2e:f1:60:c8:fd:e1:f3:a9:a6:a4:72:6c:f9:97:77:ae: 28:96:0d:c8:ed:2e:6f:8a:cc:e5:4b:07:05:4d:52:e2:74:b3: b4:4d:79:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdfhTy8Emn/YSOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk M2RiNTM5YzEtZDM2Yy00YTY2LWFmMGUtZGQzMGQ3MTFkOWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmpfF8JLPX/ey03UO04e3WfL0U9jY0K5NqHD BUI2a/B4PnzUUxrSVn+1/YI/JhgbxaNhHmMe2viN2JpIo7ZL+7Nwzsxk2aU/027D MZrJWp9ekn9c8yI3CmBZLYPBPseJGPYM94Idt5dYKTTcPFzCBHOoVr/PfFvNmbaQ 6uLPARpDAA//6g1OhL9ITrvDb1ndVUNXi0EzwFRLvYwzmzX4UeK0BE6C5u+9Pcby zjg7xNWnkjnBDziG0iCAhmxcrkYyWCcEc0HCqgxEmYZqBQyqGF7HigTYAwYVisxm 1rIEWjqeMY9eQjpDsG8DQxWIrMcmtBFtDVcT0uDEKs8epWWMBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgUehRFSPXQLN1zfhylyuteG9W2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvZWFmN2U0ODUtN2FiOC0z ODNhLWFmNmUtMWQxZDQ4ZTQ2ZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPd5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOKLAUI/lrL03HfM3dHc/Vnd8EXHfoxe0Od+qkbstUpsC9BqSEY+Ql+ zrtGlnIivxFJXnaZdiYbd1RhHcRjVssBCYBxLHySdSCUPPZivD+9/Xr1AkvK+AKQ miDakQGIgwPrU9/xd57qZhVJlIzFWpzPlm/TesNRqKXn4EMRv5JqQIyejGq4Wxwu 4kUFHt5dafyrDYrZa1F8sJg8/LN1XQK4+wTaoYjkcXSCHnCHnZrlCoIKxAAA/0/2 ILNWFXwQakelIZk0HgZkBvG0u38KzTDvJZPwYPGEps+JLvFgyP3h86mmpHJs+Zd3 riiWDcjtLm+KzOVLBwVNUuJ0s7RNeR0= -----END CERTIFICATE-----Generated at Mon Jul 21 18:08:52 2025 by rpki-client