$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8df1d45d-f0f6-331a-aa48-9c48058a3859.roa File: 8df1d45d-f0f6-331a-aa48-9c48058a3859.roa (raw, json) Hash identifier: JBQNQVgNdO8U0Onm8SV2zXdblkKIckwZoKLe/+AdMg8= Subject key identifier: EE:0E:28:D8:C2:6A:CA:04:41:6F:CA:3F:60:37:F7:E0:FB:4F:69:4D Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584A7FE097608F7F2463DB73FB00 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8df1d45d-f0f6-331a-aa48-9c48058a3859.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 213122 IP address blocks: 104.249.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:97:60:8f:7f:24:63:db:73:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=4948133c-982c-4164-8259-d2e2e7fda510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f7:dc:86:e4:a6:4e:a7:42:01:70:28:15:4d: e6:d9:e4:22:df:e6:97:8d:88:7d:9f:6d:da:b9:bb: db:1f:ab:68:36:8f:f2:b8:c1:79:74:bb:0e:06:46: 5e:48:b5:79:44:82:61:43:7f:c9:8c:b2:9e:04:3b: b4:c8:38:74:a7:fe:b4:0f:52:96:b0:d5:55:51:fd: 9d:dc:a2:dc:87:7a:08:d8:dc:16:a9:b2:83:5c:8e: 6f:d7:ab:27:36:99:80:bb:18:8e:15:a8:eb:77:e9: 95:25:46:60:7e:c3:ee:e3:ac:d9:89:9c:ed:01:2e: 25:e9:62:97:83:92:80:99:a4:2f:1e:69:75:75:52: fe:c2:25:88:5f:57:a5:60:8d:07:ba:c2:ef:45:da: 92:23:27:ef:a4:ee:a1:b6:16:5b:15:98:3f:a8:7b: 5c:dd:8d:74:a3:f9:e0:f4:59:6a:f4:41:f7:df:b9: 65:54:05:8d:05:26:31:6b:46:0a:08:c4:b4:b0:01: 32:61:c7:26:84:c1:de:11:e6:e2:4b:13:ca:cc:f7: 01:a0:16:f4:b3:e1:6a:63:1a:f8:5e:d8:cc:a3:8e: 8f:fd:b8:ae:25:36:bf:ce:14:1e:6e:f0:c3:55:54: 94:f7:fa:02:9d:70:89:5e:89:c2:88:41:ec:b6:72: 98:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0E:28:D8:C2:6A:CA:04:41:6F:CA:3F:60:37:F7:E0:FB:4F:69:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8df1d45d-f0f6-331a-aa48-9c48058a3859.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.249.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:6a:7a:18:24:25:8c:0a:9f:2e:7c:4f:96:25:d3:36:3a:5c: d2:14:e0:0f:3b:6a:64:61:ad:ba:92:a5:50:32:18:62:8a:ab: 21:58:76:a6:04:23:24:89:9f:a6:f3:62:db:9e:f1:93:ad:99: 28:bc:c5:9b:a6:1c:45:35:37:f5:41:b8:a6:0b:4e:07:8d:33: f9:04:a4:bc:90:91:19:c6:57:d8:65:a8:ee:0c:6c:78:2e:a0: 78:76:7f:63:f6:8b:c0:1f:b6:2a:fe:3a:da:da:df:fd:40:68: 57:44:10:3f:dc:83:53:3d:ab:42:e0:4e:15:d5:e7:79:50:7f: ea:1d:dc:b8:65:e2:79:41:51:67:02:71:1e:31:86:5b:e9:9e: 65:11:25:27:72:4c:12:eb:57:8a:29:75:86:6b:fb:be:e3:4f: 03:cb:2f:aa:a9:c5:fd:0f:7e:64:8b:e1:0d:83:21:d2:fa:f6: cd:d7:89:f7:66:32:85:65:d5:78:5f:7b:7e:b3:a1:88:f9:01: 94:cb:6c:14:2b:d4:6d:eb:81:6f:c9:bd:c1:29:9a:09:d9:09: 55:e4:df:43:2a:02:f5:f9:bf:46:bd:71:f8:31:79:bf:16:5d: 7a:11:8a:e1:98:7c:3b:43:7a:2a:b4:4c:da:85:0a:f6:ff:08: be:6f:32:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4Jdgj38kY9tz+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk NDk0ODEzM2MtOTgyYy00MTY0LTgyNTktZDJlMmU3ZmRhNTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPfchuSmTqdCAXAoFU3m2eQi3+aXjYh9n23a ubvbH6toNo/yuMF5dLsOBkZeSLV5RIJhQ3/JjLKeBDu0yDh0p/60D1KWsNVVUf2d 3KLch3oI2NwWqbKDXI5v16snNpmAuxiOFajrd+mVJUZgfsPu46zZiZztAS4l6WKX g5KAmaQvHml1dVL+wiWIX1elYI0HusLvRdqSIyfvpO6hthZbFZg/qHtc3Y10o/ng 9Flq9EH337llVAWNBSYxa0YKCMS0sAEyYccmhMHeEebiSxPKzPcBoBb0s+FqYxr4 XtjMo46P/biuJTa/zhQebvDDVVSU9/oCnXCJXonCiEHstnKYzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4OKNjCasoEQW/KP2A39+D7T2lNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvOGRmMWQ0NWQtZjBmNi0z MzFhLWFhNDgtOWM0ODA1OGEzODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxqehgkJYwKny58T5Yl0zY6XNIU4A87amRhrbqSpVAyGGKKqyFYdqYE IySJn6bzYtue8ZOtmSi8xZumHEU1N/VBuKYLTgeNM/kEpLyQkRnGV9hlqO4MbHgu oHh2f2P2i8Aftir+Otra3/1AaFdEED/cg1M9q0LgThXV53lQf+od3Lhl4nlBUWcC cR4xhlvpnmURJSdyTBLrV4opdYZr+77jTwPLL6qpxf0PfmSL4Q2DIdL69s3Xifdm MoVl1Xhfe36zoYj5AZTLbBQr1G3rgW/JvcEpmgnZCVXk30MqAvX5v0a9cfgxeb8W XXoRiuGYfDtDeiq0TNqFCvb/CL5vMuY= -----END CERTIFICATE-----Generated at Sun Jul 20 14:51:40 2025 by rpki-client