$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa File: 2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa (raw, json) Hash identifier: F6gzVxg0wujzwqWEmbp5ikTkCnbwP1699on0CBS8Ehs= Subject key identifier: 4E:D4:F6:2A:DB:57:5D:BE:40:09:3F:9C:66:1B:26:2D:69:55:8F:FC Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584B153C1794D139300A5E4FE020 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 4540 IP address blocks: 104.151.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:17:94:d1:39:30:0a:5e:4f:e0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=9457485b-2ab4-4532-8d24-10576208157a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c6:73:61:5c:f6:db:80:e0:cb:07:7a:fe:a7: 97:69:39:7c:43:30:a7:c6:fb:32:f8:d7:bc:87:f3: 62:84:3b:62:3a:c4:9c:8e:a3:f0:13:77:02:45:26: c2:97:b4:a9:c6:75:81:8f:08:0c:b3:22:58:c3:ca: a6:b8:5f:57:d1:80:d7:54:f3:11:a7:a8:10:71:c3: 0d:a5:77:f4:e2:8d:3b:dc:97:40:55:29:22:b4:2d: ce:d4:b9:02:79:cc:74:1b:fe:c8:40:04:e3:9d:5e: 09:2d:e3:b4:47:de:93:48:d2:14:d6:b6:87:86:2d: a9:f3:10:47:f0:03:fe:a3:5d:ad:aa:e3:e6:c3:8a: e6:c6:b6:3d:8e:b3:c8:b8:2f:19:b7:99:71:47:e4: 21:bd:f6:50:80:db:88:80:ac:22:4d:66:79:d3:0c: 14:9d:a5:29:c2:d4:5b:2c:e6:54:ff:f9:f2:25:0c: 2a:55:81:fb:c6:c6:7a:f4:27:44:5c:fa:a3:ee:70: a3:3b:32:2c:73:39:fc:d7:d0:97:1c:9b:10:6c:27: d6:fa:24:da:a4:c5:cb:41:e0:88:7f:46:4e:38:87: 50:20:de:82:64:ed:cc:a3:85:75:d6:39:fa:c0:56: 7e:20:54:bd:75:4e:f0:9b:8e:6e:41:b7:f0:8f:c8: 6f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D4:F6:2A:DB:57:5D:BE:40:09:3F:9C:66:1B:26:2D:69:55:8F:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 104.151.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:6e:d5:7c:4a:2f:de:ec:df:de:6a:c7:5e:63:7c:e8:b0:74: 5b:40:fd:0e:40:87:fb:69:46:2e:5a:21:38:91:c0:1c:98:4d: 19:b3:c6:28:6a:f7:c8:c5:7c:79:72:c8:62:c7:d3:9a:dd:cf: d1:36:5f:66:0a:21:83:77:81:7e:f7:98:e1:1f:2b:19:ad:de: 3e:50:4f:30:7d:54:66:1b:70:5a:54:0d:56:39:80:f2:e3:d0: d7:72:52:54:0b:e4:88:4d:09:93:c1:5c:ff:02:d1:b2:ef:a9: 0a:97:c8:45:a6:2e:04:56:e6:9b:01:44:00:85:e0:a5:ab:c1: ac:75:55:4b:d0:ab:82:cd:6a:52:cf:7c:8e:a0:b1:16:ab:2f: da:f2:94:55:89:10:6c:24:46:83:57:50:b2:6a:9a:72:ff:04: 9e:1e:00:cd:68:06:b3:24:ee:58:e6:46:52:a2:65:af:c7:cd: 87:79:1b:c4:51:c6:d4:ea:03:77:55:0b:6f:1c:5a:1b:df:3f: 5a:f3:e9:06:11:93:a0:b6:e4:35:6d:4a:d4:bb:79:0e:62:3f: 1d:ed:6c:06:a1:79:58:cd:3b:34:06:de:28:47:38:ab:10:7f: 3f:58:0b:26:5d:a3:02:33:ca:3f:46:05:79:b1:1b:84:3a:73: f0:38:b0:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBeU0TkwCl5P4CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk OTQ1NzQ4NWItMmFiNC00NTMyLThkMjQtMTA1NzYyMDgxNTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48ZzYVz224Dgywd6/qeXaTl8QzCnxvsy+Ne8 h/NihDtiOsScjqPwE3cCRSbCl7SpxnWBjwgMsyJYw8qmuF9X0YDXVPMRp6gQccMN pXf04o073JdAVSkitC3O1LkCecx0G/7IQATjnV4JLeO0R96TSNIU1raHhi2p8xBH 8AP+o12tquPmw4rmxrY9jrPIuC8Zt5lxR+QhvfZQgNuIgKwiTWZ50wwUnaUpwtRb LOZU//nyJQwqVYH7xsZ69CdEXPqj7nCjOzIsczn819CXHJsQbCfW+iTapMXLQeCI f0ZOOIdQIN6CZO3Mo4V11jn6wFZ+IFS9dU7wm45uQbfwj8hvbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7U9irbV12+QAk/nGYbJi1pVY/8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMjk0NmFjMjAtNTI5ZS0z YzhjLThkZmItNWJhZjQxZDBmMjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaJeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMpu1XxKL97s395qx15jfOiwdFtA/Q5Ah/tpRi5aITiRwByYTRmzxihq 98jFfHlyyGLH05rdz9E2X2YKIYN3gX73mOEfKxmt3j5QTzB9VGYbcFpUDVY5gPLj 0NdyUlQL5IhNCZPBXP8C0bLvqQqXyEWmLgRW5psBRACF4KWrwax1VUvQq4LNalLP fI6gsRarL9rylFWJEGwkRoNXULJqmnL/BJ4eAM1oBrMk7ljmRlKiZa/HzYd5G8RR xtTqA3dVC28cWhvfP1rz6QYRk6C25DVtStS7eQ5iPx3tbAaheVjNOzQG3ihHOKsQ fz9YCyZdowIzyj9GBXmxG4Q6c/A4sEM= -----END CERTIFICATE-----Generated at Fri Oct 10 22:27:01 2025 by rpki-client