$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/87e18ed9-a210-3d88-b807-6e991937baa5.roa File: 87e18ed9-a210-3d88-b807-6e991937baa5.roa (raw, json) Hash identifier: jPKMrBdDTEUeTeQoNnXUJfHpGjB2VunpOcvw8W7t8iM= Subject key identifier: FD:72:DE:76:7B:46:1E:0D:AD:C4:76:7F:47:83:B4:71:51:81:F5:4C Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584A612B1B7905A3E95B1BD12040 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/87e18ed9-a210-3d88-b807-6e991937baa5.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 398993 IP address blocks: 104.233.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:1b:79:05:a3:e9:5b:1b:d1:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=88c33b79-ddb0-44fc-a312-1b41cf6ca315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ec:f8:c7:42:f2:b8:94:3e:a4:4e:ad:f3:e8: 22:3b:98:44:f4:58:aa:f2:a3:20:c0:1d:6b:ef:65: a8:7e:cb:c5:aa:d1:73:44:53:45:e7:72:99:4f:b0: 30:11:80:cb:66:72:a6:79:34:27:92:f3:89:9e:a8: c0:4a:d2:eb:f1:38:02:4a:f6:c8:07:2b:85:14:7e: 1b:af:78:66:48:f4:3e:96:db:66:7d:77:f8:37:6e: e9:b7:4a:0e:43:ed:af:d9:3c:d3:58:64:62:7a:3b: f4:b6:4e:af:07:3d:94:54:83:63:29:09:45:c9:7a: 9e:eb:b1:3a:31:3b:48:e3:d1:dd:db:e6:db:22:90: aa:f9:d1:38:2d:1e:ec:aa:d8:a1:2d:21:ee:fb:1e: 73:a9:4b:94:de:8e:de:77:71:c8:54:8d:a2:f0:ea: a1:1c:9a:4e:59:9a:9b:d9:72:ea:fd:18:b4:d1:1f: 30:ea:99:f6:3f:91:10:55:da:d8:18:65:d0:97:01: 6e:55:21:1b:9c:ab:63:2f:32:fe:7e:02:c8:c2:dd: 5b:a3:af:58:94:a0:d3:63:44:ac:28:b4:6f:55:ea: 05:e1:81:0e:ca:6f:1a:8f:11:4a:61:0f:ec:ee:75: 13:79:3d:ad:a8:ca:6d:db:7a:54:56:eb:8d:d3:ce: 81:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:72:DE:76:7B:46:1E:0D:AD:C4:76:7F:47:83:B4:71:51:81:F5:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/87e18ed9-a210-3d88-b807-6e991937baa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 104.233.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:d8:9b:56:73:cb:5f:f9:0d:1b:20:29:21:bd:89:58:67:23: 4d:19:bc:1f:e4:3b:b4:dd:8a:03:c5:ff:85:84:b8:15:dd:31: d1:7c:84:4c:3e:aa:c1:14:95:ea:05:80:25:b5:6b:ee:c2:fb: be:06:60:2e:d7:c8:9c:28:af:49:29:86:89:a7:b9:20:05:3c: 89:28:8b:3f:73:1f:2b:e7:4b:a6:16:96:6b:6f:de:49:c7:b4: 33:6b:18:b8:1b:bf:59:93:03:12:37:45:97:cf:e2:51:1e:50: 9a:a2:46:d1:89:30:e6:7f:62:fb:da:67:11:4e:fc:ad:90:18: 86:b4:06:ff:4d:f6:a2:97:3c:ed:21:17:3b:aa:19:1b:98:4c: 39:45:80:3f:65:62:d3:80:85:c3:4d:45:0f:95:ef:c8:97:ce: 73:5f:5b:80:df:f1:7b:74:b4:a2:33:3e:44:04:ff:43:e8:c2: 03:f2:45:09:5b:e9:6f:3b:c2:70:b7:b8:e9:bb:8b:1c:72:40: 97:e2:ff:14:1a:21:28:d8:eb:59:cb:c0:fb:b2:77:bd:da:23: 00:1e:f8:5f:ee:5d:59:b9:fe:68:23:ee:b7:d1:da:2c:90:01: 8a:5d:ae:ab:11:74:b5:8e:c4:75:00:71:e7:d5:ca:62:67:b9: 65:8e:7e:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxt5BaPpWxvRIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk ODhjMzNiNzktZGRiMC00NGZjLWEzMTItMWI0MWNmNmNhMzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuz4x0LyuJQ+pE6t8+giO5hE9Fiq8qMgwB1r 72WofsvFqtFzRFNF53KZT7AwEYDLZnKmeTQnkvOJnqjAStLr8TgCSvbIByuFFH4b r3hmSPQ+lttmfXf4N27pt0oOQ+2v2TzTWGRiejv0tk6vBz2UVINjKQlFyXqe67E6 MTtI49Hd2+bbIpCq+dE4LR7sqtihLSHu+x5zqUuU3o7ed3HIVI2i8OqhHJpOWZqb 2XLq/Ri00R8w6pn2P5EQVdrYGGXQlwFuVSEbnKtjLzL+fgLIwt1bo69YlKDTY0Ss KLRvVeoF4YEOym8ajxFKYQ/s7nUTeT2tqMpt23pUVuuN086BowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1y3nZ7Rh4NrcR2f0eDtHFRgfVMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvODdlMThlZDktYTIxMC0z ZDg4LWI4MDctNmU5OTE5MzdiYWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaOmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfYm1Zzy1/5DRsgKSG9iVhnI00ZvB/kO7TdigPF/4WEuBXdMdF8hEw+ qsEUleoFgCW1a+7C+74GYC7XyJwor0kphomnuSAFPIkoiz9zHyvnS6YWlmtv3knH tDNrGLgbv1mTAxI3RZfP4lEeUJqiRtGJMOZ/YvvaZxFO/K2QGIa0Bv9N9qKXPO0h FzuqGRuYTDlFgD9lYtOAhcNNRQ+V78iXznNfW4Df8Xt0tKIzPkQE/0PowgPyRQlb 6W87wnC3uOm7ixxyQJfi/xQaISjY61nLwPuyd73aIwAe+F/uXVm5/mgj7rfR2iyQ AYpdrqsRdLWOxHUAcefVymJnuWWOfjk= -----END CERTIFICATE-----Generated at Mon Jul 21 02:06:46 2025 by rpki-client