$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dcfab806-7448-3e2f-bb1a-7e1efbfcc23d.roa File: dcfab806-7448-3e2f-bb1a-7e1efbfcc23d.roa (raw, json) Hash identifier: NvK+UBAt3iWsr7TTPdA1GNDmFljzM4wa8wHWZR7vGVg= Subject key identifier: FB:25:65:3C:3E:07:C9:61:B6:2B:59:EF:3A:D8:F5:DC:58:83:78:3A Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584A612B1BA723115074F704A780 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dcfab806-7448-3e2f-bb1a-7e1efbfcc23d.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 398478 IP address blocks: 104.233.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:1b:a7:23:11:50:74:f7:04:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=980c6e74-60a3-476b-986d-0d834c43a4d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d0:fe:4e:b9:46:7c:5a:d0:50:ce:37:26:f1: 6e:25:88:e9:71:6e:5e:72:23:24:3d:78:29:b0:d3: 9f:27:e4:9c:d5:28:f4:f2:01:04:a3:99:26:f4:e4: e3:64:c0:46:9e:6f:aa:5a:1d:ad:20:81:87:41:23: e9:9d:27:8b:2d:ba:fc:7b:d8:a5:f5:c8:31:48:11: 2b:8d:65:fb:04:e3:1d:c7:5e:76:f7:bf:7c:08:b4: 10:0d:ab:30:e7:e9:c6:f2:a3:3b:63:19:f9:fb:60: 5b:44:da:b7:ae:bb:80:73:ef:53:76:a0:d5:fb:e2: b5:e5:7c:6b:ee:a2:df:43:a4:7d:99:71:52:62:a8: 73:4a:87:44:1b:91:97:93:f6:ca:df:66:64:48:19: 00:c4:87:e8:12:11:2e:d2:55:d7:8a:6e:29:41:38: 0f:ed:76:3b:96:6f:16:25:67:fb:84:1f:4e:cc:66: 66:2d:3b:b9:64:d5:f5:0d:4b:4b:8a:75:36:30:ea: 67:d8:d6:49:03:86:b6:a6:58:94:95:19:5d:1d:fc: 60:88:a9:4f:b0:c6:0d:a4:bf:82:df:30:88:02:79: dc:8b:0b:0d:2b:c4:34:e4:36:29:61:06:1e:53:cf: 98:67:ce:66:8b:61:2a:7c:b8:47:32:70:82:c5:70: 3a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:25:65:3C:3E:07:C9:61:B6:2B:59:EF:3A:D8:F5:DC:58:83:78:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dcfab806-7448-3e2f-bb1a-7e1efbfcc23d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 104.233.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f4:5c:f0:47:56:cc:87:98:13:4f:1b:91:b4:ab:6e:b5:8a: 13:58:76:d1:c3:fa:ee:47:1d:8c:a3:1c:73:ec:6f:6c:03:87: 33:a8:51:86:d5:01:43:a1:82:1f:ed:fd:5a:f9:24:13:82:4a: df:8e:74:16:1b:fa:61:c1:7b:e7:61:bb:a3:d4:5e:0d:39:a7: 5e:28:dd:8f:06:fe:07:4a:74:d0:f4:e4:ca:e4:58:81:b4:48: 08:8b:a4:38:b6:e1:3f:09:80:58:21:3f:48:f7:7b:fd:f5:f1: 35:09:48:18:a2:b9:82:e3:a3:53:74:17:88:35:b1:7d:a0:68: c9:ee:e4:05:2c:f6:ef:b1:61:4d:59:59:9c:7d:be:78:9d:9b: a1:2c:30:87:0c:d9:b4:b7:db:d9:e1:41:56:c7:6b:22:0d:7b: 7a:4b:e2:58:ce:26:94:01:35:70:10:28:6d:94:0a:c5:b0:53: 0b:fe:2e:25:e8:fd:cf:e0:36:d1:4e:5c:8f:51:de:df:5a:4c: c2:b6:a8:32:ce:d9:29:de:f5:b9:90:ab:8b:87:cd:68:b9:4b: 58:54:c7:2c:30:3e:86:87:14:a3:06:d0:7a:6f:a0:51:04:77: b4:81:73:4b:3c:14:e6:4e:0d:a8:87:cc:ef:fa:40:6d:f2:b0: b3:13:05:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxunIxFQdPcEp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk OTgwYzZlNzQtNjBhMy00NzZiLTk4NmQtMGQ4MzRjNDNhNGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ND+TrlGfFrQUM43JvFuJYjpcW5eciMkPXgp sNOfJ+Sc1Sj08gEEo5km9OTjZMBGnm+qWh2tIIGHQSPpnSeLLbr8e9il9cgxSBEr jWX7BOMdx1529798CLQQDasw5+nG8qM7Yxn5+2BbRNq3rruAc+9TdqDV++K15Xxr 7qLfQ6R9mXFSYqhzSodEG5GXk/bK32ZkSBkAxIfoEhEu0lXXim4pQTgP7XY7lm8W JWf7hB9OzGZmLTu5ZNX1DUtLinU2MOpn2NZJA4a2pliUlRldHfxgiKlPsMYNpL+C 3zCIAnnciwsNK8Q05DYpYQYeU8+YZ85mi2EqfLhHMnCCxXA6VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPslZTw+B8lhtitZ7zrY9dxYg3g6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvZGNmYWI4MDYtNzQ0OC0z ZTJmLWJiMWEtN2UxZWZiZmNjMjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaOn8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEL0XPBHVsyHmBNPG5G0q261ihNYdtHD+u5HHYyjHHPsb2wDhzOoUYbV AUOhgh/t/Vr5JBOCSt+OdBYb+mHBe+dhu6PUXg05p14o3Y8G/gdKdND05MrkWIG0 SAiLpDi24T8JgFghP0j3e/318TUJSBiiuYLjo1N0F4g1sX2gaMnu5AUs9u+xYU1Z WZx9vnidm6EsMIcM2bS329nhQVbHayINe3pL4ljOJpQBNXAQKG2UCsWwUwv+LiXo /c/gNtFOXI9R3t9aTMK2qDLO2Sne9bmQq4uHzWi5S1hUxywwPoaHFKMG0HpvoFEE d7SBc0s8FOZODaiHzO/6QG3ysLMTBaE= -----END CERTIFICATE-----Generated at Mon Jul 21 13:01:20 2025 by rpki-client