$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/eece7432-f1a6-37fb-af5b-8f3c4fe0549d.roa File: eece7432-f1a6-37fb-af5b-8f3c4fe0549d.roa (raw, json) Hash identifier: QYZxDTQ+zzWY0quK+bnqrPInmwfmvJXNL7o9JY8c1/o= Subject key identifier: B2:D5:F1:0B:62:6D:9B:74:C5:42:E5:3D:49:6E:7C:13:A6:B8:CC:F0 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584A9900C7AE5A59065F2170DC00 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/eece7432-f1a6-37fb-af5b-8f3c4fe0549d.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 5645 IP address blocks: 104.195.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c7:ae:5a:59:06:5f:21:70:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=c21a9d5c-ce21-457a-91d7-f1f66a7add24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:85:5c:d1:86:2b:df:3a:b9:a2:07:79:80:4b: 4e:53:2b:1b:3f:f0:26:5d:61:1c:ec:3e:79:74:d2: 6f:f0:f0:5c:2c:e8:8c:6d:6a:8f:78:2e:76:8a:03: 89:32:db:0e:05:03:b6:30:6e:b2:1e:6b:78:91:d6: 87:2f:26:78:6f:cd:29:c5:8d:bd:54:f8:49:86:1c: 44:e1:33:35:48:fc:ed:5c:f2:07:58:2d:0f:d2:b6: a2:84:d8:89:03:7e:a0:9f:bb:c0:8c:59:40:c5:4f: c0:03:8f:40:27:e6:6d:d9:e3:2a:7d:9f:27:8d:7b: d6:02:27:ed:b9:e4:84:ed:87:4e:5c:27:11:3d:f2: 6e:f7:cb:2e:3c:05:72:a4:ee:8e:54:5f:a3:b2:a3: 69:47:b6:fd:c0:f7:07:f7:14:56:16:97:d9:55:13: f8:97:16:62:b2:63:14:5a:8f:34:fb:e3:73:c1:9e: 8d:37:74:ee:9f:10:14:be:94:8e:91:00:1c:00:49: c3:9e:bb:6a:78:4b:63:b3:40:4b:08:56:6b:e8:a6: 64:93:0d:12:7c:80:91:68:9b:af:39:67:62:a3:11: 12:df:10:b4:ff:48:f7:b3:4f:4e:73:64:e1:2c:f2: b7:1d:5e:ed:9b:4f:9d:af:55:72:f4:10:55:58:68: c7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D5:F1:0B:62:6D:9B:74:C5:42:E5:3D:49:6E:7C:13:A6:B8:CC:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/eece7432-f1a6-37fb-af5b-8f3c4fe0549d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 104.195.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ba:96:fa:6f:dc:da:eb:64:8f:e8:47:d1:2d:c5:d8:f0:43: 63:32:cb:06:9b:98:c6:3b:ee:06:68:e1:49:4a:5a:79:58:44: 33:26:14:c9:1c:6f:57:47:ef:4d:70:9b:4f:33:61:53:c5:a3: 7e:2d:e2:78:2d:33:48:41:e8:c3:05:f5:06:e6:78:88:46:6d: ae:81:fd:6c:1b:2e:99:d0:7e:83:c2:c9:bc:21:98:8d:6d:45: 0a:a2:1b:63:d9:86:1f:03:5e:3a:86:29:f2:52:a7:c6:80:8b: e4:d2:fe:81:3d:a3:84:9c:b4:4f:a2:c4:4b:a3:31:a2:09:6b: ce:8a:e9:5d:ef:33:d9:4c:15:f9:e6:4e:c6:41:62:05:a6:3f: 0b:1c:1e:12:71:53:b2:82:01:7e:a8:8f:d5:e0:12:2f:78:39: 6a:a2:ed:38:da:b0:ce:7d:15:10:24:4e:16:42:21:33:6f:86: 0e:80:2f:43:f7:f4:2b:81:dc:a6:48:7e:f7:fb:bd:73:b8:fb: 62:b7:1f:24:e0:5a:0f:d8:c8:24:aa:fd:c4:b8:3a:37:ea:75: c7:5e:17:27:39:73:fe:9f:84:0c:d8:71:26:ba:dd:e7:ab:6f: 04:fd:af:3c:77:5a:ef:b2:c3:ac:e5:c6:9b:45:04:10:80:cd: 0c:ab:1f:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMeuWlkGXyFw3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk YzIxYTlkNWMtY2UyMS00NTdhLTkxZDctZjFmNjZhN2FkZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIVc0YYr3zq5ogd5gEtOUysbP/AmXWEc7D55 dNJv8PBcLOiMbWqPeC52igOJMtsOBQO2MG6yHmt4kdaHLyZ4b80pxY29VPhJhhxE 4TM1SPztXPIHWC0P0raihNiJA36gn7vAjFlAxU/AA49AJ+Zt2eMqfZ8njXvWAift ueSE7YdOXCcRPfJu98suPAVypO6OVF+jsqNpR7b9wPcH9xRWFpfZVRP4lxZismMU Wo80++NzwZ6NN3TunxAUvpSOkQAcAEnDnrtqeEtjs0BLCFZr6KZkkw0SfICRaJuv OWdioxES3xC0/0j3s09Oc2ThLPK3HV7tm0+dr1Vy9BBVWGjHSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLV8QtibZt0xULlPUlufBOmuMzwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvZWVjZTc0MzItZjFhNi0z N2ZiLWFmNWItOGYzYzRmZTA1NDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHaMOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGC6lvpv3NrrZI/oR9EtxdjwQ2MyywabmMY77gZo4UlKWnlYRDMmFMkc b1dH701wm08zYVPFo34t4ngtM0hB6MMF9QbmeIhGba6B/WwbLpnQfoPCybwhmI1t RQqiG2PZhh8DXjqGKfJSp8aAi+TS/oE9o4SctE+ixEujMaIJa86K6V3vM9lMFfnm TsZBYgWmPwscHhJxU7KCAX6oj9XgEi94OWqi7TjasM59FRAkThZCITNvhg6AL0P3 9CuB3KZIfvf7vXO4+2K3HyTgWg/YyCSq/cS4OjfqdcdeFyc5c/6fhAzYcSa63eer bwT9rzx3Wu+yw6zlxptFBBCAzQyrH4k= -----END CERTIFICATE-----Generated at Mon Jul 28 22:11:32 2025 by rpki-client