$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/f0bf09cb-0ba6-3f0d-85d9-d21a4cb85376.roa File: f0bf09cb-0ba6-3f0d-85d9-d21a4cb85376.roa (raw, json) Hash identifier: xfLMxkFnGyZ806QVFrD9UVrDJYCvU/cXdK8F+V96LvI= Subject key identifier: DB:F5:80:4A:16:A7:85:E9:84:65:75:DB:E9:C1:B9:C7:50:17:EF:6D Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584AA85BB543D678C5BFCFF86680 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/f0bf09cb-0ba6-3f0d-85d9-d21a4cb85376.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 5645 IP address blocks: 104.246.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b5:43:d6:78:c5:bf:cf:f8:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=31098c53-564a-42eb-be23-eff277e8f8d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:54:92:d0:d8:65:7e:07:39:9b:3c:bc:2f:a5: 36:29:7f:12:49:2c:ad:8d:42:66:93:47:0c:6f:ab: a5:41:9c:fe:59:dc:7c:46:89:e5:78:20:d8:37:cc: 0a:e9:26:fe:ec:da:25:e2:5f:1d:3e:82:88:05:ff: d4:7a:17:9c:db:62:b3:b1:d9:f3:e4:13:b3:b4:f9: 04:3e:65:99:ff:8b:16:2d:7c:ef:fa:5b:81:13:5e: 16:ff:9c:a8:b8:ee:74:23:aa:6a:42:8e:11:09:90: d0:0a:01:27:0c:ed:ea:c8:24:5c:08:58:6a:dd:de: 43:a9:a1:0f:84:e3:c6:5e:e5:42:06:f0:ba:70:45: f8:fb:e2:83:ab:a4:38:1b:dd:d8:db:ab:76:5d:13: f3:69:5a:2d:59:44:c7:b1:48:31:bf:a0:90:96:a8: 5a:33:9b:2b:6d:9e:ad:81:94:a7:43:dd:8d:f2:09: e8:70:c6:2d:dc:0c:ac:16:97:a5:95:c4:37:14:1d: 70:af:94:74:7d:99:5e:98:99:2e:9b:50:fe:fa:1c: fa:51:79:26:b5:a8:ff:de:c8:56:ab:5e:f9:2f:36: 36:b6:fc:c3:7a:54:d0:e8:8f:ea:95:35:51:98:8b: 76:0e:12:07:b5:dd:ef:43:a1:9a:51:06:fa:e3:0d: 9e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F5:80:4A:16:A7:85:E9:84:65:75:DB:E9:C1:B9:C7:50:17:EF:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/f0bf09cb-0ba6-3f0d-85d9-d21a4cb85376.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 104.246.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:54:4e:c3:41:e9:93:eb:5e:4e:70:3a:0f:a1:8a:f6:5d:e7: 8b:86:07:f2:d1:6b:32:76:26:24:a3:97:33:92:30:65:3d:15: 04:cb:fe:80:0d:e3:6c:c6:e3:dd:f6:2c:c0:22:87:37:f2:2a: fd:4b:46:d2:5c:40:f0:9d:2c:ac:c7:9c:1e:6b:34:ca:14:6b: d5:57:43:3d:24:dc:db:48:ca:5d:4c:07:86:86:5e:54:89:c2: 35:55:40:2d:cc:ba:34:1b:e3:a3:69:77:ba:7d:6b:30:f2:51: 18:41:2f:00:f0:ea:f9:13:6b:4e:e8:cf:9f:fe:04:f7:e1:de: 68:63:cd:20:07:9b:d9:c0:9d:f5:7b:df:7d:ed:d4:95:34:d4: d8:13:3c:03:80:42:9d:57:b0:6c:fb:30:e5:2d:c4:d0:65:26: 67:3c:39:7b:70:56:f1:5a:04:3d:e9:ba:05:29:ca:20:46:79: 7c:ac:f8:6e:a0:6c:9c:eb:ff:50:94:ab:16:22:ba:72:6b:84: 8d:ef:52:05:ec:1c:dc:ae:6b:0d:aa:97:3a:65:5d:53:5a:5e: c7:c7:5e:5d:10:29:5d:b5:71:c2:4c:9e:38:fa:cd:07:10:00: 43:60:ca:c9:32:d0:9b:b8:1b:ef:a2:c2:71:91:07:03:82:e9: 25:8f:c1:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7VD1njFv8/4ZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk MzEwOThjNTMtNTY0YS00MmViLWJlMjMtZWZmMjc3ZThmOGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVSS0Nhlfgc5mzy8L6U2KX8SSSytjUJmk0cM b6ulQZz+Wdx8RonleCDYN8wK6Sb+7Nol4l8dPoKIBf/Uehec22Kzsdnz5BOztPkE PmWZ/4sWLXzv+luBE14W/5youO50I6pqQo4RCZDQCgEnDO3qyCRcCFhq3d5DqaEP hOPGXuVCBvC6cEX4++KDq6Q4G93Y26t2XRPzaVotWUTHsUgxv6CQlqhaM5srbZ6t gZSnQ92N8gnocMYt3AysFpellcQ3FB1wr5R0fZlemJkum1D++hz6UXkmtaj/3shW q175LzY2tvzDelTQ6I/qlTVRmIt2DhIHtd3vQ6GaUQb64w2eowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNv1gEoWp4XphGV12+nBucdQF+9tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvZjBiZjA5Y2ItMGJhNi0z ZjBkLTg1ZDktZDIxYTRjYjg1Mzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPasMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9UTsNB6ZPrXk5wOg+hivZd54uGB/LRazJ2JiSjlzOSMGU9FQTL/oAN 42zG4932LMAihzfyKv1LRtJcQPCdLKzHnB5rNMoUa9VXQz0k3NtIyl1MB4aGXlSJ wjVVQC3MujQb46Npd7p9azDyURhBLwDw6vkTa07oz5/+BPfh3mhjzSAHm9nAnfV7 333t1JU01NgTPAOAQp1XsGz7MOUtxNBlJmc8OXtwVvFaBD3pugUpyiBGeXys+G6g bJzr/1CUqxYiunJrhI3vUgXsHNyuaw2qlzplXVNaXsfHXl0QKV21ccJMnjj6zQcQ AENgysky0Ju4G++iwnGRBwOC6SWPwSU= -----END CERTIFICATE-----Generated at Mon Jul 28 22:12:32 2025 by rpki-client