$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/a11be446-90d0-32b6-80a5-349556f8d443.roa File: a11be446-90d0-32b6-80a5-349556f8d443.roa (raw, json) Hash identifier: s0uWSCSbIDnJbP4f3Skvid1S4EPc0nz4kNag5QP7ZGM= Subject key identifier: 14:67:F6:46:DC:8C:9A:54:AE:B6:7B:CA:43:DF:6F:18:F1:73:E8:A3 Certificate issuer: /CN=61078829-6930-46b0-9ac8-91898d36b056 Certificate serial: 010D0C9F4328584A62909F188A566E3DFA009DC0 Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/a11be446-90d0-32b6-80a5-349556f8d443.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 33548 IP address blocks: 104.247.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:9f:18:8a:56:6e:3d:fa:00:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=ac27d773-4e52-4707-a7aa-d6a5d637e5af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:96:51:38:45:e8:d1:ad:44:0e:f0:e4:b5:f4: c0:32:87:45:37:b2:65:1d:9c:af:2e:a4:ca:e8:3d: 9e:d0:0a:4a:a5:c9:4a:9f:8f:b5:35:75:2d:a3:5b: 02:cc:75:f7:b1:3b:84:01:cc:e5:c5:fa:bb:bf:f5: 45:e9:45:3c:78:78:5a:35:11:de:32:a7:46:b8:c4: 42:a9:fa:63:9b:a5:57:6d:4e:0d:32:31:00:b9:48: 6d:2b:8a:2b:55:cf:44:71:bd:39:7c:b4:8a:84:e0: 04:c1:b3:57:f0:5b:a3:04:cc:8c:67:9c:64:3c:ef: 4c:65:b1:80:3a:ec:1a:18:7c:41:4f:4c:d2:fa:36: 40:6d:13:46:57:d2:f3:10:2a:1a:f9:1f:16:bc:aa: 8a:b1:45:91:e5:63:25:c8:28:85:87:ce:b2:cc:e3: 14:47:8a:3c:5b:45:14:76:65:4e:1a:34:52:e0:bc: 33:3e:d5:64:a0:33:7a:78:36:cb:ac:25:62:c3:9d: 31:46:2c:22:2a:81:c3:62:23:bc:34:39:81:e9:07: b7:6b:26:87:8c:34:0c:ba:10:95:35:0c:95:57:e1: 54:b1:20:38:a2:1d:da:1e:08:e0:fe:e7:9b:71:31: f3:4f:b9:2c:13:30:87:4f:54:7f:fa:80:f1:25:f2: 13:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:67:F6:46:DC:8C:9A:54:AE:B6:7B:CA:43:DF:6F:18:F1:73:E8:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/a11be446-90d0-32b6-80a5-349556f8d443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl X509v3 Authority Key Identifier: keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer sbgp-ipAddrBlock: critical IPv4: 104.247.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:11:d2:06:96:60:44:17:d6:f7:4c:2f:d6:01:c4:52:b1:0b: 51:38:c7:6f:a4:99:ba:19:4d:46:80:e3:f0:47:46:45:98:d8: 23:01:64:e8:b2:c8:98:f1:70:fd:6e:a0:3e:cf:31:85:de:cb: 55:26:c7:71:66:71:b3:07:a4:eb:7c:91:93:9b:d0:b7:04:56: a8:55:a4:0b:4d:90:f5:20:08:0e:2c:cb:02:3a:b6:5c:e0:37: 71:69:3f:49:f2:46:e0:20:b0:14:cc:10:19:f9:9c:f2:e9:a2: 05:4f:1e:f4:c2:56:5a:3f:7a:e2:00:88:8c:30:6e:ce:1d:72: 7d:64:7b:96:08:3e:12:2c:13:bf:11:4b:ef:2e:fc:3a:e4:77: e7:84:ca:28:3c:b1:77:fa:c6:ac:4b:ca:e9:86:d6:98:4f:f0: 27:30:c7:6d:8b:00:8c:50:b9:62:de:46:97:99:c2:e4:d1:77: ee:ca:db:30:c9:e5:08:a6:bb:55:f2:cb:c4:53:d0:4d:ee:1f: 40:7f:21:55:fb:f5:7a:79:af:7b:e9:67:47:2c:a3:e4:45:f3: 4f:27:51:e4:63:8b:86:4c:70:41:b4:cd:9a:ee:28:03:03:d2: dd:9c:3d:73:65:f7:da:4a:5c:93:3c:84:2a:e4:4d:26:f7:2f: 8f:f6:00:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJ8YilZuPfoAncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjEwNzg4MjktNjkzMC00NmIwLTlhYzgtOTE4OThkMzZi MDU2MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk YWMyN2Q3NzMtNGU1Mi00NzA3LWE3YWEtZDZhNWQ2MzdlNWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJZROEXo0a1EDvDktfTAModFN7JlHZyvLqTK 6D2e0ApKpclKn4+1NXUto1sCzHX3sTuEAczlxfq7v/VF6UU8eHhaNRHeMqdGuMRC qfpjm6VXbU4NMjEAuUhtK4orVc9Ecb05fLSKhOAEwbNX8FujBMyMZ5xkPO9MZbGA OuwaGHxBT0zS+jZAbRNGV9LzECoa+R8WvKqKsUWR5WMlyCiFh86yzOMUR4o8W0UU dmVOGjRS4LwzPtVkoDN6eDbLrCViw50xRiwiKoHDYiO8NDmB6Qe3ayaHjDQMuhCV NQyVV+FUsSA4oh3aHgjg/uebcTHzT7ksEzCHT1R/+oDxJfITCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRn9kbcjJpUrrZ7ykPfbxjxc+ijMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MTA3 ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5OGQzNmIwNTYvYTExYmU0NDYtOTBkMC0z MmI2LTgwYTUtMzQ5NTU2ZjhkNDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjEwNzg4MjktNjkzMC00NmIwLTlh YzgtOTE4OThkMzZiMDU2LzYxMDc4ODI5LTY5MzAtNDZiMC05YWM4LTkxODk4ZDM2 YjA1Ni5jcmwwHwYDVR0jBBgwFoAUIEXV2ie7S4lN1IK5ZqALwLa2VKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82MTA3ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5 OGQzNmIwNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaPeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACER0gaWYEQX1vdML9YBxFKxC1E4x2+kmboZTUaA4/BHRkWY2CMBZOiy yJjxcP1uoD7PMYXey1Umx3FmcbMHpOt8kZOb0LcEVqhVpAtNkPUgCA4sywI6tlzg N3FpP0nyRuAgsBTMEBn5nPLpogVPHvTCVlo/euIAiIwwbs4dcn1ke5YIPhIsE78R S+8u/Drkd+eEyig8sXf6xqxLyumG1phP8Ccwx22LAIxQuWLeRpeZwuTRd+7K2zDJ 5Qimu1Xyy8RT0E3uH0B/IVX79Xp5r3vpZ0cso+RF808nUeRji4ZMcEG0zZruKAMD 0t2cPXNl99pKXJM8hCrkTSb3L4/2AJg= -----END CERTIFICATE-----Generated at Wed Jul 9 21:33:38 2025 by rpki-client