$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/af0aa1c9-1e2a-334f-8206-972f95c4ab38.roa File: af0aa1c9-1e2a-334f-8206-972f95c4ab38.roa (raw, json) Hash identifier: EBcvOC4/1aNpcUGi5AxCGsi4h4AA5U7OluEjqiSefmE= Subject key identifier: 57:51:37:46:92:37:FF:0F:96:A1:F0:F9:43:9A:D5:2A:F1:7A:1F:EA Certificate issuer: /CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b Certificate serial: 010D0C9F4328584AFAB683451E9702DB1420AEC0 Authority key identifier: B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/af0aa1c9-1e2a-334f-8206-972f95c4ab38.roa Signing time: Tue 26 Aug 2025 01:00:32 +0000 ROA not before: Tue 26 Aug 2025 01:00:32 +0000 ROA not after: Mon 24 Nov 2025 02:00:32 +0000 asID: 1074 IP address blocks: 104.247.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b6:83:45:1e:97:02:db:14:20:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b Validity Not Before: Aug 26 01:00:32 2025 GMT Not After : Nov 24 02:00:32 2025 GMT Subject: CN=3a2373af-81e9-441d-a203-a7efee6b9c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:72:33:4f:19:bb:f3:96:6f:ee:cd:05:e8:c5: 0e:94:8b:c6:94:0e:8e:8f:d1:7e:92:14:f7:5d:f2: 0a:0f:84:3e:80:25:c7:1d:46:96:14:72:33:29:74: 0e:3c:92:46:4e:ed:39:82:3e:e3:be:22:a4:cf:4a: 3e:c3:17:53:7f:cb:a1:f9:f3:3d:0b:7f:c0:f7:7c: 80:88:ad:30:76:bc:a1:c0:43:19:04:12:8d:e1:2f: 68:64:e5:67:1b:31:e3:bd:7e:b8:e7:7f:74:e5:90: 89:01:15:66:d0:83:0a:db:42:5e:42:c3:5f:7d:a2: ec:7e:31:26:fd:37:0b:8b:0b:63:aa:97:fb:00:57: cc:ad:7d:4b:2a:f3:38:6d:55:70:6f:8e:47:31:80: 7d:e2:74:7c:9f:69:20:c5:a5:1c:2a:f6:d6:d8:a2: 7c:7a:24:e0:ea:a3:90:14:d8:db:b2:8a:fb:91:bd: 00:ac:e0:8c:6f:89:0a:9b:73:79:39:4d:40:56:93: f4:ee:87:7e:d1:40:34:27:5e:97:e2:bc:2e:f7:e4: 59:fe:91:7f:1a:dd:37:0b:bc:86:a3:2a:d0:a5:36: 71:a1:87:85:a2:56:37:2c:a7:ac:2d:c2:57:87:d6: be:18:01:08:cc:f7:20:a5:e3:2f:8f:ae:30:e3:20: 73:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:51:37:46:92:37:FF:0F:96:A1:F0:F9:43:9A:D5:2A:F1:7A:1F:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/af0aa1c9-1e2a-334f-8206-972f95c4ab38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl X509v3 Authority Key Identifier: keyid:B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer sbgp-ipAddrBlock: critical IPv4: 104.247.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:23:86:09:64:a5:f3:f2:56:32:46:ea:d6:4e:fc:c2:db:58: 76:c1:cd:67:2b:6f:99:8a:57:ab:6c:d6:f1:91:ed:9c:c8:50: 7f:a4:79:ba:ec:cf:74:ee:37:ba:98:fe:f4:59:05:a2:d3:54: 4a:1e:3f:46:a1:e9:50:75:71:31:59:d0:9b:52:69:36:31:a7: 2b:b6:66:c0:24:4e:4a:b0:57:4e:94:e4:77:d2:2d:a6:61:2f: b9:c9:07:86:ed:f3:f8:42:99:ee:5b:8d:da:15:d7:65:8a:5b: e2:c4:ef:ef:8b:1e:2a:30:7c:2c:89:d4:95:e8:1f:b9:4f:2c: c3:b3:8e:4a:0f:52:2c:b2:b6:e7:5e:12:18:5d:af:3f:d4:5b: a6:bf:bc:79:42:5b:1d:e7:b4:95:03:55:8f:28:dd:d3:b8:8b: d1:31:1c:b3:a6:55:d3:37:a2:17:97:29:39:85:e2:a8:ac:fc: b1:db:c7:95:f9:6d:b4:08:ae:ad:a4:b8:46:ac:94:9f:1a:46: e7:d2:eb:4d:98:25:22:bb:60:2c:f5:65:85:34:38:06:8d:a1: e0:ce:28:83:76:ae:89:90:f7:1a:80:8c:51:93:92:5a:89:1b: f5:ef:9d:5e:9d:e7:88:05:5e:e1:3d:92:0c:df:70:87:7a:a1: 65:ed:e2:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6toNFHpcC2xQgrsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIwNzhmN2EtOGJjNC00NmMzLWI5Y2ItNzMzMDc3NWE3 ODBiMB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk M2EyMzczYWYtODFlOS00NDFkLWEyMDMtYTdlZmVlNmI5Yzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXIzTxm785Zv7s0F6MUOlIvGlA6Oj9F+khT3 XfIKD4Q+gCXHHUaWFHIzKXQOPJJGTu05gj7jviKkz0o+wxdTf8uh+fM9C3/A93yA iK0wdryhwEMZBBKN4S9oZOVnGzHjvX6453905ZCJARVm0IMK20JeQsNffaLsfjEm /TcLiwtjqpf7AFfMrX1LKvM4bVVwb45HMYB94nR8n2kgxaUcKvbW2KJ8eiTg6qOQ FNjbsor7kb0ArOCMb4kKm3N5OU1AVpP07od+0UA0J16X4rwu9+RZ/pF/Gt03C7yG oyrQpTZxoYeFolY3LKesLcJXh9a+GAEIzPcgpeMvj64w4yBzKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdRN0aSN/8PlqHw+UOa1Srxeh/qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYjA3 OGY3YS04YmM0LTQ2YzMtYjljYi03MzMwNzc1YTc4MGIvYWYwYWExYzktMWUyYS0z MzRmLTgyMDYtOTcyZjk1YzRhYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGIwNzhmN2EtOGJjNC00NmMzLWI5 Y2ItNzMzMDc3NWE3ODBiLzBiMDc4ZjdhLThiYzQtNDZjMy1iOWNiLTczMzA3NzVh NzgwYi5jcmwwHwYDVR0jBBgwFoAUt248f7jEEIrnvlA07Aoj48xe7PEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYjA3OGY3YS04YmM0LTQ2YzMtYjljYi03MzMw Nzc1YTc4MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPd1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcjhglkpfPyVjJG6tZO/MLbWHbBzWcrb5mKV6ts1vGR7ZzIUH+kebrs z3TuN7qY/vRZBaLTVEoeP0ah6VB1cTFZ0JtSaTYxpyu2ZsAkTkqwV06U5HfSLaZh L7nJB4bt8/hCme5bjdoV12WKW+LE7++LHiowfCyJ1JXoH7lPLMOzjkoPUiyytude Ehhdrz/UW6a/vHlCWx3ntJUDVY8o3dO4i9ExHLOmVdM3oheXKTmF4qis/LHbx5X5 bbQIrq2kuEaslJ8aRufS602YJSK7YCz1ZYU0OAaNoeDOKIN2romQ9xqAjFGTklqJ G/XvnV6d54gFXuE9kgzfcId6oWXt4oY= -----END CERTIFICATE-----Generated at Tue Aug 26 13:10:55 2025 by rpki-client