$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/6f2155f8-a34a-3bac-abdc-a78c5b62cbc1.roa File: 6f2155f8-a34a-3bac-abdc-a78c5b62cbc1.roa (raw, json) Hash identifier: J6VOmAw7GGeK+mFAB7NU96XFYlYcqh5vPzglm205Efk= Subject key identifier: 01:2D:11:76:85:67:B4:94:75:FB:FF:14:99:34:E7:0C:2C:38:C3:99 Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584B13D6FDFD658EAAA5B5362F20 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/6f2155f8-a34a-3bac-abdc-a78c5b62cbc1.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 401585 IP address blocks: 104.251.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:fd:fd:65:8e:aa:a5:b5:36:2f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=0a3885a9-8a49-4d60-ac4d-56f26bdab587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:16:29:ef:bc:31:6e:94:7a:75:bf:30:6d:85: ae:44:9c:13:e2:6c:cc:30:f7:ec:8a:00:7e:07:0c: b9:8b:0c:da:b1:df:8a:5b:03:54:cb:23:4d:d7:07: fa:30:dc:82:77:f3:fc:75:c4:3e:d9:e8:62:60:dc: a7:d2:5c:0a:7d:9b:64:a1:c2:32:03:6a:c4:fc:22: d4:4b:94:a6:b4:b6:d3:45:69:70:f1:85:63:ae:57: 42:56:aa:79:b4:00:34:c6:b3:06:57:64:12:1a:48: ad:ca:6a:13:8a:c6:04:50:95:e5:77:cc:a5:66:24: 2a:bb:40:07:42:1f:57:ae:7f:4c:8c:73:ea:19:76: 96:c5:e0:d5:bd:cb:7e:d0:6b:75:03:f2:fa:10:d6: 06:fd:2b:4c:c8:39:86:27:ef:09:28:f0:fe:c4:2e: 2a:1a:c5:60:8d:de:af:4c:7d:78:9e:1e:02:54:6f: e5:5b:c5:80:3d:b8:96:9f:9a:53:47:aa:9f:f1:d5: 44:c0:08:5c:4d:02:61:58:bf:a4:a5:a5:b8:19:bb: 20:1e:47:95:37:89:ed:b8:75:5c:25:15:8f:ff:7f: 0b:13:74:a4:e9:a1:38:42:f2:7a:6b:66:83:11:40: 07:57:59:46:2b:fc:2f:a7:1e:6d:fc:ce:69:ee:78: 80:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2D:11:76:85:67:B4:94:75:FB:FF:14:99:34:E7:0C:2C:38:C3:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/6f2155f8-a34a-3bac-abdc-a78c5b62cbc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 104.251.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:8b:92:3c:1a:17:79:b9:e9:ba:95:a5:bf:f9:44:a3:57:0e: 51:b3:2d:0c:53:a8:5d:dd:1c:16:bf:2b:1c:e1:34:a9:d6:74: 43:39:70:ba:69:ab:69:bc:36:c1:92:95:5b:74:51:64:61:c9: c2:0e:35:b6:0b:3a:97:48:62:0b:24:70:dc:92:fd:c4:49:20: a8:97:cc:da:72:07:cf:24:2a:3e:36:ef:73:b6:da:1c:24:7a: 5e:e4:a5:aa:45:88:a5:15:7b:7f:e7:2b:1c:63:06:23:e5:3e: 92:ab:f0:c3:11:7a:50:0b:eb:ef:88:a3:dd:41:a7:4a:b8:62: 0d:ba:5d:fc:ea:37:14:35:d1:c3:12:23:af:1e:f5:60:c8:bc: c4:58:14:8e:2a:9a:29:c7:7f:f9:fe:6c:f9:4c:d5:45:b4:75: 4e:b3:5b:58:c7:f4:e2:34:c5:0d:41:81:d6:d0:69:00:6b:5d: b5:ae:4a:75:51:16:8b:d7:26:cb:b4:c0:c8:3f:bc:bc:e7:91: 04:1b:c7:a9:5e:fd:dd:63:55:14:74:d4:7f:25:08:77:cb:54: a5:06:e3:4b:7a:cd:da:9a:9f:39:40:0b:9b:1a:47:07:5d:bb: 3f:f1:51:c2:39:72:de:df:9d:db:56:22:05:e3:2f:00:1d:f8: 2a:b8:fb:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1v39ZY6qpbU2LyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk MGEzODg1YTktOGE0OS00ZDYwLWFjNGQtNTZmMjZiZGFiNTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BYp77wxbpR6db8wbYWuRJwT4mzMMPfsigB+ Bwy5iwzasd+KWwNUyyNN1wf6MNyCd/P8dcQ+2ehiYNyn0lwKfZtkocIyA2rE/CLU S5SmtLbTRWlw8YVjrldCVqp5tAA0xrMGV2QSGkitymoTisYEUJXld8ylZiQqu0AH Qh9Xrn9MjHPqGXaWxeDVvct+0Gt1A/L6ENYG/StMyDmGJ+8JKPD+xC4qGsVgjd6v TH14nh4CVG/lW8WAPbiWn5pTR6qf8dVEwAhcTQJhWL+kpaW4GbsgHkeVN4ntuHVc JRWP/38LE3Sk6aE4QvJ6a2aDEUAHV1lGK/wvpx5t/M5p7niAsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEtEXaFZ7SUdfv/FJk05wwsOMOZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvNmYyMTU1ZjgtYTM0YS0z YmFjLWFiZGMtYTc4YzViNjJjYmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaPvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuLkjwaF3m56bqVpb/5RKNXDlGzLQxTqF3dHBa/KxzhNKnWdEM5cLpp q2m8NsGSlVt0UWRhycIONbYLOpdIYgskcNyS/cRJIKiXzNpyB88kKj4273O22hwk el7kpapFiKUVe3/nKxxjBiPlPpKr8MMRelAL6++Io91Bp0q4Yg26XfzqNxQ10cMS I68e9WDIvMRYFI4qminHf/n+bPlM1UW0dU6zW1jH9OI0xQ1BgdbQaQBrXbWuSnVR FovXJsu0wMg/vLznkQQbx6le/d1jVRR01H8lCHfLVKUG40t6zdqanzlAC5saRwdd uz/xUcI5ct7fndtWIgXjLwAd+Cq4+1o= -----END CERTIFICATE-----Generated at Sat Sep 6 07:25:55 2025 by rpki-client