$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2820430-cffa-3a28-865a-d2bff6b67e7e.roa File: a2820430-cffa-3a28-865a-d2bff6b67e7e.roa (raw, json) Hash identifier: W7wpFkcwxQA9axwRUyIJgHZsf5IzYP8ITZ2tAXoBSqc= Subject key identifier: 21:2D:2A:81:98:4B:DD:2F:5F:38:FE:00:3A:0C:51:16:2A:0C:84:03 Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584B13D6C2D8849BBD4307DD7D00 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2820430-cffa-3a28-865a-d2bff6b67e7e.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 140042 IP address blocks: 104.251.224.0/20 maxlen: 24 172.81.102.0/23 maxlen: 24 172.81.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c2:d8:84:9b:bd:43:07:dd:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=554a2aae-f5bc-4a30-a873-03862979f6c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6e:f4:db:87:2c:35:c3:d3:9f:f3:e7:1e:4e: fe:a8:ae:29:53:73:91:f9:0d:7a:50:6b:81:25:57: 3d:db:58:4a:0b:08:e5:5f:b5:6f:34:3b:10:77:4e: 23:f7:82:5f:38:f7:3a:06:46:21:a2:59:52:c3:8d: 30:8e:0c:18:9f:85:6d:ef:1f:cb:5f:f9:9b:e1:6c: 63:f1:d4:e1:e6:95:6b:ef:c9:c3:e2:41:ae:eb:4d: 88:fc:6b:f0:87:c8:f5:47:a6:2f:51:34:b1:18:a5: 9b:7c:9f:9c:3c:a6:46:72:67:c8:58:3c:e2:c2:f9: d1:b2:63:50:41:cc:55:6e:d1:56:d0:52:e7:cc:1f: 21:81:89:40:6a:25:a8:eb:79:78:03:4c:ff:20:05: a0:98:96:9c:ee:b8:17:40:8b:66:48:98:e0:75:7f: 75:74:12:2f:30:ad:24:5c:05:82:13:4b:37:0b:80: 7f:7c:8b:e9:e9:ab:07:22:e6:5b:12:37:c4:bd:c7: df:ea:52:57:40:b9:83:25:a8:ce:d0:1f:5f:1b:8b: 46:2d:c0:c1:52:8d:56:5d:ba:d9:b3:b0:a7:b4:52: 5e:9f:81:c3:4e:98:f2:73:7b:8b:fe:b8:e8:17:92: 3b:76:44:43:83:e8:7f:68:d9:f7:01:c0:93:a6:f6: 4c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2D:2A:81:98:4B:DD:2F:5F:38:FE:00:3A:0C:51:16:2A:0C:84:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2820430-cffa-3a28-865a-d2bff6b67e7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 104.251.224.0/20 172.81.102.0-172.81.111.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:6b:1d:65:2a:8d:0c:f3:e4:bc:09:76:f8:c1:96:64:eb:d1: c1:6c:be:be:3a:ab:e6:e9:f4:8c:76:e7:d6:70:e8:cc:28:cd: a0:0b:19:ba:87:a9:05:33:74:93:40:ea:b4:00:d1:09:5d:99: de:e3:b1:31:8d:c0:af:c6:ff:db:60:1f:18:9e:a6:e1:34:9d: 5e:b1:d8:3f:b4:66:bd:ec:18:f4:16:8f:a4:c8:ee:18:f3:a0: 0a:4f:c8:c3:2f:3c:d5:8e:37:5e:a5:f4:5b:20:8d:d2:95:83: fe:37:3e:a7:37:3c:c3:80:1c:0e:13:59:1a:3f:73:ed:29:33: 9f:29:6d:ad:04:a5:d2:bd:83:a5:89:09:0b:60:9f:4e:fe:35: 37:73:85:18:ee:e3:e4:58:d2:c8:d0:1b:9e:13:de:10:ac:fb: df:f1:9b:00:60:6a:b9:af:bf:37:3f:f9:03:0c:38:a3:99:70: 89:5e:25:96:6b:c9:a7:ae:b2:73:d5:29:3d:93:29:b6:dc:ec: 2f:fd:b6:7e:44:61:d1:ed:f9:b7:de:40:fd:6b:ca:40:e1:a8: 02:1c:e4:2f:3b:c9:77:02:7a:31:6e:ab:ff:be:1e:0c:9c:5f: e7:6f:2f:15:6f:50:43:9c:cf:99:6a:58:14:58:94:21:e2:5b: f0:ee:08:4e -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEsT1sLYhJu9QwfdfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk NTU0YTJhYWUtZjViYy00YTMwLWE4NzMtMDM4NjI5NzlmNmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl27024csNcPTn/PnHk7+qK4pU3OR+Q16UGuB JVc921hKCwjlX7VvNDsQd04j94JfOPc6BkYhollSw40wjgwYn4Vt7x/LX/mb4Wxj 8dTh5pVr78nD4kGu602I/Gvwh8j1R6YvUTSxGKWbfJ+cPKZGcmfIWDziwvnRsmNQ QcxVbtFW0FLnzB8hgYlAaiWo63l4A0z/IAWgmJac7rgXQItmSJjgdX91dBIvMK0k XAWCE0s3C4B/fIvp6asHIuZbEjfEvcff6lJXQLmDJajO0B9fG4tGLcDBUo1WXbrZ s7CntFJen4HDTpjyc3uL/rjoF5I7dkRDg+h/aNn3AcCTpvZMswIDAQABo4IDYzCC A18wHQYDVR0OBBYEFCEtKoGYS90vXzj+ADoMURYqDIQDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvYTI4MjA0MzAtY2ZmYS0z YTI4LTg2NWEtZDJiZmY2YjY3ZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQEaPvgMAwD BAGsUWYDBASsUWAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEASmsdZSqNDPPkvAl2+MGWZOvRwWy+vjqr5un0 jHbn1nDozCjNoAsZuoepBTN0k0DqtADRCV2Z3uOxMY3Ar8b/22AfGJ6m4TSdXrHY P7RmvewY9BaPpMjuGPOgCk/Iwy881Y43XqX0WyCN0pWD/jc+pzc8w4AcDhNZGj9z 7SkznyltrQSl0r2DpYkJC2CfTv41N3OFGO7j5FjSyNAbnhPeEKz73/GbAGBqua+/ Nz/5Aww4o5lwiV4llmvJp66yc9UpPZMpttzsL/22fkRh0e35t95A/WvKQOGoAhzk LzvJdwJ6MW6r/74eDJxf528vFW9QQ5zPmWpYFFiUIeJb8O4ITg== -----END CERTIFICATE-----Generated at Sat Sep 6 07:29:51 2025 by rpki-client