$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/823cc639-6d73-3313-a883-bac72b1b40b0.roa File: 823cc639-6d73-3313-a883-bac72b1b40b0.roa (raw, json) Hash identifier: rJBwryrYiK/qWZzN2Cxo/eMQuD3yKAKrZr4pxcFCeMk= Subject key identifier: 08:41:BF:13:7C:29:C1:F5:AF:D7:37:B8:17:B0:B4:22:4D:50:85:7A Certificate issuer: /CN=80688222-2583-4dac-a7df-1d78925c7b53 Certificate serial: 010D0C9F4328584ADD667BA365BB7D107FBB0580 Authority key identifier: F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/823cc639-6d73-3313-a883-bac72b1b40b0.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 1640 IP address blocks: 104.36.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:7b:a3:65:bb:7d:10:7f:bb:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80688222-2583-4dac-a7df-1d78925c7b53 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=299c25c9-d7f9-484e-828a-0de5b03c2691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b2:e1:9f:d0:c8:33:e5:4b:e3:fb:9f:cd:ba: a9:45:95:20:62:77:fe:57:d7:c6:96:e3:29:7b:4b: 0e:20:08:3d:64:80:ce:c4:f8:d6:ab:c3:46:69:e4: 3c:79:50:66:91:2a:d0:69:a1:e8:19:49:f5:de:7c: 1a:64:50:62:59:23:dd:9c:3a:ac:a0:e7:4b:e4:3f: be:fe:80:02:98:35:2b:11:5e:60:f3:f5:0a:18:f8: d0:47:85:1f:33:5e:0f:b9:58:4a:7b:d5:ea:d2:84: 9a:fb:7f:ca:e7:86:52:b9:50:1d:f5:24:73:61:dc: 08:69:56:30:89:3a:3a:37:d1:61:60:2c:1e:85:3a: 5d:2e:40:4e:cf:76:7e:ff:b7:b8:5c:07:95:12:c2: a1:5b:04:c4:9f:b6:53:22:92:0c:e5:76:10:5e:f5: ff:61:b1:e1:36:01:a0:40:9d:57:b0:c5:21:e7:e0: f8:6b:4b:1b:42:5c:eb:0f:16:a6:38:4e:92:5e:eb: 58:49:ce:9b:1c:d0:c5:84:0c:c1:7f:97:72:b7:ff: 1f:95:54:6a:ca:ba:6f:b1:55:4b:66:17:85:e2:54: 1c:23:6c:f1:dc:8f:57:79:af:aa:6b:51:ac:93:9b: 4f:9e:ac:31:3a:63:41:1b:fd:7a:c2:cc:78:10:46: e9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:41:BF:13:7C:29:C1:F5:AF:D7:37:B8:17:B0:B4:22:4D:50:85:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/823cc639-6d73-3313-a883-bac72b1b40b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl X509v3 Authority Key Identifier: keyid:F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer sbgp-ipAddrBlock: critical IPv4: 104.36.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:15:e2:0d:b7:89:e8:c9:0f:f8:e6:3a:c5:66:c9:13:f1:e6: 2b:8f:2a:a0:5e:11:d8:bd:ab:37:91:b4:85:eb:fd:df:30:55: 39:b4:c6:d6:33:c7:9d:84:36:14:ed:2f:50:ac:20:0d:d4:00: 40:8b:6f:9a:7d:7a:96:32:55:b5:bf:6d:44:5e:85:a7:19:03: b6:ad:2e:7b:d8:10:e3:f0:95:5e:73:49:52:83:94:91:36:fa: ee:96:32:2f:48:61:ce:fd:37:56:29:1c:b2:83:4d:06:79:04: de:a0:42:62:f6:02:94:6f:b9:de:c6:31:7c:69:54:d0:5d:8e: e9:0d:87:1e:49:dc:25:3c:25:26:00:13:7b:97:05:18:16:3e: 3a:a6:19:64:83:20:27:30:d6:3c:02:1c:f9:f7:6f:98:f7:48: c6:d4:b9:38:d3:a0:0c:c2:48:58:0c:49:c5:6a:34:64:65:91: 48:ba:01:37:7f:a0:8c:0e:ff:ce:97:f7:f5:02:e3:2c:86:79: 72:63:dd:37:23:65:73:08:0e:a2:04:91:ff:d1:ec:21:9c:d6: 3e:92:2f:3e:7f:68:2d:c0:42:9b:ac:4d:fb:b4:c5:4b:0d:90: 0a:7b:20:f7:64:a2:73:04:09:fe:cc:2b:f8:eb:7b:66:ad:b1: 0c:0b:4c:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZnujZbt9EH+7BYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA2ODgyMjItMjU4My00ZGFjLWE3ZGYtMWQ3ODkyNWM3 YjUzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk Mjk5YzI1YzktZDdmOS00ODRlLTgyOGEtMGRlNWIwM2MyNjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLLhn9DIM+VL4/ufzbqpRZUgYnf+V9fGluMp e0sOIAg9ZIDOxPjWq8NGaeQ8eVBmkSrQaaHoGUn13nwaZFBiWSPdnDqsoOdL5D++ /oACmDUrEV5g8/UKGPjQR4UfM14PuVhKe9Xq0oSa+3/K54ZSuVAd9SRzYdwIaVYw iTo6N9FhYCwehTpdLkBOz3Z+/7e4XAeVEsKhWwTEn7ZTIpIM5XYQXvX/YbHhNgGg QJ1XsMUh5+D4a0sbQlzrDxamOE6SXutYSc6bHNDFhAzBf5dyt/8flVRqyrpvsVVL ZheF4lQcI2zx3I9Xea+qa1Gsk5tPnqwxOmNBG/16wsx4EEbpRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhBvxN8KcH1r9c3uBewtCJNUIV6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84MDY4 ODIyMi0yNTgzLTRkYWMtYTdkZi0xZDc4OTI1YzdiNTMvODIzY2M2MzktNmQ3My0z MzEzLWE4ODMtYmFjNzJiMWI0MGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODA2ODgyMjItMjU4My00ZGFjLWE3 ZGYtMWQ3ODkyNWM3YjUzLzgwNjg4MjIyLTI1ODMtNGRhYy1hN2RmLTFkNzg5MjVj N2I1My5jcmwwHwYDVR0jBBgwFoAU+ahh3ff7wnrlT+4Ixm9SjWzKWrUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84MDY4ODIyMi0yNTgzLTRkYWMtYTdkZi0xZDc4 OTI1YzdiNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaCTMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoV4g23iejJD/jmOsVmyRPx5iuPKqBeEdi9qzeRtIXr/d8wVTm0xtYz x52ENhTtL1CsIA3UAECLb5p9epYyVbW/bURehacZA7atLnvYEOPwlV5zSVKDlJE2 +u6WMi9IYc79N1YpHLKDTQZ5BN6gQmL2ApRvud7GMXxpVNBdjukNhx5J3CU8JSYA E3uXBRgWPjqmGWSDICcw1jwCHPn3b5j3SMbUuTjToAzCSFgMScVqNGRlkUi6ATd/ oIwO/86X9/UC4yyGeXJj3TcjZXMIDqIEkf/R7CGc1j6SLz5/aC3AQpusTfu0xUsN kAp7IPdkonMECf7MK/jre2atsQwLTJE= -----END CERTIFICATE-----Generated at Wed Aug 20 23:07:50 2025 by rpki-client