$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bc01e933-74a6-363f-81c5-b35834203e7c.roa File: bc01e933-74a6-363f-81c5-b35834203e7c.roa (raw, json) Hash identifier: iJi0xYaZ33G83mXDVu2NbVJrZlDNUXO+AkpK4IgNMv4= Subject key identifier: 5C:44:68:ED:F1:26:0D:3A:66:CC:C7:7F:47:01:3C:97:9D:90:E7:52 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584AF7EBD3E7D2D8948351EC10C0 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bc01e933-74a6-363f-81c5-b35834203e7c.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 834 IP address blocks: 104.129.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:d3:e7:d2:d8:94:83:51:ec:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=067aa08f-ea5d-40c4-913c-ac0d5648feb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:27:7a:9f:9f:84:df:fa:94:a6:d0:25:be:23: 35:18:51:c7:ea:db:a5:3b:d4:60:4c:b0:f1:65:ed: ac:62:51:39:c4:22:8a:29:36:48:c4:50:26:30:59: e9:18:5c:11:bd:21:a4:c8:6a:25:5d:78:8a:6b:4e: f1:5e:91:1a:73:9e:19:1f:c0:cd:b4:43:1e:ac:3c: 5f:70:5b:5a:58:7d:e2:21:46:ad:9e:87:df:c8:74: 10:0c:45:e6:95:32:f3:16:c2:a3:89:25:5e:a8:cb: 96:1d:d4:53:c4:42:5c:de:b4:9f:f2:13:03:89:b8: 3a:df:24:2c:ea:31:27:fc:0e:a8:39:5d:1e:7a:01: e8:8e:7e:8a:5a:92:01:2e:09:a0:02:92:93:cc:76: c6:59:50:bb:6a:77:39:b4:ba:d9:76:38:24:10:c3: 5a:7e:a9:06:73:b0:75:1a:d4:ba:a4:2f:eb:db:a6: b0:5d:60:04:08:22:62:03:eb:2d:f3:e4:8d:79:71: 37:61:9c:18:58:e1:15:6a:64:4c:f3:29:21:2f:33: 91:81:db:db:b4:37:59:ca:5e:37:f1:5e:29:d7:43: ad:83:e9:52:6b:36:be:68:42:9b:75:8e:cc:19:cc: c7:96:dd:7e:4d:f7:cf:2e:b8:e0:2a:32:58:ef:62: 9e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:44:68:ED:F1:26:0D:3A:66:CC:C7:7F:47:01:3C:97:9D:90:E7:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bc01e933-74a6-363f-81c5-b35834203e7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 104.129.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:55:d8:8b:6f:74:c5:0e:c8:e7:3d:16:7b:ad:37:2a:3c:50: f2:b6:b1:f0:26:9b:37:0f:06:a0:5c:38:0a:35:89:b8:d5:00: 45:71:6c:df:9c:67:ca:97:fe:1b:4e:64:89:db:8f:db:b7:b6: 9e:8b:c3:b0:2e:dd:28:71:3a:55:38:a7:be:79:2b:bb:fe:ff: 12:36:ce:f9:6f:a5:01:e3:6e:71:64:3d:3b:00:e2:91:5d:3e: 1f:c8:2c:e5:4b:79:95:d5:39:d1:12:2d:57:8f:b6:5b:09:60: a9:b3:8d:c2:f8:2a:45:6c:61:d1:aa:f2:6e:50:ba:26:33:10: 64:23:2b:c7:d9:97:5d:07:d1:5e:44:a3:30:a4:30:2b:77:d2: 9f:93:a5:23:a1:70:3c:25:74:68:f3:f0:96:01:96:4a:bb:f9: 7e:f2:98:55:59:b8:78:be:3d:54:41:e7:f7:4f:03:61:f0:90: 11:30:5a:f9:6a:a6:72:a8:66:de:8e:cd:2a:c8:2f:8d:57:71: 35:ba:10:1d:8f:87:73:b9:5c:30:99:4c:d1:05:c4:c6:65:d1: d9:91:dd:f2:27:a1:69:70:71:0f:2e:7d:ce:79:77:18:c4:c5: f5:52:36:41:82:74:cb:1c:1b:88:ca:a3:99:1b:e9:e0:49:70: 37:ed:33:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369Pn0tiUg1HsEMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk MDY3YWEwOGYtZWE1ZC00MGM0LTkxM2MtYWMwZDU2NDhmZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSd6n5+E3/qUptAlviM1GFHH6tulO9RgTLDx Ze2sYlE5xCKKKTZIxFAmMFnpGFwRvSGkyGolXXiKa07xXpEac54ZH8DNtEMerDxf cFtaWH3iIUatnoffyHQQDEXmlTLzFsKjiSVeqMuWHdRTxEJc3rSf8hMDibg63yQs 6jEn/A6oOV0eegHojn6KWpIBLgmgApKTzHbGWVC7anc5tLrZdjgkEMNafqkGc7B1 GtS6pC/r26awXWAECCJiA+st8+SNeXE3YZwYWOEVamRM8ykhLzORgdvbtDdZyl43 8V4p10Otg+lSaza+aEKbdY7MGczHlt1+TffPLrjgKjJY72KeAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxEaO3xJg06ZszHf0cBPJedkOdSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvYmMwMWU5MzMtNzRhNi0z NjNmLTgxYzUtYjM1ODM0MjAzZTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMNV2ItvdMUOyOc9FnutNyo8UPK2sfAmmzcPBqBcOAo1ibjVAEVxbN+c Z8qX/htOZInbj9u3tp6Lw7Au3ShxOlU4p755K7v+/xI2zvlvpQHjbnFkPTsA4pFd Ph/ILOVLeZXVOdESLVePtlsJYKmzjcL4KkVsYdGq8m5QuiYzEGQjK8fZl10H0V5E ozCkMCt30p+TpSOhcDwldGjz8JYBlkq7+X7ymFVZuHi+PVRB5/dPA2HwkBEwWvlq pnKoZt6OzSrIL41XcTW6EB2Ph3O5XDCZTNEFxMZl0dmR3fInoWlwcQ8ufc55dxjE xfVSNkGCdMscG4jKo5kb6eBJcDftM+k= -----END CERTIFICATE-----Generated at Mon Sep 15 04:20:25 2025 by rpki-client