$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/d58c2633-bd82-343d-9a20-92169aedcf7c.roa File: d58c2633-bd82-343d-9a20-92169aedcf7c.roa (raw, json) Hash identifier: j3ZrTX538lruNTYD6b3SQPlW2wrMdjRk2RXhC8bgEEU= Subject key identifier: 28:2D:B0:53:9F:5B:5A:59:19:B4:0D:4D:F3:42:4C:3D:49:5D:C3:F3 Certificate issuer: /CN=a90f006a-b108-4757-9dfd-b36376534658 Certificate serial: 010D0C9F4328584A66B174C8C3B00CCD27537980 Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/d58c2633-bd82-343d-9a20-92169aedcf7c.roa Signing time: Fri 04 Jul 2025 00:30:46 +0000 ROA not before: Fri 04 Jul 2025 00:30:46 +0000 ROA not after: Thu 02 Oct 2025 00:30:46 +0000 asID: 7018 IP address blocks: 104.255.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:b1:74:c8:c3:b0:0c:cd:27:53:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658 Validity Not Before: Jul 4 00:30:46 2025 GMT Not After : Oct 2 00:30:46 2025 GMT Subject: CN=0afae3f8-3499-4a0c-865f-416e5e823570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:05:74:25:d9:c2:02:bd:f1:c4:83:25:ca:fe: 64:b6:65:5e:ec:35:15:55:33:30:c2:9b:c3:65:d3: 7a:00:87:10:43:3c:f7:34:4d:68:8b:ca:32:a8:7a: 25:95:18:41:11:a6:9f:28:49:6e:34:fd:d1:30:1b: f5:15:0d:bd:62:9c:ad:3d:a1:80:81:ce:01:4d:5d: 11:92:06:0d:c1:15:3f:0d:2b:a2:b5:c5:77:e6:40: 93:c5:cc:51:3f:01:5c:92:a4:34:4b:79:e9:ed:a8: 77:d8:bf:98:80:02:91:71:fd:d9:3c:6c:97:bf:41: 31:fd:14:df:61:ad:55:74:11:ee:81:2c:7c:08:01: 14:ee:ff:91:a1:f3:d6:4f:b1:3c:58:a9:a9:3c:b7: 5e:5d:18:f2:6a:c0:1d:09:9f:7f:cc:4d:8a:f8:61: 38:ad:59:ec:89:1b:6f:10:d6:4a:ff:ca:8b:f3:82: 7e:13:01:8d:3b:93:90:ba:0e:5d:aa:5c:1d:f3:09: be:e1:f2:7b:9b:2a:83:ef:7f:c8:ce:32:53:1a:3f: d8:b3:7d:e6:96:ea:56:93:0d:76:e8:9b:27:9e:84: 4e:73:2c:9e:d3:6f:c0:42:98:d0:20:09:be:76:07: a8:f0:f3:e8:cf:1a:2e:69:30:30:8a:85:9c:b1:48: 26:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2D:B0:53:9F:5B:5A:59:19:B4:0D:4D:F3:42:4C:3D:49:5D:C3:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/d58c2633-bd82-343d-9a20-92169aedcf7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl X509v3 Authority Key Identifier: keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer sbgp-ipAddrBlock: critical IPv4: 104.255.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:88:2a:c2:82:3c:02:57:72:60:62:9d:79:50:d6:4e:13:0c: f5:7d:4f:1c:14:c9:ec:57:42:a7:e9:44:04:20:18:66:46:9f: 6e:2f:68:84:2b:fd:c4:19:a3:89:72:25:e6:bf:e3:8c:5a:65: c1:a4:51:09:fe:0e:79:d4:bc:e0:b0:32:eb:8b:a0:4f:7c:e4: c1:bf:f0:6c:b0:5b:86:21:55:38:c2:db:f1:f4:97:b1:68:0f: a8:86:a1:cc:8c:a4:bf:8e:92:ce:95:2f:24:87:74:3f:6f:03: 8a:d7:2b:5f:98:68:f1:93:3b:e0:8d:86:cc:bc:72:b6:ba:1b: da:2c:f7:e5:bc:3b:3c:5e:c9:79:27:d5:8f:a8:8e:51:14:96: d3:06:40:e3:e2:89:6b:97:d1:9a:77:97:a2:dc:aa:39:1a:3b: 0f:b6:18:a5:3d:35:d0:e0:92:98:58:22:83:cc:60:39:38:4d: 76:4e:5e:19:0f:4b:c9:6d:40:d8:a1:39:69:0b:10:59:77:99: 9c:d7:d4:eb:83:77:8e:4f:e1:7d:5e:25:1d:60:52:cd:d4:49: aa:c6:17:66:21:40:d5:f3:f0:7c:83:a7:68:81:a0:38:d4:83: 46:83:c6:d0:dd:47:82:f2:29:c1:fe:0a:b9:82:05:af:b3:e5: 62:e4:35:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmsXTIw7AMzSdTeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkwZjAwNmEtYjEwOC00NzU3LTlkZmQtYjM2Mzc2NTM0 NjU4MB4XDTI1MDcwNDAwMzA0NloXDTI1MTAwMjAwMzA0NlowLzEtMCsGA1UEAxMk MGFmYWUzZjgtMzQ5OS00YTBjLTg2NWYtNDE2ZTVlODIzNTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAV0JdnCAr3xxIMlyv5ktmVe7DUVVTMwwpvD ZdN6AIcQQzz3NE1oi8oyqHollRhBEaafKEluNP3RMBv1FQ29YpytPaGAgc4BTV0R kgYNwRU/DSuitcV35kCTxcxRPwFckqQ0S3np7ah32L+YgAKRcf3ZPGyXv0Ex/RTf Ya1VdBHugSx8CAEU7v+RofPWT7E8WKmpPLdeXRjyasAdCZ9/zE2K+GE4rVnsiRtv ENZK/8qL84J+EwGNO5OQug5dqlwd8wm+4fJ7myqD73/IzjJTGj/Ys33mlupWkw12 6JsnnoROcyye02/AQpjQIAm+dgeo8PPozxouaTAwioWcsUgmDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgtsFOfW1pZGbQNTfNCTD1JXcPzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBm MDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYzNzY1MzQ2NTgvZDU4YzI2MzMtYmQ4Mi0z NDNkLTlhMjAtOTIxNjlhZWRjZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTkwZjAwNmEtYjEwOC00NzU3LTlk ZmQtYjM2Mzc2NTM0NjU4L2E5MGYwMDZhLWIxMDgtNDc1Ny05ZGZkLWIzNjM3NjUz NDY1OC5jcmwwHwYDVR0jBBgwFoAUVrt1Gou+kg2JmSYj+7Wl+6n3GPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBmMDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYz NzY1MzQ2NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP/hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGIKsKCPAJXcmBinXlQ1k4TDPV9TxwUyexXQqfpRAQgGGZGn24vaIQr /cQZo4lyJea/44xaZcGkUQn+DnnUvOCwMuuLoE985MG/8GywW4YhVTjC2/H0l7Fo D6iGocyMpL+Oks6VLySHdD9vA4rXK1+YaPGTO+CNhsy8cra6G9os9+W8OzxeyXkn 1Y+ojlEUltMGQOPiiWuX0Zp3l6LcqjkaOw+2GKU9NdDgkphYIoPMYDk4TXZOXhkP S8ltQNihOWkLEFl3mZzX1OuDd45P4X1eJR1gUs3USarGF2YhQNXz8HyDp2iBoDjU g0aDxtDdR4LyKcH+CrmCBa+z5WLkNSc= -----END CERTIFICATE-----Generated at Wed Jul 9 18:51:36 2025 by rpki-client