$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/12457d9b-1b73-3fa3-9936-55d404c83c78.roa File: 12457d9b-1b73-3fa3-9936-55d404c83c78.roa (raw, json) Hash identifier: 4WJFn3ZyZSoU7pzSSuA0MVy+3G8KEELOk/oRJTjW4/E= Subject key identifier: F5:3E:52:6A:A6:3D:CB:A8:2B:6E:64:D7:59:F7:8B:2C:01:3F:76:2D Certificate issuer: /CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f Certificate serial: 010D0C9F4328584AF95139594DA40F2E46078830 Authority key identifier: 91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/12457d9b-1b73-3fa3-9936-55d404c83c78.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 203020 IP address blocks: 104.247.113.0/24 maxlen: 24 104.247.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:39:59:4d:a4:0f:2e:46:07:88:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=43ffdfbc-e2f6-418a-a4ea-72cc7dd4a56e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f8:86:2d:54:c9:2c:07:c1:25:39:a4:bf:11: c8:a6:cd:42:92:6b:4f:07:59:80:7c:c1:98:c7:a2: 95:bc:52:f6:59:2c:f6:d0:aa:fc:b5:ce:0b:6b:e2: 1e:79:cc:bd:8c:89:1d:ba:f1:0d:2a:12:8a:99:69: 1d:6c:6b:02:b3:96:bc:90:df:38:fe:00:24:36:59: 51:b7:96:26:fd:7f:a4:f3:58:f7:7f:73:2a:d9:5b: c4:cb:e6:fe:6d:05:10:64:eb:7c:3d:69:01:81:e3: d5:f8:03:68:a2:c8:db:99:51:75:80:da:6a:08:20: c2:d5:08:22:ec:f5:c0:c4:32:e8:f7:a4:2d:a6:3d: 2d:d9:b0:c0:b3:45:43:14:d3:f5:5a:13:e8:de:31: 96:76:9a:4b:de:0f:58:6a:3d:71:c0:df:f4:a7:ae: e6:f3:cb:4e:70:03:70:86:f3:bc:78:fd:a7:1a:f2: d8:b5:61:24:93:a2:eb:ef:29:3c:b3:04:63:d3:1b: 8a:b1:a3:d2:f7:b3:f7:30:ba:c0:f3:40:f4:3d:62: 8a:b4:6d:3b:a5:2e:67:91:5e:6e:d9:5d:9e:3a:45: 84:43:35:50:77:c8:0d:76:7b:a3:0b:aa:ef:d1:cc: 4d:6d:6b:46:b3:e9:3e:c1:fa:d1:de:37:83:fe:cd: 2d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3E:52:6A:A6:3D:CB:A8:2B:6E:64:D7:59:F7:8B:2C:01:3F:76:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/12457d9b-1b73-3fa3-9936-55d404c83c78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.crl X509v3 Authority Key Identifier: keyid:91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer sbgp-ipAddrBlock: critical IPv4: 104.247.113.0/24 104.247.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:6b:35:70:4a:a9:df:90:d4:9d:eb:82:90:fd:0f:40:16:5f: 90:94:61:ab:18:54:9d:42:4b:98:cb:a4:6d:b4:b4:c1:43:4b: 4a:59:62:1b:cb:83:ab:ea:db:78:37:ca:5c:32:f5:aa:da:63: 9b:32:b6:73:7d:21:f6:50:ad:7f:3e:a4:b7:5e:19:67:65:32: fe:eb:b6:71:42:e4:1c:ef:af:d5:fa:0e:ed:bd:cd:a1:fc:8e: 44:a6:53:41:89:59:d0:e4:27:ee:17:e3:84:fe:ad:b4:c4:1b: a7:69:9e:35:92:e8:f9:af:bc:15:eb:85:46:9a:45:6a:96:0b: 68:62:64:18:a5:73:f5:df:b2:2b:35:59:48:1c:ba:5a:29:aa: 22:27:65:e6:39:b3:b8:c3:c3:a7:6f:57:a5:e9:25:b3:27:3c: bc:56:5f:d9:86:11:b3:ae:1d:a8:4c:d3:ad:b5:20:64:01:60: 8b:5e:87:52:48:03:cd:75:63:ac:df:9e:d4:56:c1:10:e3:47: 12:a8:43:d2:cd:56:94:9b:4e:0c:78:84:2e:ee:04:78:c1:08: 71:90:58:40:61:c9:34:07:bc:f5:5f:e6:db:64:70:a6:5e:3d: 1f:90:7a:eb:20:bb:96:d1:38:58:c2:2f:08:67:8c:02:0a:ab: 12:29:e6:d7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEr5UTlZTaQPLkYHiDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ5YWIwMjktZmVhZC00ZTFjLWI3Y2MtM2FlZGYyM2E3 OTdmMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NDNmZmRmYmMtZTJmNi00MThhLWE0ZWEtNzJjYzdkZDRhNTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkviGLVTJLAfBJTmkvxHIps1CkmtPB1mAfMGY x6KVvFL2WSz20Kr8tc4La+Ieecy9jIkduvENKhKKmWkdbGsCs5a8kN84/gAkNllR t5Ym/X+k81j3f3Mq2VvEy+b+bQUQZOt8PWkBgePV+ANoosjbmVF1gNpqCCDC1Qgi 7PXAxDLo96Qtpj0t2bDAs0VDFNP1WhPo3jGWdppL3g9Yaj1xwN/0p67m88tOcANw hvO8eP2nGvLYtWEkk6Lr7yk8swRj0xuKsaPS97P3MLrA80D0PWKKtG07pS5nkV5u 2V2eOkWEQzVQd8gNdnujC6rv0cxNbWtGs+k+wfrR3jeD/s0tYwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPU+UmqmPcuoK25k11n3iywBP3YtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDlh YjAyOS1mZWFkLTRlMWMtYjdjYy0zYWVkZjIzYTc5N2YvMTI0NTdkOWItMWI3My0z ZmEzLTk5MzYtNTVkNDA0YzgzYzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ5YWIwMjktZmVhZC00ZTFjLWI3 Y2MtM2FlZGYyM2E3OTdmL2ZkOWFiMDI5LWZlYWQtNGUxYy1iN2NjLTNhZWRmMjNh Nzk3Zi5jcmwwHwYDVR0jBBgwFoAUkcfWvdxBzR0qrsaOJq+2+nR+sJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDlhYjAyOS1mZWFkLTRlMWMtYjdjYy0zYWVk ZjIzYTc5N2YuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaPdxAwQA aPdzMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFVrNXBKqd+Q1J3rgpD9D0AWX5CUYasYVJ1CS5jLpG20tMFD S0pZYhvLg6vq23g3ylwy9araY5sytnN9IfZQrX8+pLdeGWdlMv7rtnFC5Bzvr9X6 Du29zaH8jkSmU0GJWdDkJ+4X44T+rbTEG6dpnjWS6PmvvBXrhUaaRWqWC2hiZBil c/Xfsis1WUgculopqiInZeY5s7jDw6dvV6XpJbMnPLxWX9mGEbOuHahM0621IGQB YIteh1JIA811Y6zfntRWwRDjRxKoQ9LNVpSbTgx4hC7uBHjBCHGQWEBhyTQHvPVf 5ttkcKZePR+Qeusgu5bROFjCLwhnjAIKqxIp5tc= -----END CERTIFICATE-----Generated at Tue Aug 26 12:25:47 2025 by rpki-client