$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/295e6495-4792-3797-a2bf-51461c90e961.roa File: 295e6495-4792-3797-a2bf-51461c90e961.roa (raw, json) Hash identifier: c2Rrmg53K8ybT8vADC7f/JowA/Zcj8BedTDJZ9G4Af8= Subject key identifier: EF:F0:34:4E:42:DF:2B:7E:B0:99:69:73:35:BE:A4:22:02:8B:85:B2 Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584A66C072D3795CE2CED1DFA100 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/295e6495-4792-3797-a2bf-51461c90e961.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 40342 IP address blocks: 104.200.216.0/24 maxlen: 24 104.200.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:72:d3:79:5c:e2:ce:d1:df:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=a4c488b7-dcf6-457f-9beb-02aec95a7295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e5:a5:fe:3e:77:a4:0c:43:91:5d:1b:cc:c9: 23:b5:7e:ba:a4:a8:12:55:c4:cc:2a:f5:b7:d5:ae: c6:7d:fc:97:c7:d4:15:e1:e6:47:bb:37:50:4b:93: f9:f0:39:9b:16:d6:6e:39:f1:43:40:9e:6b:32:7c: ea:09:14:a5:7a:f1:b9:01:b0:cf:cb:5b:7a:06:51: 62:11:36:85:22:c9:02:d3:b7:cc:13:bc:0f:6e:4c: 37:52:ea:d0:d2:bc:d1:c7:c7:49:23:f4:e4:35:80: 7e:9d:87:21:8b:75:fa:9a:36:c3:1a:1f:68:a7:9f: 29:39:e7:24:fc:d9:d0:cf:f8:23:15:80:dd:3e:e2: 81:83:3b:3a:a2:05:0d:6c:5c:f5:39:c6:a7:e7:67: 9b:a9:2a:b0:39:d8:90:5f:35:c4:6d:61:c4:29:a1: af:9f:63:0d:d1:4c:3b:63:93:9a:92:d8:e7:c9:6e: 28:01:20:0b:de:f2:22:9e:af:8e:fe:39:34:c1:9b: e9:80:d6:48:81:c4:33:73:f8:4a:05:cc:71:b0:2b: 59:d0:e7:65:11:53:d3:1b:32:f8:1a:69:07:75:16: 11:df:6e:8c:a5:e5:25:2c:40:b2:4d:38:69:a1:30: 2f:b4:c0:10:1f:cb:8e:54:72:e2:c7:90:d8:bd:03: e9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F0:34:4E:42:DF:2B:7E:B0:99:69:73:35:BE:A4:22:02:8B:85:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/295e6495-4792-3797-a2bf-51461c90e961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 104.200.216.0/24 104.200.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:95:26:6e:28:2b:04:44:c2:64:0b:77:6d:b7:0c:79:52:fc: 42:22:3b:b5:47:87:0b:e7:f2:76:62:1f:fb:e1:00:10:32:6c: da:fe:36:f0:f0:f2:c8:c0:0d:19:1c:50:0c:cb:48:01:ec:32: e9:64:60:da:d8:6b:14:27:0d:0a:4f:fd:c8:5c:cb:1e:8d:dc: 52:c5:7c:b1:3d:a9:0f:78:a6:fa:5f:57:ff:03:3f:d6:27:5f: 1e:be:ee:8c:da:78:db:a1:2f:5c:75:80:ae:d3:c7:a3:07:17: b2:85:d9:c0:c8:f2:d4:a8:1d:b7:e1:97:ef:9b:f6:e3:13:53: 9d:62:f7:5f:80:d9:f0:b0:a0:cb:71:91:3e:49:cb:42:73:6a: 0a:e0:58:61:72:4d:2f:4c:1e:b8:7a:c8:85:cd:af:b9:f2:2b: 2d:d1:16:74:ff:c1:71:5c:16:8e:55:7c:ed:86:ed:2b:4e:68: 3e:a2:9a:58:d4:fa:95:8a:ad:04:81:91:55:ab:e8:ee:d3:b3: c4:da:c9:e9:3a:9f:6d:8d:d3:d5:cd:1a:2f:69:b2:6e:c9:73: 71:80:72:e2:b7:22:92:2f:d0:d5:72:3b:bf:3f:d0:03:7c:50: 38:98:d9:51:16:46:dd:5e:cd:a3:0b:ff:a5:3e:09:a1:e5:6d: f5:a4:f6:2a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpmwHLTeVziztHfoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk YTRjNDg4YjctZGNmNi00NTdmLTliZWItMDJhZWM5NWE3Mjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeWl/j53pAxDkV0bzMkjtX66pKgSVcTMKvW3 1a7GffyXx9QV4eZHuzdQS5P58DmbFtZuOfFDQJ5rMnzqCRSlevG5AbDPy1t6BlFi ETaFIskC07fME7wPbkw3UurQ0rzRx8dJI/TkNYB+nYchi3X6mjbDGh9op58pOeck /NnQz/gjFYDdPuKBgzs6ogUNbFz1Ocan52ebqSqwOdiQXzXEbWHEKaGvn2MN0Uw7 Y5OaktjnyW4oASAL3vIinq+O/jk0wZvpgNZIgcQzc/hKBcxxsCtZ0OdlEVPTGzL4 GmkHdRYR326MpeUlLECyTThpoTAvtMAQH8uOVHLix5DYvQPpKQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFO/wNE5C3yt+sJlpczW+pCICi4WyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvMjk1ZTY0OTUtNDc5Mi0z Nzk3LWEyYmYtNTE0NjFjOTBlOTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaMjYAwQC aMjcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJWVJm4oKwREwmQLd223DHlS/EIiO7VHhwvn8nZiH/vhABAy bNr+NvDw8sjADRkcUAzLSAHsMulkYNrYaxQnDQpP/chcyx6N3FLFfLE9qQ94pvpf V/8DP9YnXx6+7ozaeNuhL1x1gK7Tx6MHF7KF2cDI8tSoHbfhl++b9uMTU51i91+A 2fCwoMtxkT5Jy0JzagrgWGFyTS9MHrh6yIXNr7nyKy3RFnT/wXFcFo5VfO2G7StO aD6imljU+pWKrQSBkVWr6O7Ts8Tayek6n22N09XNGi9psm7Jc3GAcuK3IpIv0NVy O78/0AN8UDiY2VEWRt1ezaML/6U+CaHlbfWk9io= -----END CERTIFICATE-----Generated at Fri Jul 11 06:01:29 2025 by rpki-client