$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ded9b4f8-28da-3010-9a72-f329f95679a9.roa File: ded9b4f8-28da-3010-9a72-f329f95679a9.roa (raw, json) Hash identifier: dOlKYfjio7lqmH0NykZGdCSG4hkW/r6l7kHEH8jEkK4= Subject key identifier: BE:08:B1:A7:73:08:10:D7:14:70:12:65:04:03:D4:10:50:72:29:AA Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584AD5646E94D825D6DBAE71B780 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ded9b4f8-28da-3010-9a72-f329f95679a9.roa Signing time: Tue 12 Aug 2025 16:10:18 +0000 ROA not before: Tue 12 Aug 2025 16:10:18 +0000 ROA not after: Mon 10 Nov 2025 17:10:18 +0000 asID: 2914 IP address blocks: 104.140.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:64:6e:94:d8:25:d6:db:ae:71:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Aug 12 16:10:18 2025 GMT Not After : Nov 10 17:10:18 2025 GMT Subject: CN=396d6d4b-e490-4cd1-89b7-512e48d10882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:41:d8:0a:cd:1d:57:84:23:86:17:2b:63:d7: 01:49:2c:85:99:c4:85:30:b4:98:41:4c:5b:5a:e4: 51:8e:35:b6:f0:0d:25:c9:b4:e2:1e:c9:4e:76:1a: 86:45:a3:98:82:e3:cf:4b:6d:5c:79:87:d7:4d:e0: 81:71:1d:7d:fc:51:ea:13:ec:d0:83:38:be:87:ee: 6b:71:a7:46:e6:95:4a:5f:28:73:40:9b:4c:82:e6: 5d:f3:6e:98:54:eb:08:cd:ca:3f:38:23:c4:db:ad: 48:07:76:77:47:f1:53:47:c0:8a:41:64:65:3d:e1: fd:96:aa:15:dc:f0:b2:ff:19:5c:7d:01:48:ff:91: 2b:a7:09:a3:d0:cd:5f:03:e8:b2:90:15:39:9a:e8: 75:58:d7:41:8a:d7:68:f9:71:72:a2:4c:30:f7:cc: a4:3b:b9:00:18:48:0d:35:4c:4a:fd:eb:26:a5:06: c9:75:da:74:9d:e5:45:0c:f5:e2:da:c7:b5:a2:3b: d7:a2:65:a8:e9:75:31:79:77:9e:10:c4:16:3f:0d: a2:d6:a5:03:f4:97:89:78:fa:7c:73:6e:b7:e3:07: fb:f6:92:5a:94:9f:cc:1a:be:2c:89:d2:d9:73:db: 8f:d7:45:56:32:52:ed:ee:23:4f:48:f8:09:31:12: b7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:08:B1:A7:73:08:10:D7:14:70:12:65:04:03:D4:10:50:72:29:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ded9b4f8-28da-3010-9a72-f329f95679a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 104.140.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:b9:fd:d5:83:91:d4:04:22:6a:cd:c7:87:09:7b:76:0d:e5: 59:60:69:de:2c:04:8c:33:de:8f:b4:68:ff:d9:0a:2f:ec:44: 60:6f:d3:00:0d:4e:8c:24:a9:11:94:e9:96:f6:d7:41:4e:e0: 5e:88:10:9e:f9:7f:48:ab:16:dd:e5:d4:39:f6:bb:02:ef:d6: 48:ea:e5:ed:e2:d0:16:0e:c2:d9:dc:f1:60:43:8c:eb:5d:0d: e5:49:ca:b8:4f:c8:25:c0:15:15:60:4e:8e:ae:48:d3:a3:f6: 97:88:08:ec:d1:8f:b4:4c:a9:ff:7b:6b:e4:5d:ce:d6:61:4c: ad:dc:37:11:db:f2:66:54:d4:b0:45:9a:7e:5c:a7:93:b6:97: 91:20:59:7c:01:8b:5f:78:74:1c:d9:4e:e3:b1:89:40:19:44: 9b:52:4b:97:6f:d8:41:9b:17:d6:8f:97:ed:e7:80:0c:cb:0c: dc:f8:7e:25:0b:fd:bd:4f:e3:bb:fb:8d:2e:6c:2c:cf:cf:3f: 1c:64:e9:a6:57:0d:0f:7f:93:24:59:8a:30:93:c6:35:1f:fe: d8:7b:10:60:9e:b4:38:bf:2b:3f:50:20:30:5e:3b:60:14:0a: 8a:38:63:c3:6c:d0:8c:ac:32:d9:35:77:a0:1a:0d:b7:e1:4d: 2f:05:58:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVZG6U2CXW265xt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDgxMjE2MTAxOFoXDTI1MTExMDE3MTAxOFowLzEtMCsGA1UEAxMk Mzk2ZDZkNGItZTQ5MC00Y2QxLTg5YjctNTEyZTQ4ZDEwODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEHYCs0dV4QjhhcrY9cBSSyFmcSFMLSYQUxb WuRRjjW28A0lybTiHslOdhqGRaOYguPPS21ceYfXTeCBcR19/FHqE+zQgzi+h+5r cadG5pVKXyhzQJtMguZd826YVOsIzco/OCPE261IB3Z3R/FTR8CKQWRlPeH9lqoV 3PCy/xlcfQFI/5Erpwmj0M1fA+iykBU5muh1WNdBitdo+XFyokww98ykO7kAGEgN NUxK/esmpQbJddp0neVFDPXi2se1ojvXomWo6XUxeXeeEMQWPw2i1qUD9JeJePp8 c2634wf79pJalJ/MGr4sidLZc9uP10VWMlLt7iNPSPgJMRK3LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4IsadzCBDXFHASZQQD1BBQcimqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZGVkOWI0ZjgtMjhkYS0z MDEwLTlhNzItZjMyOWY5NTY3OWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIwqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAW5/dWDkdQEImrNx4cJe3YN5Vlgad4sBIwz3o+0aP/ZCi/sRGBv0wAN TowkqRGU6Zb210FO4F6IEJ75f0irFt3l1Dn2uwLv1kjq5e3i0BYOwtnc8WBDjOtd DeVJyrhPyCXAFRVgTo6uSNOj9peICOzRj7RMqf97a+RdztZhTK3cNxHb8mZU1LBF mn5cp5O2l5EgWXwBi194dBzZTuOxiUAZRJtSS5dv2EGbF9aPl+3ngAzLDNz4fiUL /b1P47v7jS5sLM/PPxxk6aZXDQ9/kyRZijCTxjUf/th7EGCetDi/Kz9QIDBeO2AU Coo4Y8Ns0IysMtk1d6AaDbfhTS8FWA0= -----END CERTIFICATE-----Generated at Wed Aug 20 13:20:17 2025 by rpki-client