$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/2bc43a93-0030-3c39-8b64-3f0f629703a2.roa File: 2bc43a93-0030-3c39-8b64-3f0f629703a2.roa (raw, json) Hash identifier: EcpSfDvE9FeRKXyDJpp0kENgzwYzfG7w6M0lrmVCGpQ= Subject key identifier: 35:9F:45:E7:7B:A5:3A:34:70:83:67:17:3F:95:96:3D:82:4C:F8:2F Certificate issuer: /CN=85ff82e4-cd37-45c6-b714-ab0a04927964 Certificate serial: 010D0C9F4328584AEF8BCCFB07CE76DE1E3E0380 Authority key identifier: 5E:4B:BF:18:60:91:10:DF:CE:16:25:9B:8B:08:65:A9:1C:62:50:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/2bc43a93-0030-3c39-8b64-3f0f629703a2.roa Signing time: Fri 22 Aug 2025 01:00:33 +0000 ROA not before: Fri 22 Aug 2025 01:00:33 +0000 ROA not after: Thu 20 Nov 2025 02:00:33 +0000 asID: 397942 IP address blocks: 104.171.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:8b:cc:fb:07:ce:76:de:1e:3e:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85ff82e4-cd37-45c6-b714-ab0a04927964 Validity Not Before: Aug 22 01:00:33 2025 GMT Not After : Nov 20 02:00:33 2025 GMT Subject: CN=cf3ae4d6-4892-4b34-8fdb-0a5dc0dd216f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5c:ad:bc:d7:ce:24:71:37:01:2e:df:cf:3e: d0:b4:36:66:cd:2c:17:11:4f:2b:8b:99:5c:28:89: 0b:1f:95:6c:59:88:8a:f5:d0:2b:e7:78:b7:b0:9d: 2c:7b:69:0b:b9:c9:b7:de:d1:b2:4b:79:c2:51:64: 09:83:be:1c:56:a9:91:63:dd:d5:88:c8:b5:00:32: c8:c2:e0:4e:17:e4:61:b0:2f:28:5b:07:c7:72:e7: 71:03:6c:68:f6:63:d2:05:d4:09:f2:9e:f3:30:1b: a0:fb:0a:e8:a4:57:90:9c:83:a2:af:dc:fd:de:5c: 80:99:4a:6b:2c:7d:b2:04:81:14:47:2b:ac:f0:e5: 93:4e:9b:95:7c:af:ba:07:77:71:db:ac:95:37:22: 5a:b0:d3:31:f9:10:ea:eb:ab:1d:df:c3:45:42:b0: 6d:d8:7a:5e:0a:7e:70:5f:c9:99:61:00:b9:cd:56: c2:58:24:22:b0:21:69:1a:2c:3b:0a:b3:26:de:c7: 9c:9f:94:5d:51:ad:3d:60:a0:cc:20:15:ec:8a:18: 6f:92:04:42:02:67:56:9f:5f:01:c8:3f:94:5b:12: ad:93:10:00:82:57:9d:ce:6b:c7:bc:e5:ba:df:66: f5:29:b2:a8:a6:fb:5f:2c:dd:a4:69:94:b5:68:a5: 9f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9F:45:E7:7B:A5:3A:34:70:83:67:17:3F:95:96:3D:82:4C:F8:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/2bc43a93-0030-3c39-8b64-3f0f629703a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.crl X509v3 Authority Key Identifier: keyid:5E:4B:BF:18:60:91:10:DF:CE:16:25:9B:8B:08:65:A9:1C:62:50:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer sbgp-ipAddrBlock: critical IPv4: 104.171.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:bd:ab:3f:84:17:fd:87:cb:c0:06:e8:a6:ed:5f:84:c7:59: 6c:bb:57:85:bb:da:77:61:43:be:cd:1e:82:21:c9:c8:1f:a3: 88:cf:73:47:4d:12:80:5b:bf:22:ca:8c:67:de:c0:f9:68:de: 2e:0f:06:88:55:14:56:e3:b8:9c:c1:c2:11:4e:4e:7f:df:34: bb:c7:fb:e0:fc:dc:87:a2:cc:4c:31:1e:23:48:ea:b7:2a:4d: 77:41:35:02:e4:2e:1b:84:35:c1:f1:8b:3a:e3:e6:f4:81:53: 91:19:13:c6:1b:ba:01:54:80:ea:43:f6:7a:1d:e1:b6:1d:fe: 98:d4:31:f1:5f:87:f3:df:c5:ac:7b:0b:ec:76:10:3f:3c:6d: 05:e5:92:89:39:f9:40:74:dc:27:33:20:c7:ee:90:25:99:ee: 24:5d:35:ee:38:4d:f6:0d:c3:d0:da:ca:d3:a7:b4:23:51:d0: 08:dc:41:0a:ea:31:4d:bb:34:52:54:86:bd:c9:eb:22:06:ba: 23:23:3f:f3:f2:1e:af:b5:e2:8f:fc:57:c0:bd:91:7d:56:4f: ee:3b:a8:84:a4:37:d8:4f:54:57:96:3e:e4:61:39:38:c5:95: 7e:ba:c2:9c:33:f4:cb:5c:bc:fb:51:f8:3b:f8:48:3a:39:3b: e8:e6:8b:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvi8z7B8523h4+A4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVmZjgyZTQtY2QzNy00NWM2LWI3MTQtYWIwYTA0OTI3 OTY0MB4XDTI1MDgyMjAxMDAzM1oXDTI1MTEyMDAyMDAzM1owLzEtMCsGA1UEAxMk Y2YzYWU0ZDYtNDg5Mi00YjM0LThmZGItMGE1ZGMwZGQyMTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVytvNfOJHE3AS7fzz7QtDZmzSwXEU8ri5lc KIkLH5VsWYiK9dAr53i3sJ0se2kLucm33tGyS3nCUWQJg74cVqmRY93ViMi1ADLI wuBOF+RhsC8oWwfHcudxA2xo9mPSBdQJ8p7zMBug+wropFeQnIOir9z93lyAmUpr LH2yBIEURyus8OWTTpuVfK+6B3dx26yVNyJasNMx+RDq66sd38NFQrBt2HpeCn5w X8mZYQC5zVbCWCQisCFpGiw7CrMm3secn5RdUa09YKDMIBXsihhvkgRCAmdWn18B yD+UWxKtkxAAgledzmvHvOW632b1KbKopvtfLN2kaZS1aKWfRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWfRed7pTo0cINnFz+Vlj2CTPgvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84NWZm ODJlNC1jZDM3LTQ1YzYtYjcxNC1hYjBhMDQ5Mjc5NjQvMmJjNDNhOTMtMDAzMC0z YzM5LThiNjQtM2YwZjYyOTcwM2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODVmZjgyZTQtY2QzNy00NWM2LWI3 MTQtYWIwYTA0OTI3OTY0Lzg1ZmY4MmU0LWNkMzctNDVjNi1iNzE0LWFiMGEwNDky Nzk2NC5jcmwwHwYDVR0jBBgwFoAUXku/GGCREN/OFiWbiwhlqRxiUBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84NWZmODJlNC1jZDM3LTQ1YzYtYjcxNC1hYjBh MDQ5Mjc5NjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaKvEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEG9qz+EF/2Hy8AG6KbtX4THWWy7V4W72ndhQ77NHoIhycgfo4jPc0dN EoBbvyLKjGfewPlo3i4PBohVFFbjuJzBwhFOTn/fNLvH++D83IeizEwxHiNI6rcq TXdBNQLkLhuENcHxizrj5vSBU5EZE8YbugFUgOpD9nod4bYd/pjUMfFfh/Pfxax7 C+x2ED88bQXlkok5+UB03CczIMfukCWZ7iRdNe44TfYNw9DaytOntCNR0AjcQQrq MU27NFJUhr3J6yIGuiMjP/PyHq+14o/8V8C9kX1WT+47qISkN9hPVFeWPuRhOTjF lX66wpwz9MtcvPtR+Dv4SDo5O+jmi6s= -----END CERTIFICATE-----Generated at Fri Aug 22 05:13:41 2025 by rpki-client