$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/c42ea2f7-c5d8-3ff4-874c-e85b2714e34e.roa File: c42ea2f7-c5d8-3ff4-874c-e85b2714e34e.roa (raw, json) Hash identifier: aPpgZjE6d8L3IdHPNM6wdFVyQ4sgofOImSbHN4v8TtE= Subject key identifier: 51:3A:BE:05:B5:8F:BE:E9:60:44:09:B5:1D:9E:7D:4C:72:36:73:ED Certificate issuer: /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Certificate serial: 010D0C9F4328584B0746B7638DC4AF24DC410480 Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/c42ea2f7-c5d8-3ff4-874c-e85b2714e34e.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 9009 IP address blocks: 104.243.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:b7:63:8d:c4:af:24:dc:41:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=b2a49770-3053-4512-a87e-626eb0fa8083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:11:3f:e9:c9:46:c9:a3:2f:f3:99:1e:03:6e: 5b:c3:76:d0:1e:95:9c:df:85:8f:11:5e:52:6d:54: cc:6b:93:46:f4:fc:7c:3f:99:c5:df:ba:e1:ed:bf: d5:85:0a:3c:a6:d5:0c:5d:23:52:dd:9f:e6:c8:57: 45:de:48:7b:bd:87:ab:c6:24:61:2a:d6:e9:ba:13: c3:e0:fc:9c:18:af:fc:58:f0:0a:9d:cb:0e:11:36: b9:cc:45:4b:e7:45:5c:3f:ef:13:51:2b:b4:67:a1: ed:71:33:d0:d2:19:28:04:2f:54:5b:60:9a:34:d9: b6:df:24:8b:68:37:e0:67:d0:1f:df:e1:7d:78:4a: 5f:a2:9e:34:a3:fe:52:c0:78:2b:c2:9d:54:40:4d: eb:1e:c8:f3:37:f5:2e:b5:df:2f:2f:02:39:1e:5b: b6:6e:b1:bf:b7:72:12:24:f2:0a:78:7a:b3:21:12: 54:86:fd:40:eb:9a:ad:a9:c5:a9:e1:9d:c0:26:ab: d6:34:7e:e7:dc:bf:1d:53:87:6e:b3:bc:f6:da:38: 5d:a6:94:6d:e4:6a:43:59:59:f6:ab:b1:95:71:7f: de:31:f2:f8:5f:ae:0f:ce:2b:33:cf:ed:ea:5f:0d: 5a:e6:e7:23:69:74:e0:45:52:ea:b9:f6:7a:23:fa: 4b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3A:BE:05:B5:8F:BE:E9:60:44:09:B5:1D:9E:7D:4C:72:36:73:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/c42ea2f7-c5d8-3ff4-874c-e85b2714e34e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl X509v3 Authority Key Identifier: keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer sbgp-ipAddrBlock: critical IPv4: 104.243.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:e2:51:b9:b0:fc:81:f0:8a:be:89:13:5f:ba:e3:96:3c:71: 22:b0:de:31:d8:ea:2f:fe:62:13:ae:91:a8:88:eb:a7:db:82: c1:e7:f9:b5:03:ef:13:36:6c:fe:47:f4:4f:9f:07:a7:14:0e: 41:eb:52:ad:28:07:54:5c:c0:d7:e9:d9:b2:d9:b3:1d:9b:d7: a7:92:90:dd:01:01:01:7d:69:72:48:f6:6c:d0:9d:ef:a5:c5: c0:a6:8f:4b:bb:c4:3d:36:88:73:53:60:c6:33:86:75:2d:58: 03:3f:35:d1:b2:25:7c:dc:0c:26:03:d0:f9:93:e8:29:9f:ed: 97:41:38:f7:3e:a4:06:05:90:70:23:c8:8e:53:4c:45:93:d3: a5:aa:87:ee:81:75:50:7a:40:fa:c6:31:e3:18:b1:3a:36:81: 82:10:47:57:44:6f:4e:ae:d5:c0:ae:47:2a:53:d0:93:17:30: e9:08:aa:41:ae:7d:36:ae:6a:a2:9c:57:7a:89:e6:4b:50:5b: cc:d5:5e:86:e9:64:64:39:9f:82:d4:ef:7c:b8:96:c1:26:0f: 7b:18:61:67:dd:96:4c:74:1b:4c:65:ab:29:48:84:a3:e2:9e: c7:6b:3d:ba:a5:d3:a7:e9:54:ba:22:f0:72:4c:96:8d:94:2e: f2:b0:ae:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRrdjjcSvJNxBBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3 ZTFhMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk YjJhNDk3NzAtMzA1My00NTEyLWE4N2UtNjI2ZWIwZmE4MDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xE/6clGyaMv85keA25bw3bQHpWc34WPEV5S bVTMa5NG9Px8P5nF37rh7b/VhQo8ptUMXSNS3Z/myFdF3kh7vYerxiRhKtbpuhPD 4PycGK/8WPAKncsOETa5zEVL50VcP+8TUSu0Z6HtcTPQ0hkoBC9UW2CaNNm23ySL aDfgZ9Af3+F9eEpfop40o/5SwHgrwp1UQE3rHsjzN/Uutd8vLwI5Hlu2brG/t3IS JPIKeHqzIRJUhv1A65qtqcWp4Z3AJqvWNH7n3L8dU4dus7z22jhdppRt5GpDWVn2 q7GVcX/eMfL4X64Pziszz+3qXw1a5ucjaXTgRVLqufZ6I/pLPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFE6vgW1j77pYEQJtR2efUxyNnPtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvYzQyZWEyZjctYzVkOC0z ZmY0LTg3NGMtZTg1YjI3MTRlMzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi MDYwMDdlMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTiUbmw/IHwir6JE1+645Y8cSKw3jHY6i/+YhOukaiI66fbgsHn+bUD 7xM2bP5H9E+fB6cUDkHrUq0oB1RcwNfp2bLZsx2b16eSkN0BAQF9aXJI9mzQne+l xcCmj0u7xD02iHNTYMYzhnUtWAM/NdGyJXzcDCYD0PmT6Cmf7ZdBOPc+pAYFkHAj yI5TTEWT06Wqh+6BdVB6QPrGMeMYsTo2gYIQR1dEb06u1cCuRypT0JMXMOkIqkGu fTauaqKcV3qJ5ktQW8zVXobpZGQ5n4LU73y4lsEmD3sYYWfdlkx0G0xlqylIhKPi nsdrPbql06fpVLoi8HJMlo2ULvKwrng= -----END CERTIFICATE-----Generated at Fri Sep 5 05:52:34 2025 by rpki-client