$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/424d026a-0a9d-31fd-a322-2da52b63d8a0.roa File: 424d026a-0a9d-31fd-a322-2da52b63d8a0.roa (raw, json) Hash identifier: 1IFa/cdBhtYg6muCm6tG6ktuCa/I/fL0bc9knoKdedg= Subject key identifier: A8:B9:93:E1:02:75:53:24:46:C8:FC:BA:C2:DE:7E:30:EF:EF:85:C2 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584ABAAFF73B10A1B123F862D4A0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/424d026a-0a9d-31fd-a322-2da52b63d8a0.roa Signing time: Sun 03 Aug 2025 02:35:40 +0000 ROA not before: Sun 03 Aug 2025 02:35:40 +0000 ROA not after: Sat 01 Nov 2025 02:35:40 +0000 asID: 22616 IP address blocks: 104.129.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:af:f7:3b:10:a1:b1:23:f8:62:d4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 3 02:35:40 2025 GMT Not After : Nov 1 02:35:40 2025 GMT Subject: CN=f680919c-395e-4bd2-a5f7-be2ff429ede0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:59:cb:11:9a:69:e7:c1:89:85:5f:bb:52:cc: ac:d5:3b:57:4c:f6:b8:0d:01:9a:7b:54:81:bc:a3: f8:f3:02:00:59:ca:65:35:62:7c:6a:e0:66:2d:59: 63:7e:6b:01:81:ed:f4:b9:d9:c0:57:5e:7c:a6:76: 8f:3b:4f:da:4a:52:2f:4d:d3:a5:af:2e:e2:fc:7f: 36:37:c7:35:dd:14:e2:c0:60:0c:e3:72:73:82:ce: 19:95:c6:8d:7c:80:56:46:d3:02:2a:71:1a:b1:fd: 09:64:33:67:c3:8d:76:89:a1:4a:bf:aa:ff:70:92: fb:89:e9:05:d4:a7:9c:d1:0d:be:af:75:f3:77:4e: 12:9a:24:87:f1:91:53:a8:24:eb:41:82:c2:34:44: bc:3b:36:ee:da:61:34:5d:0b:b2:55:e3:92:71:7f: 7f:63:cf:23:1b:c0:d7:03:07:81:51:6c:6a:d3:62: d7:c5:60:a0:ed:e5:78:53:53:0e:0c:77:76:f1:dd: f0:43:d4:f6:a1:c9:77:5e:69:da:21:09:7c:49:2d: 33:b9:be:bc:f6:fc:60:0f:ac:67:83:46:e0:30:b1: ee:98:6f:9a:33:3c:e5:be:ea:ad:95:52:b2:49:8f: bf:03:0c:99:8d:4c:06:e8:8c:c0:b0:9a:be:9a:94: 4a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B9:93:E1:02:75:53:24:46:C8:FC:BA:C2:DE:7E:30:EF:EF:85:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/424d026a-0a9d-31fd-a322-2da52b63d8a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 104.129.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:65:fa:b8:8b:5e:79:1e:5d:6b:3b:8b:f2:ed:88:51:2b:07: 2e:6c:fb:cf:85:b9:ec:43:2c:df:75:93:e8:83:be:38:d8:22: 7a:c7:f5:d8:ee:b9:11:a0:17:55:b1:86:88:de:39:0c:b0:67: 00:04:c2:48:82:4c:95:d6:d9:f3:ad:08:fa:74:4a:ad:6e:27: 77:18:65:60:4b:8c:d9:0b:ae:e6:72:b3:d2:66:39:07:5b:95: 3c:35:f0:0b:4a:23:dc:67:bb:2b:16:a7:8c:8b:b8:9c:88:91: 0a:5c:3a:7f:1d:b0:64:d9:c2:13:73:51:38:99:9a:4c:26:52: e0:f6:ee:33:ce:e7:a2:70:71:4d:a3:a5:3d:5c:54:02:dc:97: 4f:65:33:20:a2:4d:21:42:30:90:09:50:04:18:2f:a9:3f:99: 1a:19:e4:e1:f2:a7:6e:ae:43:35:68:d9:33:30:57:55:b9:fc: 66:e1:d7:02:29:fb:1f:b6:d4:51:7b:2c:50:19:ab:f2:bf:cb: 3a:9b:56:4d:03:bb:cd:d8:b6:9a:10:8e:90:0d:a6:f6:d2:ab: fc:94:8e:4a:ff:3c:9a:70:4d:a0:92:f0:83:12:20:b7:af:cc: 1e:27:49:3a:f8:ac:d3:71:f3:5f:1e:4d:e2:77:46:4a:41:b9: 81:08:f6:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6r/c7EKGxI/hi1KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwMzAyMzU0MFoXDTI1MTEwMTAyMzU0MFowLzEtMCsGA1UEAxMk ZjY4MDkxOWMtMzk1ZS00YmQyLWE1ZjctYmUyZmY0MjllZGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01nLEZpp58GJhV+7Usys1TtXTPa4DQGae1SB vKP48wIAWcplNWJ8auBmLVljfmsBge30udnAV158pnaPO0/aSlIvTdOlry7i/H82 N8c13RTiwGAM43Jzgs4ZlcaNfIBWRtMCKnEasf0JZDNnw412iaFKv6r/cJL7iekF 1Kec0Q2+r3Xzd04SmiSH8ZFTqCTrQYLCNES8Ozbu2mE0XQuyVeOScX9/Y88jG8DX AweBUWxq02LXxWCg7eV4U1MODHd28d3wQ9T2ocl3XmnaIQl8SS0zub689vxgD6xn g0bgMLHumG+aMzzlvuqtlVKySY+/AwyZjUwG6IzAsJq+mpRKNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKi5k+ECdVMkRsj8usLefjDv74XCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNDI0ZDAyNmEtMGE5ZC0z MWZkLWEzMjItMmRhNTJiNjNkOGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtl+riLXnkeXWs7i/LtiFErBy5s+8+FuexDLN91k+iDvjjYInrH9dju uRGgF1WxhojeOQywZwAEwkiCTJXW2fOtCPp0Sq1uJ3cYZWBLjNkLruZys9JmOQdb lTw18AtKI9xnuysWp4yLuJyIkQpcOn8dsGTZwhNzUTiZmkwmUuD27jPO56JwcU2j pT1cVALcl09lMyCiTSFCMJAJUAQYL6k/mRoZ5OHyp26uQzVo2TMwV1W5/Gbh1wIp +x+21FF7LFAZq/K/yzqbVk0Du83YtpoQjpANpvbSq/yUjkr/PJpwTaCS8IMSILev zB4nSTr4rNNx818eTeJ3RkpBuYEI9mk= -----END CERTIFICATE-----Generated at Tue Aug 5 17:18:30 2025 by rpki-client