$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/40be57dc-7156-3f97-b77b-4e30e5469063.roa File: 40be57dc-7156-3f97-b77b-4e30e5469063.roa (raw, json) Hash identifier: eH11LyBMynb0vLZC+zdQrdV+wjiA+w9C9hUK5RCNcCQ= Subject key identifier: 74:9A:28:60:42:EB:9F:A8:2E:96:67:C3:0B:D7:1C:D4:A0:EB:38:FA Certificate issuer: /CN=5bb89f91-a9a1-4d88-b9d0-f7882ea134a9 Certificate serial: 010D0C9F4328584A9D30E47621176D2A8F703180 Authority key identifier: CE:3A:6A:1D:7B:CD:04:74:BB:B3:D6:43:72:CF:AE:22:23:D4:A8:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/40be57dc-7156-3f97-b77b-4e30e5469063.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 54911 IP address blocks: 104.171.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:e4:76:21:17:6d:2a:8f:70:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bb89f91-a9a1-4d88-b9d0-f7882ea134a9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=dd0c7ddf-3be7-4b86-90ea-f1766f36e8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c3:ff:02:ce:e1:f3:12:a1:5a:c6:03:8f:d6: 93:86:7b:0e:c7:7c:a9:d4:f3:82:ab:c3:37:d2:80: 5d:70:a1:ee:94:40:f3:69:02:c5:6b:71:15:7a:59: fe:b4:13:24:82:fc:9b:a9:c2:49:8f:c7:54:c5:a7: 64:2e:6e:6f:9d:bf:6e:08:e5:63:82:ac:37:2d:3a: 2c:48:ee:55:d9:c9:ac:89:0a:79:29:ed:e7:18:45: 0f:d3:84:79:e8:9f:df:b9:00:4a:7f:0c:00:1b:69: b2:ff:80:2b:66:48:eb:32:6b:ed:47:e8:53:a6:af: ed:f8:6c:cc:75:33:bc:bf:50:c1:4c:df:de:83:1d: 44:ca:55:a2:99:4d:a2:20:ff:7d:de:82:5d:aa:30: 1b:95:0d:7a:58:d7:c9:1e:50:db:56:ac:f4:9a:e8: 70:b1:ab:01:82:99:1b:11:eb:e7:0c:95:d3:a0:d4: fb:35:30:e8:5d:0d:47:6c:7f:33:01:bf:0f:a1:e0: ff:4f:0e:92:74:9e:0c:cb:98:4f:6f:0b:89:ca:76: 0f:89:c9:f7:5f:f3:ff:c0:98:a0:d5:c1:73:af:56: 30:03:3b:9c:32:37:de:e6:2c:4d:4d:81:f6:d9:77: 8a:f5:71:0f:a4:e5:9b:c2:8f:49:c9:36:f1:68:31: 69:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9A:28:60:42:EB:9F:A8:2E:96:67:C3:0B:D7:1C:D4:A0:EB:38:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/40be57dc-7156-3f97-b77b-4e30e5469063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.crl X509v3 Authority Key Identifier: keyid:CE:3A:6A:1D:7B:CD:04:74:BB:B3:D6:43:72:CF:AE:22:23:D4:A8:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.cer sbgp-ipAddrBlock: critical IPv4: 104.171.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:61:75:ac:ac:17:bc:85:fd:ce:83:9b:94:dd:1a:2d:8e:f6: 5e:9a:02:22:0a:f7:64:25:eb:35:3b:09:a8:7d:aa:2a:84:d3: de:1f:e9:b3:83:7d:54:c5:e2:4c:06:81:e3:19:02:9a:e5:61: 9c:28:b0:69:f5:ca:77:7b:71:7a:8f:17:38:60:30:43:1c:da: 2a:2a:fd:f0:af:22:83:a8:7a:d1:2c:c7:47:29:7d:55:96:e9: cc:c0:3c:a6:1b:09:06:fe:46:b0:a0:df:8e:91:01:0c:40:1a: bc:b6:65:82:aa:d8:25:16:f2:b7:7d:df:00:ad:5d:a6:82:95: 2a:88:d3:ef:42:79:23:ec:50:af:95:98:61:81:ad:bf:cf:7f: 58:0c:c1:ea:0f:01:be:5e:f6:4e:dc:a9:31:64:95:39:73:30: 9a:d2:e9:76:3f:fc:21:aa:f4:1c:4c:42:4b:f6:c7:d0:05:d5: 59:78:26:33:53:1f:dc:c6:7e:db:07:39:62:cd:10:b5:33:83: 02:f6:19:7d:03:83:76:5f:70:1a:55:1a:f8:28:00:01:cf:f9: 56:e5:ac:e2:79:27:6c:05:59:0e:e3:d0:13:2b:8b:bb:da:01: 85:15:c7:c9:c5:b7:2a:32:2c:f1:56:90:af:83:9b:04:b0:68: e5:3f:f0:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMOR2IRdtKo9wMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWJiODlmOTEtYTlhMS00ZDg4LWI5ZDAtZjc4ODJlYTEz NGE5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk ZGQwYzdkZGYtM2JlNy00Yjg2LTkwZWEtZjE3NjZmMzZlOGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMP/As7h8xKhWsYDj9aThnsOx3yp1POCq8M3 0oBdcKHulEDzaQLFa3EVeln+tBMkgvybqcJJj8dUxadkLm5vnb9uCOVjgqw3LTos SO5V2cmsiQp5Ke3nGEUP04R56J/fuQBKfwwAG2my/4ArZkjrMmvtR+hTpq/t+GzM dTO8v1DBTN/egx1EylWimU2iIP993oJdqjAblQ16WNfJHlDbVqz0muhwsasBgpkb EevnDJXToNT7NTDoXQ1HbH8zAb8PoeD/Tw6SdJ4My5hPbwuJynYPicn3X/P/wJig 1cFzr1YwAzucMjfe5ixNTYH22XeK9XEPpOWbwo9JyTbxaDFpgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSaKGBC65+oLpZnwwvXHNSg6zj6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81YmI4 OWY5MS1hOWExLTRkODgtYjlkMC1mNzg4MmVhMTM0YTkvNDBiZTU3ZGMtNzE1Ni0z Zjk3LWI3N2ItNGUzMGU1NDY5MDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWJiODlmOTEtYTlhMS00ZDg4LWI5 ZDAtZjc4ODJlYTEzNGE5LzViYjg5ZjkxLWE5YTEtNGQ4OC1iOWQwLWY3ODgyZWEx MzRhOS5jcmwwHwYDVR0jBBgwFoAUzjpqHXvNBHS7s9ZDcs+uIiPUqHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YmI4OWY5MS1hOWExLTRkODgtYjlkMC1mNzg4 MmVhMTM0YTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaKsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHthdaysF7yF/c6Dm5TdGi2O9l6aAiIK92Ql6zU7Cah9qiqE094f6bOD fVTF4kwGgeMZAprlYZwosGn1ynd7cXqPFzhgMEMc2ioq/fCvIoOoetEsx0cpfVWW 6czAPKYbCQb+RrCg346RAQxAGry2ZYKq2CUW8rd93wCtXaaClSqI0+9CeSPsUK+V mGGBrb/Pf1gMweoPAb5e9k7cqTFklTlzMJrS6XY//CGq9BxMQkv2x9AF1Vl4JjNT H9zGftsHOWLNELUzgwL2GX0Dg3ZfcBpVGvgoAAHP+VblrOJ5J2wFWQ7j0BMri7va AYUVx8nFtyoyLPFWkK+DmwSwaOU/8Dk= -----END CERTIFICATE-----Generated at Sun Aug 10 04:16:07 2025 by rpki-client