$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/130a8551-3b63-37ac-8acf-ec6a6153a01a.roa File: 130a8551-3b63-37ac-8acf-ec6a6153a01a.roa (raw, json) Hash identifier: vLY1cf/DAS9r2bSWBxNtH1pk6S/EkHwB7b9Jo/Efd/U= Subject key identifier: 60:3E:CF:EC:77:36:36:DD:63:98:7F:B8:C3:E3:6B:C1:F7:D9:21:43 Certificate issuer: /CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81 Certificate serial: 010D0C9F4328584A9FFB9CEB2D1220D3097D7580 Authority key identifier: C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/130a8551-3b63-37ac-8acf-ec6a6153a01a.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 62695 IP address blocks: 104.255.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:9c:eb:2d:12:20:d3:09:7d:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=39299702-ec21-4ed4-9d6c-1dd1384e9a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a0:fe:d5:27:56:46:98:94:26:9c:eb:47:9b: 47:42:fc:b4:5d:56:75:ee:7a:46:a4:eb:6c:38:39: 07:97:e8:27:ca:e7:c7:17:40:95:41:62:2b:22:23: b0:cb:46:4c:09:00:43:19:b8:59:c7:54:04:e4:c0: 5f:21:34:e6:5e:e3:07:bf:10:78:7b:a4:4a:24:10: 91:21:5d:15:d9:dc:d0:e6:5a:ef:ea:29:ab:25:42: 8e:ad:06:ec:bd:f4:14:9b:80:4e:1a:d0:4e:e3:54: 48:1f:ec:4b:6e:a3:c1:0a:ca:32:29:fc:2b:11:58: 29:8c:03:c4:8e:69:63:3c:0c:b9:30:81:26:0f:57: 61:a9:38:a9:b9:09:e6:84:d3:61:03:1b:e7:ad:7e: d0:e0:c0:39:f7:02:b8:84:6f:c6:ad:76:47:64:94: 90:db:bf:e2:55:0c:ea:ef:aa:97:54:8b:bf:7a:e9: a5:71:20:9b:f7:02:f1:1a:5a:cf:4e:5b:da:0f:ac: 8e:7c:4b:9e:96:1b:38:09:7d:72:2f:69:aa:a9:98: c7:29:30:03:2c:83:15:11:23:86:28:02:12:14:0c: 25:31:e2:61:98:3f:d5:bd:29:63:86:a7:7d:9c:50: 22:ff:b0:39:45:92:24:fa:46:e7:c5:5f:1e:69:dc: bc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3E:CF:EC:77:36:36:DD:63:98:7F:B8:C3:E3:6B:C1:F7:D9:21:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/130a8551-3b63-37ac-8acf-ec6a6153a01a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl X509v3 Authority Key Identifier: keyid:C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer sbgp-ipAddrBlock: critical IPv4: 104.255.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:05:2d:e7:d7:09:1c:fd:c2:8a:4f:38:22:11:a9:98:4b:f9: e5:98:16:76:1c:bd:8d:a5:6e:2b:26:d9:0d:74:28:e3:60:1b: 9d:57:83:f2:fa:bb:b6:47:16:1a:ca:a4:81:36:33:96:7b:f6: 40:b4:b6:e6:bc:cc:74:70:d8:82:be:ec:98:d8:b0:24:83:fc: 8d:d9:17:64:5d:18:9d:b1:95:73:b5:31:c1:03:99:96:fa:0b: d9:9e:7e:32:64:7b:8c:94:2a:a5:e3:e1:34:50:c0:02:a2:23: 51:d7:1f:12:91:e5:07:82:a6:d2:b0:e1:c8:7e:65:28:bf:25: ea:35:0f:12:f6:15:c3:d8:16:ea:b5:fc:b3:9c:e1:ef:7f:38: d9:45:d2:71:67:33:b4:ea:ac:3d:04:0b:07:28:72:c9:e7:d4: 39:11:87:91:6b:a6:bb:ab:1d:91:9b:05:ff:18:bd:07:27:4a: f4:b7:3d:01:a1:8b:4b:38:d9:93:bb:0f:43:a0:ea:6f:90:2f: 8d:91:2c:b4:00:a1:61:41:73:c2:7f:d8:fe:2e:34:a8:cd:15: d8:c6:af:3c:73:b3:85:a0:31:b9:7e:fa:83:11:2e:e5:f0:cb: 9a:1d:4b:91:24:d8:f4:21:b3:39:ed:72:d0:f7:9a:2d:3e:cf: e6:12:ad:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+5zrLRIg0wl9dYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFhYmQ0ZDItZDAwNy00N2NlLWFlYjEtMDk4ZjlkYjJj YzgxMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk MzkyOTk3MDItZWMyMS00ZWQ0LTlkNmMtMWRkMTM4NGU5YTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaD+1SdWRpiUJpzrR5tHQvy0XVZ17npGpOts ODkHl+gnyufHF0CVQWIrIiOwy0ZMCQBDGbhZx1QE5MBfITTmXuMHvxB4e6RKJBCR IV0V2dzQ5lrv6imrJUKOrQbsvfQUm4BOGtBO41RIH+xLbqPBCsoyKfwrEVgpjAPE jmljPAy5MIEmD1dhqTipuQnmhNNhAxvnrX7Q4MA59wK4hG/GrXZHZJSQ27/iVQzq 76qXVIu/eumlcSCb9wLxGlrPTlvaD6yOfEuelhs4CX1yL2mqqZjHKTADLIMVESOG KAISFAwlMeJhmD/VvSljhqd9nFAi/7A5RZIk+kbnxV8eady83wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGA+z+x3NjbdY5h/uMPja8H32SFDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mYWFi ZDRkMi1kMDA3LTQ3Y2UtYWViMS0wOThmOWRiMmNjODEvMTMwYTg1NTEtM2I2My0z N2FjLThhY2YtZWM2YTYxNTNhMDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZmFhYmQ0ZDItZDAwNy00N2NlLWFl YjEtMDk4ZjlkYjJjYzgxL2ZhYWJkNGQyLWQwMDctNDdjZS1hZWIxLTA5OGY5ZGIy Y2M4MS5jcmwwHwYDVR0jBBgwFoAUxUfVTESwcD5oVY8GruvS/C3QaawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mYWFiZDRkMi1kMDA3LTQ3Y2UtYWViMS0wOThm OWRiMmNjODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP8jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0FLefXCRz9wopPOCIRqZhL+eWYFnYcvY2lbism2Q10KONgG51Xg/L6 u7ZHFhrKpIE2M5Z79kC0tua8zHRw2IK+7JjYsCSD/I3ZF2RdGJ2xlXO1McEDmZb6 C9mefjJke4yUKqXj4TRQwAKiI1HXHxKR5QeCptKw4ch+ZSi/Jeo1DxL2FcPYFuq1 /LOc4e9/ONlF0nFnM7TqrD0ECwcocsnn1DkRh5FrprurHZGbBf8YvQcnSvS3PQGh i0s42ZO7D0Og6m+QL42RLLQAoWFBc8J/2P4uNKjNFdjGrzxzs4WgMbl++oMRLuXw y5odS5Ek2PQhszntctD3mi0+z+YSrcE= -----END CERTIFICATE-----Generated at Wed Aug 6 16:06:09 2025 by rpki-client