$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/e465363d-6fbe-3665-ac6a-c10d319a38ee.roa File: e465363d-6fbe-3665-ac6a-c10d319a38ee.roa (raw, json) Hash identifier: wCGhknBMWL7Cu8QYhBm5duIW5CoHd79WRQ8Thkz041Q= Subject key identifier: 60:01:71:97:DA:40:28:C0:8D:D0:79:10:74:86:C2:F8:9A:71:07:EE Certificate issuer: /CN=eb8204eb-8ce5-4d9a-b383-b4433e8075a0 Certificate serial: 010D0C9F4328584AA160DF50DE7020CCBF47E080 Authority key identifier: 2C:61:60:B2:3E:09:E8:97:9F:3C:2C:F5:B1:39:AB:BC:11:A5:38:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/e465363d-6fbe-3665-ac6a-c10d319a38ee.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 16509 IP address blocks: 104.36.208.0/21 maxlen: 24 2620:12f:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:df:50:de:70:20:cc:bf:47:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb8204eb-8ce5-4d9a-b383-b4433e8075a0 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=7f82f8eb-4757-4304-9fe5-35ee1ec73b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:83:f1:00:e3:2c:84:6e:03:fc:20:c5:04:70: a2:9c:17:cf:56:91:34:18:da:21:72:17:26:94:75: 48:68:13:2a:38:97:63:f2:32:fb:0d:b4:30:62:af: 5f:b4:56:dc:ab:19:a4:ee:cf:29:86:ac:27:bc:f9: 91:53:d5:db:68:61:99:5a:7c:1f:36:ca:f4:e0:66: d1:cc:1c:b6:11:a2:38:d4:d9:0d:84:56:17:b2:4b: a0:9b:34:46:b3:9c:fd:2a:a5:ee:d4:53:4d:eb:96: ce:fa:92:de:ba:8b:a6:e7:0a:89:ac:10:99:65:9c: 7e:8d:e1:09:0a:d6:72:62:8c:9e:de:db:fa:61:61: 39:e4:92:36:a0:f8:eb:1e:c1:ae:0b:22:71:ae:9b: b2:18:2c:71:9a:4b:b0:69:ed:15:92:a4:78:a1:d0: 77:98:a8:00:d8:05:01:9b:37:8b:10:d5:b7:f6:df: 78:53:67:0b:29:bd:30:e5:b3:b2:66:6a:4d:e3:a5: 39:fe:a6:51:d6:db:a7:2f:2d:96:d1:e8:67:a4:af: 58:c5:4f:07:9a:7d:d7:64:05:0f:42:4d:42:52:5f: 2d:fe:6c:8e:b3:9f:98:a8:b9:12:45:b7:01:22:7f: 38:78:01:28:b5:fe:52:49:d4:38:f2:d6:3a:5d:69: 96:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:01:71:97:DA:40:28:C0:8D:D0:79:10:74:86:C2:F8:9A:71:07:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/e465363d-6fbe-3665-ac6a-c10d319a38ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.crl X509v3 Authority Key Identifier: keyid:2C:61:60:B2:3E:09:E8:97:9F:3C:2C:F5:B1:39:AB:BC:11:A5:38:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer sbgp-ipAddrBlock: critical IPv4: 104.36.208.0/21 IPv6: 2620:12f:7000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:1a:dc:76:8a:b4:f4:1b:08:86:0a:8a:2c:bd:91:05:e9:e9: c8:35:39:4b:38:35:ae:55:fa:31:d9:b1:02:2a:0f:52:8d:99: 14:e2:01:ba:64:a8:0c:da:45:40:a9:a4:d3:35:36:d5:58:f4: f7:30:6d:f0:7f:0f:6d:af:d5:03:38:92:2e:08:e8:73:45:94: 58:e1:f4:46:79:9d:50:34:01:05:f8:a8:d2:c4:43:e1:25:a4: fa:41:1e:15:41:32:27:8a:d9:50:17:ad:8e:1b:d6:2a:bf:81: e1:88:c4:9b:02:d3:8e:18:49:14:d6:cc:44:71:a7:e1:85:ed: e6:9b:f2:66:30:e0:ff:44:d4:57:14:fc:d2:38:dc:7b:15:1f: e6:ec:15:e9:74:52:24:29:d7:1c:6f:7a:20:85:07:13:a6:54: d7:d9:f4:9f:94:64:82:f9:f1:b7:ca:23:aa:39:c2:dc:ba:a2: 78:cd:24:93:60:59:37:b3:49:2c:22:f3:e2:17:e4:1f:08:8e: 43:e4:47:2b:29:f1:bf:84:92:4c:97:3d:2c:0e:72:9b:74:2f: c1:a6:63:d1:14:81:bc:8b:1f:c6:b2:96:7d:bb:f0:54:91:e0: 06:6d:ac:ca:e5:65:26:5d:7d:b9:b8:e4:21:0c:16:8a:b5:a2: 43:9f:02:25 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEqhYN9Q3nAgzL9H4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI4MjA0ZWItOGNlNS00ZDlhLWIzODMtYjQ0MzNlODA3 NWEwMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk N2Y4MmY4ZWItNDc1Ny00MzA0LTlmZTUtMzVlZTFlYzczYjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4PxAOMshG4D/CDFBHCinBfPVpE0GNohchcm lHVIaBMqOJdj8jL7DbQwYq9ftFbcqxmk7s8phqwnvPmRU9XbaGGZWnwfNsr04GbR zBy2EaI41NkNhFYXskugmzRGs5z9KqXu1FNN65bO+pLeuoum5wqJrBCZZZx+jeEJ CtZyYoye3tv6YWE55JI2oPjrHsGuCyJxrpuyGCxxmkuwae0VkqR4odB3mKgA2AUB mzeLENW39t94U2cLKb0w5bOyZmpN46U5/qZR1tunLy2W0ehnpK9YxU8Hmn3XZAUP Qk1CUl8t/myOs5+YqLkSRbcBIn84eAEotf5SSdQ48tY6XWmWOQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGABcZfaQCjAjdB5EHSGwviacQfuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lYjgy MDRlYi04Y2U1LTRkOWEtYjM4My1iNDQzM2U4MDc1YTAvZTQ2NTM2M2QtNmZiZS0z NjY1LWFjNmEtYzEwZDMxOWEzOGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZWI4MjA0ZWItOGNlNS00ZDlhLWIz ODMtYjQ0MzNlODA3NWEwL2ViODIwNGViLThjZTUtNGQ5YS1iMzgzLWI0NDMzZTgw NzVhMC5jcmwwHwYDVR0jBBgwFoAULGFgsj4J6JefPCz1sTmrvBGlOE8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9lYjgyMDRlYi04Y2U1LTRkOWEtYjM4My1iNDQz M2U4MDc1YTAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQDaCTQMA4E AgACMAgDBgAmIAEvcDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQGtx2irT0GwiGCoosvZEF6enINTlLODWu Vfox2bECKg9SjZkU4gG6ZKgM2kVAqaTTNTbVWPT3MG3wfw9tr9UDOJIuCOhzRZRY 4fRGeZ1QNAEF+KjSxEPhJaT6QR4VQTInitlQF62OG9Yqv4HhiMSbAtOOGEkU1sxE cafhhe3mm/JmMOD/RNRXFPzSONx7FR/m7BXpdFIkKdccb3oghQcTplTX2fSflGSC +fG3yiOqOcLcuqJ4zSSTYFk3s0ksIvPiF+QfCI5D5EcrKfG/hJJMlz0sDnKbdC/B pmPRFIG8ix/GspZ9u/BUkeAGbazK5WUmXX25uOQhDBaKtaJDnwIl -----END CERTIFICATE-----Generated at Wed Aug 6 07:55:06 2025 by rpki-client