$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/af0aa1c9-1e2a-334f-8206-972f95c4ab38.roa File: af0aa1c9-1e2a-334f-8206-972f95c4ab38.roa (raw, json) Hash identifier: INOOOE8Ez2+uumnxo+9frbbLWxgSV70PPsfqc7y0ZU8= Subject key identifier: DF:DD:28:07:A6:DF:E5:B8:4E:F2:3B:C7:20:EE:EA:83:2E:CB:2C:08 Certificate issuer: /CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b Certificate serial: 010D0C9F4328584A19FAB911F94C9C8BA55E5E80 Authority key identifier: B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/af0aa1c9-1e2a-334f-8206-972f95c4ab38.roa Signing time: Fri 06 Jun 2025 13:01:04 +0000 ROA not before: Fri 06 Jun 2025 13:01:04 +0000 ROA not after: Thu 04 Sep 2025 13:01:04 +0000 asID: 1074 IP address blocks: 104.247.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:19:fa:b9:11:f9:4c:9c:8b:a5:5e:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b Validity Not Before: Jun 6 13:01:04 2025 GMT Not After : Sep 4 13:01:04 2025 GMT Subject: CN=e97c649e-f2df-4431-94f6-6847b5476276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:40:bb:67:a5:c4:be:14:9a:0f:bc:d5:e0:aa: 17:cf:55:f2:81:c0:ed:07:f9:0b:25:c4:f3:ef:97: f1:1b:7c:16:d0:93:b1:a9:8e:f0:e0:f3:a9:f7:f8: f0:0b:94:7f:fd:08:e5:6e:2c:ce:e7:68:d5:99:5e: e0:35:fa:aa:dd:77:dc:71:62:28:22:6b:67:8d:12: e2:87:14:44:c1:7e:41:a6:99:e5:ad:ad:6a:f1:2c: 20:21:71:75:bc:41:8e:e8:0d:74:f7:0c:89:30:f6: 2a:ed:4b:bc:9a:c6:10:84:11:66:04:2c:0c:67:d9: 93:33:20:87:a5:2e:d1:9c:bb:96:1b:73:17:ed:dc: 72:8d:c6:9a:ab:25:ca:27:af:79:c0:a8:4d:37:20: f6:3c:a6:f2:8e:8a:92:14:c5:8e:ad:10:61:3a:48: 86:dc:ff:16:22:e1:1f:56:1e:cd:bf:6a:5a:8e:66: 13:f6:c6:08:33:b6:da:27:32:31:45:c7:da:f1:b6: 17:90:85:99:fa:af:8a:03:c4:fb:cb:76:66:f5:1a: 39:75:19:7d:e8:62:a3:a9:00:93:07:7e:bf:a4:45: f7:71:6e:45:63:7a:c2:e4:69:5e:da:c8:21:c1:6a: 45:b5:99:23:b9:31:f8:95:87:9a:da:ac:d2:b9:1c: 5f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DD:28:07:A6:DF:E5:B8:4E:F2:3B:C7:20:EE:EA:83:2E:CB:2C:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/af0aa1c9-1e2a-334f-8206-972f95c4ab38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl X509v3 Authority Key Identifier: keyid:B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer sbgp-ipAddrBlock: critical IPv4: 104.247.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:47:19:a8:a5:91:98:f7:a8:4f:b0:16:25:51:6f:bc:9e:76: b4:e5:12:8b:f2:95:83:12:c7:61:2d:10:2a:57:1f:c1:51:4e: ef:04:4d:42:09:99:f2:6e:fb:37:b5:cd:0e:71:b9:2c:3c:c6: 01:b6:0c:a6:b8:c2:bd:2b:4e:06:75:8c:d3:93:35:0d:f6:26: dc:53:7b:6e:75:49:9a:48:26:2b:f7:65:b5:ce:bf:c0:cc:ea: fd:76:fe:e4:fc:9c:a1:63:05:55:49:1c:0c:49:f6:87:5a:a1: ec:14:33:54:fc:90:0c:0a:52:a3:67:97:5f:86:7b:8c:76:3f: 8c:8f:bb:a3:2c:99:8a:5e:1c:9c:a4:60:b6:a3:83:77:31:e5: b0:e7:e2:8f:56:c0:22:13:ac:34:da:27:a6:89:25:bb:0e:55: 90:17:56:6f:22:d0:03:53:0f:36:16:eb:69:79:28:4b:ba:49: c5:b6:b4:bb:86:a7:bb:0d:c2:be:5d:59:69:51:c3:8e:3a:4a: 18:b1:1b:24:28:2f:b2:a0:a8:2d:91:70:31:85:b1:72:64:16: 0f:b4:86:cf:07:15:dd:6e:d9:40:a9:32:c0:9c:13:93:dc:ad: a1:a9:e3:b2:e0:54:e8:6c:1c:ec:47:dc:d3:0e:e5:2c:1e:f3: 99:e2:6c:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoZ+rkR+Uyci6VeXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIwNzhmN2EtOGJjNC00NmMzLWI5Y2ItNzMzMDc3NWE3 ODBiMB4XDTI1MDYwNjEzMDEwNFoXDTI1MDkwNDEzMDEwNFowLzEtMCsGA1UEAxMk ZTk3YzY0OWUtZjJkZi00NDMxLTk0ZjYtNjg0N2I1NDc2Mjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkC7Z6XEvhSaD7zV4KoXz1XygcDtB/kLJcTz 75fxG3wW0JOxqY7w4POp9/jwC5R//QjlbizO52jVmV7gNfqq3XfccWIoImtnjRLi hxREwX5Bppnlra1q8SwgIXF1vEGO6A109wyJMPYq7Uu8msYQhBFmBCwMZ9mTMyCH pS7RnLuWG3MX7dxyjcaaqyXKJ695wKhNNyD2PKbyjoqSFMWOrRBhOkiG3P8WIuEf Vh7Nv2pajmYT9sYIM7baJzIxRcfa8bYXkIWZ+q+KA8T7y3Zm9Ro5dRl96GKjqQCT B36/pEX3cW5FY3rC5Gle2sghwWpFtZkjuTH4lYea2qzSuRxfiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/dKAem3+W4TvI7xyDu6oMuyywIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYjA3 OGY3YS04YmM0LTQ2YzMtYjljYi03MzMwNzc1YTc4MGIvYWYwYWExYzktMWUyYS0z MzRmLTgyMDYtOTcyZjk1YzRhYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGIwNzhmN2EtOGJjNC00NmMzLWI5 Y2ItNzMzMDc3NWE3ODBiLzBiMDc4ZjdhLThiYzQtNDZjMy1iOWNiLTczMzA3NzVh NzgwYi5jcmwwHwYDVR0jBBgwFoAUt248f7jEEIrnvlA07Aoj48xe7PEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYjA3OGY3YS04YmM0LTQ2YzMtYjljYi03MzMw Nzc1YTc4MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPd1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdHGailkZj3qE+wFiVRb7yedrTlEovylYMSx2EtECpXH8FRTu8ETUIJ mfJu+ze1zQ5xuSw8xgG2DKa4wr0rTgZ1jNOTNQ32JtxTe251SZpIJiv3ZbXOv8DM 6v12/uT8nKFjBVVJHAxJ9odaoewUM1T8kAwKUqNnl1+Ge4x2P4yPu6MsmYpeHJyk YLajg3cx5bDn4o9WwCITrDTaJ6aJJbsOVZAXVm8i0ANTDzYW62l5KEu6ScW2tLuG p7sNwr5dWWlRw446ShixGyQoL7KgqC2RcDGFsXJkFg+0hs8HFd1u2UCpMsCcE5Pc raGp47LgVOhsHOxH3NMO5Swe85nibAM= -----END CERTIFICATE-----Generated at Wed Jun 18 07:26:11 2025 by rpki-client