$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/968332ec-c5e0-337e-84e2-d19764525274.roa File: 968332ec-c5e0-337e-84e2-d19764525274.roa (raw, json) Hash identifier: HaWg4I4M/N4s9rJD3Hmgkp8ehPdhIXFa3LkII3n5cj0= Subject key identifier: 61:4C:D5:90:77:23:A7:0A:D9:E9:52:E6:47:F3:42:80:05:4E:86:90 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AADF120C8243941BA94B007E0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/968332ec-c5e0-337e-84e2-d19764525274.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 3223 IP address blocks: 104.37.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:20:c8:24:39:41:ba:94:b0:07:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=0aaf15f8-fe39-434b-b36c-df561dd03c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1d:e0:ec:2b:7d:77:10:5c:32:d7:22:31:22: d5:ff:67:88:95:b4:64:92:53:8d:c4:39:76:9f:58: 48:d3:8e:8e:d3:c7:fd:8c:b6:c6:4c:12:93:0f:0b: 15:0f:5b:f9:b9:19:1b:c1:e3:44:b1:3a:b2:c1:02: 20:ba:4a:e1:47:57:71:b9:8f:2a:df:65:b8:57:fb: 61:3c:31:59:38:6a:b7:a2:0d:37:2e:51:00:c4:9c: 8c:5c:ab:43:45:0c:98:7d:f5:63:e9:60:20:cd:05: ad:53:0d:f3:35:44:48:b0:ce:97:f1:d9:eb:31:65: 38:69:85:99:35:26:a9:52:1a:7a:dd:60:43:e4:a2: 32:04:4d:6b:16:2e:fc:2e:b8:49:be:98:34:0d:85: 40:86:c3:19:93:b5:4a:b6:ab:78:61:6f:67:aa:ba: 85:54:96:d2:eb:73:08:7b:2b:60:53:3a:55:2a:de: eb:3e:55:9a:cf:72:a3:8c:07:69:00:92:9c:3c:57: 4f:7b:69:61:47:b6:9e:f8:4b:a6:49:f7:aa:0b:cd: fe:7e:1b:b4:02:03:4f:10:e8:35:26:78:31:69:23: 82:f4:f3:03:04:59:20:fd:33:d7:db:1f:58:23:5a: 86:7b:ba:23:c7:31:41:48:17:9a:77:e0:39:09:1e: 49:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4C:D5:90:77:23:A7:0A:D9:E9:52:E6:47:F3:42:80:05:4E:86:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/968332ec-c5e0-337e-84e2-d19764525274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.37.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:6d:9f:e8:77:1f:4c:5e:d1:ee:06:99:64:94:ea:60:67:ba: 90:37:30:15:83:7f:a5:7b:6e:35:3a:ad:d9:2d:7d:9f:12:b4: 8d:ff:bf:51:cd:cf:44:8b:f2:83:13:4b:43:b1:dc:a3:71:82: 50:a2:a8:d1:db:95:57:8d:c9:08:90:ee:08:01:a0:5c:54:7f: 3f:ea:96:8f:03:27:78:86:f2:31:fe:0a:ad:e3:7b:f5:00:c2: 30:03:74:92:be:a0:f0:85:70:10:46:0e:87:38:48:dc:49:23: ea:85:c7:b0:98:60:e5:a1:d2:be:dc:87:71:81:71:6f:ef:2c: d8:c9:cb:15:60:0b:0e:81:e9:a5:c5:d8:91:47:0f:ad:98:09: 9e:09:5c:aa:b5:5a:39:a6:14:57:8e:a6:95:42:87:4a:b5:5b: f2:49:d7:ec:39:35:21:8a:30:42:25:0f:cf:c1:21:78:a5:3b: 7e:48:9c:a9:13:d3:43:e6:e4:35:67:87:54:d9:bf:a9:ce:e9: 37:e8:cb:28:b9:51:a1:cf:4b:33:03:6a:d5:23:d5:bd:cc:e3: 2e:65:8a:88:68:ad:28:02:3f:42:4c:d3:20:90:03:63:a8:a0: 92:c1:ed:5f:aa:9b:c6:3d:e8:ce:fe:fb:4e:2c:c1:32:59:b6: 5e:ba:bb:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8SDIJDlBupSwB+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk MGFhZjE1ZjgtZmUzOS00MzRiLWIzNmMtZGY1NjFkZDAzYzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB3g7Ct9dxBcMtciMSLV/2eIlbRkklONxDl2 n1hI046O08f9jLbGTBKTDwsVD1v5uRkbweNEsTqywQIgukrhR1dxuY8q32W4V/th PDFZOGq3og03LlEAxJyMXKtDRQyYffVj6WAgzQWtUw3zNURIsM6X8dnrMWU4aYWZ NSapUhp63WBD5KIyBE1rFi78LrhJvpg0DYVAhsMZk7VKtqt4YW9nqrqFVJbS63MI eytgUzpVKt7rPlWaz3KjjAdpAJKcPFdPe2lhR7ae+EumSfeqC83+fhu0AgNPEOg1 JngxaSOC9PMDBFkg/TPX2x9YI1qGe7ojxzFBSBead+A5CR5JTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFM1ZB3I6cK2elS5kfzQoAFToaQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTY4MzMyZWMtYzVlMC0z MzdlLTg0ZTItZDE5NzY0NTI1Mjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHptn+h3H0xe0e4GmWSU6mBnupA3MBWDf6V7bjU6rdktfZ8StI3/v1HN z0SL8oMTS0Ox3KNxglCiqNHblVeNyQiQ7ggBoFxUfz/qlo8DJ3iG8jH+Cq3je/UA wjADdJK+oPCFcBBGDoc4SNxJI+qFx7CYYOWh0r7ch3GBcW/vLNjJyxVgCw6B6aXF 2JFHD62YCZ4JXKq1WjmmFFeOppVCh0q1W/JJ1+w5NSGKMEIlD8/BIXilO35InKkT 00Pm5DVnh1TZv6nO6Tfoyyi5UaHPSzMDatUj1b3M4y5liohorSgCP0JM0yCQA2Oo oJLB7V+qm8Y96M7++04swTJZtl66uxo= -----END CERTIFICATE-----Generated at Fri Aug 8 19:22:37 2025 by rpki-client