$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/c11bfbf6-a7cd-3788-996d-490b83f2c2d7.roa File: c11bfbf6-a7cd-3788-996d-490b83f2c2d7.roa (raw, json) Hash identifier: xZyT7w2So/uGVjZlCxKBl5NonHRFMDn8feTVq4rBmXE= Subject key identifier: F5:01:85:85:50:62:22:4E:83:40:2F:97:0C:81:6F:BA:1E:68:4B:39 Certificate issuer: /CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4 Certificate serial: 010D0C9F4328584A629091803AFAE7C039BCF458 Authority key identifier: 19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/c11bfbf6-a7cd-3788-996d-490b83f2c2d7.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 14618 IP address blocks: 104.249.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:91:80:3a:fa:e7:c0:39:bc:f4:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=59062c5b-36ac-487a-b992-b73fc55015db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3a:e7:25:b8:54:88:a0:f1:7b:c4:74:4d:60: 4d:aa:5d:1b:02:bc:1d:1e:15:3e:f7:d6:54:e8:0d: a9:54:7f:a9:fb:a4:72:86:db:e3:0d:61:a9:7e:93: 3b:50:49:32:72:7c:11:b7:fe:88:5d:42:48:46:9c: e2:56:b4:51:b4:4f:36:a3:7b:3f:cd:3f:fd:ad:23: 6c:e8:61:bf:a3:4b:37:96:f5:e8:8e:57:70:2f:ae: 37:c6:31:a4:9b:9e:70:d1:f1:d7:48:50:8e:4f:74: 2f:2f:21:08:8a:2f:48:03:a0:a7:37:d8:a5:17:c8: e2:61:85:4c:e8:17:1a:88:d7:e9:c4:4a:6b:79:8b: 70:1c:2f:c9:29:bd:16:32:74:90:b7:2f:3d:0b:79: 29:81:81:12:c1:80:d6:50:a0:14:25:54:1a:9c:f7: 52:81:06:45:58:9b:3d:c7:e6:e2:fa:28:60:fa:b4: 6f:07:6c:6e:3a:9f:0e:03:63:39:8c:e6:72:8a:d7: 45:e4:51:55:eb:63:28:cb:46:1c:e0:eb:15:d9:a3: a2:d0:08:9c:98:0c:24:e0:d6:32:ff:45:d6:3c:97: 03:87:2f:b4:32:ca:ed:f6:24:81:14:d0:42:46:20: 0a:70:57:65:21:d7:10:63:0d:c2:07:a2:a6:d5:2f: fa:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:01:85:85:50:62:22:4E:83:40:2F:97:0C:81:6F:BA:1E:68:4B:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/c11bfbf6-a7cd-3788-996d-490b83f2c2d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.crl X509v3 Authority Key Identifier: keyid:19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer sbgp-ipAddrBlock: critical IPv4: 104.249.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:2b:73:86:ca:ad:9e:17:84:c9:a9:4c:dc:66:ef:08:36:51: 3e:05:4a:9b:94:a2:11:9a:80:83:fc:09:a6:43:e3:53:c4:54: 76:3e:cf:31:07:36:c1:80:c9:18:b1:71:9a:75:41:e6:44:2b: 90:a0:db:26:ec:4e:02:a6:40:21:b4:1c:ff:2e:d0:ba:fd:fe: ea:cc:44:20:68:69:8e:31:95:2d:fa:ed:ce:c7:35:33:b1:79: 73:0b:7c:85:73:bf:d3:b2:dd:39:66:30:ee:40:e2:40:b3:26: 70:24:1a:14:f1:d8:c7:e5:9e:40:2c:cd:6e:7c:21:61:16:3e: 01:f3:52:5c:a7:e1:4e:cb:71:b2:22:c9:90:69:63:8f:e1:eb: 9f:06:b7:50:ee:2a:5d:9c:0e:b2:a7:0e:f6:f1:e0:74:a4:9a: a5:f0:11:80:1b:0a:21:50:9a:1d:ba:e0:a7:2d:59:5b:bd:b7: 1a:7c:0f:aa:cb:21:e4:66:b1:ec:b4:22:1f:4b:f6:d0:22:7b: 67:af:36:d5:d8:f0:90:2b:43:29:43:c5:8f:68:42:e2:b8:f8: 36:8d:80:f9:b3:df:bc:31:98:91:fe:bb:1c:72:ab:87:d6:72: fc:48:7a:79:ea:bb:1c:e2:41:a7:42:6c:92:a5:2f:6f:20:87: 00:2e:3a:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJGAOvrnwDm89FgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJiODNhZTctNTJiNi00NWI0LTkyYzktYzEyZjdiYjAw OWY0MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk NTkwNjJjNWItMzZhYy00ODdhLWI5OTItYjczZmM1NTAxNWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjrnJbhUiKDxe8R0TWBNql0bArwdHhU+99ZU 6A2pVH+p+6RyhtvjDWGpfpM7UEkycnwRt/6IXUJIRpziVrRRtE82o3s/zT/9rSNs 6GG/o0s3lvXojldwL643xjGkm55w0fHXSFCOT3QvLyEIii9IA6CnN9ilF8jiYYVM 6BcaiNfpxEpreYtwHC/JKb0WMnSQty89C3kpgYESwYDWUKAUJVQanPdSgQZFWJs9 x+bi+ihg+rRvB2xuOp8OA2M5jOZyitdF5FFV62Moy0Yc4OsV2aOi0AicmAwk4NYy /0XWPJcDhy+0Msrt9iSBFNBCRiAKcFdlIdcQYw3CB6Km1S/6QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUBhYVQYiJOg0AvlwyBb7oeaEs5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMmI4 M2FlNy01MmI2LTQ1YjQtOTJjOS1jMTJmN2JiMDA5ZjQvYzExYmZiZjYtYTdjZC0z Nzg4LTk5NmQtNDkwYjgzZjJjMmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTJiODNhZTctNTJiNi00NWI0LTky YzktYzEyZjdiYjAwOWY0L2EyYjgzYWU3LTUyYjYtNDViNC05MmM5LWMxMmY3YmIw MDlmNC5jcmwwHwYDVR0jBBgwFoAUGQyTcZ0vFU2+EnGstbx1yAMoDiswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMmI4M2FlNy01MmI2LTQ1YjQtOTJjOS1jMTJm N2JiMDA5ZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUrc4bKrZ4XhMmpTNxm7wg2UT4FSpuUohGagIP8CaZD41PEVHY+zzEH NsGAyRixcZp1QeZEK5Cg2ybsTgKmQCG0HP8u0Lr9/urMRCBoaY4xlS367c7HNTOx eXMLfIVzv9Oy3TlmMO5A4kCzJnAkGhTx2MflnkAszW58IWEWPgHzUlyn4U7LcbIi yZBpY4/h658Gt1DuKl2cDrKnDvbx4HSkmqXwEYAbCiFQmh264KctWVu9txp8D6rL IeRmsey0Ih9L9tAie2evNtXY8JArQylDxY9oQuK4+DaNgPmz37wxmJH+uxxyq4fW cvxIennquxziQadCbJKlL28ghwAuOqo= -----END CERTIFICATE-----Generated at Tue Aug 5 17:21:01 2025 by rpki-client