$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/0ea9e1cf-0128-3fd6-a058-5e7b286fec44.roa File: 0ea9e1cf-0128-3fd6-a058-5e7b286fec44.roa (raw, json) Hash identifier: 4oSMhUApt96e9o4jmF3Y/8+fDcYNoE9D0SVkuZOc350= Subject key identifier: AE:87:19:EC:55:41:13:E3:6D:F9:C8:98:0B:7B:E8:87:D2:03:EE:F9 Certificate issuer: /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Certificate serial: 010D0C9F4328584A87147D0465D7461DD9CB2000 Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/0ea9e1cf-0128-3fd6-a058-5e7b286fec44.roa Signing time: Tue 15 Jul 2025 14:56:10 +0000 ROA not before: Tue 15 Jul 2025 14:56:10 +0000 ROA not after: Mon 13 Oct 2025 14:56:10 +0000 asID: 399244 IP address blocks: 104.204.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:87:14:7d:04:65:d7:46:1d:d9:cb:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Validity Not Before: Jul 15 14:56:10 2025 GMT Not After : Oct 13 14:56:10 2025 GMT Subject: CN=c16cf975-9c28-409c-b6db-8d9b7797d9d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ff:7a:d1:e8:c5:a6:d6:7b:c5:4e:da:1b:63: 3f:87:37:a0:76:b7:6f:d0:58:91:74:51:6d:0d:bd: 8e:b9:8e:14:d2:a1:51:95:bc:e7:d0:3b:84:c7:17: 4c:9c:62:08:e5:db:6f:c3:a9:c4:d0:f5:54:c4:57: 85:b9:2b:a1:10:85:c3:a3:a7:d1:88:12:8d:81:3f: de:65:62:be:bc:aa:ee:d2:47:f9:6f:56:4a:f9:f9: 3d:ff:71:1e:e4:02:4a:b0:8d:d5:e6:fc:c1:53:ef: d8:6c:f0:cb:4a:25:4b:05:73:bc:d8:d8:3d:fa:8f: 84:8d:34:63:7b:23:99:31:1a:77:3b:dd:f5:6b:24: 14:4b:ba:67:1c:db:71:c4:1f:5a:1d:b9:ab:14:6b: 19:99:b7:05:92:4f:ea:65:01:05:98:ba:0b:df:ca: a6:36:e0:64:ee:93:c6:c3:38:fa:fb:45:5f:69:29: 11:51:4b:2f:36:80:c5:c9:4a:31:1c:ea:96:dd:30: 6b:95:ce:b9:6e:c7:fe:8e:9f:6d:d3:18:3f:8e:37: d4:76:a8:5a:1c:21:c4:0a:8b:75:3b:bb:a6:3b:91: fd:8e:92:c5:76:ef:71:71:5f:ce:50:96:15:ba:6b: d2:ac:7f:2d:4e:f7:a5:ea:60:aa:2b:d8:c8:b1:f0: 65:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:87:19:EC:55:41:13:E3:6D:F9:C8:98:0B:7B:E8:87:D2:03:EE:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/0ea9e1cf-0128-3fd6-a058-5e7b286fec44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl X509v3 Authority Key Identifier: keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer sbgp-ipAddrBlock: critical IPv4: 104.204.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:b4:6e:e6:2f:fa:9b:38:79:77:7f:85:be:22:b4:bf:e2:3e: 71:ee:31:a6:58:9c:1f:88:e4:eb:54:d4:79:8a:59:c2:27:ae: 0c:a6:30:31:5f:e9:2e:16:d6:56:96:13:9d:1e:07:8d:96:31: 2e:19:4b:93:82:a6:9a:af:72:64:ca:40:a8:67:9c:c2:cd:25: 51:8e:9f:cc:70:39:48:b3:ef:60:36:43:1c:33:9a:59:48:ad: 05:70:bf:9d:e1:3b:7a:61:b6:7b:c9:41:73:1f:dd:de:00:c6: 93:55:c1:2a:4c:06:86:6d:33:e0:a4:12:97:c6:c8:72:51:40: 91:51:7f:26:34:3f:ee:2e:ec:bc:7e:29:04:41:c4:61:ae:5c: cf:00:ee:10:a7:8e:3d:a8:73:08:e5:dc:6c:00:1d:95:82:95: 94:49:63:0a:27:55:92:10:b1:00:91:5d:23:a6:62:61:e7:ea: 20:ba:bc:e2:ea:60:a3:1d:dd:8a:52:41:55:8e:ad:41:02:22: 3b:eb:cf:e9:16:34:0c:ed:74:0e:e5:0b:02:c4:c0:89:97:d5: 05:98:84:64:9b:fc:d2:1c:e5:e4:c6:96:2b:05:0c:31:53:92: a2:d3:00:44:92:2e:c8:65:42:c2:71:f2:89:9b:fb:1d:e2:70: 2d:45:11:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHFH0EZddGHdnLIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh MzhkMB4XDTI1MDcxNTE0NTYxMFoXDTI1MTAxMzE0NTYxMFowLzEtMCsGA1UEAxMk YzE2Y2Y5NzUtOWMyOC00MDljLWI2ZGItOGQ5Yjc3OTdkOWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P960ejFptZ7xU7aG2M/hzegdrdv0FiRdFFt Db2OuY4U0qFRlbzn0DuExxdMnGII5dtvw6nE0PVUxFeFuSuhEIXDo6fRiBKNgT/e ZWK+vKru0kf5b1ZK+fk9/3Ee5AJKsI3V5vzBU+/YbPDLSiVLBXO82Ng9+o+EjTRj eyOZMRp3O931ayQUS7pnHNtxxB9aHbmrFGsZmbcFkk/qZQEFmLoL38qmNuBk7pPG wzj6+0VfaSkRUUsvNoDFyUoxHOqW3TBrlc65bsf+jp9t0xg/jjfUdqhaHCHECot1 O7umO5H9jpLFdu9xcV/OUJYVumvSrH8tTvel6mCqK9jIsfBlLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6HGexVQRPjbfnImAt76IfSA+75MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvMGVhOWUxY2YtMDEyOC0z ZmQ2LWEwNTgtNWU3YjI4NmZlYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl MTU0YmEzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMzdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACi0buYv+ps4eXd/hb4itL/iPnHuMaZYnB+I5OtU1HmKWcInrgymMDFf 6S4W1laWE50eB42WMS4ZS5OCppqvcmTKQKhnnMLNJVGOn8xwOUiz72A2QxwzmllI rQVwv53hO3phtnvJQXMf3d4AxpNVwSpMBoZtM+CkEpfGyHJRQJFRfyY0P+4u7Lx+ KQRBxGGuXM8A7hCnjj2ocwjl3GwAHZWClZRJYwonVZIQsQCRXSOmYmHn6iC6vOLq YKMd3YpSQVWOrUECIjvrz+kWNAztdA7lCwLEwImX1QWYhGSb/NIc5eTGlisFDDFT kqLTAESSLshlQsJx8omb+x3icC1FEdk= -----END CERTIFICATE-----Generated at Mon Aug 4 14:46:28 2025 by rpki-client