$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/0a18cb35-1200-3de5-91cf-435418df7565.roa File: 0a18cb35-1200-3de5-91cf-435418df7565.roa (raw, json) Hash identifier: 7Q+VT+mWTRbhAizmPht18Ef18/8FwxyDQFFNYW404fI= Subject key identifier: A2:1B:80:47:F2:CF:78:1A:30:26:01:6D:33:AD:2C:75:40:D8:4E:16 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584A0C05717CF8FAAE5824095F00 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/0a18cb35-1200-3de5-91cf-435418df7565.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 21743 IP address blocks: 104.247.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:71:7c:f8:fa:ae:58:24:09:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=14f970dd-8d34-4ffa-b49e-84ee15583b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6c:26:1d:7b:fb:6d:78:e5:f3:a5:6a:cc:88: eb:07:89:fd:1b:45:c7:36:84:9e:3e:ec:ad:b1:23: b7:a6:4c:4e:f6:f2:82:9a:a2:6d:d6:59:dc:62:96: f9:d6:06:69:e6:db:2d:fa:a7:d9:3b:ac:8f:97:de: 00:e3:2c:2f:ba:f8:8b:79:17:9d:f1:38:a4:a2:82: 0c:91:cd:e0:da:8d:5d:97:e8:e6:f4:63:53:73:69: d6:82:51:4f:70:f6:1f:62:f4:b9:4f:cb:9c:cf:ce: a7:e1:b8:d9:7c:19:60:39:0e:bd:30:ed:a8:4f:dd: 7a:1a:92:f9:ea:48:1b:1b:d6:4f:79:dd:d1:49:c4: 0b:58:09:5d:ea:74:59:5a:1b:40:08:14:80:5e:bc: ac:f4:4e:5a:05:0d:48:f4:dd:d6:16:ed:e8:45:e6: 5e:78:2a:89:07:3a:52:0f:d7:0d:a6:92:e3:79:23: 4e:34:b9:25:9e:fb:18:ab:e0:98:c5:c2:c0:cd:b3: a9:5e:22:d7:74:18:3b:6c:2f:52:ea:8f:64:69:5a: f3:64:a1:57:c3:99:c1:66:e6:e0:20:6d:56:e9:22: 7e:9d:59:30:bd:ec:08:f8:59:84:1d:a8:a7:a0:b8: 90:9c:2d:e4:bf:3d:d6:d7:be:6d:0e:cc:a9:22:2a: 2d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1B:80:47:F2:CF:78:1A:30:26:01:6D:33:AD:2C:75:40:D8:4E:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/0a18cb35-1200-3de5-91cf-435418df7565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 104.247.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:89:49:84:4b:2a:dd:5a:6a:4a:6a:2b:66:ff:96:fa:18:ab: 6a:e6:ee:47:53:78:4a:4b:e1:51:c1:d9:2c:c2:6c:7f:d6:1f: 0f:7d:e8:58:2b:b6:e9:89:42:12:cc:7d:37:13:4d:6d:a8:c7: 1c:63:17:6f:4d:f2:86:db:43:ec:f0:ce:02:b0:65:35:fa:df: 79:30:d6:54:90:d6:ab:63:c2:20:5f:14:3c:8d:3a:ac:13:ad: 83:ec:31:58:6c:6c:d2:1b:9a:de:d6:d5:59:6f:4e:bf:7e:d1: 8d:ae:75:5e:82:70:11:0b:6e:b2:5c:bd:a7:c2:85:b8:57:61: 50:68:26:fa:e3:74:87:30:cf:45:3b:43:68:1a:b6:cb:fc:56: a3:ed:0e:7e:cd:8a:3d:cf:c1:02:c1:c7:d3:3d:37:b7:a8:4b: ae:9f:23:4f:d2:f0:36:2e:b6:2b:cf:14:b7:70:7f:d9:53:ab: 86:57:35:81:0b:ed:cf:e9:91:e8:e6:6d:2d:b4:70:6d:08:42: b7:38:d7:f2:e1:8f:3d:aa:c7:9e:c5:2a:33:26:04:3d:50:e3: a1:ab:de:61:fe:3b:cb:53:85:92:44:16:88:45:30:ca:ee:c4: 2d:70:00:da:1e:61:b5:af:27:f5:15:62:eb:eb:58:62:a8:aa: aa:90:e6:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBXF8+PquWCQJXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MTRmOTcwZGQtOGQzNC00ZmZhLWI0OWUtODRlZTE1NTgzYjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2wmHXv7bXjl86VqzIjrB4n9G0XHNoSePuyt sSO3pkxO9vKCmqJt1lncYpb51gZp5tst+qfZO6yPl94A4ywvuviLeRed8TikooIM kc3g2o1dl+jm9GNTc2nWglFPcPYfYvS5T8ucz86n4bjZfBlgOQ69MO2oT916GpL5 6kgbG9ZPed3RScQLWAld6nRZWhtACBSAXrys9E5aBQ1I9N3WFu3oReZeeCqJBzpS D9cNppLjeSNONLklnvsYq+CYxcLAzbOpXiLXdBg7bC9S6o9kaVrzZKFXw5nBZubg IG1W6SJ+nVkwvewI+FmEHainoLiQnC3kvz3W175tDsypIiot4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIbgEfyz3gaMCYBbTOtLHVA2E4WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvMGExOGNiMzUtMTIwMC0z ZGU1LTkxY2YtNDM1NDE4ZGY3NTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPd7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6JSYRLKt1aakpqK2b/lvoYq2rm7kdTeEpL4VHB2SzCbH/WHw996Fgr tumJQhLMfTcTTW2oxxxjF29N8obbQ+zwzgKwZTX633kw1lSQ1qtjwiBfFDyNOqwT rYPsMVhsbNIbmt7W1VlvTr9+0Y2udV6CcBELbrJcvafChbhXYVBoJvrjdIcwz0U7 Q2gatsv8VqPtDn7Nij3PwQLBx9M9N7eoS66fI0/S8DYutivPFLdwf9lTq4ZXNYEL 7c/pkejmbS20cG0IQrc41/Lhjz2qx57FKjMmBD1Q46Gr3mH+O8tThZJEFohFMMru xC1wANoeYbWvJ/UVYuvrWGKoqqqQ5jg= -----END CERTIFICATE-----Generated at Thu Jun 19 10:00:13 2025 by rpki-client