$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/87e6252e-c36a-3d81-9d7c-d9435b189ae0.roa File: 87e6252e-c36a-3d81-9d7c-d9435b189ae0.roa (raw, json) Hash identifier: PxDcbWCd/Z2eiZImll4+O/Q6Twvvwubrm/pWDzw+rsQ= Subject key identifier: 66:93:E8:55:7C:B7:45:81:1D:B6:DC:3A:63:26:D2:FF:DD:AE:2D:E7 Certificate issuer: /CN=a854a4c3-e5e0-49a9-a110-947d91107e15 Certificate serial: 010D0C9F4328584A77809006CCF5CE0CE0083280 Authority key identifier: 71:A9:F5:D1:AD:6F:48:4C:5F:B4:7D:3E:2F:9E:C9:B7:00:DD:A7:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/87e6252e-c36a-3d81-9d7c-d9435b189ae0.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 54885 IP address blocks: 204.144.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:90:06:cc:f5:ce:0c:e0:08:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a854a4c3-e5e0-49a9-a110-947d91107e15 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=2ca4ec61-353e-45d9-9133-040de0d49496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f6:92:04:be:d4:53:90:01:91:97:4e:0e:51: d1:c7:b4:6c:ee:80:5e:39:c8:bd:bb:99:cc:b2:d2: 60:13:f4:a0:1f:1e:ca:b3:fa:09:fc:d0:84:fe:af: c0:8e:45:65:e0:94:36:65:db:a7:41:a2:54:53:62: ca:ee:99:70:76:24:fe:fd:1a:3a:b2:18:53:58:ee: 4d:7a:f2:91:b8:44:c7:24:8a:88:9b:e4:10:2e:df: 44:03:ba:75:80:2e:aa:6c:c1:37:65:a8:10:64:41: 65:60:70:de:7e:d7:a6:28:a3:2c:51:17:9c:19:d8: 8b:a4:a1:36:88:73:db:0f:02:8d:39:8d:30:92:f4: c1:7a:38:cb:60:2e:48:7a:49:4f:c2:ce:59:e7:1c: bb:bb:10:d8:05:e1:85:cf:a0:06:d7:f2:d3:9b:a0: 4f:26:c4:c6:d0:71:b1:0f:34:82:36:67:4a:e7:da: f9:42:a0:4f:94:43:1f:67:e4:f7:01:f7:7b:21:ea: c0:58:93:3a:ba:d6:de:77:33:ca:18:5d:e7:4a:97: ee:7a:f5:ac:bd:be:29:ba:1d:8a:f7:34:21:9b:3e: 4c:bd:be:db:aa:ef:17:b0:dd:8c:92:91:ab:43:7d: 3f:ff:d0:48:41:b4:c2:14:7b:2d:2c:aa:01:3c:f7: 57:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:93:E8:55:7C:B7:45:81:1D:B6:DC:3A:63:26:D2:FF:DD:AE:2D:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/87e6252e-c36a-3d81-9d7c-d9435b189ae0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.crl X509v3 Authority Key Identifier: keyid:71:A9:F5:D1:AD:6F:48:4C:5F:B4:7D:3E:2F:9E:C9:B7:00:DD:A7:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15.cer sbgp-ipAddrBlock: critical IPv4: 204.144.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:e3:34:4c:1e:34:65:cc:ed:2f:5b:0a:06:ad:cb:71:68:41: 63:55:9e:75:b4:92:fe:48:07:bf:89:8b:9b:f0:6a:a3:b5:5e: fd:22:98:57:52:f1:d3:8c:02:c9:dc:30:3f:69:91:90:8d:6d: 30:10:d5:9d:34:68:8b:8f:08:95:76:ee:1a:d1:40:87:eb:60: f9:f0:f2:cd:87:32:b0:c0:0f:97:9a:f5:fa:42:0e:5d:48:1d: 0f:17:ed:68:4d:b2:80:47:72:bf:15:cb:f0:8c:5c:e2:23:3b: d3:65:39:bc:24:88:99:31:07:72:03:ae:eb:a5:a4:8a:74:c7: ae:d5:2e:67:c6:53:e5:87:d2:a8:9a:81:5f:f5:1c:63:32:e2: 29:d6:b6:46:85:ca:bd:e0:94:e7:92:eb:3c:54:0e:96:19:d6: bb:62:74:65:6c:3a:c1:52:04:30:4b:88:f3:19:94:d6:a5:73: 57:86:96:b3:6b:2e:6c:e5:90:d2:56:04:db:45:37:a1:47:7d: ad:6a:14:5d:8b:db:ad:6d:bc:ef:19:d3:62:a8:21:45:6e:d6: 8b:d5:72:85:9f:6b:98:ad:d1:ee:a4:e5:a0:a0:0b:1c:a2:b6: 84:3c:6a:7d:d4:d2:ce:50:60:36:75:4a:39:31:86:a3:f4:4d: 2e:61:17:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gJAGzPXODOAIMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg1NGE0YzMtZTVlMC00OWE5LWExMTAtOTQ3ZDkxMTA3 ZTE1MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk MmNhNGVjNjEtMzUzZS00NWQ5LTkxMzMtMDQwZGUwZDQ5NDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/aSBL7UU5ABkZdODlHRx7Rs7oBeOci9u5nM stJgE/SgHx7Ks/oJ/NCE/q/AjkVl4JQ2ZdunQaJUU2LK7plwdiT+/Ro6shhTWO5N evKRuETHJIqIm+QQLt9EA7p1gC6qbME3ZagQZEFlYHDeftemKKMsURecGdiLpKE2 iHPbDwKNOY0wkvTBejjLYC5IeklPws5Z5xy7uxDYBeGFz6AG1/LTm6BPJsTG0HGx DzSCNmdK59r5QqBPlEMfZ+T3Afd7IerAWJM6utbedzPKGF3nSpfuevWsvb4puh2K 9zQhmz5Mvb7bqu8XsN2MkpGrQ30//9BIQbTCFHstLKoBPPdXCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaT6FV8t0WBHbbcOmMm0v/dri3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hODU0 YTRjMy1lNWUwLTQ5YTktYTExMC05NDdkOTExMDdlMTUvODdlNjI1MmUtYzM2YS0z ZDgxLTlkN2MtZDk0MzViMTg5YWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTg1NGE0YzMtZTVlMC00OWE5LWEx MTAtOTQ3ZDkxMTA3ZTE1L2E4NTRhNGMzLWU1ZTAtNDlhOS1hMTEwLTk0N2Q5MTEw N2UxNS5jcmwwHwYDVR0jBBgwFoAUcan10a1vSExftH0+L57JtwDdpxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hODU0YTRjMy1lNWUwLTQ5YTktYTExMC05NDdk OTExMDdlMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM7jNEweNGXM7S9bCgaty3FoQWNVnnW0kv5IB7+Ji5vwaqO1Xv0imFdS 8dOMAsncMD9pkZCNbTAQ1Z00aIuPCJV27hrRQIfrYPnw8s2HMrDAD5ea9fpCDl1I HQ8X7WhNsoBHcr8Vy/CMXOIjO9NlObwkiJkxB3IDruulpIp0x67VLmfGU+WH0qia gV/1HGMy4inWtkaFyr3glOeS6zxUDpYZ1rtidGVsOsFSBDBLiPMZlNalc1eGlrNr LmzlkNJWBNtFN6FHfa1qFF2L261tvO8Z02KoIUVu1ovVcoWfa5it0e6k5aCgCxyi toQ8an3U0s5QYDZ1SjkxhqP0TS5hFzk= -----END CERTIFICATE-----Generated at Mon Aug 4 21:41:27 2025 by rpki-client