$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/b040a988-fc2f-3b79-b962-453ddd2ae85a.roa File: b040a988-fc2f-3b79-b962-453ddd2ae85a.roa (raw, json) Hash identifier: YJUj1MVZms9v9+I/ZYzSLff9uY+uco1FhyNZFBbq4Ew= Subject key identifier: D9:2A:35:8B:51:E4:A3:F8:3D:CB:33:05:A4:70:05:D9:30:BF:2B:F3 Certificate issuer: /CN=657b5e5f-0699-429f-8c83-a39c9a7a0322 Certificate serial: 010D0C9F4328584AC2E10DC24716DFF69B36B800 Authority key identifier: 85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/b040a988-fc2f-3b79-b962-453ddd2ae85a.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 16676 IP address blocks: 104.243.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:0d:c2:47:16:df:f6:9b:36:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=657b5e5f-0699-429f-8c83-a39c9a7a0322 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=a4cc60a7-a4e8-4632-933b-dc53b7e6fc46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:51:79:01:7c:1c:1f:3a:c3:ad:df:73:b7:96: c5:21:0a:80:92:84:22:ef:9f:1b:d5:55:86:56:9d: ef:09:ae:88:26:3c:7e:9b:64:95:4b:1c:86:2d:5d: 97:c2:79:43:a3:58:ef:cf:cc:62:f5:1e:7e:ea:06: 49:74:9f:2d:ed:74:d0:87:d4:0c:d5:8c:d2:38:92: 94:f4:1a:48:02:86:d3:b0:31:93:03:54:95:bd:47: ff:78:ea:bb:4b:41:f2:b6:9f:ed:cf:8c:51:e3:13: e1:f9:5a:40:bc:e4:40:fb:85:8d:c8:94:8d:b5:31: d3:42:61:dd:36:36:49:a6:1d:4e:c7:f4:63:38:18: 85:e0:b1:78:73:00:54:50:de:7b:4a:a7:4f:4e:68: fe:80:93:4d:32:03:46:7a:d4:86:61:9c:38:ad:ea: 86:80:f9:61:dc:73:b9:ac:0a:48:a0:5e:2c:7b:0f: d3:6c:df:f0:5e:44:8c:dd:b5:75:a8:75:8b:e4:4f: dc:84:5a:2d:a4:c5:5f:05:4c:12:a8:36:ad:05:7c: cf:6f:de:80:a1:84:28:55:c3:57:02:4d:73:32:ef: ef:41:1b:2f:3d:41:a3:d6:76:b3:cc:5a:98:c1:5c: 74:bc:46:0e:a8:5a:ee:c0:cb:48:36:5f:b9:58:ee: 1a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2A:35:8B:51:E4:A3:F8:3D:CB:33:05:A4:70:05:D9:30:BF:2B:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/b040a988-fc2f-3b79-b962-453ddd2ae85a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl X509v3 Authority Key Identifier: keyid:85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer sbgp-ipAddrBlock: critical IPv4: 104.243.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:28:80:91:62:7f:37:83:fb:94:9b:db:ff:74:91:51:93:95: 02:57:dc:4a:11:c6:9b:8c:55:2d:ee:28:46:9c:26:a9:93:de: 3c:5f:ea:08:00:91:87:8e:94:73:e5:e8:4c:b1:5c:70:d8:85: cc:46:bf:f7:e4:5d:72:0c:24:3c:db:ab:0e:e4:5c:5d:37:50: 17:c8:6e:6e:54:1e:52:63:3a:dd:e4:5d:06:63:43:9f:94:2f: b0:e3:70:c4:7f:89:c6:c8:fa:c6:c7:7e:d3:8e:f3:41:63:37: 23:d2:7c:74:d7:df:2d:c0:4f:fa:7f:99:ac:05:a0:62:50:63: 8a:18:d9:e9:d5:81:61:74:cc:fa:79:9f:2e:6d:97:16:36:78: 51:eb:2c:8a:0a:90:46:1f:59:b9:15:e1:2a:c0:74:cb:07:d3: bc:12:9a:58:21:4f:f6:a1:27:b5:01:60:89:4a:9c:d0:6f:31: a6:5c:91:ac:8f:9b:06:02:c4:04:23:df:86:e6:cd:36:f8:95: 19:88:7f:3a:d6:72:3c:90:2d:ae:b1:2a:5e:7d:fd:e8:7d:d2: 61:bb:27:b2:8c:ca:e1:22:29:40:ea:97:8a:ff:d1:1f:43:13: 4c:61:97:a2:53:78:0a:b5:da:9c:7c:88:17:a7:39:54:07:96: db:cf:cc:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Q3CRxbf9ps2uAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU3YjVlNWYtMDY5OS00MjlmLThjODMtYTM5YzlhN2Ew MzIyMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YTRjYzYwYTctYTRlOC00NjMyLTkzM2ItZGM1M2I3ZTZmYzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lF5AXwcHzrDrd9zt5bFIQqAkoQi758b1VWG Vp3vCa6IJjx+m2SVSxyGLV2XwnlDo1jvz8xi9R5+6gZJdJ8t7XTQh9QM1YzSOJKU 9BpIAobTsDGTA1SVvUf/eOq7S0Hytp/tz4xR4xPh+VpAvORA+4WNyJSNtTHTQmHd NjZJph1Ox/RjOBiF4LF4cwBUUN57SqdPTmj+gJNNMgNGetSGYZw4reqGgPlh3HO5 rApIoF4sew/TbN/wXkSM3bV1qHWL5E/chFotpMVfBUwSqDatBXzPb96AoYQoVcNX Ak1zMu/vQRsvPUGj1nazzFqYwVx0vEYOqFruwMtINl+5WO4agwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkqNYtR5KP4PcszBaRwBdkwvyvzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82NTdi NWU1Zi0wNjk5LTQyOWYtOGM4My1hMzljOWE3YTAzMjIvYjA0MGE5ODgtZmMyZi0z Yjc5LWI5NjItNDUzZGRkMmFlODVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjU3YjVlNWYtMDY5OS00MjlmLThj ODMtYTM5YzlhN2EwMzIyLzY1N2I1ZTVmLTA2OTktNDI5Zi04YzgzLWEzOWM5YTdh MDMyMi5jcmwwHwYDVR0jBBgwFoAUhSb8rQNqMi+Cj148GAC/WbmIDswwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82NTdiNWU1Zi0wNjk5LTQyOWYtOGM4My1hMzlj OWE3YTAzMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoogJFifzeD+5Sb2/90kVGTlQJX3EoRxpuMVS3uKEacJqmT3jxf6ggA kYeOlHPl6EyxXHDYhcxGv/fkXXIMJDzbqw7kXF03UBfIbm5UHlJjOt3kXQZjQ5+U L7DjcMR/icbI+sbHftOO80FjNyPSfHTX3y3AT/p/mawFoGJQY4oY2enVgWF0zPp5 ny5tlxY2eFHrLIoKkEYfWbkV4SrAdMsH07wSmlghT/ahJ7UBYIlKnNBvMaZckayP mwYCxAQj34bmzTb4lRmIfzrWcjyQLa6xKl59/eh90mG7J7KMyuEiKUDql4r/0R9D E0xhl6JTeAq12px8iBenOVQHltvPzAg= -----END CERTIFICATE-----Generated at Wed Aug 6 12:39:07 2025 by rpki-client