$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4be4e43e-acec-344b-af92-8173e4fe5efb.roa File: 4be4e43e-acec-344b-af92-8173e4fe5efb.roa (raw, json) Hash identifier: ZkZFCRQzXa6g8zdk+ViJWDU0z9x7gmlJgSi/fuVNfrY= Subject key identifier: 94:04:00:DF:69:42:21:A3:2A:E6:68:ED:FA:AF:F6:FF:C0:9F:70:81 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AB220C6956C0238BE5F7E3700 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4be4e43e-acec-344b-af92-8173e4fe5efb.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 18779 IP address blocks: 104.253.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:c6:95:6c:02:38:be:5f:7e:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=9917f379-157c-4393-95df-8cdbb8bc6c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b8:3d:d3:cc:2f:b9:0a:03:5d:8e:53:78:d4: 50:ad:a1:23:32:43:b9:29:fa:13:72:3c:a9:ff:fd: 9e:93:7f:d5:6e:df:78:7f:34:86:85:55:3f:f5:a5: 74:e9:5d:c1:30:b5:0f:5b:a3:40:b2:4f:8e:9b:f6: 05:09:3b:a5:16:28:82:b0:3a:06:2b:7d:1d:e1:49: c7:2e:fe:ef:d3:5c:a8:c8:30:11:2c:b0:2f:e6:02: 54:ae:da:06:d7:35:49:f5:4d:ac:c7:c2:a4:7e:4f: 5c:4e:48:9b:e4:e2:70:1b:02:93:e0:42:6d:ce:d3: c8:23:16:b6:02:bc:ee:ac:ad:07:00:13:4d:86:e2: 5c:a7:39:21:1c:6e:3c:3a:47:66:ae:5f:b8:a3:30: cb:bd:12:fc:1e:d9:55:01:5b:e3:5b:c7:db:c8:e4: 2a:5e:26:f3:12:39:b6:da:19:42:e1:ac:8a:64:8b: f3:60:d0:3e:e8:07:fb:2d:1f:6e:0b:a1:53:55:fd: b1:8c:93:3e:c1:6d:1f:b9:e6:2f:3c:8c:73:06:ed: 79:02:97:65:53:31:a7:c1:35:2a:3b:6d:c9:b1:a3: 8b:50:a0:90:df:24:8f:d2:f9:92:d2:cc:1f:f6:75: 48:1f:1d:4d:03:04:a7:7b:4f:58:53:6d:44:f1:04: dd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:04:00:DF:69:42:21:A3:2A:E6:68:ED:FA:AF:F6:FF:C0:9F:70:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4be4e43e-acec-344b-af92-8173e4fe5efb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:c8:01:9a:af:ef:fd:3b:97:59:35:ab:89:11:fa:ab:6b:f6: 8e:44:9e:71:52:8b:f7:b0:d3:81:47:8c:8d:f5:5b:36:13:98: df:cc:42:60:6f:1b:a2:86:8b:8e:fb:a3:5a:80:ea:be:3a:b8: d2:c3:3e:b5:2c:e3:1c:97:ec:d5:97:47:a1:f7:e4:ef:9f:67: 25:b9:8a:b9:0b:be:68:53:ff:56:1a:e2:66:44:51:ef:a4:4f: 93:df:bc:ad:b7:ae:f0:ca:33:dd:ca:ee:ee:08:0f:a7:5c:45: 73:5f:cc:cd:80:6b:23:b9:69:7b:ec:90:03:ad:f6:2d:1e:25: ce:dd:ff:fb:65:aa:e1:e0:86:16:68:09:b3:fc:42:7b:64:af: 00:0d:0f:fe:49:5b:c2:2d:f2:99:b5:84:47:96:04:45:1b:5e: b2:f1:f5:00:dc:bf:a7:ba:a7:93:37:8a:b5:80:da:f3:a8:17: d8:45:a2:08:ce:85:1c:2d:8c:03:66:48:93:7c:6e:05:d8:78: e6:69:42:ad:5c:cb:f3:41:9b:dc:4f:19:91:37:2d:cd:98:ec: 48:33:1d:79:6a:68:85:3d:8a:8b:77:1d:75:ef:c6:63:db:c7: 6e:2b:36:35:59:c6:32:08:a7:9e:48:e4:dd:ae:0f:d6:12:7d: bf:f6:76:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIMaVbAI4vl9+NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk OTkxN2YzNzktMTU3Yy00MzkzLTk1ZGYtOGNkYmI4YmM2YzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrg908wvuQoDXY5TeNRQraEjMkO5KfoTcjyp //2ek3/Vbt94fzSGhVU/9aV06V3BMLUPW6NAsk+Om/YFCTulFiiCsDoGK30d4UnH Lv7v01yoyDARLLAv5gJUrtoG1zVJ9U2sx8Kkfk9cTkib5OJwGwKT4EJtztPIIxa2 ArzurK0HABNNhuJcpzkhHG48Okdmrl+4ozDLvRL8HtlVAVvjW8fbyOQqXibzEjm2 2hlC4ayKZIvzYNA+6Af7LR9uC6FTVf2xjJM+wW0fueYvPIxzBu15ApdlUzGnwTUq O23JsaOLUKCQ3ySP0vmS0swf9nVIHx1NAwSne09YU21E8QTd4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQEAN9pQiGjKuZo7fqv9v/An3CBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNGJlNGU0M2UtYWNlYy0z NDRiLWFmOTItODE3M2U0ZmU1ZWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/IAZqv7/07l1k1q4kR+qtr9o5EnnFSi/ew04FHjI31WzYTmN/MQmBv G6KGi477o1qA6r46uNLDPrUs4xyX7NWXR6H35O+fZyW5irkLvmhT/1Ya4mZEUe+k T5PfvK23rvDKM93K7u4ID6dcRXNfzM2AayO5aXvskAOt9i0eJc7d//tlquHghhZo CbP8QntkrwAND/5JW8It8pm1hEeWBEUbXrLx9QDcv6e6p5M3irWA2vOoF9hFogjO hRwtjANmSJN8bgXYeOZpQq1cy/NBm9xPGZE3Lc2Y7EgzHXlqaIU9iot3HXXvxmPb x24rNjVZxjIIp55I5N2uD9YSfb/2dlc= -----END CERTIFICATE-----Generated at Wed Aug 6 04:00:12 2025 by rpki-client