$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/a023b846-348c-3a6c-b4b6-ea4c6d110980.roa File: a023b846-348c-3a6c-b4b6-ea4c6d110980.roa (raw, json) Hash identifier: Ckwnxgk+rbWrg2arQaSOAXWQjfsBBMTHGezsFDTeIKU= Subject key identifier: C4:37:85:AF:EB:06:F4:65:21:08:62:4A:90:69:A4:56:C7:35:A4:FC Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74 Certificate serial: 010D0C9F4328584A9BCB76EA01CAD076B2750E80 Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/a023b846-348c-3a6c-b4b6-ea4c6d110980.roa Signing time: Wed 23 Jul 2025 01:00:52 +0000 ROA not before: Wed 23 Jul 2025 01:00:52 +0000 ROA not after: Tue 21 Oct 2025 01:00:52 +0000 asID: 212238 IP address blocks: 104.219.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9b:cb:76:ea:01:ca:d0:76:b2:75:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74 Validity Not Before: Jul 23 01:00:52 2025 GMT Not After : Oct 21 01:00:52 2025 GMT Subject: CN=33f23768-7b96-423e-93b6-0ba86108f726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b8:72:ac:7a:3c:59:09:0c:5b:15:91:ee:95: fc:44:60:57:90:c3:cf:b6:d1:99:d9:b6:c3:eb:3c: a7:d7:58:47:4c:e4:2e:41:b8:bb:e5:45:ca:2a:6a: 96:00:10:40:c5:55:ab:36:5e:19:42:f9:56:7d:c7: 0b:be:23:46:55:0d:04:4d:0d:fb:01:b0:6d:d2:b1: 08:38:03:eb:7a:c1:e5:09:e2:77:f8:6f:f6:c6:ae: 45:65:39:10:c1:48:e7:ce:6c:cc:12:40:a5:9e:5f: b8:a1:eb:c5:32:6d:67:0f:04:c8:35:ee:10:86:c6: 7c:3f:66:d8:f6:08:df:6d:5c:78:a5:4e:74:e9:e2: c3:60:0f:84:e3:d4:09:1a:52:9c:35:78:7e:32:6c: 5f:c0:81:a9:95:c9:ad:82:6f:3d:ab:28:ab:9c:f5: 1f:a3:8d:48:2b:e2:9f:99:f6:57:3f:a6:66:39:69: c5:db:d7:3a:53:80:0b:c2:fc:97:72:a5:5e:44:25: 1c:8f:b9:7c:e9:53:96:e7:ba:77:6a:5d:7a:3b:80: fd:7f:c6:59:e6:0c:9d:37:98:f0:e4:4e:88:2e:54: 26:08:26:44:cc:64:91:f3:32:fc:44:8f:bc:70:aa: 63:e8:40:82:35:2d:58:08:f0:e4:47:45:09:c2:dc: e0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:37:85:AF:EB:06:F4:65:21:08:62:4A:90:69:A4:56:C7:35:A4:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/a023b846-348c-3a6c-b4b6-ea4c6d110980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl X509v3 Authority Key Identifier: keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer sbgp-ipAddrBlock: critical IPv4: 104.219.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:56:75:99:67:df:0e:3c:b2:f6:d4:52:ab:62:bc:42:57:cc: 41:06:1d:5d:f6:c5:9a:0a:d8:a1:9b:62:a7:74:ce:8f:8c:89: e4:1c:74:48:5b:79:b2:5a:5e:75:63:f7:a1:ae:49:b6:22:c4: 48:31:6d:dc:15:70:9a:8c:ba:0e:16:2f:c5:08:1e:05:57:a6: fc:98:78:79:8e:b8:ae:56:7f:47:9f:f8:5f:34:29:fa:d9:0f: 7f:dc:1a:8a:0f:66:cc:e1:0e:ac:54:9e:88:15:a8:75:e6:15: d4:7c:af:9a:34:5b:87:df:bc:f9:cb:f9:3a:b3:e9:e8:0f:b1: f4:d6:e5:1b:d1:ba:83:fb:19:75:20:df:57:cb:54:3c:36:aa: 95:36:c4:a3:a5:c9:99:83:0b:c0:36:1c:ec:df:44:1b:d4:49: 6c:ae:c2:3f:49:58:f9:48:9f:8a:38:05:f4:03:08:4f:b2:df: 09:69:e2:0d:65:54:5d:66:1b:89:a2:f4:a1:09:6a:fe:5e:c7: 1f:88:43:fb:8e:f1:1a:6b:0d:d9:4a:98:92:94:45:91:ad:fc: 66:14:70:cc:2d:cb:f6:22:c4:0f:72:c0:ba:f6:c7:ba:64:7e: b7:f1:9f:13:a7:70:bb:f6:81:ae:37:65:7e:82:2a:e6:84:9c: 39:ad:1e:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqby3bqAcrQdrJ1DoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE0OGM3NGUtZWQ5ZS00NGU3LWJiZjUtNzZmNDczYTIx ZDc0MB4XDTI1MDcyMzAxMDA1MloXDTI1MTAyMTAxMDA1MlowLzEtMCsGA1UEAxMk MzNmMjM3NjgtN2I5Ni00MjNlLTkzYjYtMGJhODYxMDhmNzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLhyrHo8WQkMWxWR7pX8RGBXkMPPttGZ2bbD 6zyn11hHTOQuQbi75UXKKmqWABBAxVWrNl4ZQvlWfccLviNGVQ0ETQ37AbBt0rEI OAPresHlCeJ3+G/2xq5FZTkQwUjnzmzMEkClnl+4oevFMm1nDwTINe4QhsZ8P2bY 9gjfbVx4pU506eLDYA+E49QJGlKcNXh+MmxfwIGplcmtgm89qyirnPUfo41IK+Kf mfZXP6ZmOWnF29c6U4ALwvyXcqVeRCUcj7l86VOW57p3al16O4D9f8ZZ5gydN5jw 5E6ILlQmCCZEzGSR8zL8RI+8cKpj6ECCNS1YCPDkR0UJwtzg7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQ3ha/rBvRlIQhiSpBppFbHNaT8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4 Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0NzNhMjFkNzQvYTAyM2I4NDYtMzQ4Yy0z YTZjLWI0YjYtZWE0YzZkMTEwOTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmE0OGM3NGUtZWQ5ZS00NGU3LWJi ZjUtNzZmNDczYTIxZDc0LzJhNDhjNzRlLWVkOWUtNDRlNy1iYmY1LTc2ZjQ3M2Ey MWQ3NC5jcmwwHwYDVR0jBBgwFoAUXFrsKTJFCAeytpiC7+CI1WXlPLcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0 NzNhMjFkNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaNuqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVWdZln3w48svbUUqtivEJXzEEGHV32xZoK2KGbYqd0zo+MieQcdEhb ebJaXnVj96GuSbYixEgxbdwVcJqMug4WL8UIHgVXpvyYeHmOuK5Wf0ef+F80KfrZ D3/cGooPZszhDqxUnogVqHXmFdR8r5o0W4ffvPnL+Tqz6egPsfTW5RvRuoP7GXUg 31fLVDw2qpU2xKOlyZmDC8A2HOzfRBvUSWyuwj9JWPlIn4o4BfQDCE+y3wlp4g1l VF1mG4mi9KEJav5exx+IQ/uO8RprDdlKmJKURZGt/GYUcMwty/YixA9ywLr2x7pk frfxnxOncLv2ga43ZX6CKuaEnDmtHlg= -----END CERTIFICATE-----Generated at Mon Aug 4 15:06:33 2025 by rpki-client