$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/12f7de92-880e-34c2-aa1a-041828be5182.roa File: 12f7de92-880e-34c2-aa1a-041828be5182.roa (raw, json) Hash identifier: THuFgBvICkE+h51qP4KYOUZx+xgSRYRO+N/ZYb0KFf8= Subject key identifier: 0E:BD:C3:9D:B5:63:B9:8D:27:35:8F:F4:E0:B9:CA:ED:51:1D:A4:B8 Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F4328584A7E7B923E5ED5275984989540 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/12f7de92-880e-34c2-aa1a-041828be5182.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 104.237.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:92:3e:5e:d5:27:59:84:98:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=ea3bb47e-37e8-4c07-b8ec-b7e5c8af528f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b8:46:55:69:12:c1:9a:54:97:67:9d:16:21: 35:b7:bb:36:cd:c7:17:b2:8a:6d:dd:01:a3:ac:e0: b0:10:38:1c:f9:4a:bb:ff:51:1f:ab:f9:62:6c:5f: a4:dd:e5:bd:aa:bc:03:40:c5:3e:38:54:b9:00:a2: 67:9d:ec:f3:43:88:f9:a9:87:19:22:b6:dd:98:3b: 64:1e:b4:bb:ec:f7:49:af:09:6e:d4:91:e2:98:1d: 64:84:e6:27:ab:f1:38:96:94:91:56:c2:f0:6e:88: d4:7f:14:e1:28:2f:15:09:67:4d:84:2b:d4:67:bf: 8d:0c:0b:ec:55:07:d1:92:39:7d:a8:a6:11:e9:15: b1:b9:09:4c:a9:ea:83:b7:cb:45:13:0c:34:ca:ca: 21:85:8f:e3:67:83:b6:b8:cc:da:11:ec:e6:23:cc: 3d:3b:e2:ec:4d:2d:14:21:f0:42:c7:24:44:d5:bb: 43:15:bc:35:c1:a0:eb:95:48:cf:ae:00:27:ae:c0: 1f:fc:08:3f:63:bd:59:47:73:f8:fe:8c:83:3c:16: bc:06:4f:88:8c:b8:53:c1:88:6b:fd:d2:58:cb:6d: 21:4d:76:18:c7:a9:74:84:3f:21:08:d9:4d:a7:d1: 84:0b:9d:3e:b4:c1:e2:4c:4c:27:87:c8:fc:e1:b5: 51:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BD:C3:9D:B5:63:B9:8D:27:35:8F:F4:E0:B9:CA:ED:51:1D:A4:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/12f7de92-880e-34c2-aa1a-041828be5182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 104.237.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:d6:5b:0a:ca:d0:e3:d9:ab:73:6c:00:09:1d:15:b0:0c:75: 0d:2c:c5:07:69:64:f2:4f:49:e2:46:c9:88:55:bb:4e:e8:07: e2:e3:c6:12:83:36:22:85:20:db:d9:de:f5:1f:8a:c0:48:14: 6a:8b:55:b4:aa:71:34:cc:54:86:e9:35:02:28:fe:c6:4b:14: 39:f2:d6:93:20:60:85:68:dc:fb:87:4d:0f:96:c3:0e:19:8f: 7c:e6:dc:9a:77:40:f9:37:ce:ba:0b:77:24:5e:b4:dd:ff:ab: ef:0d:6f:8e:02:8d:a1:ba:d9:18:8a:ee:b3:eb:60:50:56:ff: a5:6c:8d:e5:07:d1:35:f7:10:77:e6:06:e4:b7:d9:85:46:00: 30:ef:3a:d5:dd:27:b9:61:a7:98:7e:a8:73:c0:5f:0d:6b:af: b4:6c:1d:28:18:68:3e:92:ee:80:ba:d8:07:26:39:ef:d5:85: 48:fd:c9:40:fa:86:1b:97:48:ac:a0:ea:ec:c3:dd:f2:0e:56: 8e:ba:44:3d:78:11:61:2d:4e:9f:2b:a4:ba:b6:1b:f9:71:8a: be:4c:93:7a:82:7c:37:83:11:7f:ef:da:55:48:39:29:7c:4e: ec:8d:06:8b:2d:a6:92:d2:d8:4f:48:b2:dd:9f:f9:71:66:ec: 94:9f:ba:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5I+XtUnWYSYlUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZWEzYmI0N2UtMzdlOC00YzA3LWI4ZWMtYjdlNWM4YWY1MjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLhGVWkSwZpUl2edFiE1t7s2zccXsopt3QGj rOCwEDgc+Uq7/1Efq/libF+k3eW9qrwDQMU+OFS5AKJnnezzQ4j5qYcZIrbdmDtk HrS77PdJrwlu1JHimB1khOYnq/E4lpSRVsLwbojUfxThKC8VCWdNhCvUZ7+NDAvs VQfRkjl9qKYR6RWxuQlMqeqDt8tFEww0ysohhY/jZ4O2uMzaEezmI8w9O+LsTS0U IfBCxyRE1btDFbw1waDrlUjPrgAnrsAf/Ag/Y71ZR3P4/oyDPBa8Bk+IjLhTwYhr /dJYy20hTXYYx6l0hD8hCNlNp9GEC50+tMHiTEwnh8j84bVRNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA69w521Y7mNJzWP9OC5yu1RHaS4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvMTJmN2RlOTItODgwZS0z NGMyLWFhMWEtMDQxODI4YmU1MTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO29MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrWWwrK0OPZq3NsAAkdFbAMdQ0sxQdpZPJPSeJGyYhVu07oB+LjxhKD NiKFINvZ3vUfisBIFGqLVbSqcTTMVIbpNQIo/sZLFDny1pMgYIVo3PuHTQ+Www4Z j3zm3Jp3QPk3zroLdyRetN3/q+8Nb44CjaG62RiK7rPrYFBW/6VsjeUH0TX3EHfm BuS32YVGADDvOtXdJ7lhp5h+qHPAXw1rr7RsHSgYaD6S7oC62AcmOe/VhUj9yUD6 hhuXSKyg6uzD3fIOVo66RD14EWEtTp8rpLq2G/lxir5Mk3qCfDeDEX/v2lVIOSl8 TuyNBostppLS2E9Ist2f+XFm7JSfuuQ= -----END CERTIFICATE-----Generated at Wed Aug 6 13:03:00 2025 by rpki-client