$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4af2d60d-7d3a-30e8-a88e-9268b7441016.roa File: 4af2d60d-7d3a-30e8-a88e-9268b7441016.roa (raw, json) Hash identifier: KKXzp9W4O+GTPSDD/gUhQFA6iL4sHq0mVZFMX0d/B68= Subject key identifier: B6:E1:36:B6:A7:AB:CB:D3:09:DE:0B:28:4D:38:89:3A:3D:16:1A:02 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584A9E964E0EAB614C71E8215680 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4af2d60d-7d3a-30e8-a88e-9268b7441016.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 33363 IP address blocks: 104.137.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:4e:0e:ab:61:4c:71:e8:21:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=8c2ab21e-8140-49ec-96e6-e1b6235092a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b6:0f:44:a4:4d:81:1c:4b:a3:ce:e2:97:3e: 84:53:b6:04:81:4e:30:3a:33:80:b6:f7:4b:8d:2c: 43:a4:95:05:ad:ab:e3:17:4a:45:a4:4f:46:2e:30: 12:c3:07:f6:07:54:e6:55:66:96:52:6b:72:f1:e0: 89:a8:a5:58:7f:e3:f7:97:de:5b:fa:69:4f:31:5a: 0a:e3:e1:36:2d:13:54:c3:6a:51:a5:6f:79:ea:d9: 07:6c:78:ea:73:8c:73:bd:8a:e2:14:97:cc:70:c2: d1:9c:88:ec:fa:59:3d:1f:20:b9:7d:7f:1c:02:48: de:67:21:7d:c4:8c:81:c4:32:ee:e0:cb:70:f0:d4: 1c:87:57:f1:bf:c7:be:23:6c:9d:34:2a:9f:1c:95: 9c:06:e4:61:dc:f2:c2:05:83:b3:2a:cf:c2:bb:0a: 9e:ed:2e:a8:da:d5:96:65:1c:98:73:03:08:39:fc: 43:9d:e2:dd:7c:28:c8:13:85:b9:88:30:d6:14:36: b3:c8:16:bc:14:e9:e1:97:74:01:3e:2a:d8:4e:7e: 59:dd:e4:91:b0:db:54:a4:1f:46:b7:c4:3d:41:c7: 94:98:b1:5c:83:3b:df:e5:27:85:68:9f:db:ea:61: d1:ac:3a:4d:37:4a:84:f4:e0:e2:3b:b5:d8:a9:41: 3e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E1:36:B6:A7:AB:CB:D3:09:DE:0B:28:4D:38:89:3A:3D:16:1A:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4af2d60d-7d3a-30e8-a88e-9268b7441016.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 104.137.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:b5:a5:81:6c:cd:9d:d7:ff:e7:5a:78:70:79:5a:86:24:7d: 34:a6:4f:14:88:7e:b4:76:7e:2b:87:5b:dd:b8:f8:91:45:6b: 09:d6:79:99:83:90:e6:22:f4:5e:fb:ab:1b:81:b5:d8:a6:52: 6c:28:f9:75:88:39:58:76:8a:a7:90:85:4c:e4:90:d0:ba:7c: 8b:ef:cf:22:75:6a:be:cc:22:cd:b7:f2:8c:b8:83:e6:9f:93: b3:97:5b:42:79:47:08:87:bd:d9:a9:bf:69:7b:91:02:8b:e5: f0:ac:ff:f0:c6:3a:38:01:9e:fc:65:2a:12:83:cb:8d:60:99: b2:24:6f:18:b7:0e:e9:59:3f:23:7e:61:4a:76:38:ea:68:3c: 25:47:a2:13:91:47:00:d2:f6:17:9d:04:c9:14:a6:83:99:a7: a1:bc:d3:09:d3:5e:e5:5c:e5:8a:bc:9c:b5:80:8f:ce:5a:14: ac:5d:3c:1a:a4:82:26:73:64:59:86:c7:0b:7c:72:b0:d3:45: 06:1a:16:1e:ca:e2:e4:e2:7e:ee:03:6f:25:84:95:91:15:80: ee:8f:c3:3e:57:8b:b4:3d:11:84:c8:b2:b3:c6:12:ed:eb:9f: a0:8a:d1:c1:fd:7f:a0:1c:e9:b8:50:13:e3:04:7b:81:b3:23: cd:9a:97:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelk4Oq2FMceghVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk OGMyYWIyMWUtODE0MC00OWVjLTk2ZTYtZTFiNjIzNTA5MmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLYPRKRNgRxLo87ilz6EU7YEgU4wOjOAtvdL jSxDpJUFravjF0pFpE9GLjASwwf2B1TmVWaWUmty8eCJqKVYf+P3l95b+mlPMVoK 4+E2LRNUw2pRpW956tkHbHjqc4xzvYriFJfMcMLRnIjs+lk9HyC5fX8cAkjeZyF9 xIyBxDLu4Mtw8NQch1fxv8e+I2ydNCqfHJWcBuRh3PLCBYOzKs/Cuwqe7S6o2tWW ZRyYcwMIOfxDneLdfCjIE4W5iDDWFDazyBa8FOnhl3QBPirYTn5Z3eSRsNtUpB9G t8Q9QceUmLFcgzvf5SeFaJ/b6mHRrDpNN0qE9ODiO7XYqUE+TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbhNranq8vTCd4LKE04iTo9FhoCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNGFmMmQ2MGQtN2QzYS0z MGU4LWE4OGUtOTI2OGI3NDQxMDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaIlQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABC1pYFszZ3X/+daeHB5WoYkfTSmTxSIfrR2fiuHW924+JFFawnWeZmD kOYi9F77qxuBtdimUmwo+XWIOVh2iqeQhUzkkNC6fIvvzyJ1ar7MIs238oy4g+af k7OXW0J5RwiHvdmpv2l7kQKL5fCs//DGOjgBnvxlKhKDy41gmbIkbxi3DulZPyN+ YUp2OOpoPCVHohORRwDS9hedBMkUpoOZp6G80wnTXuVc5Yq8nLWAj85aFKxdPBqk giZzZFmGxwt8crDTRQYaFh7K4uTifu4DbyWElZEVgO6Pwz5Xi7Q9EYTIsrPGEu3r n6CK0cH9f6Ac6bhQE+MEe4GzI82al00= -----END CERTIFICATE-----Generated at Mon Aug 4 14:52:23 2025 by rpki-client