$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bbd6b25f-8695-34b1-ac59-247d8785d485.roa File: bbd6b25f-8695-34b1-ac59-247d8785d485.roa (raw, json) Hash identifier: sFsn2YQHmXMV9O7zDcNXcp7XCb1iX1mL6liJxHX1f24= Subject key identifier: C1:AF:12:AE:28:4E:79:AD:58:8E:23:7B:91:22:31:4B:15:1D:2A:56 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584A9E964E1A8F09D40DE5D51A20 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bbd6b25f-8695-34b1-ac59-247d8785d485.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 33363 IP address blocks: 104.137.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:4e:1a:8f:09:d4:0d:e5:d5:1a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=1d8e2188-2ee6-45fb-87b0-e3cf7936a76d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9a:c5:eb:a6:03:6b:d0:1b:32:f2:c8:69:a6: 6f:38:5c:a5:f9:31:32:cd:30:72:2a:d0:b8:10:00: 96:e8:f1:72:b1:ff:ec:ac:f5:a6:d4:6a:18:bb:e0: 9b:a7:c9:97:c1:b7:12:58:62:ee:26:1b:d0:a6:f6: 05:17:da:58:e0:c9:28:76:5e:f8:49:20:8b:6d:54: b5:78:d4:10:a5:0b:67:1d:7a:ad:17:7d:9a:4c:0c: 94:af:ad:ec:d3:ae:c2:b1:fc:3e:e0:c5:dc:6b:b3: b9:78:20:8c:57:c1:78:37:9d:26:24:44:e4:75:1e: 87:0f:50:7d:5b:dc:c3:dc:63:af:d1:cf:10:51:24: 39:54:4a:5d:e9:1a:ee:4b:87:4d:75:cd:7a:31:c4: 81:ff:94:ca:64:94:2a:dd:32:58:4f:fe:2d:8a:8e: e5:5c:5e:ae:dd:21:ea:aa:82:ad:97:00:dd:f2:1a: 6c:5a:64:7e:8d:19:0d:32:b0:6c:d0:ae:24:bf:a7: 4c:e8:e2:c5:46:6f:c1:35:5b:be:ea:24:e5:df:43: 7b:37:87:4a:e8:8c:c5:7f:d4:ae:9f:47:a9:f2:df: c0:64:4f:84:a7:fb:d3:8e:9b:df:e2:d7:c0:63:42: a1:a5:e3:b0:15:ac:b1:03:cc:ee:b5:07:2e:18:c7: a0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AF:12:AE:28:4E:79:AD:58:8E:23:7B:91:22:31:4B:15:1D:2A:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bbd6b25f-8695-34b1-ac59-247d8785d485.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 104.137.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:39:c6:4d:db:bd:24:7c:9c:2a:0b:f6:d1:93:03:28:7c:69: 08:a1:c1:3a:8b:4a:e0:23:f7:c4:46:cf:38:ac:55:7a:00:a3: fd:5b:d6:f7:ce:d5:c5:f8:35:cf:a5:6b:a2:41:06:78:44:5b: 19:78:6b:85:0e:6a:de:11:42:4d:ff:93:55:40:f5:92:f7:c3: af:2d:7a:fe:1b:26:eb:a0:fc:9c:ed:1c:ff:42:f0:fe:39:4a: d5:3a:a1:76:4c:2a:06:ac:c2:10:0e:3d:50:8e:34:00:1a:e8: c0:6c:22:20:37:59:38:41:a2:88:0c:b5:18:42:b1:b3:9a:09: 25:bc:04:c4:fe:ee:13:ef:7f:8f:55:3f:79:1b:ee:83:1a:7d: 37:22:5e:a8:8f:43:93:92:40:92:49:1f:9f:b6:b3:9f:4a:56: 4e:a0:d7:dd:22:bb:df:3a:1f:2e:2b:56:42:68:d0:03:a3:b5: 09:3b:4a:b2:84:61:f1:34:3e:ab:60:5a:e5:a1:1a:cc:2d:26: 84:21:98:ad:96:a0:d7:93:5d:a7:28:9b:0a:55:de:f1:7f:a1: 9e:b3:3a:b4:41:d0:5c:92:0a:98:ef:5a:9d:61:73:e0:c7:a7: 33:2c:ff:f9:47:f9:2b:5f:58:ed:df:6d:31:24:eb:87:6d:f4: 50:0e:37:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelk4ajwnUDeXVGiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MWQ4ZTIxODgtMmVlNi00NWZiLTg3YjAtZTNjZjc5MzZhNzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZrF66YDa9AbMvLIaaZvOFyl+TEyzTByKtC4 EACW6PFysf/srPWm1GoYu+Cbp8mXwbcSWGLuJhvQpvYFF9pY4Mkodl74SSCLbVS1 eNQQpQtnHXqtF32aTAyUr63s067Csfw+4MXca7O5eCCMV8F4N50mJETkdR6HD1B9 W9zD3GOv0c8QUSQ5VEpd6RruS4dNdc16McSB/5TKZJQq3TJYT/4tio7lXF6u3SHq qoKtlwDd8hpsWmR+jRkNMrBs0K4kv6dM6OLFRm/BNVu+6iTl30N7N4dK6IzFf9Su n0ep8t/AZE+Ep/vTjpvf4tfAY0KhpeOwFayxA8zutQcuGMegRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGvEq4oTnmtWI4je5EiMUsVHSpWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYmJkNmIyNWYtODY5NS0z NGIxLWFjNTktMjQ3ZDg3ODVkNDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaIlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIE5xk3bvSR8nCoL9tGTAyh8aQihwTqLSuAj98RGzzisVXoAo/1b1vfO 1cX4Nc+la6JBBnhEWxl4a4UOat4RQk3/k1VA9ZL3w68tev4bJuug/JztHP9C8P45 StU6oXZMKgaswhAOPVCONAAa6MBsIiA3WThBoogMtRhCsbOaCSW8BMT+7hPvf49V P3kb7oMafTciXqiPQ5OSQJJJH5+2s59KVk6g190iu986Hy4rVkJo0AOjtQk7SrKE YfE0PqtgWuWhGswtJoQhmK2WoNeTXacomwpV3vF/oZ6zOrRB0FySCpjvWp1hc+DH pzMs//lH+StfWO3fbTEk64dt9FAON6g= -----END CERTIFICATE-----Generated at Mon Aug 4 16:13:57 2025 by rpki-client