$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/29ee82f2-26f5-3427-b2a3-e130b3600811.roa File: 29ee82f2-26f5-3427-b2a3-e130b3600811.roa (raw, json) Hash identifier: 52eYId9wX4j8AioevWCXqReGmjxI50pSeD1IKh3lhX8= Subject key identifier: 00:87:A0:76:24:E3:F0:1E:1A:B6:AF:11:35:74:04:36:11:11:F1:66 Certificate issuer: /CN=b433860d-ab5d-45f4-a11e-f313b584710a Certificate serial: 010D0C9F4328584A778084CE2ACDEB65208DE370 Authority key identifier: CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/29ee82f2-26f5-3427-b2a3-e130b3600811.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 14445 IP address blocks: 104.249.137.0/24 maxlen: 24 104.249.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:84:ce:2a:cd:eb:65:20:8d:e3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433860d-ab5d-45f4-a11e-f313b584710a Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=e6857cc5-f82e-48da-81dd-ddb96e3c2942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b9:1b:63:cf:e2:8d:25:e2:46:de:85:0c:b7: 1e:71:dc:18:c1:61:ad:a1:54:cb:20:46:6f:d1:b8: 72:7b:f1:7d:10:1d:bf:77:de:65:68:98:8d:0f:83: 91:b9:5b:4d:73:d3:22:db:34:78:f9:f4:5a:8a:44: fc:e2:ef:2f:74:ba:0b:be:d7:39:bb:49:b8:e8:31: e1:7c:80:e6:e2:c0:56:50:36:e3:1b:6b:f3:a5:6d: c7:ca:16:3b:cf:54:b7:68:87:ef:7b:56:8e:9a:ea: 6b:3f:7f:51:ab:08:d4:90:fd:05:fe:58:dc:93:02: fa:6f:dd:ff:ea:eb:4d:9b:1d:e1:ba:48:b7:08:f6: dd:56:d4:4e:1b:c3:07:42:a7:bf:80:e5:ad:49:d5: 83:91:03:19:d4:c3:f0:88:ab:71:a9:6b:c3:11:2d: 5d:ab:17:b0:f6:b7:6b:df:ec:2a:25:45:05:05:bd: 07:52:02:b9:79:3d:fa:9b:0d:e9:54:1a:e9:e2:64: 52:fb:a2:94:93:05:cd:73:ca:b4:f2:99:f0:9e:f1: 13:77:4f:2a:73:14:0a:70:2c:43:c9:d8:72:c5:b8: fe:05:36:94:c2:bd:41:87:17:c6:cf:81:0d:b7:4c: 8c:25:df:f7:01:28:86:63:d4:fb:0f:03:c7:7f:29: 67:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:87:A0:76:24:E3:F0:1E:1A:B6:AF:11:35:74:04:36:11:11:F1:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/29ee82f2-26f5-3427-b2a3-e130b3600811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl X509v3 Authority Key Identifier: keyid:CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer sbgp-ipAddrBlock: critical IPv4: 104.249.137.0-104.249.138.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c4:79:a3:25:09:72:98:c7:76:e8:df:0b:fe:cd:69:a5:89: 5d:65:f0:e4:64:36:4e:79:ba:83:f4:ac:5b:e7:68:e2:ea:1b: e0:8f:1a:93:59:4b:e7:78:f8:12:de:4e:9f:4e:46:88:2e:9b: 1b:58:1b:32:77:a8:7d:c4:a0:f3:5f:43:ae:1a:57:e2:4e:eb: 86:34:3c:83:3a:67:8d:ab:8c:f1:dc:07:25:71:fa:c9:31:fe: af:0e:f5:c2:2e:09:5c:1b:6f:dc:24:06:00:fa:dc:b2:73:78: 3d:23:6b:7c:75:90:a6:f6:76:12:d9:35:36:e3:ae:75:c7:f9: c9:13:d0:6d:aa:68:3e:7a:e4:85:02:9a:3d:0a:52:fd:41:69: b4:da:40:45:4e:33:06:e3:07:c0:2c:36:9d:8a:57:7f:7d:dc: 8f:06:ad:b8:4d:d5:27:e1:5f:be:d1:ff:72:99:97:eb:b4:5f: e9:fa:8d:84:e8:8a:a2:c0:43:8f:02:8e:16:b5:30:7c:f2:eb: 38:a9:fb:31:e8:f3:07:04:0f:f0:41:ce:40:13:cf:2a:c0:0b: 79:a9:bc:24:1f:99:09:d8:11:8e:f8:db:53:fc:64:5d:42:9c: 42:65:4e:4c:d0:0d:b1:4f:86:ba:77:e4:75:98:45:48:b0:a2: 8f:ff:49:e9 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEp3gITOKs3rZSCN43AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzMzg2MGQtYWI1ZC00NWY0LWExMWUtZjMxM2I1ODQ3 MTBhMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk ZTY4NTdjYzUtZjgyZS00OGRhLTgxZGQtZGRiOTZlM2MyOTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrkbY8/ijSXiRt6FDLcecdwYwWGtoVTLIEZv 0bhye/F9EB2/d95laJiND4ORuVtNc9Mi2zR4+fRaikT84u8vdLoLvtc5u0m46DHh fIDm4sBWUDbjG2vzpW3HyhY7z1S3aIfve1aOmuprP39RqwjUkP0F/ljckwL6b93/ 6utNmx3huki3CPbdVtROG8MHQqe/gOWtSdWDkQMZ1MPwiKtxqWvDES1dqxew9rdr 3+wqJUUFBb0HUgK5eT36mw3pVBrp4mRS+6KUkwXNc8q08pnwnvETd08qcxQKcCxD ydhyxbj+BTaUwr1BhxfGz4ENt0yMJd/3ASiGY9T7DwPHfylnOQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFACHoHYk4/AeGravETV0BDYREfFmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMz ODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEzYjU4NDcxMGEvMjllZTgyZjItMjZmNS0z NDI3LWIyYTMtZTEzMGIzNjAwODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjQzMzg2MGQtYWI1ZC00NWY0LWEx MWUtZjMxM2I1ODQ3MTBhL2I0MzM4NjBkLWFiNWQtNDVmNC1hMTFlLWYzMTNiNTg0 NzEwYS5jcmwwHwYDVR0jBBgwFoAUz9UTZdOGkQNiuVzEe6KxGXpl5VUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMzODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEz YjU4NDcxMGEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABo+YkD BABo+YowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEACcR5oyUJcpjHdujfC/7NaaWJXWXw5GQ2Tnm6g/SsW+do 4uob4I8ak1lL53j4Et5On05GiC6bG1gbMneofcSg819DrhpX4k7rhjQ8gzpnjauM 8dwHJXH6yTH+rw71wi4JXBtv3CQGAPrcsnN4PSNrfHWQpvZ2Etk1NuOudcf5yRPQ bapoPnrkhQKaPQpS/UFptNpARU4zBuMHwCw2nYpXf33cjwatuE3VJ+FfvtH/cpmX 67Rf6fqNhOiKosBDjwKOFrUwfPLrOKn7MejzBwQP8EHOQBPPKsALeam8JB+ZCdgR jvjbU/xkXUKcQmVOTNANsU+GunfkdZhFSLCij/9J6Q== -----END CERTIFICATE-----Generated at Mon Aug 4 18:57:55 2025 by rpki-client