$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa File: 407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa (raw, json) Hash identifier: heeVj/dyTcFFtd29eJplXclo6FUM+lz3Hg2UkQiWM/A= Subject key identifier: E3:10:FC:7B:82:C5:2E:62:C9:98:10:29:BD:29:95:C1:DE:4F:24:C3 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584A8575F8CB902E52418C0C1C70 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 16433 IP address blocks: 104.243.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:f8:cb:90:2e:52:41:8c:0c:1c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=bc2ef6da-16b2-40f8-8887-e04c39b43551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7c:71:97:86:9b:89:14:83:32:10:a3:64:59: a7:6e:04:c1:70:23:54:44:d7:f5:a0:b3:d8:3e:f7: 92:b2:50:75:46:d9:39:2c:ba:47:42:8d:d0:29:67: be:65:ed:6a:61:c0:c5:38:6d:4c:7d:87:19:7d:94: 3b:d1:43:28:2d:8a:01:eb:90:29:94:32:01:8b:a4: a2:d4:82:5a:03:31:3c:bf:0b:a6:3f:1c:d2:43:54: a6:cb:ec:91:f4:bc:e5:8c:82:01:b6:ed:a3:50:ce: 7c:6e:f4:94:11:89:c0:f4:46:b2:fe:6c:31:69:9d: 15:4a:5b:e1:35:88:48:aa:fa:03:5c:4d:b3:9b:19: 67:9e:ad:96:38:46:1c:31:e6:63:45:70:d6:a5:03: 89:25:50:37:0a:77:48:51:6b:51:77:61:58:80:16: 48:cc:e4:05:1f:53:2b:f7:3c:56:80:44:c3:4b:96: bb:88:0c:74:75:ad:f0:65:f9:8c:a8:13:7f:72:8e: 46:33:d5:2b:b5:d4:2b:72:9e:a8:34:df:6c:40:bb: 33:da:87:d5:72:bb:0f:30:df:4b:70:bd:cf:12:66: 92:c7:b2:02:83:1d:0a:6c:bb:55:6a:e0:66:ad:84: 09:86:17:e3:37:47:cb:9b:d9:00:27:db:cf:2e:48: 02:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:10:FC:7B:82:C5:2E:62:C9:98:10:29:BD:29:95:C1:DE:4F:24:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 104.243.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:6f:2f:93:e0:13:ec:06:18:d9:e1:c9:80:12:99:49:54:23: 8a:8b:60:a4:a2:35:5c:d1:98:cb:28:6a:30:44:8f:45:bd:f3: 5f:9c:9c:ee:6f:4f:dd:3a:69:60:a9:62:57:7a:a4:b8:a6:ce: be:19:ae:2d:cc:51:21:d1:6c:41:71:58:8d:8c:35:da:24:4f: a7:62:b2:17:69:75:53:e0:21:8d:77:f2:7e:b0:d0:1d:ea:d1: 20:ee:c9:2c:f8:1b:e9:7e:77:e4:14:40:05:81:5e:4e:02:bf: 12:18:78:2d:75:70:7a:43:67:56:ae:a1:07:8f:e8:a3:d1:27: 7d:01:e3:88:05:5f:bc:b2:8c:74:6a:86:1a:2f:21:a2:e0:ee: 0e:66:56:8d:97:a4:cf:06:97:c6:6b:9a:0b:80:fb:85:b8:d4: b1:b9:70:5e:92:4b:8c:2e:40:55:22:4c:16:4f:19:76:fa:8b: 24:45:07:2f:ca:bc:ed:1e:a2:39:fd:cb:a1:aa:00:96:8d:5d: 9d:09:fb:cd:b6:12:00:7a:bc:0e:31:1d:bd:6e:69:dc:62:c9: 56:fa:b3:c9:67:7b:5c:1d:d4:f7:8d:ff:62:88:9c:e2:d0:d3: c7:61:cf:46:2c:70:75:c8:81:fa:c3:1d:ca:79:62:c8:b7:5f: 19:10:c6:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdfjLkC5SQYwMHHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk YmMyZWY2ZGEtMTZiMi00MGY4LTg4ODctZTA0YzM5YjQzNTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3xxl4abiRSDMhCjZFmnbgTBcCNURNf1oLPY PveSslB1Rtk5LLpHQo3QKWe+Ze1qYcDFOG1MfYcZfZQ70UMoLYoB65AplDIBi6Si 1IJaAzE8vwumPxzSQ1Smy+yR9LzljIIBtu2jUM58bvSUEYnA9Eay/mwxaZ0VSlvh NYhIqvoDXE2zmxlnnq2WOEYcMeZjRXDWpQOJJVA3CndIUWtRd2FYgBZIzOQFH1Mr 9zxWgETDS5a7iAx0da3wZfmMqBN/co5GM9UrtdQrcp6oNN9sQLsz2ofVcrsPMN9L cL3PEmaSx7ICgx0KbLtVauBmrYQJhhfjN0fLm9kAJ9vPLkgCNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMQ/HuCxS5iyZgQKb0plcHeTyTDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvNDA3ZWZhMGEtYzhlNS0z NTQ4LWEyMGQtZTk3MmRjNzNmYmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaPNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBvL5PgE+wGGNnhyYASmUlUI4qLYKSiNVzRmMsoajBEj0W981+cnO5v T906aWCpYld6pLimzr4Zri3MUSHRbEFxWI2MNdokT6dishdpdVPgIY138n6w0B3q 0SDuySz4G+l+d+QUQAWBXk4CvxIYeC11cHpDZ1auoQeP6KPRJ30B44gFX7yyjHRq hhovIaLg7g5mVo2XpM8Gl8ZrmguA+4W41LG5cF6SS4wuQFUiTBZPGXb6iyRFBy/K vO0eojn9y6GqAJaNXZ0J+822EgB6vA4xHb1uadxiyVb6s8lne1wd1PeN/2KInOLQ 08dhz0YscHXIgfrDHcp5Ysi3XxkQxoQ= -----END CERTIFICATE-----Generated at Mon Aug 4 14:45:35 2025 by rpki-client