$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/f746411c-82dc-320f-833f-056441f592f0.roa File: f746411c-82dc-320f-833f-056441f592f0.roa (raw, json) Hash identifier: w6R8nVn++FQQ1uy3GjyclLtQz/dLkvl+h3GyN5+Sns4= Subject key identifier: 06:58:A5:09:7B:53:93:B8:C5:94:1C:5C:1B:9B:90:23:A7:B7:57:5C Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584A7D15FB6CC0DEA9AE4DA27800 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/f746411c-82dc-320f-833f-056441f592f0.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 40342 IP address blocks: 104.200.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:fb:6c:c0:de:a9:ae:4d:a2:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=30bf7739-175c-4cb4-b7a0-5ac4f8e98743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d2:c7:93:91:9a:28:72:d3:57:8b:bc:5e:40: d1:f9:07:62:11:35:b6:ca:e2:20:e4:93:51:3e:de: 30:61:34:9a:0a:4f:34:f6:45:2d:d2:cd:25:03:f9: bb:b5:9e:c2:3a:3b:74:b5:22:a8:58:b5:b5:6c:7b: 99:d9:e1:49:f7:ee:b8:fe:20:dc:6f:bd:0e:85:40: a0:d3:b3:38:70:99:9b:31:38:63:56:4f:cc:30:da: b9:f9:f5:73:6a:d5:5b:bc:a9:2a:f0:93:ee:a5:8f: f7:46:9e:69:b9:a2:65:66:16:77:53:47:b6:48:59: c8:2f:45:36:4a:a4:b5:c6:19:28:cf:61:02:0f:ba: eb:8c:d6:87:52:12:36:71:e6:5e:fb:17:04:64:6f: b6:6f:a4:15:bd:62:33:e0:7f:3e:b0:81:ba:10:ca: 82:90:77:71:52:07:53:78:0c:d8:87:53:56:a4:73: bc:ad:48:87:e8:1d:0c:27:de:c0:bc:00:28:45:17: 3c:b1:60:72:5c:ce:dd:ab:ea:a7:03:75:79:10:e4: 43:fa:c3:a3:a2:57:0b:6f:e6:b6:63:fd:b0:c6:09: 75:ff:cb:e5:ed:8f:57:04:88:dc:4e:ec:a2:15:97: 3e:9e:1d:c9:85:a0:ba:8c:b1:2a:3f:b7:ad:e3:34: 27:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:58:A5:09:7B:53:93:B8:C5:94:1C:5C:1B:9B:90:23:A7:B7:57:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/f746411c-82dc-320f-833f-056441f592f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 104.200.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:53:5f:b5:5d:df:1b:1b:f8:be:e7:7d:aa:cb:b6:36:93:c4: 18:17:cd:61:09:2d:cf:30:e8:6f:36:bd:26:aa:7c:2b:2c:e9: ef:98:f4:a3:20:b9:43:50:f0:15:38:d9:04:ee:15:38:9c:e2: eb:2b:28:33:51:c4:b1:54:b1:46:87:a9:1b:93:b6:4d:37:5d: f2:97:70:3c:a3:a0:31:08:68:af:ac:42:57:01:d5:82:9b:0b: 92:90:97:41:bf:0f:e6:1f:74:b7:52:26:9f:69:f9:b1:0c:f4: 65:e8:39:ac:43:73:81:2f:a2:e5:52:45:55:e5:2f:fa:ec:d5: f9:9d:0e:ee:c4:b7:cc:38:03:4b:98:27:01:69:26:7b:a5:56: b2:64:12:16:df:71:57:fa:61:28:1b:9f:a3:3f:23:b8:a4:69: 30:69:4a:e1:11:15:a4:fc:c6:41:3a:e3:a0:07:8f:79:22:fa: d0:82:a8:56:0c:58:61:5f:e6:3b:17:8c:c2:81:f4:77:db:38: d9:1c:0f:75:75:b3:32:c9:8c:b4:59:cc:21:50:4c:9e:f6:b3: ea:18:75:b0:10:cc:2e:a3:59:fb:59:6b:bf:bc:5d:69:ec:2f: b6:0f:f2:1c:96:02:c3:8a:0f:51:61:25:9b:52:5a:cb:f5:79: 2e:8d:b2:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FftswN6prk2ieAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk MzBiZjc3MzktMTc1Yy00Y2I0LWI3YTAtNWFjNGY4ZTk4NzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdLHk5GaKHLTV4u8XkDR+QdiETW2yuIg5JNR Pt4wYTSaCk809kUt0s0lA/m7tZ7COjt0tSKoWLW1bHuZ2eFJ9+64/iDcb70OhUCg 07M4cJmbMThjVk/MMNq5+fVzatVbvKkq8JPupY/3Rp5puaJlZhZ3U0e2SFnIL0U2 SqS1xhkoz2ECD7rrjNaHUhI2ceZe+xcEZG+2b6QVvWIz4H8+sIG6EMqCkHdxUgdT eAzYh1NWpHO8rUiH6B0MJ97AvAAoRRc8sWByXM7dq+qnA3V5EORD+sOjolcLb+a2 Y/2wxgl1/8vl7Y9XBIjcTuyiFZc+nh3JhaC6jLEqP7et4zQnFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZYpQl7U5O4xZQcXBubkCOnt1dcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvZjc0NjQxMWMtODJkYy0z MjBmLTgzM2YtMDU2NDQxZjU5MmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaMjaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBTX7Vd3xsb+L7nfarLtjaTxBgXzWEJLc8w6G82vSaqfCss6e+Y9KMg uUNQ8BU42QTuFTic4usrKDNRxLFUsUaHqRuTtk03XfKXcDyjoDEIaK+sQlcB1YKb C5KQl0G/D+YfdLdSJp9p+bEM9GXoOaxDc4EvouVSRVXlL/rs1fmdDu7Et8w4A0uY JwFpJnulVrJkEhbfcVf6YSgbn6M/I7ikaTBpSuERFaT8xkE646AHj3ki+tCCqFYM WGFf5jsXjMKB9HfbONkcD3V1szLJjLRZzCFQTJ72s+oYdbAQzC6jWftZa7+8XWns L7YP8hyWAsOKD1FhJZtSWsv1eS6NsqY= -----END CERTIFICATE-----Generated at Wed Aug 6 00:37:24 2025 by rpki-client