$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/dc85d078-3c0f-3902-98d0-203d1cb2755a.roa File: dc85d078-3c0f-3902-98d0-203d1cb2755a.roa (raw, json) Hash identifier: voq4mc3vvN3WeWsdHL/oAptuefj2gVostP8I8lbsM0c= Subject key identifier: 46:57:B2:A1:EC:A3:32:C1:D7:81:2D:DF:27:06:FF:2C:C1:6D:DE:38 Certificate issuer: /CN=d4558eff-6c26-4a17-bb9e-54377ea2aef1 Certificate serial: 010D0C9F4328584A88409BC58C22D55403918BB8 Authority key identifier: DC:06:EB:8D:D4:86:04:61:98:24:E0:81:39:DF:98:1A:AC:54:39:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/dc85d078-3c0f-3902-98d0-203d1cb2755a.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 46505 IP address blocks: 104.225.208.0/24 maxlen: 24 2602:fa89::/36 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:9b:c5:8c:22:d5:54:03:91:8b:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4558eff-6c26-4a17-bb9e-54377ea2aef1 Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=f797ac9e-39b1-47bf-9210-1663fd25ea23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9e:ee:14:eb:20:5f:e5:90:fa:b4:38:90:61: 2f:97:cf:e9:7f:93:8e:9b:e2:b2:bb:88:24:11:a5: 80:03:3b:21:a9:3d:a6:ee:c6:7e:0e:44:da:7c:35: 6f:4b:14:3b:51:62:2c:e0:31:7b:09:70:27:b9:74: 49:73:71:7d:2d:56:1a:bc:35:d2:cd:5c:98:de:91: 27:f7:d7:ca:05:e7:fd:d8:26:a3:fa:30:6b:27:1b: 25:37:75:52:77:0d:6e:3c:6f:80:e7:85:84:3a:b7: 2e:95:b0:20:37:c1:b0:2c:ba:52:00:f8:4a:71:95: 9b:57:67:45:df:54:5f:48:33:ca:96:c2:79:35:0e: 64:4f:5e:0c:18:39:67:eb:88:ae:a6:26:e6:5b:d8: 2d:37:80:fb:1e:78:e3:70:57:33:3f:0e:c5:ce:ed: ad:1d:c6:72:d9:f6:c0:15:23:ac:57:28:1e:bc:2b: 29:76:c6:6a:af:72:0b:61:c3:b5:84:af:cf:8d:c5: ba:ab:c9:db:c9:f5:73:9c:8c:1c:ca:cd:bc:a5:ab: 0e:2d:e5:27:53:88:f0:13:42:f7:e1:2e:b0:0c:e4: 80:2b:84:d6:d8:19:fa:3c:70:aa:ac:43:4c:71:ce: 4b:b1:ea:3f:d8:b5:2f:85:5a:d9:e6:67:bd:2f:2e: bc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:57:B2:A1:EC:A3:32:C1:D7:81:2D:DF:27:06:FF:2C:C1:6D:DE:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/dc85d078-3c0f-3902-98d0-203d1cb2755a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.crl X509v3 Authority Key Identifier: keyid:DC:06:EB:8D:D4:86:04:61:98:24:E0:81:39:DF:98:1A:AC:54:39:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer sbgp-ipAddrBlock: critical IPv4: 104.225.208.0/24 IPv6: 2602:fa89::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:0b:cb:0c:6d:1c:c0:e7:36:14:44:0b:fb:62:db:2e:93:30: d3:3b:6b:42:d5:1f:58:6d:78:7b:02:0d:27:aa:b0:4a:a5:76: 2f:2d:16:9a:b7:65:75:18:bf:3e:6d:ed:a3:36:4c:46:3b:21: e3:d8:60:55:8c:05:75:52:1b:5a:bd:c2:37:f9:76:8c:e5:78: 82:7c:bb:a7:fd:1d:34:b9:2c:b3:1f:0d:b6:6c:03:25:fb:45: fc:ca:83:b2:5b:a0:7a:45:ca:26:9a:18:a8:3c:28:16:fe:d7: c8:85:d3:f8:d5:df:c5:56:7c:8e:ba:08:f8:3d:35:d0:8c:62: 8f:4f:06:7b:73:26:7f:e7:4f:a6:c3:10:15:ed:97:94:8f:e8: ed:62:f3:09:ed:4f:18:c5:3a:55:4b:91:28:13:25:1b:f1:aa: c0:a9:a9:69:94:c9:95:aa:17:56:13:57:b1:ad:04:91:0c:a5: 3a:a1:4d:dd:2b:dc:23:a8:56:e2:c5:31:24:16:94:92:25:32: d9:23:27:fb:34:b3:c6:fd:8a:52:1a:55:04:04:c3:95:ee:fa: 5f:6f:eb:2f:a1:4d:fb:54:da:c4:d1:1c:2c:7d:05:de:a2:6f: e0:7e:ef:39:ff:96:73:c7:40:dc:3b:2d:94:29:fd:e0:4a:ff: 37:0c:82:69 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEqIQJvFjCLVVAORi7gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NThlZmYtNmMyNi00YTE3LWJiOWUtNTQzNzdlYTJh ZWYxMB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk Zjc5N2FjOWUtMzliMS00N2JmLTkyMTAtMTY2M2ZkMjVlYTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu57uFOsgX+WQ+rQ4kGEvl8/pf5OOm+Kyu4gk EaWAAzshqT2m7sZ+DkTafDVvSxQ7UWIs4DF7CXAnuXRJc3F9LVYavDXSzVyY3pEn 99fKBef92Caj+jBrJxslN3VSdw1uPG+A54WEOrculbAgN8GwLLpSAPhKcZWbV2dF 31RfSDPKlsJ5NQ5kT14MGDln64iupibmW9gtN4D7HnjjcFczPw7Fzu2tHcZy2fbA FSOsVygevCspdsZqr3ILYcO1hK/PjcW6q8nbyfVznIwcys28pasOLeUnU4jwE0L3 4S6wDOSAK4TW2Bn6PHCqrENMcc5Lseo/2LUvhVrZ5me9Ly68pwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFEZXsqHsozLB14Et3ycG/yzBbd44MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNDU1 OGVmZi02YzI2LTRhMTctYmI5ZS01NDM3N2VhMmFlZjEvZGM4NWQwNzgtM2MwZi0z OTAyLTk4ZDAtMjAzZDFjYjI3NTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQ1NThlZmYtNmMyNi00YTE3LWJi OWUtNTQzNzdlYTJhZWYxL2Q0NTU4ZWZmLTZjMjYtNGExNy1iYjllLTU0Mzc3ZWEy YWVmMS5jcmwwHwYDVR0jBBgwFoAU3AbrjdSGBGGYJOCBOd+YGqxUOXYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNDU1OGVmZi02YzI2LTRhMTctYmI5ZS01NDM3 N2VhMmFlZjEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAaOHQMA4E AgACMAgDBgQmAvqJADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAMC8sMbRzA5zYURAv7YtsukzDTO2tC1R9Y bXh7Ag0nqrBKpXYvLRaat2V1GL8+be2jNkxGOyHj2GBVjAV1UhtavcI3+XaM5XiC fLun/R00uSyzHw22bAMl+0X8yoOyW6B6RcommhioPCgW/tfIhdP41d/FVnyOugj4 PTXQjGKPTwZ7cyZ/50+mwxAV7ZeUj+jtYvMJ7U8YxTpVS5EoEyUb8arAqalplMmV qhdWE1exrQSRDKU6oU3dK9wjqFbixTEkFpSSJTLZIyf7NLPG/YpSGlUEBMOV7vpf b+svoU37VNrE0RwsfQXeom/gfu85/5Zzx0DcOy2UKf3gSv83DIJp -----END CERTIFICATE-----Generated at Mon Aug 4 19:11:12 2025 by rpki-client