$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/7505e4e7-9852-3c71-a7e1-ae52fe0c3ab1.roa File: 7505e4e7-9852-3c71-a7e1-ae52fe0c3ab1.roa (raw, json) Hash identifier: xT3v2IRl6XiU1fl0CQtvJ4WL1X9at614lpBUkwX4LRA= Subject key identifier: 97:CA:B2:A9:EA:FF:D4:BD:CF:FA:5D:D1:83:27:71:7C:E8:40:0C:09 Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F4328584AC0163E359DABA1131014C0C0 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/7505e4e7-9852-3c71-a7e1-ae52fe0c3ab1.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 26512 IP address blocks: 104.244.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:3e:35:9d:ab:a1:13:10:14:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=1d145f5b-b6fa-46d9-89e9-be601a2168d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3f:f6:20:11:9d:86:69:49:5b:a8:36:53:83: 0a:99:75:17:30:9e:27:0d:98:59:c2:0e:84:14:86: 31:69:ed:d4:a0:5d:0e:44:93:41:c8:0d:8c:89:7a: d3:3b:83:ac:ab:f5:9b:36:fc:e8:4e:ab:21:8d:99: fc:16:b3:66:17:f2:95:99:5c:c9:dc:fb:fa:bb:d6: 02:4f:cd:d1:df:eb:d0:2a:ad:e7:f6:b2:13:87:d6: f5:62:f7:7e:5b:5e:f8:a9:f4:23:c9:d0:31:dd:53: cc:00:7e:e2:72:dd:ae:a1:3c:0f:25:a4:95:1a:cf: f9:5e:e9:4a:2c:4f:96:ca:19:ac:c7:c4:ee:7f:d9: 01:0d:ad:70:d5:a7:9a:bd:8e:56:5c:95:d6:bc:72: a3:73:6d:a0:69:e6:6e:68:03:6d:71:e9:5f:95:94: d6:c4:e8:8b:0a:66:a6:4b:26:45:c7:58:6a:3f:56: 4d:d7:e4:d5:59:36:a5:bd:b0:98:a3:e7:2a:bc:6e: 15:79:bb:a0:e4:d7:cc:04:9a:12:70:80:30:bd:9b: d7:0f:af:dc:4c:2d:0b:33:2e:13:cd:96:f8:7d:9c: a4:b7:e1:bc:e2:88:b1:ce:5c:a1:02:86:5c:13:7a: db:0c:e6:5f:94:41:3f:39:52:28:7d:da:18:aa:6d: 5a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:CA:B2:A9:EA:FF:D4:BD:CF:FA:5D:D1:83:27:71:7C:E8:40:0C:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/7505e4e7-9852-3c71-a7e1-ae52fe0c3ab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.244.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:8c:3b:8d:95:a4:99:d1:5a:e6:91:37:ef:f0:da:74:86:1e: 48:15:dd:67:91:2d:84:0d:a6:be:74:c5:f4:08:09:1f:ab:bc: 4f:48:a2:22:68:0a:82:c2:41:e5:52:18:d5:84:f9:85:1d:53: 9c:6b:37:ba:2f:d6:e9:c6:a1:d5:d0:1a:50:2f:f8:03:bc:dd: 27:ba:4b:11:a0:96:7b:50:b0:89:7a:15:c5:7f:9f:0c:51:ce: 91:78:fc:ea:d8:ff:57:68:f5:8a:3c:8b:1f:6e:5f:b5:a6:41: 01:16:c6:9a:23:19:9a:ee:47:30:27:0c:0b:2d:98:3f:bc:17: a3:6e:64:1c:79:0d:ff:58:43:59:bf:c1:c5:39:3c:97:84:0c: 22:05:74:fd:70:ce:16:c4:5b:c7:05:d4:74:3c:e6:4c:a3:c7: 41:21:41:0f:47:28:ed:0c:f1:ff:71:0f:42:69:5e:97:80:2b: ac:ef:24:b7:99:9f:67:b9:3f:c9:05:ef:dd:bf:24:84:d2:b4: f6:3e:78:d9:b0:a0:3d:2b:2c:8a:b8:19:60:8f:57:81:27:4d: ad:62:d6:e4:bb:f6:67:6e:d5:a2:d3:b6:39:de:2d:4a:33:bb: 88:83:64:53:7d:2f:a3:2a:30:52:4d:1f:1a:b7:4f:aa:5d:bc: 98:b5:f4:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFj41nauhExAUwMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MWQxNDVmNWItYjZmYS00NmQ5LTg5ZTktYmU2MDFhMjE2OGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz/2IBGdhmlJW6g2U4MKmXUXMJ4nDZhZwg6E FIYxae3UoF0ORJNByA2MiXrTO4Osq/WbNvzoTqshjZn8FrNmF/KVmVzJ3Pv6u9YC T83R3+vQKq3n9rITh9b1Yvd+W174qfQjydAx3VPMAH7ict2uoTwPJaSVGs/5XulK LE+Wyhmsx8Tuf9kBDa1w1aeavY5WXJXWvHKjc22gaeZuaANtcelflZTWxOiLCmam SyZFx1hqP1ZN1+TVWTalvbCYo+cqvG4Vebug5NfMBJoScIAwvZvXD6/cTC0LMy4T zZb4fZykt+G84oixzlyhAoZcE3rbDOZflEE/OVIofdoYqm1anwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfKsqnq/9S9z/pd0YMncXzoQAwJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvNzUwNWU0ZTctOTg1Mi0z YzcxLWE3ZTEtYWU1MmZlMGMzYWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPQSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaMO42VpJnRWuaRN+/w2nSGHkgV3WeRLYQNpr50xfQICR+rvE9IoiJo CoLCQeVSGNWE+YUdU5xrN7ov1unGodXQGlAv+AO83Se6SxGglntQsIl6FcV/nwxR zpF4/OrY/1do9Yo8ix9uX7WmQQEWxpojGZruRzAnDAstmD+8F6NuZBx5Df9YQ1m/ wcU5PJeEDCIFdP1wzhbEW8cF1HQ85kyjx0EhQQ9HKO0M8f9xD0JpXpeAK6zvJLeZ n2e5P8kF792/JITStPY+eNmwoD0rLIq4GWCPV4EnTa1i1uS79mdu1aLTtjneLUoz u4iDZFN9L6MqMFJNHxq3T6pdvJi19G0= -----END CERTIFICATE-----Generated at Thu Aug 7 14:34:03 2025 by rpki-client