$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa File: 8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa (raw, json) Hash identifier: +II1/Tb9kxaSZP+10CmnLlE8M3bjKZqTv0JROMEcFas= Subject key identifier: 10:89:6C:E4:A4:3B:D4:3D:BF:C5:EC:31:A7:43:A4:F6:2F:27:C0:91 Certificate issuer: /CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Certificate serial: 010D0C9F4328584A8C70BAAEB1FC23308D98A5C0 Authority key identifier: C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 21748 IP address blocks: 104.37.232.0/21 maxlen: 24 2606:8b40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:ba:ae:b1:fc:23:30:8d:98:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=bc37ba9d-b527-4d7d-898c-dc22c0ff3e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8f:af:ea:82:dc:c7:51:38:2e:4c:cf:7d:35: 8c:d9:a8:b3:2e:50:10:e2:ad:d1:fc:09:51:00:38: 34:53:0e:33:9d:fd:64:28:2e:94:7b:ee:56:4b:a0: 39:24:6e:57:ed:76:5a:80:87:95:4e:53:6d:3e:47: 9a:57:67:04:9e:a8:21:4e:32:77:98:82:b1:74:38: c1:0a:ec:4c:da:9d:18:2c:44:92:de:8d:37:b9:48: c4:7c:eb:f0:08:0d:29:b1:4b:2d:a8:88:75:b6:07: 9b:87:15:c7:0e:8f:0c:41:dc:12:ed:ad:f7:d9:d2: ab:0f:51:73:f6:44:f0:1f:c4:9a:4e:ac:e6:50:65: 31:3f:00:1a:ca:49:22:00:ec:2e:4c:bd:a7:80:95: 65:c5:88:fe:d1:25:7f:ec:1f:dd:16:82:85:a6:cd: 46:3c:98:a2:d6:d5:fd:f8:b2:6c:3f:08:77:d9:cf: 70:a9:3f:32:0c:90:a5:54:d8:2f:2e:ee:1d:9b:dc: 96:f2:ea:c0:6d:02:ea:57:a6:80:47:df:f1:fc:30: 81:29:7f:0d:87:1a:e2:c6:4b:9a:98:f6:34:bb:df: 0a:98:e2:89:a7:45:4f:72:dc:2d:12:55:d7:4a:30: 1f:86:57:7e:61:c7:57:07:85:99:2c:b3:4d:c8:83: a8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:89:6C:E4:A4:3B:D4:3D:BF:C5:EC:31:A7:43:A4:F6:2F:27:C0:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl X509v3 Authority Key Identifier: keyid:C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer sbgp-ipAddrBlock: critical IPv4: 104.37.232.0/21 IPv6: 2606:8b40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:f5:00:3a:a7:4d:78:ae:1d:60:64:11:b9:f1:d8:a0:54:2e: fc:31:be:c6:d7:33:c7:bf:9d:f5:72:e4:40:b7:40:4e:9a:76: b9:81:bf:ee:1c:51:c8:a8:27:d3:82:49:06:d1:88:04:68:bf: 62:fa:b0:7b:3e:2d:e6:6a:16:11:17:46:41:dd:70:ff:23:4a: 63:11:a2:96:fd:93:a1:0c:43:58:91:64:35:ff:66:1b:85:e2: 4d:dc:7e:dd:db:1f:e6:62:74:a6:33:da:ad:55:58:47:02:0e: 12:49:95:32:28:05:0c:fe:d4:c0:80:54:ea:94:10:51:ec:ad: 53:6f:5a:e1:b7:76:fb:c6:19:65:f9:09:b9:32:fc:d6:89:c0: 9b:55:03:c1:d5:87:9f:a8:7d:ca:a3:ac:6d:81:b1:a6:38:a3: a1:ed:88:4d:09:6c:30:62:19:2f:bc:4f:98:6f:82:ff:39:cb: 77:1d:20:29:f9:ec:34:44:bd:ac:5e:83:b8:07:55:5e:db:72: 68:41:71:05:03:af:15:6f:4e:28:a3:94:a5:7e:6a:66:27:59: 08:a2:2b:43:0d:c0:44:aa:28:1f:d7:87:e9:10:58:b6:ad:18: d5:a4:24:bb:11:25:67:99:3b:f0:b9:a5:0f:98:a0:f2:39:86: b0:79:cb:9e -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEqMcLqusfwjMI2YpcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5NWE2OTUtZTkxYS00YzVhLThhMzEtYTkyMGE0MmVh NDRkMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk YmMzN2JhOWQtYjUyNy00ZDdkLTg5OGMtZGMyMmMwZmYzZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso+v6oLcx1E4LkzPfTWM2aizLlAQ4q3R/AlR ADg0Uw4znf1kKC6Ue+5WS6A5JG5X7XZagIeVTlNtPkeaV2cEnqghTjJ3mIKxdDjB CuxM2p0YLESS3o03uUjEfOvwCA0psUstqIh1tgebhxXHDo8MQdwS7a332dKrD1Fz 9kTwH8SaTqzmUGUxPwAaykkiAOwuTL2ngJVlxYj+0SV/7B/dFoKFps1GPJii1tX9 +LJsPwh32c9wqT8yDJClVNgvLu4dm9yW8urAbQLqV6aAR9/x/DCBKX8Nhxrixkua mPY0u98KmOKJp0VPctwtElXXSjAfhld+YcdXB4WZLLNNyIOolwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFBCJbOSkO9Q9v8XsMadDpPYvJ8CRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1 YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIwYTQyZWE0NGQvOGYyYzUwN2YtOTg4MC0z YTBhLThlNmEtMmQ5Y2M1ZDFlOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTI5NWE2OTUtZTkxYS00YzVhLThh MzEtYTkyMGE0MmVhNDRkL2EyOTVhNjk1LWU5MWEtNGM1YS04YTMxLWE5MjBhNDJl YTQ0ZC5jcmwwHwYDVR0jBBgwFoAUxrdjkJ2ZQm4W9Z6SLSD1iDDBqmwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIw YTQyZWE0NGQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDaCXoMA0E AgACMAcDBQAmBotAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAIH1ADqnTXiuHWBkEbnx2KBULvwxvsbXM8e/ nfVy5EC3QE6adrmBv+4cUcioJ9OCSQbRiARov2L6sHs+LeZqFhEXRkHdcP8jSmMR opb9k6EMQ1iRZDX/ZhuF4k3cft3bH+ZidKYz2q1VWEcCDhJJlTIoBQz+1MCAVOqU EFHsrVNvWuG3dvvGGWX5Cbky/NaJwJtVA8HVh5+ofcqjrG2BsaY4o6HtiE0JbDBi GS+8T5hvgv85y3cdICn57DREvaxeg7gHVV7bcmhBcQUDrxVvTiijlKV+amYnWQii K0MNwESqKB/Xh+kQWLatGNWkJLsRJWeZO/C5pQ+YoPI5hrB5y54= -----END CERTIFICATE-----Generated at Thu Aug 7 01:57:12 2025 by rpki-client