$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/2d1265f0-ff7e-394e-8144-1a0cc5601ef4.roa File: 2d1265f0-ff7e-394e-8144-1a0cc5601ef4.roa (raw, json) Hash identifier: /mDaw8r6IZKsD61GTnP6oTZe48NOa/LgnVdgXBvygjE= Subject key identifier: 98:A7:A6:81:08:CB:3D:EF:10:05:52:A4:AD:F0:CB:61:AE:5D:88:36 Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192 Certificate serial: 010D0C9F4328584A9900C796754A3E7F9FF0BB74 Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/2d1265f0-ff7e-394e-8144-1a0cc5601ef4.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 5645 IP address blocks: 104.222.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c7:96:75:4a:3e:7f:9f:f0:bb:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=88653406-58dd-48d3-b5e8-18b54c48ac44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b3:42:f4:38:6d:76:bd:d8:86:b6:93:12:42: 54:1b:60:5c:e4:38:25:fd:73:28:35:bb:f8:c2:97: 96:da:47:bc:8e:d0:a0:51:15:19:3c:d6:e2:65:ab: f2:af:09:50:0c:33:f1:ce:7a:7b:7c:00:1d:ae:cf: 89:bd:eb:bd:29:dd:4c:84:77:9a:4a:64:1b:75:46: 32:3e:b1:eb:25:72:56:59:f1:33:91:83:9b:36:c4: 03:ee:86:ba:31:18:6e:68:6e:28:a5:1f:0e:f2:50: aa:8e:be:e8:6f:9f:14:e7:93:8d:87:42:02:9d:15: 85:7f:9c:51:5f:a6:a4:74:88:1d:43:8e:b5:1d:85: f9:f8:f0:14:9c:d2:4c:d2:ac:f1:72:00:75:d1:52: 99:b0:cb:6b:e6:5d:08:6e:b2:db:f2:af:9c:b9:3e: 1a:e2:81:d8:94:34:cf:e3:14:24:da:5a:d5:e7:14: 6f:d4:ce:15:c3:21:55:6e:e3:de:0f:66:0c:e5:a4: f7:fd:59:17:78:d7:f3:ab:46:fc:c7:8b:b2:19:7c: a2:ef:2f:34:41:16:ec:a1:65:14:79:fd:47:d1:2f: b1:f6:ce:e5:a6:6a:b9:f5:6b:19:8c:69:07:82:16: 2f:bc:78:44:a1:a4:15:85:a3:b4:b6:fa:bd:15:53: f5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A7:A6:81:08:CB:3D:EF:10:05:52:A4:AD:F0:CB:61:AE:5D:88:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/2d1265f0-ff7e-394e-8144-1a0cc5601ef4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl X509v3 Authority Key Identifier: keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer sbgp-ipAddrBlock: critical IPv4: 104.222.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:e7:9b:62:ca:59:9b:66:fb:14:71:96:67:ed:e6:10:ec:7a: d3:47:c1:6a:57:8b:0d:ff:91:39:54:12:b8:01:89:30:c3:37: bc:00:45:a7:61:5a:7b:a8:93:02:81:7e:9a:63:d7:80:63:03: 44:3b:dc:a7:7a:c6:e1:06:16:14:59:6a:c8:9a:a9:ed:d7:8e: 12:9b:db:d7:87:75:d2:e6:84:e2:28:65:4c:30:a1:1a:07:95: 10:5e:84:65:30:8f:63:6b:fe:f0:35:be:c5:17:57:21:09:97: d3:77:1d:4c:92:31:01:e5:41:d1:8d:38:f9:2c:b7:c6:24:70: 69:f9:66:d4:d8:47:4a:92:92:95:cd:24:e2:a5:88:03:c6:1f: 7e:d2:e0:02:20:57:4f:9b:a4:95:fa:10:ef:39:34:c4:40:33: 25:b0:5d:5e:14:0a:d5:97:97:2b:6b:59:40:2c:54:f8:4e:07: 23:7a:b6:6e:98:60:00:2d:14:87:1d:90:48:34:d7:af:3e:85: 72:8a:08:ee:75:68:7f:fc:9e:21:1b:eb:82:2c:51:bd:c5:da: 3a:ce:c5:9e:39:5a:5b:fb:a1:13:27:82:74:ed:6f:5b:0c:35: f2:5d:f9:d6:7d:ce:6f:a2:30:82:d7:2a:7d:e2:c1:3e:47:a2: 3c:1f:23:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMeWdUo+f5/wu3QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcx MTkyMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk ODg2NTM0MDYtNThkZC00OGQzLWI1ZTgtMThiNTRjNDhhYzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7NC9Dhtdr3YhraTEkJUG2Bc5Dgl/XMoNbv4 wpeW2ke8jtCgURUZPNbiZavyrwlQDDPxznp7fAAdrs+Jveu9Kd1MhHeaSmQbdUYy PrHrJXJWWfEzkYObNsQD7oa6MRhuaG4opR8O8lCqjr7ob58U55ONh0ICnRWFf5xR X6akdIgdQ461HYX5+PAUnNJM0qzxcgB10VKZsMtr5l0IbrLb8q+cuT4a4oHYlDTP 4xQk2lrV5xRv1M4VwyFVbuPeD2YM5aT3/VkXeNfzq0b8x4uyGXyi7y80QRbsoWUU ef1H0S+x9s7lpmq59WsZjGkHghYvvHhEoaQVhaO0tvq9FVP1CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJinpoEIyz3vEAVSpK3wy2GuXYg2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRl NDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzExOTIvMmQxMjY1ZjAtZmY3ZS0z OTRlLTgxNDQtMWEwY2M1NjAxZWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFm MjYtNzY3ZDhhNjcxMTkyLzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3 MTE5Mi5jcmwwHwYDVR0jBBgwFoAUxgiZJ8n+iQwKmkdxsPshppvRgPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03Njdk OGE2NzExOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaN5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANDnm2LKWZtm+xRxlmft5hDsetNHwWpXiw3/kTlUErgBiTDDN7wARadh WnuokwKBfppj14BjA0Q73Kd6xuEGFhRZasiaqe3XjhKb29eHddLmhOIoZUwwoRoH lRBehGUwj2Nr/vA1vsUXVyEJl9N3HUySMQHlQdGNOPkst8YkcGn5ZtTYR0qSkpXN JOKliAPGH37S4AIgV0+bpJX6EO85NMRAMyWwXV4UCtWXlytrWUAsVPhOByN6tm6Y YAAtFIcdkEg0168+hXKKCO51aH/8niEb64IsUb3F2jrOxZ45Wlv7oRMngnTtb1sM NfJd+dZ9zm+iMILXKn3iwT5HojwfI4E= -----END CERTIFICATE-----Generated at Wed Aug 6 09:31:06 2025 by rpki-client