$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/94da6f54-9255-374b-a408-2e35886a522d.roa File: 94da6f54-9255-374b-a408-2e35886a522d.roa (raw, json) Hash identifier: TIY0XFJyVMDxHI67XO03fRVHfwLdYUEgrcTa4me/mS8= Subject key identifier: 8A:B4:61:3E:0A:20:8D:9D:79:DC:A1:90:B1:D7:73:93:30:E9:65:30 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584AAB26521CF9EA5D4B7B6DC9A0 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/94da6f54-9255-374b-a408-2e35886a522d.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 40948 IP address blocks: 104.152.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:52:1c:f9:ea:5d:4b:7b:6d:c9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=29b469c6-56db-42ef-ab9e-0b05b8a238d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ff:02:f0:9a:7a:e5:31:12:b5:4f:ff:2f:70: e1:7d:23:a0:80:4e:6f:c0:cf:23:22:71:72:2c:a1: 83:8d:81:87:ef:2a:7f:3b:63:c3:5e:94:aa:08:dd: f4:f3:94:6c:87:1f:48:0f:d5:f5:7b:ac:f7:03:97: 43:64:f7:c7:98:a8:74:62:7e:e2:8a:c9:e4:b0:3b: fb:ae:11:45:ae:84:0b:8a:be:8f:b9:ce:86:a7:9c: 41:5b:44:10:08:d0:87:86:92:bf:9d:76:95:19:f0: 3d:2c:97:5f:e3:a2:ff:50:99:96:56:21:30:30:ff: e0:e7:8d:d2:ca:6c:f6:94:0a:bc:ec:3e:74:4b:67: 0c:3d:51:3d:84:a1:d4:0e:d2:93:bc:a9:5c:47:d6: 9a:b1:db:a3:44:77:dc:de:a7:56:e4:d6:ec:fd:49: 2b:db:c8:ab:73:3a:1f:5e:b8:eb:ce:bd:95:00:d5: f1:b8:79:d5:d5:7f:54:b1:eb:86:7c:06:fe:95:9b: 10:fa:ac:64:a5:15:90:81:96:5b:c2:28:90:5d:f8: 7f:3a:4c:93:5c:9a:06:96:e4:5b:22:e0:e4:14:8d: 3f:90:fc:4f:f9:7f:2b:4e:35:c6:43:4e:84:f5:a1: a7:89:d2:b4:de:76:cf:2a:ee:e9:3d:48:d1:19:49: ff:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B4:61:3E:0A:20:8D:9D:79:DC:A1:90:B1:D7:73:93:30:E9:65:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/94da6f54-9255-374b-a408-2e35886a522d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 104.152.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:2e:c6:63:4a:57:7b:af:f1:cb:ec:c6:d3:e2:1b:1a:0a:0c: 77:ef:2e:2e:8b:cf:e7:07:43:35:b3:d8:f1:d6:db:e5:85:ba: 8a:ab:85:c4:fb:3a:1b:22:59:ea:43:03:15:05:03:19:8a:db: 60:70:d6:f4:13:60:c0:68:4b:39:90:40:98:7f:12:ef:b3:28: 4d:16:de:d7:ba:a8:cd:21:44:93:67:32:95:20:d3:77:d7:cf: eb:4f:0d:84:d8:16:ee:98:0c:67:a7:3a:8a:2b:06:02:f9:9f: b5:12:00:35:69:d7:57:da:f6:bc:0f:a1:e0:b5:a9:b8:7d:ff: 4b:32:5a:61:3d:0c:25:fa:46:2b:fe:f2:ae:d1:02:60:fd:50: da:fb:97:63:5c:dd:00:b2:41:c1:70:ba:31:14:f0:41:36:d2: 21:8b:29:57:a3:a4:3f:e1:4e:f4:33:06:73:81:6d:18:7d:f7: a9:99:0f:01:d0:bd:6f:f1:e0:7a:2b:51:56:da:08:4d:6d:98: fb:e4:3a:6a:ea:bb:cc:44:1e:89:4b:e6:b3:78:03:b6:78:b5: 8c:75:17:52:cc:70:df:67:d4:06:37:9c:59:dd:1f:4a:17:78: bc:35:36:a6:19:23:25:c7:78:72:90:01:5b:bb:50:2b:c6:0b: 28:c8:96:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlIc+epdS3ttyaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk MjliNDY5YzYtNTZkYi00MmVmLWFiOWUtMGIwNWI4YTIzOGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv8C8Jp65TEStU//L3DhfSOggE5vwM8jInFy LKGDjYGH7yp/O2PDXpSqCN3085Rshx9ID9X1e6z3A5dDZPfHmKh0Yn7iisnksDv7 rhFFroQLir6Puc6Gp5xBW0QQCNCHhpK/nXaVGfA9LJdf46L/UJmWViEwMP/g543S ymz2lAq87D50S2cMPVE9hKHUDtKTvKlcR9aasdujRHfc3qdW5Nbs/Ukr28irczof Xrjrzr2VANXxuHnV1X9UseuGfAb+lZsQ+qxkpRWQgZZbwiiQXfh/OkyTXJoGluRb IuDkFI0/kPxP+X8rTjXGQ06E9aGnidK03nbPKu7pPUjRGUn/JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIq0YT4KII2dedyhkLHXc5Mw6WUwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvOTRkYTZmNTQtOTI1NS0z NzRiLWE0MDgtMmUzNTg4NmE1MjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJjEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8uxmNKV3uv8cvsxtPiGxoKDHfvLi6Lz+cHQzWz2PHW2+WFuoqrhcT7 OhsiWepDAxUFAxmK22Bw1vQTYMBoSzmQQJh/Eu+zKE0W3te6qM0hRJNnMpUg03fX z+tPDYTYFu6YDGenOoorBgL5n7USADVp11fa9rwPoeC1qbh9/0syWmE9DCX6Riv+ 8q7RAmD9UNr7l2Nc3QCyQcFwujEU8EE20iGLKVejpD/hTvQzBnOBbRh996mZDwHQ vW/x4HorUVbaCE1tmPvkOmrqu8xEHolL5rN4A7Z4tYx1F1LMcN9n1AY3nFndH0oX eLw1NqYZIyXHeHKQAVu7UCvGCyjIluU= -----END CERTIFICATE-----Generated at Wed Aug 6 12:35:47 2025 by rpki-client