$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a5eff7b2-f77b-3a6f-953a-48c6eccb51de.roa File: a5eff7b2-f77b-3a6f-953a-48c6eccb51de.roa (raw, json) Hash identifier: zm4LC0ioAgO5ef5/MXGCS7RHkymA7Y4FdlVfCJhqHIs= Subject key identifier: 41:C5:9F:15:C4:7B:22:A4:A8:A0:06:B8:74:68:0F:92:4D:72:EE:EB Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584AAB265A2CC66934D63C21D040 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a5eff7b2-f77b-3a6f-953a-48c6eccb51de.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 40627 IP address blocks: 104.245.56.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:5a:2c:c6:69:34:d6:3c:21:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=7922269c-f5d6-4076-99d2-cef28e6abbd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:39:f5:b9:c8:af:bd:da:72:3b:79:a3:1d:36: d3:b7:67:d2:39:65:d9:bd:63:0a:8a:0e:d7:41:c2: 0c:3c:de:15:f2:b8:43:fc:36:2e:9f:47:6c:9a:8d: ca:92:8b:0a:3c:56:06:71:90:8b:2e:66:09:5b:56: ae:f9:ca:24:d0:05:ef:a6:4a:e6:eb:0d:51:84:a5: 7a:c6:4e:79:cc:03:54:72:84:a4:1d:3b:e8:ac:e2: a3:43:40:85:29:4a:43:63:a8:31:de:20:fe:3b:64: 69:f4:45:43:e8:88:37:37:48:b2:f8:ed:a7:e2:7e: ca:3b:ac:1b:1f:db:2e:8f:27:1a:2e:69:99:78:0c: 79:4a:d3:9e:1d:48:e4:68:3a:55:07:51:ea:d2:57: 0d:0a:f9:98:1a:a2:ed:1c:48:72:b6:85:ac:df:ed: f7:06:45:c2:8a:a3:e2:70:95:6d:db:82:59:84:b2: b4:9f:b3:1e:47:61:db:c9:5f:5c:9d:03:31:2e:bc: 47:5e:ed:2a:ac:9c:cb:7b:79:47:06:3d:5d:05:40: d9:4f:cc:d6:26:1d:d8:d2:ef:72:f9:dd:a9:fc:2a: 0c:66:a9:97:52:a5:d8:ba:ff:f6:85:e5:0c:9e:d9: e1:f0:f3:d5:c0:3d:7b:57:83:1f:26:70:71:5e:7d: 84:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C5:9F:15:C4:7B:22:A4:A8:A0:06:B8:74:68:0F:92:4D:72:EE:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a5eff7b2-f77b-3a6f-953a-48c6eccb51de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 104.245.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:72:57:81:8f:c8:ad:97:37:ff:44:83:9d:b1:5c:fd:77:56: 9a:59:fb:d5:9b:65:75:4a:d5:70:99:5f:72:08:3d:08:05:e7: e7:ac:61:13:b1:ae:51:63:76:7c:ad:b4:e6:1e:70:5b:da:99: af:bf:bd:4c:d2:09:fd:28:11:a0:e5:b1:c1:53:91:f4:be:2b: e3:7e:0d:41:f1:a4:a0:63:c8:de:dd:08:54:47:a6:9d:dc:96: 69:1c:f1:3b:2c:a0:89:b7:f0:a2:20:36:08:14:c0:8d:16:77: 0c:90:6f:ec:d2:d5:04:ac:38:b2:7d:9a:de:3f:41:e7:3d:ab: 94:9a:64:84:78:90:7c:fe:30:da:20:f2:f0:10:89:33:57:41: cd:f3:0d:ea:d8:e8:b0:3b:ac:b5:d3:a2:db:a0:60:30:48:9c: 75:cf:9c:d3:d0:52:74:73:fb:8b:36:e5:7d:be:a6:38:14:6d: 10:cf:eb:b7:75:6a:f0:dd:68:c5:c7:af:90:31:59:b7:e0:97: 2c:99:06:03:aa:0c:17:57:fd:6a:6b:f7:21:0d:a0:61:98:8f: 69:01:9e:a4:9d:67:b1:9b:c6:fc:a5:3c:1a:3f:bf:3d:32:07: 1b:34:39:57:65:13:3d:49:4a:28:cc:34:af:f0:ef:44:45:6d: 0b:c3:b1:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlosxmk01jwh0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk NzkyMjI2OWMtZjVkNi00MDc2LTk5ZDItY2VmMjhlNmFiYmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDn1ucivvdpyO3mjHTbTt2fSOWXZvWMKig7X QcIMPN4V8rhD/DYun0dsmo3KkosKPFYGcZCLLmYJW1au+cok0AXvpkrm6w1RhKV6 xk55zANUcoSkHTvorOKjQ0CFKUpDY6gx3iD+O2Rp9EVD6Ig3N0iy+O2n4n7KO6wb H9sujycaLmmZeAx5StOeHUjkaDpVB1Hq0lcNCvmYGqLtHEhytoWs3+33BkXCiqPi cJVt24JZhLK0n7MeR2HbyV9cnQMxLrxHXu0qrJzLe3lHBj1dBUDZT8zWJh3Y0u9y +d2p/CoMZqmXUqXYuv/2heUMntnh8PPVwD17V4MfJnBxXn2EQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHFnxXEeyKkqKAGuHRoD5JNcu7rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvYTVlZmY3YjItZjc3Yi0z YTZmLTk1M2EtNDhjNmVjY2I1MWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaPU4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhyV4GPyK2XN/9Eg52xXP13VppZ+9WbZXVK1XCZX3IIPQgF5+esYROx rlFjdnyttOYecFvama+/vUzSCf0oEaDlscFTkfS+K+N+DUHxpKBjyN7dCFRHpp3c lmkc8TssoIm38KIgNggUwI0WdwyQb+zS1QSsOLJ9mt4/Qec9q5SaZIR4kHz+MNog 8vAQiTNXQc3zDerY6LA7rLXTotugYDBInHXPnNPQUnRz+4s25X2+pjgUbRDP67d1 avDdaMXHr5AxWbfglyyZBgOqDBdX/Wpr9yENoGGYj2kBnqSdZ7GbxvylPBo/vz0y Bxs0OVdlEz1JSijMNK/w70RFbQvDsRc= -----END CERTIFICATE-----Generated at Mon Aug 4 07:37:54 2025 by rpki-client