$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/512d584a-aed4-3b6a-9c59-eb585416fe6e.roa File: 512d584a-aed4-3b6a-9c59-eb585416fe6e.roa (raw, json) Hash identifier: ooFq3fL92vxJj6/Rl+N6K7DRVCBrKClH3HibfwEA0ic= Subject key identifier: 88:45:F7:23:C0:B3:75:9A:32:E3:D7:9E:8E:E3:2E:06:99:8D:AC:3E Certificate issuer: /CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d Certificate serial: 010D0C9F4328584AB91B91342D6EFAB179989600 Authority key identifier: F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/512d584a-aed4-3b6a-9c59-eb585416fe6e.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 399195 IP address blocks: 104.37.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:91:34:2d:6e:fa:b1:79:98:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=9a15962c-12cb-499a-a5f8-843f06c44b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1b:c7:f0:f1:13:1a:4d:6d:a0:85:ae:3c:9b: b2:45:90:90:32:99:9f:9d:ff:92:0d:26:b6:3b:4f: c0:02:0e:e8:5e:7b:af:3e:da:0a:f8:71:65:bf:dc: dc:fc:05:d2:e2:bf:ed:4f:1c:ec:a6:f7:f1:f7:ae: 14:de:c4:b0:9d:e5:28:2a:88:38:95:9b:20:48:22: 7f:b7:1f:f4:f3:03:ba:8e:fd:d8:5c:17:5b:23:27: 63:e9:b4:d0:1b:c2:a4:3d:f2:85:e5:6c:27:18:ec: 79:3a:68:a3:ab:ff:a8:ad:87:ab:06:4d:96:3d:2f: d1:14:bd:17:ea:6b:e7:e6:aa:a5:43:a5:87:ad:15: 42:a8:6b:87:cc:3c:99:87:6f:62:a1:4d:c0:66:b0: 2f:9d:2b:78:29:84:b9:e8:56:18:09:23:29:19:38: 40:b7:bf:e4:25:b2:87:ff:34:df:f2:b2:a0:10:5f: db:66:17:3c:fa:80:db:16:1e:c2:37:35:32:57:a3: 64:dc:89:e9:8e:78:ad:e6:4b:c3:1f:0f:bc:1f:1c: f6:7d:75:a0:58:76:17:e3:53:63:df:11:8a:50:42: e4:b1:f5:f6:be:3b:49:2b:42:4d:14:ab:1a:dc:95: 28:2b:7c:1a:93:b8:69:c3:32:f8:d4:03:c9:07:23: ff:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:45:F7:23:C0:B3:75:9A:32:E3:D7:9E:8E:E3:2E:06:99:8D:AC:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/512d584a-aed4-3b6a-9c59-eb585416fe6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl X509v3 Authority Key Identifier: keyid:F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer sbgp-ipAddrBlock: critical IPv4: 104.37.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:ea:cc:87:eb:91:d9:4f:ec:0c:e8:4b:91:cc:28:c6:aa:3b: e1:47:a7:26:21:9a:ab:ed:40:f5:d1:a9:45:1c:0f:ed:31:f8: c0:b9:e4:23:3c:cd:9f:0c:48:c9:6d:ec:3e:66:9a:4e:37:d2: 0a:45:b1:f9:f5:38:52:a9:36:98:0e:b9:a1:b9:74:3b:83:e8: 5f:cb:1b:ca:8a:30:37:f3:45:be:dd:fe:f2:98:b6:aa:12:67: 3f:75:9e:dc:61:e8:b7:34:20:e0:0c:91:c8:e6:1c:53:8c:fa: 89:20:0d:00:76:10:0a:c2:a5:83:6f:2b:14:6f:65:f4:23:d2: d7:a9:87:75:a9:50:f7:ff:2f:7c:8b:15:04:0b:02:1d:9e:d6: 00:11:c6:25:e2:c7:4e:91:25:2d:d6:1d:99:51:d6:e4:01:4e: 89:1d:ff:d6:94:e1:30:2d:2b:f8:4f:2e:9d:8a:58:97:03:c5: f2:60:6d:1e:46:30:83:4c:12:16:e7:00:b4:7d:0d:ce:11:b7: 44:64:15:42:4d:52:d9:54:94:08:38:68:17:16:13:1b:61:67: da:cc:17:e4:0d:3e:8a:35:95:2d:b1:a5:81:be:e4:f5:10:ef: 5d:54:58:15:1f:ab:e5:a3:61:5f:02:d6:62:ce:dd:51:b4:e2: 02:ba:75:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G5E0LW76sXmYlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjNiM2ZjZDktZjkwZC00ZjIwLTk2ZWMtZDRkMzI4NTE3 YzBkMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk OWExNTk2MmMtMTJjYi00OTlhLWE1ZjgtODQzZjA2YzQ0YjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxvH8PETGk1toIWuPJuyRZCQMpmfnf+SDSa2 O0/AAg7oXnuvPtoK+HFlv9zc/AXS4r/tTxzspvfx964U3sSwneUoKog4lZsgSCJ/ tx/08wO6jv3YXBdbIydj6bTQG8KkPfKF5WwnGOx5Omijq/+orYerBk2WPS/RFL0X 6mvn5qqlQ6WHrRVCqGuHzDyZh29ioU3AZrAvnSt4KYS56FYYCSMpGThAt7/kJbKH /zTf8rKgEF/bZhc8+oDbFh7CNzUyV6Nk3Inpjnit5kvDHw+8Hxz2fXWgWHYX41Nj 3xGKUELksfX2vjtJK0JNFKsa3JUoK3wak7hpwzL41APJByP/VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhF9yPAs3WaMuPXno7jLgaZjaw+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82M2Iz ZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQzMjg1MTdjMGQvNTEyZDU4NGEtYWVkNC0z YjZhLTljNTktZWI1ODU0MTZmZTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjNiM2ZjZDktZjkwZC00ZjIwLTk2 ZWMtZDRkMzI4NTE3YzBkLzYzYjNmY2Q5LWY5MGQtNGYyMC05NmVjLWQ0ZDMyODUx N2MwZC5jcmwwHwYDVR0jBBgwFoAU85szvqOxj6FrnsAlnz3NKvxiOA0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82M2IzZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQz Mjg1MTdjMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaCXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXqzIfrkdlP7AzoS5HMKMaqO+FHpyYhmqvtQPXRqUUcD+0x+MC55CM8 zZ8MSMlt7D5mmk430gpFsfn1OFKpNpgOuaG5dDuD6F/LG8qKMDfzRb7d/vKYtqoS Zz91ntxh6Lc0IOAMkcjmHFOM+okgDQB2EArCpYNvKxRvZfQj0teph3WpUPf/L3yL FQQLAh2e1gARxiXix06RJS3WHZlR1uQBTokd/9aU4TAtK/hPLp2KWJcDxfJgbR5G MINMEhbnALR9Dc4Rt0RkFUJNUtlUlAg4aBcWExthZ9rMF+QNPoo1lS2xpYG+5PUQ 711UWBUfq+WjYV8C1mLO3VG04gK6dVU= -----END CERTIFICATE-----Generated at Mon Aug 4 18:31:26 2025 by rpki-client