$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/834a3b57-5c33-37e2-a602-f694461eb7c5.roa File: 834a3b57-5c33-37e2-a602-f694461eb7c5.roa (raw, json) Hash identifier: WMvhNfVi1XT3nmZ+YSTaRpsbWEDK77tDj0iLCTXcuhM= Subject key identifier: 6C:DC:3D:7D:84:7D:36:82:0C:81:F6:B2:F7:F1:08:08:75:AC:33:F5 Certificate issuer: /CN=b32ded34-63dd-4272-9a22-5524e5e4ab15 Certificate serial: 010D0C9F4328584AADF10C7D2C9958A1BA5E8838 Authority key identifier: 95:F6:91:74:F3:9D:AA:FF:0E:3E:47:55:39:37:38:C3:90:74:6B:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/834a3b57-5c33-37e2-a602-f694461eb7c5.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 104.171.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/b32ded34-63dd-4272-9a22-5524e5e4ab15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/b32ded34-63dd-4272-9a22-5524e5e4ab15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:0c:7d:2c:99:58:a1:ba:5e:88:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32ded34-63dd-4272-9a22-5524e5e4ab15 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=2672e1a7-e825-4d4f-8eef-0292f7be52fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:56:75:11:ed:c8:c7:9a:cb:e9:fa:fd:ed:07: 74:79:75:be:9d:55:80:a7:39:23:c3:85:3f:b0:23: 1f:1c:93:21:d0:1f:f5:f8:ea:f4:20:24:52:83:57: 21:f3:96:2a:5d:fd:50:e6:21:a1:7a:5d:6d:5f:e7: 06:5a:22:39:ef:1f:3e:67:55:f7:b5:37:02:d2:0f: 77:02:65:e8:ad:8f:95:c5:d5:64:a5:e6:26:4b:02: 55:28:48:f4:bb:ba:82:01:48:b1:16:eb:0f:41:74: c0:31:4a:ab:19:b7:ad:a4:6f:24:8c:1b:a8:46:72: b8:3f:cc:14:06:b7:75:df:ab:8d:8a:51:24:8d:ee: 1c:5e:bc:01:65:6a:cd:be:34:f6:27:35:30:c5:2e: 71:b2:b4:ae:f8:c3:b1:bb:dc:c0:84:26:d4:ac:5d: 2c:ea:ff:9b:06:e8:f8:f5:1c:f4:d6:2d:49:c8:21: 52:e0:64:13:ca:ac:c8:e3:4d:5e:2f:a2:da:34:87: 4a:f2:f9:a9:c4:b5:f0:52:a2:3b:92:d9:ac:64:3b: 58:87:09:ee:37:cc:58:f9:41:b1:9a:83:16:eb:60: 26:e3:27:b1:17:6d:76:0b:8c:e1:59:6c:b0:db:05: 3d:cf:3b:a6:a0:4a:1a:3f:5f:eb:6a:e3:cc:fc:d7: b8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DC:3D:7D:84:7D:36:82:0C:81:F6:B2:F7:F1:08:08:75:AC:33:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/834a3b57-5c33-37e2-a602-f694461eb7c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/b32ded34-63dd-4272-9a22-5524e5e4ab15.crl X509v3 Authority Key Identifier: keyid:95:F6:91:74:F3:9D:AA:FF:0E:3E:47:55:39:37:38:C3:90:74:6B:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15.cer sbgp-ipAddrBlock: critical IPv4: 104.171.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:6a:5e:f3:c5:98:ce:4c:d3:7c:e2:08:38:5f:f4:8b:52:92: 14:67:c8:b3:9a:4c:a1:d3:92:36:e5:95:90:68:76:82:3d:18: 69:3a:6e:d6:87:3b:73:7e:57:09:0d:7f:79:80:17:2b:7c:6e: 3f:4d:c3:f3:98:75:60:92:58:4f:88:16:a1:64:7f:75:1a:0f: 23:83:76:f3:69:5e:af:40:bc:45:56:1b:a2:ae:32:04:66:ea: 2c:98:4f:8d:12:32:79:36:36:b7:bc:a9:1c:d4:65:ef:ab:cd: 02:2b:01:09:8b:3a:40:10:82:30:0e:59:8f:56:72:4b:09:94: 1a:4e:d4:26:ab:9b:53:3b:7d:a5:9d:c9:3b:39:6c:73:f2:26: 40:17:6e:d0:88:e0:8b:dc:69:9a:1f:1a:34:0f:ae:22:84:af: 88:76:df:4c:40:3b:92:61:19:2e:dc:4b:41:21:b6:0c:5d:42: ac:fb:bf:d7:98:35:f2:da:41:55:39:27:93:c7:47:44:b5:1f: e0:72:72:22:d2:3b:3a:82:50:7d:01:74:fd:6c:76:32:b9:21: 7a:8f:3a:d6:aa:f9:b6:7c:e8:20:19:eb:86:43:e3:27:3f:f4: 9b:29:c5:35:01:89:78:ea:1c:38:57:2c:b4:7c:b7:92:85:bf: cf:d6:36:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8Qx9LJlYobpeiDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjMyZGVkMzQtNjNkZC00MjcyLTlhMjItNTUyNGU1ZTRh YjE1MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk MjY3MmUxYTctZTgyNS00ZDRmLThlZWYtMDI5MmY3YmU1MmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFZ1Ee3Ix5rL6fr97Qd0eXW+nVWApzkjw4U/ sCMfHJMh0B/1+Or0ICRSg1ch85YqXf1Q5iGhel1tX+cGWiI57x8+Z1X3tTcC0g93 AmXorY+VxdVkpeYmSwJVKEj0u7qCAUixFusPQXTAMUqrGbetpG8kjBuoRnK4P8wU Brd136uNilEkje4cXrwBZWrNvjT2JzUwxS5xsrSu+MOxu9zAhCbUrF0s6v+bBuj4 9Rz01i1JyCFS4GQTyqzI401eL6LaNIdK8vmpxLXwUqI7ktmsZDtYhwnuN8xY+UGx moMW62Am4yexF212C4zhWWyw2wU9zzumoEoaP1/rauPM/Ne4rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzcPX2EfTaCDIH2svfxCAh1rDP1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMzJk ZWQzNC02M2RkLTQyNzItOWEyMi01NTI0ZTVlNGFiMTUvODM0YTNiNTctNWMzMy0z N2UyLWE2MDItZjY5NDQ2MWViN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjMyZGVkMzQtNjNkZC00MjcyLTlh MjItNTUyNGU1ZTRhYjE1L2IzMmRlZDM0LTYzZGQtNDI3Mi05YTIyLTU1MjRlNWU0 YWIxNS5jcmwwHwYDVR0jBBgwFoAUlfaRdPOdqv8OPkdVOTc4w5B0a5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMzJkZWQzNC02M2RkLTQyNzItOWEyMi01NTI0 ZTVlNGFiMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKvGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABqXvPFmM5M03ziCDhf9ItSkhRnyLOaTKHTkjbllZBodoI9GGk6btaH O3N+VwkNf3mAFyt8bj9Nw/OYdWCSWE+IFqFkf3UaDyODdvNpXq9AvEVWG6KuMgRm 6iyYT40SMnk2Nre8qRzUZe+rzQIrAQmLOkAQgjAOWY9WcksJlBpO1Carm1M7faWd yTs5bHPyJkAXbtCI4IvcaZofGjQPriKEr4h230xAO5JhGS7cS0EhtgxdQqz7v9eY NfLaQVU5J5PHR0S1H+ByciLSOzqCUH0BdP1sdjK5IXqPOtaq+bZ86CAZ64ZD4yc/ 9JspxTUBiXjqHDhXLLR8t5KFv8/WNjo= -----END CERTIFICATE-----Generated at Tue Aug 5 17:19:59 2025 by rpki-client