$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/c8847bd4-be8e-3fcb-aad9-cea490dfbb4e.roa File: c8847bd4-be8e-3fcb-aad9-cea490dfbb4e.roa (raw, json) Hash identifier: nExzsCxRzYj/utS5AwdUiqpQSB6cLL1UhabQLnfc48c= Subject key identifier: D4:B3:F2:77:C4:82:D8:7F:85:B4:8F:80:60:B7:14:B6:F8:8A:3D:A1 Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F43285849CE9A400A787CC62011A41400 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/c8847bd4-be8e-3fcb-aad9-cea490dfbb4e.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 46408 IP address blocks: 104.255.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:40:0a:78:7c:c6:20:11:a4:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=14628a45-a6af-490e-91f2-6f3b19af7f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:08:81:23:f2:53:db:14:6d:5f:42:32:a6:d2: 5d:97:f4:32:9a:5d:5d:81:8b:d0:f2:0d:9e:29:1f: 04:dd:c3:60:84:a9:2c:ca:9d:57:10:c4:c6:6e:00: ec:98:d4:52:4b:e8:f1:90:1f:5b:77:f0:58:af:86: 9a:57:38:c8:e2:63:56:83:68:9a:dd:ec:15:6c:bd: c0:94:51:82:e7:1c:35:f4:ab:92:9d:27:86:05:54: f7:4c:3e:17:59:1f:8f:d4:17:7a:fb:29:26:93:84: 05:17:08:4f:ef:2f:e2:33:52:11:7e:b0:54:af:e7: 37:f3:c8:e8:0c:4f:62:64:cf:88:37:9d:ab:66:10: 5e:03:4d:f5:e3:65:a1:c4:8e:c7:35:19:82:a4:f2: e9:13:c4:f4:b7:8d:30:82:5d:bb:8f:1c:39:15:6e: 5a:a4:79:07:8c:01:cd:25:c7:cc:b2:ff:c4:63:32: fb:72:ae:04:0a:6d:10:e4:43:3a:0e:7c:57:b1:4e: f7:8e:28:72:46:ea:a5:20:1e:50:28:93:4f:ee:9c: 25:86:dc:f1:5d:08:59:cd:fd:89:43:c2:e0:8b:77: ee:97:d2:55:4a:32:16:0b:48:47:c6:9f:4f:e3:05: 09:d0:bf:32:09:a2:6e:93:a4:63:fa:7b:fa:4d:f3: 47:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B3:F2:77:C4:82:D8:7F:85:B4:8F:80:60:B7:14:B6:F8:8A:3D:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/c8847bd4-be8e-3fcb-aad9-cea490dfbb4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv4: 104.255.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:13:d7:a6:eb:bb:f9:37:9b:c7:ed:4d:cf:21:7e:a5:d4:6f: 51:4f:b5:cc:22:e0:75:48:64:83:33:20:a5:c3:84:28:c3:b4: 5a:b0:36:ee:1a:e6:0b:a9:48:28:e0:69:55:03:d4:f8:6e:ce: 21:f1:cd:22:de:7d:6f:39:17:44:45:42:59:e0:fe:ad:a2:fb: 4b:13:78:2d:5a:1c:d6:a6:d7:7b:1a:7a:76:88:6f:dd:f1:62: 26:36:8f:72:cd:e8:60:23:e2:67:72:95:d6:2b:83:87:5a:84: d5:cc:54:51:d2:5c:a0:0b:5e:78:a4:cc:4f:dc:fa:55:76:c7: b8:94:26:d5:b6:85:d1:10:bd:88:d0:83:3a:d0:08:6b:56:e3: d8:10:ed:99:7f:32:09:1c:4e:9e:e7:b8:50:78:45:59:56:ff: f1:5e:33:6e:e1:73:60:0c:f9:32:08:b2:d0:02:27:b7:ac:91: d3:57:c6:19:3f:f5:b6:e0:a6:d1:6b:74:97:cb:a4:1a:63:dc: 06:cd:26:84:7d:95:96:35:49:b8:e6:e4:20:95:60:d1:57:23: 85:31:3e:37:f2:6f:3a:a5:89:10:51:b9:9f:76:61:07:4b:16: 5d:de:f8:49:47:12:10:3d:6f:53:17:f3:d4:bf:a9:d2:67:3f: 73:71:74:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmkAKeHzGIBGkFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MTQ2MjhhNDUtYTZhZi00OTBlLTkxZjItNmYzYjE5YWY3ZjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAiBI/JT2xRtX0IyptJdl/Qyml1dgYvQ8g2e KR8E3cNghKksyp1XEMTGbgDsmNRSS+jxkB9bd/BYr4aaVzjI4mNWg2ia3ewVbL3A lFGC5xw19KuSnSeGBVT3TD4XWR+P1Bd6+ykmk4QFFwhP7y/iM1IRfrBUr+c388jo DE9iZM+IN52rZhBeA03142WhxI7HNRmCpPLpE8T0t40wgl27jxw5FW5apHkHjAHN JcfMsv/EYzL7cq4ECm0Q5EM6DnxXsU73jihyRuqlIB5QKJNP7pwlhtzxXQhZzf2J Q8Lgi3ful9JVSjIWC0hHxp9P4wUJ0L8yCaJuk6Rj+nv6TfNHOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSz8nfEgth/hbSPgGC3FLb4ij2hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvYzg4NDdiZDQtYmU4ZS0z ZmNiLWFhZDktY2VhNDkwZGZiYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMwT16bru/k3m8ftTc8hfqXUb1FPtcwi4HVIZIMzIKXDhCjDtFqwNu4a 5gupSCjgaVUD1PhuziHxzSLefW85F0RFQlng/q2i+0sTeC1aHNam13saenaIb93x YiY2j3LN6GAj4mdyldYrg4dahNXMVFHSXKALXnikzE/c+lV2x7iUJtW2hdEQvYjQ gzrQCGtW49gQ7Zl/MgkcTp7nuFB4RVlW//FeM27hc2AM+TIIstACJ7eskdNXxhk/ 9bbgptFrdJfLpBpj3AbNJoR9lZY1Sbjm5CCVYNFXI4UxPjfybzqliRBRuZ92YQdL Fl3e+ElHEhA9b1MX89S/qdJnP3NxdH0= -----END CERTIFICATE-----Generated at Mon Jun 16 23:06:55 2025 by rpki-client