$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/ae357901-63bf-3b7a-a7ed-8cfa2bc2f085.roa File: ae357901-63bf-3b7a-a7ed-8cfa2bc2f085.roa (raw, json) Hash identifier: +ID+DL/2TT3JXCfVLXK6mkaEUQ2sbDwEmfgd+6QZsj8= Subject key identifier: E2:9A:9C:8D:8B:29:01:6D:CA:D7:EC:FE:80:AC:A0:A8:B5:2C:C1:3B Certificate issuer: /CN=2775f7c3-c238-47d5-98c9-835a28d9095e Certificate serial: 010D0C9F4328584AECC13F7E48CA27E60CEC8300 Authority key identifier: D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/ae357901-63bf-3b7a-a7ed-8cfa2bc2f085.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 401104 IP address blocks: 104.167.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:3f:7e:48:ca:27:e6:0c:ec:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2775f7c3-c238-47d5-98c9-835a28d9095e Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=d9095366-08a3-4611-b91a-4cc524c6c141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:23:b1:44:b3:17:08:ae:15:6e:a0:5e:08:6a: 49:c4:2a:9c:ac:12:6f:6f:2a:2f:54:24:ac:7b:01: 30:c1:21:dc:9f:da:39:6c:51:a3:6c:be:6f:43:e7: bd:5a:f8:f6:4f:4b:09:f2:85:f6:05:93:29:c8:35: 89:da:4a:aa:79:42:2e:98:19:99:d8:49:2c:97:ed: dc:4a:cc:75:6a:be:62:bf:88:56:51:9a:9e:6c:a0: b7:77:d5:d0:c4:03:7a:95:c2:05:f6:94:59:48:8c: 79:e5:c5:c3:ed:d8:d6:65:64:cf:1a:62:03:01:0c: 80:d5:34:55:10:db:1f:0f:0a:bc:32:96:e2:87:a7: 3f:a5:b2:f5:2c:3b:22:4d:9a:a1:c4:ad:7b:d4:11: 93:82:6e:44:b6:d8:fb:0c:27:f3:b4:d3:7e:5c:72: 11:a6:ca:f2:c4:6d:bc:d1:3a:e8:92:9d:59:81:ee: de:d7:d3:1e:f1:9d:18:b6:d4:ca:57:69:69:f6:b4: d9:7a:5e:66:32:81:3b:d0:21:18:aa:c2:2e:29:8f: a4:bb:9f:d5:30:9c:1c:2e:b4:87:37:fb:4e:56:26: 40:3b:e0:9c:d5:f0:83:8d:48:e2:76:82:72:c2:45: 59:f5:87:8d:a3:0d:c3:05:7f:18:6b:29:63:56:6a: 5e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9A:9C:8D:8B:29:01:6D:CA:D7:EC:FE:80:AC:A0:A8:B5:2C:C1:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/ae357901-63bf-3b7a-a7ed-8cfa2bc2f085.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl X509v3 Authority Key Identifier: keyid:D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer sbgp-ipAddrBlock: critical IPv4: 104.167.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:24:44:c3:73:87:f5:e8:55:0d:ff:38:09:f9:df:77:7a:47: 94:b3:d3:dc:c5:de:f8:41:c1:a9:12:46:64:8d:35:67:c8:ff: c8:19:42:80:34:b1:f8:43:ce:46:a3:47:b2:be:cc:a1:14:a9: d9:14:2a:26:e5:09:a0:61:d7:a8:8b:70:cb:02:b6:d2:6c:8b: 2f:47:e4:24:df:23:ce:e5:47:8d:cf:50:3a:f8:86:ae:c2:68: c4:5d:cd:4c:7d:99:82:b6:54:7e:3a:fe:5d:91:c2:c0:d4:6f: 0c:5d:f1:2e:32:40:04:b0:03:8a:a8:42:49:0b:c9:8f:c8:16: f7:0a:c4:1d:60:02:28:0b:ca:a2:a8:58:05:c0:4f:cd:b4:5f: 68:35:df:a0:2d:4d:4b:52:eb:7b:57:9b:91:6a:8f:33:6f:cc: 3d:b5:ab:c8:01:1d:54:ce:99:75:08:6e:b7:8b:41:a9:7a:d0: 14:d2:2d:41:c1:99:29:1c:96:ca:6f:2a:87:27:46:8f:2e:89: 0b:04:3c:11:a2:36:b0:20:dc:db:9f:42:00:ff:ab:60:55:45: ca:30:9f:60:99:8d:12:27:91:2c:ec:9a:0c:22:1e:4c:4a:cb: ef:91:3c:89:37:f5:6c:75:5e:3c:55:bd:a6:59:32:49:e7:c5: d5:3a:c7:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswT9+SMon5gzsgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjc3NWY3YzMtYzIzOC00N2Q1LTk4YzktODM1YTI4ZDkw OTVlMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZDkwOTUzNjYtMDhhMy00NjExLWI5MWEtNGNjNTI0YzZjMTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiOxRLMXCK4VbqBeCGpJxCqcrBJvbyovVCSs ewEwwSHcn9o5bFGjbL5vQ+e9Wvj2T0sJ8oX2BZMpyDWJ2kqqeUIumBmZ2Eksl+3c Ssx1ar5iv4hWUZqebKC3d9XQxAN6lcIF9pRZSIx55cXD7djWZWTPGmIDAQyA1TRV ENsfDwq8Mpbih6c/pbL1LDsiTZqhxK171BGTgm5Ettj7DCfztNN+XHIRpsryxG28 0Trokp1Zge7e19Me8Z0YttTKV2lp9rTZel5mMoE70CEYqsIuKY+ku5/VMJwcLrSH N/tOViZAO+Cc1fCDjUjidoJywkVZ9YeNow3DBX8YayljVmpehQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKanI2LKQFtytfs/oCsoKi1LME7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNzc1 ZjdjMy1jMjM4LTQ3ZDUtOThjOS04MzVhMjhkOTA5NWUvYWUzNTc5MDEtNjNiZi0z YjdhLWE3ZWQtOGNmYTJiYzJmMDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjc3NWY3YzMtYzIzOC00N2Q1LTk4 YzktODM1YTI4ZDkwOTVlLzI3NzVmN2MzLWMyMzgtNDdkNS05OGM5LTgzNWEyOGQ5 MDk1ZS5jcmwwHwYDVR0jBBgwFoAU0STfzH9bgNKN7P7ujM9SM461IUQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNzc1ZjdjMy1jMjM4LTQ3ZDUtOThjOS04MzVh MjhkOTA5NWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKfxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACskRMNzh/XoVQ3/OAn533d6R5Sz09zF3vhBwakSRmSNNWfI/8gZQoA0 sfhDzkajR7K+zKEUqdkUKiblCaBh16iLcMsCttJsiy9H5CTfI87lR43PUDr4hq7C aMRdzUx9mYK2VH46/l2RwsDUbwxd8S4yQASwA4qoQkkLyY/IFvcKxB1gAigLyqKo WAXAT820X2g136AtTUtS63tXm5FqjzNvzD21q8gBHVTOmXUIbreLQal60BTSLUHB mSkclspvKocnRo8uiQsEPBGiNrAg3NufQgD/q2BVRcown2CZjRInkSzsmgwiHkxK y++RPIk39Wx1XjxVvaZZMknnxdU6xyY= -----END CERTIFICATE-----Generated at Sat Aug 23 21:58:39 2025 by rpki-client