$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6edf1958-c03a-4505-9a75-2b1c81b948da/1976bedf-36e8-31fa-b46d-5faa8dd05959.roa File: 1976bedf-36e8-31fa-b46d-5faa8dd05959.roa (raw, json) Hash identifier: fS7r4tLJ1otv1uDdszZvG8bYli3Tkd0m+V8YUhEGbhM= Subject key identifier: 33:B2:D9:64:66:15:2B:AF:81:F7:C3:2C:AE:BD:76:F2:C1:E5:C4:BA Certificate issuer: /CN=6edf1958-c03a-4505-9a75-2b1c81b948da Certificate serial: 010D0C9F4328584AF521319702DAD5B228F23500 Authority key identifier: B2:0D:E6:D6:7D:36:5C:25:D3:34:7A:54:83:44:FF:F9:FE:49:1D:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6edf1958-c03a-4505-9a75-2b1c81b948da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6edf1958-c03a-4505-9a75-2b1c81b948da/1976bedf-36e8-31fa-b46d-5faa8dd05959.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 3043 IP address blocks: 104.251.119.0/24 maxlen: 24 104.251.120.0/24 maxlen: 24 2607:f8b8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6edf1958-c03a-4505-9a75-2b1c81b948da/6edf1958-c03a-4505-9a75-2b1c81b948da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6edf1958-c03a-4505-9a75-2b1c81b948da/6edf1958-c03a-4505-9a75-2b1c81b948da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6edf1958-c03a-4505-9a75-2b1c81b948da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:31:97:02:da:d5:b2:28:f2:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6edf1958-c03a-4505-9a75-2b1c81b948da Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=07ab79d3-41b5-4f09-b799-aa043f7407fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b5:b9:7e:12:92:4e:aa:74:98:f1:14:dc:0d: 8a:90:57:7a:df:a8:8a:89:6d:c8:63:3f:77:ad:09: f3:5e:c7:74:79:c9:cb:64:15:62:0e:e2:98:07:c8: 73:de:43:69:1e:4c:e9:e8:74:34:1b:1b:69:98:44: 47:83:89:d9:55:8b:9e:a5:7e:0e:bb:ad:ae:25:0d: a8:ca:7d:a5:bc:d2:f5:98:c3:4f:1a:c1:ea:c9:39: 3d:74:91:c1:ac:3a:07:2e:d1:4f:54:f7:2a:1a:1f: 72:78:04:03:8f:61:aa:41:91:c4:3f:d5:73:b6:83: 0f:bc:6b:8c:68:63:fb:3a:6c:6d:57:cb:1d:00:58: cf:a2:93:52:c4:a2:35:d5:87:8a:27:2c:f2:91:9c: db:e7:a9:a2:9f:45:8f:ac:33:b5:b5:a2:cb:46:bb: 96:c9:82:eb:63:ce:6a:9f:3b:3b:1c:49:59:a6:4a: 50:27:4b:f5:b5:c2:73:c9:ed:17:1c:cb:78:c2:aa: c8:92:a0:45:34:d5:32:76:a8:6a:e1:af:c6:d8:94: cb:4e:e9:58:03:e8:80:a4:94:9c:22:c2:69:b8:e3: ba:13:98:8e:8c:d3:6c:e1:3a:f8:50:8b:b9:8c:e1: 75:df:6e:5d:b0:d8:e6:d0:9a:a4:20:2e:f2:4f:5e: 9e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B2:D9:64:66:15:2B:AF:81:F7:C3:2C:AE:BD:76:F2:C1:E5:C4:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6edf1958-c03a-4505-9a75-2b1c81b948da/1976bedf-36e8-31fa-b46d-5faa8dd05959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6edf1958-c03a-4505-9a75-2b1c81b948da/6edf1958-c03a-4505-9a75-2b1c81b948da.crl X509v3 Authority Key Identifier: keyid:B2:0D:E6:D6:7D:36:5C:25:D3:34:7A:54:83:44:FF:F9:FE:49:1D:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6edf1958-c03a-4505-9a75-2b1c81b948da.cer sbgp-ipAddrBlock: critical IPv4: 104.251.119.0-104.251.120.255 IPv6: 2607:f8b8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:b3:a0:52:fc:cf:67:16:1f:02:e6:6f:de:fe:c3:53:99:eb: bc:47:f8:9d:6f:2a:3b:bb:a5:36:3a:ca:c0:b6:60:04:de:7c: 27:36:3a:71:86:0a:6f:f7:34:32:b9:b2:02:55:b2:ba:01:d7: 24:53:fd:d2:ec:d9:cf:33:31:40:06:8b:20:3d:3f:af:ec:b4: fb:86:5b:a0:69:69:7f:e2:c0:39:dd:30:4f:c2:53:63:c5:6b: 8a:1d:b7:90:2e:4b:85:81:52:5b:51:52:b5:09:54:b1:f8:12: 03:08:43:a5:9f:70:5b:f6:83:a8:da:e7:3b:20:51:6e:13:a9: 82:dc:72:cc:34:fc:e8:23:f1:10:ca:f8:80:51:56:70:c8:66: 89:67:04:97:a4:c8:cd:59:d4:b2:41:ef:6f:8a:5b:2b:ef:c2: d3:f1:12:16:b4:d7:e1:35:d5:02:e3:b2:a5:2b:eb:02:cf:4d: d5:ed:e1:2d:5e:d6:3e:3f:e5:d0:81:06:3c:c9:79:c4:ba:05: a8:7f:bb:f0:31:dd:f6:99:18:16:e9:99:76:37:fd:13:4e:bb: 51:76:ae:06:52:e9:2e:e8:83:68:81:81:c6:97:fc:32:ef:eb: 8c:52:cb:b4:5b:f9:b6:0b:3d:89:6b:05:01:f5:8a:1e:bd:70: bc:3f:cd:0e -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEr1ITGXAtrVsijyNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVkZjE5NTgtYzAzYS00NTA1LTlhNzUtMmIxYzgxYjk0 OGRhMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MDdhYjc5ZDMtNDFiNS00ZjA5LWI3OTktYWEwNDNmNzQwN2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LW5fhKSTqp0mPEU3A2KkFd636iKiW3IYz93 rQnzXsd0ecnLZBViDuKYB8hz3kNpHkzp6HQ0GxtpmERHg4nZVYuepX4Ou62uJQ2o yn2lvNL1mMNPGsHqyTk9dJHBrDoHLtFPVPcqGh9yeAQDj2GqQZHEP9VztoMPvGuM aGP7OmxtV8sdAFjPopNSxKI11YeKJyzykZzb56min0WPrDO1taLLRruWyYLrY85q nzs7HElZpkpQJ0v1tcJzye0XHMt4wqrIkqBFNNUydqhq4a/G2JTLTulYA+iApJSc IsJpuOO6E5iOjNNs4Tr4UIu5jOF1325dsNjm0JqkIC7yT16eXQIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFDOy2WRmFSuvgffDLK69dvLB5cS6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ZWRm MTk1OC1jMDNhLTQ1MDUtOWE3NS0yYjFjODFiOTQ4ZGEvMTk3NmJlZGYtMzZlOC0z MWZhLWI0NmQtNWZhYThkZDA1OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmVkZjE5NTgtYzAzYS00NTA1LTlh NzUtMmIxYzgxYjk0OGRhLzZlZGYxOTU4LWMwM2EtNDUwNS05YTc1LTJiMWM4MWI5 NDhkYS5jcmwwHwYDVR0jBBgwFoAUsg3m1n02XCXTNHpUg0T/+f5JHZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82ZWRmMTk1OC1jMDNhLTQ1MDUtOWE3NS0yYjFj ODFiOTQ4ZGEuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBABo+3cD BABo+3gwDQQCAAIwBwMFACYH+LgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADLOgUvzPZxYfAuZv3v7DU5nr vEf4nW8qO7ulNjrKwLZgBN58JzY6cYYKb/c0MrmyAlWyugHXJFP90uzZzzMxQAaL ID0/r+y0+4ZboGlpf+LAOd0wT8JTY8Vrih23kC5LhYFSW1FStQlUsfgSAwhDpZ9w W/aDqNrnOyBRbhOpgtxyzDT86CPxEMr4gFFWcMhmiWcEl6TIzVnUskHvb4pbK+/C 0/ESFrTX4TXVAuOypSvrAs9N1e3hLV7WPj/l0IEGPMl5xLoFqH+78DHd9pkYFumZ djf9E067UXauBlLpLuiDaIGBxpf8Mu/rjFLLtFv5tgs9iWsFAfWKHr1wvD/NDg== -----END CERTIFICATE-----Generated at Sun Aug 24 04:08:51 2025 by rpki-client