$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/0a18cb35-1200-3de5-91cf-435418df7565.roa File: 0a18cb35-1200-3de5-91cf-435418df7565.roa (raw, json) Hash identifier: 37F765R7s2vU5Ad66afM12WrJVuf7Eq7JSKmBcz3Dho= Subject key identifier: BC:5F:E0:00:01:A6:8C:14:C4:F7:66:74:F2:6B:05:65:87:55:63:A5 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584AECC1492EEF5609CC7E82F680 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/0a18cb35-1200-3de5-91cf-435418df7565.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 21743 IP address blocks: 104.247.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:49:2e:ef:56:09:cc:7e:82:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=a765824d-4854-4c70-beae-62f42bd1781d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ff:b3:37:e0:74:8d:55:7a:27:2d:b4:ab:a1: 28:2e:21:ab:11:93:ba:5d:8e:1a:cf:81:bf:5b:eb: ae:4d:33:e2:fc:8a:68:53:80:32:4b:51:86:0e:6e: 5e:9f:c7:f4:72:5d:28:51:69:83:8c:e5:f1:75:92: 57:17:a6:78:c5:9e:d7:6e:55:99:d9:cf:41:65:c4: cb:44:e8:57:4a:29:73:2e:1a:7f:ed:ca:6c:22:5a: 3a:9e:ad:47:b6:88:d8:e6:c4:2b:f2:a1:da:b0:5e: 6a:30:54:23:47:78:28:9d:8b:40:31:52:0a:78:4a: 29:21:7e:de:8a:3a:09:4a:2f:2e:65:66:01:a1:be: 4e:d0:b0:9b:23:ed:d6:e4:e4:51:d4:b2:b1:6c:29: d0:61:db:e7:66:d3:c1:4d:7f:0f:8e:f3:29:6a:e5: 25:62:2b:4a:c2:63:68:f3:25:1f:d9:a0:ed:ec:3b: 0a:5d:0d:30:d4:c3:d5:6e:38:9c:ca:0d:d5:68:eb: a2:a3:20:d7:99:6f:57:3d:ea:0b:23:f2:47:6b:ba: 97:ed:11:0c:d8:30:63:31:6d:7e:2d:27:22:75:63: 69:14:c4:f5:ee:4b:02:e2:25:42:8a:5e:bd:3c:a2: 41:c5:b5:6b:d1:4f:11:da:e3:69:b8:ac:ad:da:0f: 27:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:5F:E0:00:01:A6:8C:14:C4:F7:66:74:F2:6B:05:65:87:55:63:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/0a18cb35-1200-3de5-91cf-435418df7565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 104.247.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:cc:f1:51:a6:96:8a:44:73:5f:84:3c:47:63:ea:8e:3f:8c: e1:f2:2d:61:41:06:a9:5e:6a:a1:c8:e8:0d:3a:07:e5:0c:73: 71:ac:26:40:a8:bf:fd:27:b3:6b:5e:30:7a:ef:fc:64:1d:e4: e3:79:27:86:78:d5:d1:05:74:37:cd:d4:13:ce:cc:fb:48:bb: 6e:02:7b:b2:db:9a:a1:42:b5:06:d5:3e:ad:af:0a:10:5e:8c: 7a:34:ae:34:d8:7a:27:1d:87:29:15:bc:ca:d3:3e:63:72:e5: 11:f2:fc:41:da:69:3b:2f:4a:98:ef:00:f6:4a:b6:14:5f:00: 99:26:3c:be:4c:3b:fe:73:fe:a8:41:70:53:2d:57:ac:4d:13: 0a:c3:37:c0:c8:42:e5:67:30:a1:70:34:31:be:36:37:cc:f6: 0b:8d:6b:7c:b8:27:92:81:e6:56:65:d7:a9:4e:ff:1a:6d:33: 4e:f7:bf:f7:77:0f:18:01:c6:07:c5:ee:c9:4c:43:a2:25:f6: ae:4b:97:23:ba:00:56:a3:07:64:e5:ff:03:9a:c6:84:b5:c0: df:c8:d0:52:e3:45:a2:eb:9a:6d:15:26:fe:a5:5d:24:d5:b0: 70:74:d3:87:10:40:f6:75:c0:a3:db:68:4e:bd:58:dc:52:6a: 0f:81:b6:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUku71YJzH6C9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YTc2NTgyNGQtNDg1NC00YzcwLWJlYWUtNjJmNDJiZDE3ODFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv+zN+B0jVV6Jy20q6EoLiGrEZO6XY4az4G/ W+uuTTPi/IpoU4AyS1GGDm5en8f0cl0oUWmDjOXxdZJXF6Z4xZ7XblWZ2c9BZcTL ROhXSilzLhp/7cpsIlo6nq1HtojY5sQr8qHasF5qMFQjR3gonYtAMVIKeEopIX7e ijoJSi8uZWYBob5O0LCbI+3W5ORR1LKxbCnQYdvnZtPBTX8PjvMpauUlYitKwmNo 8yUf2aDt7DsKXQ0w1MPVbjicyg3VaOuioyDXmW9XPeoLI/JHa7qX7REM2DBjMW1+ LScidWNpFMT17ksC4iVCil69PKJBxbVr0U8R2uNpuKyt2g8nUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxf4AABpowUxPdmdPJrBWWHVWOlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvMGExOGNiMzUtMTIwMC0z ZGU1LTkxY2YtNDM1NDE4ZGY3NTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPd7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3M8VGmlopEc1+EPEdj6o4/jOHyLWFBBqleaqHI6A06B+UMc3GsJkCo v/0ns2teMHrv/GQd5ON5J4Z41dEFdDfN1BPOzPtIu24Ce7LbmqFCtQbVPq2vChBe jHo0rjTYeicdhykVvMrTPmNy5RHy/EHaaTsvSpjvAPZKthRfAJkmPL5MO/5z/qhB cFMtV6xNEwrDN8DIQuVnMKFwNDG+NjfM9guNa3y4J5KB5lZl16lO/xptM073v/d3 DxgBxgfF7slMQ6Il9q5LlyO6AFajB2Tl/wOaxoS1wN/I0FLjRaLrmm0VJv6lXSTV sHB004cQQPZ1wKPbaE69WNxSag+Btt0= -----END CERTIFICATE-----Generated at Sun Aug 24 03:08:18 2025 by rpki-client