$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1a96c55c-69f7-38a1-89e9-611249329a1b.roa File: 1a96c55c-69f7-38a1-89e9-611249329a1b.roa (raw, json) Hash identifier: DzdE9mtdon1QOYlkgi2Z+kbZp61rqjTvhmzD3fw6BhI= Subject key identifier: 23:61:D1:D1:E1:7A:69:04:93:89:94:DA:14:37:17:1B:B8:2F:77:50 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584AD9364A65D941014D0D938480 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1a96c55c-69f7-38a1-89e9-611249329a1b.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 23473 IP address blocks: 104.145.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:4a:65:d9:41:01:4d:0d:93:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=ac251af3-ca31-4b5b-940d-d6a4aba2705b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a1:e3:27:9a:8d:08:af:c5:cf:f5:e0:f8:21: 0a:e6:64:07:cf:b1:d5:d0:92:c4:29:18:12:ea:ab: 7b:8e:26:f5:ab:2f:59:66:91:86:a3:10:99:5a:7b: 11:ce:97:b2:60:cf:2c:e6:a3:d6:ff:31:1b:69:7b: dd:2f:1d:dc:4c:74:62:d4:b6:99:58:31:de:f3:64: 45:bc:ed:e4:54:81:2f:98:97:5f:19:c3:8a:3b:b6: 23:6b:ec:5c:56:4d:de:b7:29:c9:c7:93:6f:d8:25: f6:c8:01:69:cb:d9:56:c2:db:db:2f:66:73:64:9c: 64:40:6b:5a:69:54:66:8a:23:31:7c:27:24:18:12: ad:48:21:ec:25:90:ed:42:12:38:86:20:e4:6a:eb: 13:86:20:dc:d0:92:d7:03:23:40:ad:fa:68:25:91: 68:dd:7f:ef:72:80:00:e6:5f:e4:4e:eb:a9:0b:3c: fa:2e:d3:eb:6c:13:e1:08:9b:b4:b2:a4:9d:53:9d: ee:45:a1:3b:aa:38:68:77:d2:ac:66:b1:70:ad:63: fa:df:28:fb:b8:55:fc:60:50:c0:2a:28:99:2a:ee: a8:35:15:1e:61:93:e7:b9:22:3f:02:47:96:f0:c3: 26:90:a9:08:c3:79:1c:06:85:e5:af:d7:76:6f:68: 61:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:61:D1:D1:E1:7A:69:04:93:89:94:DA:14:37:17:1B:B8:2F:77:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1a96c55c-69f7-38a1-89e9-611249329a1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 104.145.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:40:93:09:f3:9e:b3:ad:57:fc:0f:46:d7:b9:0d:91:2a:c8: c4:93:38:66:df:36:91:12:a0:3a:ec:5a:8f:3a:fb:89:b5:0f: 65:f3:6c:75:fd:cf:b7:71:0f:95:44:a5:03:dc:36:df:6b:f3: 7d:58:aa:23:3e:cf:22:bd:da:55:cc:f1:cf:53:6c:00:4a:0e: d3:ac:ee:85:9c:3d:c5:39:1f:41:27:d4:b6:be:76:a5:4c:53: f7:ad:13:2a:7c:7f:a1:7d:e6:ff:62:19:59:08:b1:f0:1b:69: 82:5a:3b:d2:a4:6f:aa:2a:94:39:bf:6a:ca:59:d7:03:09:01: 5a:0a:bf:05:6a:b0:a2:cd:8a:56:dd:74:03:e0:c3:21:44:42: 54:e3:b6:22:64:c0:85:f3:18:d0:e3:17:74:5a:32:c2:50:15: e3:c1:84:4c:2d:a8:f0:f5:72:74:04:06:33:39:99:81:d5:e2: e6:72:10:d4:53:c0:cb:be:b8:2d:62:9d:3b:02:f0:61:3d:9c: 2c:05:88:f9:ad:07:5a:47:f3:4c:ad:a6:63:85:da:53:23:29: a3:94:8b:c8:be:e7:dd:1b:05:1b:3c:2b:ca:7b:57:57:a8:e3: 20:8b:36:33:20:f4:76:5f:28:6c:6b:fd:56:37:f4:80:54:9f: 37:7a:de:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNkpl2UEBTQ2ThIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk YWMyNTFhZjMtY2EzMS00YjViLTk0MGQtZDZhNGFiYTI3MDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqHjJ5qNCK/Fz/Xg+CEK5mQHz7HV0JLEKRgS 6qt7jib1qy9ZZpGGoxCZWnsRzpeyYM8s5qPW/zEbaXvdLx3cTHRi1LaZWDHe82RF vO3kVIEvmJdfGcOKO7Yja+xcVk3etynJx5Nv2CX2yAFpy9lWwtvbL2ZzZJxkQGta aVRmiiMxfCckGBKtSCHsJZDtQhI4hiDkausThiDc0JLXAyNArfpoJZFo3X/vcoAA 5l/kTuupCzz6LtPrbBPhCJu0sqSdU53uRaE7qjhod9KsZrFwrWP63yj7uFX8YFDA KiiZKu6oNRUeYZPnuSI/AkeW8MMmkKkIw3kcBoXlr9d2b2hhlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNh0dHhemkEk4mU2hQ3Fxu4L3dQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMWE5NmM1NWMtNjlmNy0z OGExLTg5ZTktNjExMjQ5MzI5YTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJFmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9AkwnznrOtV/wPRte5DZEqyMSTOGbfNpESoDrsWo86+4m1D2XzbHX9 z7dxD5VEpQPcNt9r831YqiM+zyK92lXM8c9TbABKDtOs7oWcPcU5H0En1La+dqVM U/etEyp8f6F95v9iGVkIsfAbaYJaO9Kkb6oqlDm/aspZ1wMJAVoKvwVqsKLNilbd dAPgwyFEQlTjtiJkwIXzGNDjF3RaMsJQFePBhEwtqPD1cnQEBjM5mYHV4uZyENRT wMu+uC1inTsC8GE9nCwFiPmtB1pH80ytpmOF2lMjKaOUi8i+590bBRs8K8p7V1eo 4yCLNjMg9HZfKGxr/VY39IBUnzd63m8= -----END CERTIFICATE-----Generated at Sat Aug 23 22:03:20 2025 by rpki-client