$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/df64e67f-d3d6-364f-a088-ad6e4759cafb.roa File: df64e67f-d3d6-364f-a088-ad6e4759cafb.roa (raw, json) Hash identifier: +C//yZTaQ2b14lZPeVw6ZIBCfRAXHxN9J6JYDMWC+Oc= Subject key identifier: B4:DA:F4:29:D7:5C:0D:88:E6:0A:CB:F5:9D:63:D1:72:BF:7F:61:1B Certificate issuer: /CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc Certificate serial: 010D0C9F4328584ADA9BCEBFD2D81EDDA267B0D8 Authority key identifier: 60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/df64e67f-d3d6-364f-a088-ad6e4759cafb.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 53454 IP address blocks: 104.225.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:ce:bf:d2:d8:1e:dd:a2:67:b0:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=a693eb68-e9a3-46c4-9946-ee756e561578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9c:ce:30:4d:5b:d7:91:5e:d4:c6:71:37:e0: 98:ad:59:03:05:6c:2b:62:82:80:29:28:76:c9:fc: 44:30:b3:9f:8d:f7:f7:66:64:0b:da:c9:97:c5:8e: 93:ce:a7:26:4f:d2:6a:39:b0:20:24:7a:d2:26:de: 6c:2b:38:f3:42:d1:56:47:5d:30:fb:5c:ff:94:c2: 3d:89:68:b4:98:db:55:d8:d9:1f:4e:ed:c4:89:a1: 07:66:0d:3b:72:53:b2:0c:f3:d7:d3:95:09:78:51: c8:e0:d2:f8:46:a8:37:e0:1a:7f:d5:0d:07:f9:0f: 1a:8b:b8:28:ee:1f:54:5e:6f:5c:12:9e:0f:4a:c4: eb:95:6e:82:f5:07:c4:9a:53:fd:de:00:71:82:a9: 0b:86:79:bc:c3:40:46:26:d9:8a:aa:08:ba:2f:c0: 43:8f:1b:ba:e9:2b:b3:6f:2f:3b:3c:58:d0:99:a2: c3:cb:2d:72:1c:5e:fb:cf:05:26:f6:f9:73:97:b8: a8:bf:fe:fc:56:2f:d9:d6:81:d6:f5:18:1b:9d:1d: 93:00:bb:22:fc:d8:52:19:0d:7a:ab:ab:4f:8f:ed: af:83:9e:8c:67:0c:e5:d9:0c:d9:61:0c:7a:44:be: 1f:36:4f:f8:a1:4a:8e:28:1d:45:5e:20:4f:05:1e: fb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DA:F4:29:D7:5C:0D:88:E6:0A:CB:F5:9D:63:D1:72:BF:7F:61:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/df64e67f-d3d6-364f-a088-ad6e4759cafb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl X509v3 Authority Key Identifier: keyid:60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer sbgp-ipAddrBlock: critical IPv4: 104.225.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:2f:f9:4e:2f:ac:ce:91:43:cf:50:7c:2a:fb:43:6b:1c:53: 1e:2d:d1:35:c6:96:86:6a:9d:26:51:a6:bc:09:b6:7f:4b:fb: 23:47:23:b1:6e:da:52:3d:8c:41:b8:58:19:93:ab:36:8f:71: 68:5c:02:1f:78:34:ab:4d:75:2d:e0:94:db:6e:33:2d:0b:81: e0:59:a8:d6:0e:68:90:42:1e:2c:1c:f3:cb:9d:de:15:53:e7: b6:ea:9d:72:06:f8:9f:ef:d9:c4:dc:7f:44:9f:3c:93:7f:43: 93:0b:73:65:91:ec:a4:5f:06:54:00:e8:e4:6b:0b:ef:3d:2c: 42:ca:90:e9:37:cd:17:12:58:a2:f2:bd:57:9e:cc:02:e2:e0: 6c:fd:d4:8b:97:02:52:25:5a:7d:f6:03:7d:2f:22:fb:f8:71: 6f:a3:c6:2f:e1:28:1d:39:57:68:82:b7:76:e8:95:8f:63:35: d6:e9:08:80:bc:db:92:2c:aa:4e:29:6a:ea:a8:3e:3f:a2:8d: fb:d5:fc:95:94:d5:cb:c9:5c:19:6e:af:b4:2c:10:90:0e:72: 60:9a:31:77:97:0e:a6:68:44:f0:c4:f8:51:f0:56:c1:44:a7: 39:1d:ba:aa:3a:d2:7d:7f:8c:da:1e:41:33:22:d3:22:35:ce: 2a:e4:5e:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram86/0tge3aJnsNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZmMGMwNDItY2YzNi00ZDZmLTk1NGEtYmVlNjFhNWIz ZGNjMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk YTY5M2ViNjgtZTlhMy00NmM0LTk5NDYtZWU3NTZlNTYxNTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZzOME1b15Fe1MZxN+CYrVkDBWwrYoKAKSh2 yfxEMLOfjff3ZmQL2smXxY6TzqcmT9JqObAgJHrSJt5sKzjzQtFWR10w+1z/lMI9 iWi0mNtV2NkfTu3EiaEHZg07clOyDPPX05UJeFHI4NL4Rqg34Bp/1Q0H+Q8ai7go 7h9UXm9cEp4PSsTrlW6C9QfEmlP93gBxgqkLhnm8w0BGJtmKqgi6L8BDjxu66Suz by87PFjQmaLDyy1yHF77zwUm9vlzl7iov/78Vi/Z1oHW9RgbnR2TALsi/NhSGQ16 q6tPj+2vg56MZwzl2QzZYQx6RL4fNk/4oUqOKB1FXiBPBR77sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTa9CnXXA2I5grL9Z1j0XK/f2EbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hZmYw YzA0Mi1jZjM2LTRkNmYtOTU0YS1iZWU2MWE1YjNkY2MvZGY2NGU2N2YtZDNkNi0z NjRmLWEwODgtYWQ2ZTQ3NTljYWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWZmMGMwNDItY2YzNi00ZDZmLTk1 NGEtYmVlNjFhNWIzZGNjL2FmZjBjMDQyLWNmMzYtNGQ2Zi05NTRhLWJlZTYxYTVi M2RjYy5jcmwwHwYDVR0jBBgwFoAUYMltwESmb70vbssD6msX/LpsLokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hZmYwYzA0Mi1jZjM2LTRkNmYtOTU0YS1iZWU2 MWE1YjNkY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaOH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwv+U4vrM6RQ89QfCr7Q2scUx4t0TXGloZqnSZRprwJtn9L+yNHI7Fu 2lI9jEG4WBmTqzaPcWhcAh94NKtNdS3glNtuMy0LgeBZqNYOaJBCHiwc88ud3hVT 57bqnXIG+J/v2cTcf0SfPJN/Q5MLc2WR7KRfBlQA6ORrC+89LELKkOk3zRcSWKLy vVeezALi4Gz91IuXAlIlWn32A30vIvv4cW+jxi/hKB05V2iCt3bolY9jNdbpCIC8 25Isqk4pauqoPj+ijfvV/JWU1cvJXBlur7QsEJAOcmCaMXeXDqZoRPDE+FHwVsFE pzkduqo60n1/jNoeQTMi0yI1zirkXh8= -----END CERTIFICATE-----Generated at Sun Aug 24 07:52:13 2025 by rpki-client