$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8b43ff99-e436-3f43-a4e6-410e610388d4.roa File: 8b43ff99-e436-3f43-a4e6-410e610388d4.roa (raw, json) Hash identifier: Vx0yXJe5IbqLzhvKo32ctU/kGzPMio1lhgMt3c2Fg/Y= Subject key identifier: 1A:B5:DA:D3:9E:1A:7D:8E:DD:9F:FC:86:C6:20:84:8A:8F:0D:21:CB Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A49705E4D691CE6AF0C9423D0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8b43ff99-e436-3f43-a4e6-410e610388d4.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 8881 IP address blocks: 104.253.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:5e:4d:69:1c:e6:af:0c:94:23:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=4a99345a-5760-4ca6-8494-e6e06795d2c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cc:6c:32:04:3b:28:1c:11:77:b2:e4:84:bd: 77:91:91:ad:97:1b:01:7d:bf:78:8a:f1:47:2d:05: 76:ea:a2:83:32:26:11:47:cf:86:c4:0b:1a:cd:a2: cc:f8:18:9c:e7:74:ff:74:89:a7:47:64:ed:c5:58: 71:5d:44:ee:f7:11:14:25:33:ff:9d:db:81:c7:aa: e6:52:0e:e5:88:4e:e3:eb:91:96:29:4b:2e:13:58: a9:8d:01:0a:88:1d:4e:d4:ee:90:50:89:a8:44:a0: 87:81:b3:2b:eb:04:0f:33:ac:2e:ff:1a:d2:02:85: 42:50:7e:65:04:ea:d1:8c:76:e0:9d:80:f0:77:31: f8:62:d4:0c:2b:cb:b2:10:e1:a1:e0:c1:aa:58:10: 06:20:80:34:af:65:bb:03:a5:ac:3f:85:a5:eb:89: c4:28:e9:70:0a:4a:f3:ce:2c:2d:6a:54:cc:00:f1: 52:1c:07:8f:d8:a3:81:62:70:0c:eb:ae:b9:67:c1: 1b:c9:3e:a2:ef:10:4e:74:73:1d:89:93:9b:60:fa: 5a:95:cb:f3:b9:2a:2d:56:ac:a5:57:aa:b8:6b:60: 35:3d:e5:b6:01:4e:1f:eb:5c:d6:39:ad:7f:e8:d9: e5:6d:35:64:68:d3:75:f6:93:61:3c:bc:9c:43:08: 65:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B5:DA:D3:9E:1A:7D:8E:DD:9F:FC:86:C6:20:84:8A:8F:0D:21:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8b43ff99-e436-3f43-a4e6-410e610388d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:87:d2:d2:5b:ef:9c:6e:af:7c:79:48:3e:17:16:a0:e9:87: 0d:6a:dc:e1:b0:55:08:cf:22:05:5c:7b:cc:f2:5c:4c:a3:33: 11:27:fc:d2:e3:f4:d9:d2:44:78:d9:83:53:66:d3:25:5e:ab: 83:22:7b:37:d5:9a:e6:fe:56:91:74:4e:b2:6a:a2:54:df:b3: 92:04:c7:11:fc:2d:f4:ed:6d:2e:73:4e:61:53:47:05:a5:a8: f7:82:de:ea:ca:62:83:7c:c4:34:1a:dd:b3:29:eb:4c:68:65: 2f:a1:b9:55:00:44:00:d6:f8:b7:07:72:6e:32:2c:71:88:64: 79:5b:18:3e:c5:3d:a4:55:6f:4d:d9:bb:4b:45:48:cd:9f:88: ba:4f:16:13:3b:63:bf:38:fd:a5:c5:d7:52:2a:08:50:6c:18: e7:af:d4:9f:e5:cd:2a:c0:06:bb:7f:0c:1d:13:fd:49:89:9a: 83:92:30:a6:dc:16:a3:24:bb:64:bb:a7:50:79:d3:64:29:09: 07:02:95:39:3d:52:27:6b:3e:0b:5d:a7:6a:d7:8b:ca:5a:8e: 8e:23:06:0f:c7:3f:b0:8c:ad:cd:f3:1a:a9:d0:02:86:06:5c: cf:44:07:c2:ca:77:90:2c:a4:f8:8d:2d:c7:5c:ec:f8:56:1c: 2e:89:f1:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcF5NaRzmrwyUI9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk NGE5OTM0NWEtNTc2MC00Y2E2LTg0OTQtZTZlMDY3OTVkMmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMxsMgQ7KBwRd7LkhL13kZGtlxsBfb94ivFH LQV26qKDMiYRR8+GxAsazaLM+Bic53T/dImnR2TtxVhxXUTu9xEUJTP/nduBx6rm Ug7liE7j65GWKUsuE1ipjQEKiB1O1O6QUImoRKCHgbMr6wQPM6wu/xrSAoVCUH5l BOrRjHbgnYDwdzH4YtQMK8uyEOGh4MGqWBAGIIA0r2W7A6WsP4Wl64nEKOlwCkrz ziwtalTMAPFSHAeP2KOBYnAM6665Z8EbyT6i7xBOdHMdiZObYPpalcvzuSotVqyl V6q4a2A1PeW2AU4f61zWOa1/6NnlbTVkaNN19pNhPLycQwhlAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBq12tOeGn2O3Z/8hsYghIqPDSHLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGI0M2ZmOTktZTQzNi0z ZjQzLWE0ZTYtNDEwZTYxMDM4OGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiH0tJb75xur3x5SD4XFqDphw1q3OGwVQjPIgVce8zyXEyjMxEn/NLj 9NnSRHjZg1Nm0yVeq4MiezfVmub+VpF0TrJqolTfs5IExxH8LfTtbS5zTmFTRwWl qPeC3urKYoN8xDQa3bMp60xoZS+huVUARADW+LcHcm4yLHGIZHlbGD7FPaRVb03Z u0tFSM2fiLpPFhM7Y784/aXF11IqCFBsGOev1J/lzSrABrt/DB0T/UmJmoOSMKbc FqMku2S7p1B502QpCQcClTk9UidrPgtdp2rXi8pajo4jBg/HP7CMrc3zGqnQAoYG XM9EB8LKd5AspPiNLcdc7PhWHC6J8eY= -----END CERTIFICATE-----Generated at Tue Jul 1 18:13:53 2025 by rpki-client