$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ddcec48b-893d-35da-9ca3-f6a3391cc5f9.roa File: ddcec48b-893d-35da-9ca3-f6a3391cc5f9.roa (raw, json) Hash identifier: HJ3xWtyR3xY7iKVQpFWyT8z9btvLx6pJmY4Y3S59LKE= Subject key identifier: 73:95:C7:41:08:83:B3:11:3C:D9:23:9D:67:64:BB:AB:73:2C:FF:A6 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584ACC0C88014DDA1D3A49383F80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ddcec48b-893d-35da-9ca3-f6a3391cc5f9.roa Signing time: Sat 09 Aug 2025 07:50:55 +0000 ROA not before: Sat 09 Aug 2025 07:50:55 +0000 ROA not after: Fri 07 Nov 2025 08:50:55 +0000 asID: 18779 IP address blocks: 104.253.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:0c:88:01:4d:da:1d:3a:49:38:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 9 07:50:55 2025 GMT Not After : Nov 7 08:50:55 2025 GMT Subject: CN=0db95299-cc53-436a-9d86-6e7b954db8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f7:d8:f7:a9:26:68:cc:4e:4c:6b:45:3f:d9: 1e:3e:2b:74:e1:ef:10:12:fa:aa:b9:c9:02:7d:ad: 13:7e:a1:90:42:04:5e:10:b2:82:0f:64:da:d6:37: 4c:df:13:9b:80:fa:31:35:f7:3a:34:f8:37:a4:12: 67:de:cc:04:9e:49:3f:d3:c8:1a:6f:a0:bb:61:67: f6:32:4d:ab:f4:04:2e:ee:40:1e:a5:24:c4:07:1f: df:5f:a3:cd:31:85:2e:ae:8a:a1:9b:e4:22:a5:02: c4:50:3e:95:dc:59:be:8c:c4:bd:5d:f9:0a:c4:56: 5d:41:22:6a:2e:59:7d:2f:b6:6a:d1:2e:f2:f1:e8: e8:82:5e:5b:50:88:4f:46:99:98:61:df:b2:e4:58: ee:ef:86:97:a3:0f:6f:a9:e5:a9:2d:4e:5d:9e:1f: 25:94:f1:72:04:85:ff:34:92:e5:7e:55:a3:c9:1a: 24:0f:33:7e:3a:6c:3a:53:8c:26:17:d1:2c:23:06: b2:b8:cb:b8:a3:ca:14:c6:94:31:ff:f9:e5:46:12: ad:66:3c:0a:6a:2a:83:7d:00:0e:84:e2:85:9a:79: 3c:8f:55:c4:03:be:63:ac:a7:71:ad:86:1d:58:62: b3:ce:e6:aa:49:40:a4:b2:5a:36:76:81:ba:a5:f7: c5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:95:C7:41:08:83:B3:11:3C:D9:23:9D:67:64:BB:AB:73:2C:FF:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ddcec48b-893d-35da-9ca3-f6a3391cc5f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:ab:b8:8a:36:04:11:c5:de:19:11:2c:67:17:85:9e:31:bb: f7:cd:09:41:e4:46:a8:57:d8:6f:9d:3d:35:2d:8b:1c:a2:33: 02:05:65:cf:8c:99:69:f0:c0:fd:f9:d4:90:15:28:24:b2:a0: c6:f1:b0:90:da:c5:b2:0c:b3:1d:1e:5e:97:3a:e5:45:e1:db: 2b:2f:21:f9:d8:25:69:7c:3c:fc:6c:b8:f5:eb:a7:33:4e:f9: e0:9a:d8:b4:65:29:18:02:88:b6:bd:2d:0f:20:fe:52:45:7b: 4f:54:7a:a8:f2:4e:17:d8:d4:2f:e5:98:de:2e:4a:a5:8a:36: 18:9e:71:49:16:0b:02:01:bf:46:22:52:65:1f:9b:85:ea:08: 31:f4:35:8e:fc:4f:ca:60:8e:b7:84:e2:b6:cc:de:de:83:7f: 5c:43:00:f8:b4:90:41:d9:5d:2b:a0:b8:a3:07:2e:11:d5:40: 5b:c1:27:61:ee:b0:9d:3b:98:c9:74:51:88:97:7e:a2:50:ab: 36:89:96:6b:99:e7:47:d1:72:6f:ae:24:f8:f9:8f:a0:c7:ce: a8:d4:92:bb:6f:65:26:95:c4:28:97:78:6a:48:a8:df:76:d9: 12:56:c0:56:52:82:69:a8:d9:33:40:f6:c2:ce:de:a5:d9:0e: 4a:79:64:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMDIgBTdodOkk4P4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDgwOTA3NTA1NVoXDTI1MTEwNzA4NTA1NVowLzEtMCsGA1UEAxMk MGRiOTUyOTktY2M1My00MzZhLTlkODYtNmU3Yjk1NGRiOGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivfY96kmaMxOTGtFP9kePit04e8QEvqquckC fa0TfqGQQgReELKCD2Ta1jdM3xObgPoxNfc6NPg3pBJn3swEnkk/08gab6C7YWf2 Mk2r9AQu7kAepSTEBx/fX6PNMYUuroqhm+QipQLEUD6V3Fm+jMS9XfkKxFZdQSJq Lll9L7Zq0S7y8ejogl5bUIhPRpmYYd+y5Fju74aXow9vqeWpLU5dnh8llPFyBIX/ NJLlflWjyRokDzN+Omw6U4wmF9EsIwayuMu4o8oUxpQx//nlRhKtZjwKaiqDfQAO hOKFmnk8j1XEA75jrKdxrYYdWGKzzuaqSUCkslo2doG6pffFUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOVx0EIg7MRPNkjnWdku6tzLP+mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGRjZWM0OGItODkzZC0z NWRhLTljYTMtZjZhMzM5MWNjNWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqruIo2BBHF3hkRLGcXhZ4xu/fNCUHkRqhX2G+dPTUtixyiMwIFZc+M mWnwwP351JAVKCSyoMbxsJDaxbIMsx0eXpc65UXh2ysvIfnYJWl8PPxsuPXrpzNO +eCa2LRlKRgCiLa9LQ8g/lJFe09UeqjyThfY1C/lmN4uSqWKNhiecUkWCwIBv0Yi UmUfm4XqCDH0NY78T8pgjreE4rbM3t6Df1xDAPi0kEHZXSuguKMHLhHVQFvBJ2Hu sJ07mMl0UYiXfqJQqzaJlmuZ50fRcm+uJPj5j6DHzqjUkrtvZSaVxCiXeGpIqN92 2RJWwFZSgmmo2TNA9sLO3qXZDkp5ZOM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:18:46 2025 by rpki-client