$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa File: 871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa (raw, json) Hash identifier: NeDrG+J6RQcjhQeJLDHmvLf0rRPImWNJ7AL1Go/jb6g= Subject key identifier: 3A:4D:CF:CB:2A:2E:F5:BD:EC:1C:C4:6F:82:4D:89:68:13:62:B9:E2 Certificate issuer: /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Certificate serial: 010D0C9F4328584AC2E0EEB120FBF48BA11D6140 Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 41378 IP address blocks: 104.249.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:ee:b1:20:fb:f4:8b:a1:1d:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=a36cfa21-f4a6-4bcc-bb6b-696099964378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:42:d4:68:0b:64:2c:c3:8f:0d:7b:35:9e:36: 25:92:53:5c:b4:94:88:7b:62:5a:2e:f7:08:a9:84: da:0e:05:dc:ef:24:c7:26:6c:49:06:07:9f:63:0d: 12:17:e1:10:61:fc:e7:eb:28:75:74:81:7d:23:67: 4e:6d:ab:9f:3d:57:24:45:ae:55:5d:04:55:e4:52: ae:38:7e:fb:a0:80:dc:93:9f:cd:c2:af:24:80:ee: 0d:96:3f:b7:fe:22:ec:76:83:34:90:ba:26:0c:4d: b3:43:72:5f:15:e2:fa:6d:6c:d6:18:26:2f:97:88: 10:00:75:37:15:a8:47:75:57:96:42:79:ea:b7:58: 5f:d0:4f:88:4e:25:de:a0:f3:fa:e0:4b:53:5e:60: 0e:b4:2e:57:a5:2d:eb:44:b5:d8:58:31:43:77:b8: ae:93:69:b8:70:02:7d:73:fe:07:8d:21:31:36:4d: 1a:e9:0b:54:e5:f9:28:38:65:46:77:fe:85:0a:26: 6d:13:b8:e1:65:ad:be:63:87:1d:d4:b3:1d:ed:8e: aa:91:ac:95:65:e3:d6:82:21:63:a2:31:87:75:63: 1a:cf:8e:b9:21:ca:50:1b:b6:e8:64:51:69:c9:5c: c5:f3:a9:0a:78:fb:31:c5:a0:6e:80:65:9e:05:2f: ac:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:4D:CF:CB:2A:2E:F5:BD:EC:1C:C4:6F:82:4D:89:68:13:62:B9:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl X509v3 Authority Key Identifier: keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer sbgp-ipAddrBlock: critical IPv4: 104.249.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:9b:6d:64:b1:94:10:4e:f5:69:16:07:c3:bc:0e:b0:69:87: f0:ec:f1:2e:e1:27:99:37:11:84:ab:69:ea:71:05:b7:b0:7a: 3a:0e:b1:d0:3c:41:be:6b:a1:22:6b:3c:bc:5e:b0:e5:0d:a7: f3:99:86:38:38:2b:8a:c0:7d:a1:72:71:64:0c:0a:c5:de:9e: 59:6f:a0:da:85:ab:cd:48:a9:61:09:05:51:7e:c1:ab:57:6f: 8b:2f:d0:ba:3e:7c:3b:9a:e4:1c:c2:91:b6:3e:98:ca:46:ee: c8:73:bb:16:b6:45:ec:4d:22:5a:63:a3:0d:aa:59:b7:a7:d8: 20:63:07:ec:dc:28:17:b8:13:6e:42:4b:fc:18:aa:ad:33:a4: 2d:b8:f9:56:68:e8:c9:16:9c:91:f1:8f:7b:04:0a:88:a8:09: a6:ed:92:6b:5c:ef:96:0c:11:db:eb:cf:43:2e:86:e7:ee:5d: a4:2c:1a:9f:3b:b9:c1:35:94:83:a8:08:bb:12:dc:d2:be:ee: 4e:71:49:8f:83:fd:d1:92:33:4a:7e:a1:8f:c8:68:6c:ef:20: 1c:81:48:31:2d:ce:06:c0:45:8d:28:fb:8f:de:ec:bb:93:4a: e8:df:df:34:cf:63:6c:f5:8a:3f:37:57:92:2e:8c:f4:03:71: a3:a2:1f:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4O6xIPv0i6EdYUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3ZmY1Y2MtZThhZS00MGY4LWJjYjktMzkwODEwZWI4 MjFlMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YTM2Y2ZhMjEtZjRhNi00YmNjLWJiNmItNjk2MDk5OTY0Mzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqULUaAtkLMOPDXs1njYlklNctJSIe2JaLvcI qYTaDgXc7yTHJmxJBgefYw0SF+EQYfzn6yh1dIF9I2dObaufPVckRa5VXQRV5FKu OH77oIDck5/Nwq8kgO4Nlj+3/iLsdoM0kLomDE2zQ3JfFeL6bWzWGCYvl4gQAHU3 FahHdVeWQnnqt1hf0E+ITiXeoPP64EtTXmAOtC5XpS3rRLXYWDFDd7iuk2m4cAJ9 c/4HjSExNk0a6QtU5fkoOGVGd/6FCiZtE7jhZa2+Y4cd1LMd7Y6qkayVZePWgiFj ojGHdWMaz465IcpQG7boZFFpyVzF86kKePsxxaBugGWeBS+stQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpNz8sqLvW97BzEb4JNiWgTYrniMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdm ZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4MTBlYjgyMWUvODcxNjY0ZGEtNGM0Yy0z ZDlkLTljZWUtYWJkZTNmNWE5ZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWE3ZmY1Y2MtZThhZS00MGY4LWJj YjktMzkwODEwZWI4MjFlLzFhN2ZmNWNjLWU4YWUtNDBmOC1iY2I5LTM5MDgxMGVi ODIxZS5jcmwwHwYDVR0jBBgwFoAUjcqIVSKcOh2gFz9eNrHSpw0vYCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdmZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4 MTBlYjgyMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGibbWSxlBBO9WkWB8O8DrBph/Ds8S7hJ5k3EYSraepxBbewejoOsdA8 Qb5roSJrPLxesOUNp/OZhjg4K4rAfaFycWQMCsXenllvoNqFq81IqWEJBVF+watX b4sv0Lo+fDua5BzCkbY+mMpG7shzuxa2RexNIlpjow2qWben2CBjB+zcKBe4E25C S/wYqq0zpC24+VZo6MkWnJHxj3sECoioCabtkmtc75YMEdvrz0MuhufuXaQsGp87 ucE1lIOoCLsS3NK+7k5xSY+D/dGSM0p+oY/IaGzvIByBSDEtzgbARY0o+4/e7LuT Sujf3zTPY2z1ij83V5IujPQDcaOiH+8= -----END CERTIFICATE-----Generated at Sat Aug 23 20:53:38 2025 by rpki-client