$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e31d6b6a-ba7b-38f9-b9aa-6116a7546606.roa File: e31d6b6a-ba7b-38f9-b9aa-6116a7546606.roa (raw, json) Hash identifier: aC29S9JKWqhHCIEMPtsIJC/NBzu2FtYh6KDqu6liQwk= Subject key identifier: 31:2A:E1:3F:1C:A5:23:B5:35:81:74:D0:20:93:AB:28:D8:42:7E:02 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACB40E81CF347CEBB77FE9300 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e31d6b6a-ba7b-38f9-b9aa-6116a7546606.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 19437 IP address blocks: 104.254.233.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:e8:1c:f3:47:ce:bb:77:fe:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=c91f5843-ba6f-4437-a330-bd7e365ff685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ee:24:ae:e1:9b:39:63:70:e3:2e:76:d2:59: ab:b6:3f:a3:af:ba:35:54:80:f6:12:e2:87:2a:90: 9a:12:ef:2b:1a:79:a1:18:71:77:9c:92:5d:6c:03: ab:f1:85:1e:65:c4:8a:de:c0:9a:fa:05:64:bf:07: 41:0a:9a:ab:65:5c:90:3c:38:a0:a9:cb:02:ca:ea: fa:bf:8a:d6:19:3c:9d:36:29:92:24:be:95:50:12: c5:f8:12:67:8d:c8:79:c5:c2:40:55:83:0d:2d:b7: 54:33:3f:f7:83:34:cd:15:b0:3a:66:c2:e9:b8:dd: bd:2b:9a:2b:9d:01:bf:c7:db:67:c4:14:78:2a:11: aa:07:d8:bc:3f:af:78:be:2f:b4:75:79:4a:af:4d: 02:b9:57:f3:60:db:76:ea:5d:f5:0f:14:eb:90:2d: 50:86:66:73:af:64:97:a7:de:2f:82:ea:38:ef:24: 70:a3:ce:7e:03:1f:15:39:4d:ca:dc:84:27:34:c5: 32:63:3a:17:45:d9:28:de:c9:18:d1:4c:3a:71:b8: 7b:f5:7c:38:cf:6e:05:a6:96:4f:a8:77:16:60:90: 77:e1:9d:24:24:b9:ba:2c:2b:ae:92:b1:35:d2:36: 4b:e4:78:c1:95:e1:19:9c:18:9f:c5:79:ac:20:57: 32:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2A:E1:3F:1C:A5:23:B5:35:81:74:D0:20:93:AB:28:D8:42:7E:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e31d6b6a-ba7b-38f9-b9aa-6116a7546606.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 104.254.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ff:78:b9:0c:6b:f7:27:e7:d3:1c:d1:86:49:88:d9:01:8c: 8d:21:66:c1:9b:92:5d:bd:43:35:db:82:cf:94:e4:60:a4:5d: af:9b:e5:89:05:45:65:2f:76:6e:74:a4:17:ad:a1:13:41:5c: 4b:89:54:08:8b:0a:74:29:bf:f6:33:40:1b:8b:cc:b6:a3:e3: b8:16:e1:6c:ea:e1:49:b6:42:15:8c:22:91:f0:3c:a0:46:e6: c5:2e:b6:65:c7:59:bf:6b:00:f0:0e:81:f4:87:f8:20:9e:d5: b9:59:33:ce:d0:a6:3e:21:a1:63:3b:eb:08:dc:2f:57:f7:b0: 6f:8c:5f:23:59:77:dc:e6:eb:2c:b9:85:9c:c4:e4:22:fe:f7: 55:22:4d:f9:98:49:82:af:f3:bf:67:9f:a0:c3:89:37:d4:95: fe:2f:59:fe:a4:99:cf:b0:34:50:53:bb:1d:3f:a9:84:0c:bd: 1a:07:81:52:a3:25:6b:bd:01:e6:9e:53:ae:b3:ba:72:5c:6c: 28:c1:cd:66:6b:6b:d0:a9:19:e3:1a:4e:f0:5a:f4:04:88:f3: c7:77:f2:82:5b:3e:0f:73:b1:36:f8:69:3b:8c:ff:60:8d:1f: f2:fa:1c:54:9c:34:1f:c9:85:f3:28:66:2e:53:cd:28:61:27: fd:ca:24:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQOgc80fOu3f+kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk YzkxZjU4NDMtYmE2Zi00NDM3LWEzMzAtYmQ3ZTM2NWZmNjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju4kruGbOWNw4y520lmrtj+jr7o1VID2EuKH KpCaEu8rGnmhGHF3nJJdbAOr8YUeZcSK3sCa+gVkvwdBCpqrZVyQPDigqcsCyur6 v4rWGTydNimSJL6VUBLF+BJnjch5xcJAVYMNLbdUMz/3gzTNFbA6ZsLpuN29K5or nQG/x9tnxBR4KhGqB9i8P694vi+0dXlKr00CuVfzYNt26l31DxTrkC1QhmZzr2SX p94vguo47yRwo85+Ax8VOU3K3IQnNMUyYzoXRdko3skY0Uw6cbh79Xw4z24FppZP qHcWYJB34Z0kJLm6LCuukrE10jZL5HjBleEZnBifxXmsIFcyiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEq4T8cpSO1NYF00CCTqyjYQn4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZTMxZDZiNmEtYmE3Yi0z OGY5LWI5YWEtNjExNmE3NTQ2NjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP7pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADn/eLkMa/cn59Mc0YZJiNkBjI0hZsGbkl29QzXbgs+U5GCkXa+b5YkF RWUvdm50pBetoRNBXEuJVAiLCnQpv/YzQBuLzLaj47gW4Wzq4Um2QhWMIpHwPKBG 5sUutmXHWb9rAPAOgfSH+CCe1blZM87Qpj4hoWM76wjcL1f3sG+MXyNZd9zm6yy5 hZzE5CL+91UiTfmYSYKv879nn6DDiTfUlf4vWf6kmc+wNFBTux0/qYQMvRoHgVKj JWu9AeaeU66zunJcbCjBzWZra9CpGeMaTvBa9ASI88d38oJbPg9zsTb4aTuM/2CN H/L6HFScNB/JhfMoZi5TzShhJ/3KJGU= -----END CERTIFICATE-----Generated at Sat Aug 23 18:39:05 2025 by rpki-client