$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/891439fd-34b5-3a59-98cf-17456b30b05b.roa File: 891439fd-34b5-3a59-98cf-17456b30b05b.roa (raw, json) Hash identifier: bsNa7NQISR0XTZyt7oVjwD5q/y4qYJJJAIpIUjiDh/0= Subject key identifier: 90:07:7E:62:E4:1D:C3:CF:61:B8:0E:85:36:C7:12:C9:E1:EC:FB:10 Certificate issuer: /CN=ce57877c-89ad-4d14-9b2c-3fbd440b003b Certificate serial: 010D0C9F4328584AD23BBD309D4F941F646A0200 Authority key identifier: EE:8F:89:26:87:2F:B3:3A:F5:F1:46:8F:13:B6:F1:C6:1F:12:56:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/891439fd-34b5-3a59-98cf-17456b30b05b.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 32003 IP address blocks: 104.243.144.0/20 maxlen: 24 199.38.168.0/22 maxlen: 24 2606:780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ce57877c-89ad-4d14-9b2c-3fbd440b003b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ce57877c-89ad-4d14-9b2c-3fbd440b003b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:bd:30:9d:4f:94:1f:64:6a:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce57877c-89ad-4d14-9b2c-3fbd440b003b Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=71c1c62d-a237-4170-8281-13e634b5939a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c9:ff:20:0c:08:e0:96:9d:59:cd:e3:10:eb: 36:b9:94:db:77:81:74:dd:b0:e0:1b:3b:01:54:ff: d8:5c:01:3b:88:f4:7d:81:1d:59:c7:7e:b6:a6:48: e4:85:43:c0:c1:ee:54:20:e4:4c:61:0b:dd:5e:85: 36:72:66:48:07:46:01:1f:41:88:69:41:4c:a6:6d: 95:ee:a4:01:2f:da:be:25:df:28:bc:2c:c8:78:61: 08:30:20:70:1c:bf:95:07:b2:2f:70:61:aa:ab:4b: af:d3:09:12:a8:ad:25:ee:7a:39:a7:43:68:61:23: f8:89:57:6c:b3:7b:09:38:4d:37:ff:53:55:f5:62: 30:67:3a:2b:62:b8:f6:20:ec:20:da:e7:dd:23:4d: 99:c7:5a:78:ee:96:6e:5e:ee:59:91:6c:da:98:20: 97:d8:c8:7c:2c:cf:2b:48:93:17:8a:86:fc:51:cf: 30:ed:51:e2:92:2f:74:9c:93:69:ec:b3:ad:aa:72: 2d:20:2a:7b:b9:42:23:fa:a9:87:81:21:1b:60:60: f1:58:d1:a6:e6:ab:23:02:d1:f9:44:ce:3d:83:67: 65:c0:c7:0b:62:b2:1a:eb:32:be:fe:bb:ea:62:8f: 1a:6a:12:cd:72:d5:64:f5:0f:b1:d7:60:3d:a5:2a: da:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:07:7E:62:E4:1D:C3:CF:61:B8:0E:85:36:C7:12:C9:E1:EC:FB:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/891439fd-34b5-3a59-98cf-17456b30b05b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ce57877c-89ad-4d14-9b2c-3fbd440b003b.crl X509v3 Authority Key Identifier: keyid:EE:8F:89:26:87:2F:B3:3A:F5:F1:46:8F:13:B6:F1:C6:1F:12:56:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer sbgp-ipAddrBlock: critical IPv4: 104.243.144.0/20 199.38.168.0/22 IPv6: 2606:780::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:98:52:62:f7:9a:fa:d1:43:79:ba:07:32:2a:86:95:0c:33: fc:ff:6d:e2:ad:c6:5b:f6:cb:d2:28:84:52:f4:0c:6d:41:3c: 62:03:0a:e0:d8:e7:61:86:96:3e:42:9f:83:11:a3:14:cd:0c: 20:d7:68:83:91:f7:d9:0b:cc:9c:c2:9c:eb:55:ce:39:39:b3: ed:78:8a:a7:61:9e:f2:8c:69:f9:7a:8a:e4:65:a6:9a:c1:e0: f9:fd:bb:f3:ec:7e:00:40:90:b2:80:3c:8a:d9:7e:f2:69:cb: 9d:f0:99:c8:46:be:24:cc:ef:5d:47:26:01:25:ef:a7:f1:38: ac:a0:4b:96:2a:5a:08:a7:e8:5b:14:78:ae:db:f0:35:91:4e: b8:e1:82:91:c4:ea:fd:57:05:f6:d5:81:b1:06:04:22:41:04: 0a:e7:4c:f8:62:8c:03:aa:8c:2e:54:e0:58:b3:93:eb:93:81: 64:0c:04:f4:ac:3c:6f:05:11:8b:d1:19:72:72:03:7f:d5:dc: 92:a6:b4:06:94:49:20:44:38:c9:a9:4d:19:2e:c3:f2:34:c3: 5c:cf:6a:8b:4d:aa:b0:fb:55:55:ba:62:63:75:05:30:9d:52: 64:fa:02:da:8f:8e:d1:7e:16:f1:59:50:c2:8f:fd:1e:0a:30: 24:ea:b8:ab -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWErSO70wnU+UH2RqAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U1Nzg3N2MtODlhZC00ZDE0LTliMmMtM2ZiZDQ0MGIw MDNiMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NzFjMWM2MmQtYTIzNy00MTcwLTgyODEtMTNlNjM0YjU5MzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsn/IAwI4JadWc3jEOs2uZTbd4F03bDgGzsB VP/YXAE7iPR9gR1Zx362pkjkhUPAwe5UIORMYQvdXoU2cmZIB0YBH0GIaUFMpm2V 7qQBL9q+Jd8ovCzIeGEIMCBwHL+VB7IvcGGqq0uv0wkSqK0l7no5p0NoYSP4iVds s3sJOE03/1NV9WIwZzorYrj2IOwg2ufdI02Zx1p47pZuXu5ZkWzamCCX2Mh8LM8r SJMXiob8Uc8w7VHiki90nJNp7LOtqnItICp7uUIj+qmHgSEbYGDxWNGm5qsjAtH5 RM49g2dlwMcLYrIa6zK+/rvqYo8aahLNctVk9Q+x12A9pSraNwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFJAHfmLkHcPPYbgOhTbHEsnh7PsQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZTU3 ODc3Yy04OWFkLTRkMTQtOWIyYy0zZmJkNDQwYjAwM2IvODkxNDM5ZmQtMzRiNS0z YTU5LTk4Y2YtMTc0NTZiMzBiMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2U1Nzg3N2MtODlhZC00ZDE0LTli MmMtM2ZiZDQ0MGIwMDNiL2NlNTc4NzdjLTg5YWQtNGQxNC05YjJjLTNmYmQ0NDBi MDAzYi5jcmwwHwYDVR0jBBgwFoAU7o+JJocvszr18UaPE7bxxh8SVkQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jZTU3ODc3Yy04OWFkLTRkMTQtOWIyYy0zZmJk NDQwYjAwM2IuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEaPOQAwQC xyaoMA0EAgACMAcDBQAmBgeAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGKYUmL3mvrRQ3m6BzIqhpUMM/z/ beKtxlv2y9IohFL0DG1BPGIDCuDY52GGlj5Cn4MRoxTNDCDXaIOR99kLzJzCnOtV zjk5s+14iqdhnvKMafl6iuRlpprB4Pn9u/PsfgBAkLKAPIrZfvJpy53wmchGviTM 711HJgEl76fxOKygS5YqWgin6FsUeK7b8DWRTrjhgpHE6v1XBfbVgbEGBCJBBArn TPhijAOqjC5U4Fizk+uTgWQMBPSsPG8FEYvRGXJyA3/V3JKmtAaUSSBEOMmpTRku w/I0w1zPaotNqrD7VVW6YmN1BTCdUmT6AtqPjtF+FvFZUMKP/R4KMCTquKs= -----END CERTIFICATE-----Generated at Sun Aug 24 04:03:10 2025 by rpki-client