$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/d55b35e9-c386-375b-a25f-baf47ef2f095.roa File: d55b35e9-c386-375b-a25f-baf47ef2f095.roa (raw, json) Hash identifier: S3ZD9J25smdsdRyFydshpwCEJCXIRqesZkTF7jzOaos= Subject key identifier: 85:BE:14:68:3A:87:9C:64:66:6E:EA:8F:47:72:2E:4F:DE:F7:16:04 Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584A3CE02E7FD78EA1805EEFE200 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/d55b35e9-c386-375b-a25f-baf47ef2f095.roa Signing time: Thu 19 Jun 2025 01:00:50 +0000 ROA not before: Thu 19 Jun 2025 01:00:50 +0000 ROA not after: Wed 17 Sep 2025 01:00:50 +0000 asID: 26548 IP address blocks: 104.218.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:e0:2e:7f:d7:8e:a1:80:5e:ef:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Jun 19 01:00:50 2025 GMT Not After : Sep 17 01:00:50 2025 GMT Subject: CN=7236db43-fb57-4865-b67f-e9cbdc0952dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:55:ac:91:35:2b:46:ff:12:ea:f6:f0:2c:93: 06:e5:8e:23:c9:f4:58:22:c9:4f:c0:27:36:5b:9c: 18:b9:df:c3:f1:ff:7f:b1:6d:71:03:2f:29:b2:cc: da:84:84:81:e3:4f:9c:a0:d7:23:d5:d4:0e:24:03: 33:3e:b6:0c:84:c5:17:c8:85:f0:7f:16:2f:13:1d: 46:13:34:c2:2d:cd:b6:9c:69:91:a2:0c:d1:4b:ad: 21:34:01:2b:2f:a7:14:60:21:3b:79:de:18:2e:df: be:3e:b3:3f:53:02:e9:ee:5d:e6:ba:46:9c:02:c1: 3f:b2:c7:30:2c:7d:e3:af:3c:39:51:60:d6:04:92: ab:03:19:82:e1:6f:0e:02:a5:14:b0:b5:1b:9b:ca: e1:0e:8b:6a:f7:78:b7:cc:f3:b6:a7:c6:ff:68:88: 33:2c:53:ca:a9:7c:55:ca:a8:e5:aa:02:c0:bd:41: 79:d5:b4:ec:82:df:59:f3:c5:16:2f:95:19:19:e4: 40:07:9c:1f:e5:e0:33:3d:c0:35:dc:e4:bf:d6:98: 62:48:9a:5e:3f:67:1f:a7:ea:20:ca:e2:0b:10:31: bb:d5:e1:7a:79:af:3b:ac:ac:b7:a9:99:4e:c3:3d: 8a:1c:88:16:51:fa:ff:7e:96:19:a2:28:51:dc:e5: 62:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BE:14:68:3A:87:9C:64:66:6E:EA:8F:47:72:2E:4F:DE:F7:16:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/d55b35e9-c386-375b-a25f-baf47ef2f095.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 104.218.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:01:9d:82:11:a6:d2:20:68:79:e5:42:05:50:46:77:27:b0: 34:64:e7:07:86:85:6f:66:ce:fa:4a:53:70:49:9b:b0:38:70: ad:93:fc:29:ed:be:47:7a:40:73:e9:14:28:82:ab:0b:40:de: 5a:e4:46:9f:94:6e:a2:a9:a6:1e:e7:87:1d:10:0f:df:4c:ac: fc:e3:f5:f0:9d:e7:ef:5f:61:f1:47:62:88:13:87:55:79:d2: 2c:a5:66:d6:6a:d5:eb:80:42:60:38:79:fc:22:9e:17:b4:f7: a1:f7:06:8c:f4:d9:ca:d0:86:68:70:b0:f4:a5:2d:25:4d:9a: b5:ae:3f:48:da:5a:e0:e1:af:97:00:dc:dd:76:84:fd:17:97: f7:a2:2a:e6:b6:84:20:06:e2:81:72:0f:e0:f5:4d:2b:28:5c: 50:c9:c8:86:8f:34:0d:74:97:74:88:2f:33:89:0b:5a:4b:22: b0:c7:57:f0:7d:69:26:1b:25:d5:85:4b:fc:9a:d7:7e:88:e1: 62:2e:8e:0b:51:46:62:2b:32:d5:8f:73:be:65:1f:f3:ea:0c: 1d:8b:8a:43:9c:9b:9f:a4:b7:6e:ce:bb:42:90:e4:09:0c:59: 8a:a1:cf:8e:b6:20:ea:b2:75:7b:ab:4c:f2:ba:59:18:1e:70: 67:48:bd:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo84C5/146hgF7v4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk NzIzNmRiNDMtZmI1Ny00ODY1LWI2N2YtZTljYmRjMDk1MmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVWskTUrRv8S6vbwLJMG5Y4jyfRYIslPwCc2 W5wYud/D8f9/sW1xAy8psszahISB40+coNcj1dQOJAMzPrYMhMUXyIXwfxYvEx1G EzTCLc22nGmRogzRS60hNAErL6cUYCE7ed4YLt++PrM/UwLp7l3mukacAsE/sscw LH3jrzw5UWDWBJKrAxmC4W8OAqUUsLUbm8rhDotq93i3zPO2p8b/aIgzLFPKqXxV yqjlqgLAvUF51bTsgt9Z88UWL5UZGeRAB5wf5eAzPcA13OS/1phiSJpeP2cfp+og yuILEDG71eF6ea87rKy3qZlOwz2KHIgWUfr/fpYZoihR3OViqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIW+FGg6h5xkZm7qj0dyLk/e9xYEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvZDU1YjM1ZTktYzM4Ni0z NzViLWEyNWYtYmFmNDdlZjJmMDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaNpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwBnYIRptIgaHnlQgVQRncnsDRk5weGhW9mzvpKU3BJm7A4cK2T/Cnt vkd6QHPpFCiCqwtA3lrkRp+UbqKpph7nhx0QD99MrPzj9fCd5+9fYfFHYogTh1V5 0iylZtZq1euAQmA4efwinhe096H3Boz02crQhmhwsPSlLSVNmrWuP0jaWuDhr5cA 3N12hP0Xl/eiKua2hCAG4oFyD+D1TSsoXFDJyIaPNA10l3SILzOJC1pLIrDHV/B9 aSYbJdWFS/ya136I4WIujgtRRmIrMtWPc75lH/PqDB2LikOcm5+kt27Ou0KQ5AkM WYqhz462IOqydXurTPK6WRgecGdIvTg= -----END CERTIFICATE-----Generated at Sun Jun 29 06:08:23 2025 by rpki-client