$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/2ae8aeab-aa09-31c6-a2f3-62a37183c65c.roa File: 2ae8aeab-aa09-31c6-a2f3-62a37183c65c.roa (raw, json) Hash identifier: 1mom84KVI8s4eYLwsGwEfDSiWb9ybJ/5rRDeNE6G39U= Subject key identifier: 4D:75:B8:C6:A9:50:54:5A:92:C7:01:06:63:CF:DF:0B:21:98:11:89 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584AE3B69CA34475A9AC763B0080 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/2ae8aeab-aa09-31c6-a2f3-62a37183c65c.roa Signing time: Sun 17 Aug 2025 19:17:12 +0000 ROA not before: Sun 17 Aug 2025 19:17:12 +0000 ROA not after: Sat 15 Nov 2025 20:17:12 +0000 asID: 9304 IP address blocks: 104.241.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e3:b6:9c:a3:44:75:a9:ac:76:3b:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Aug 17 19:17:12 2025 GMT Not After : Nov 15 20:17:12 2025 GMT Subject: CN=3e9f247a-acfd-42af-a2c6-da1fd6acea95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4c:5e:26:ec:81:1d:76:02:30:5a:ee:a9:6e: c1:93:10:af:06:3c:d1:7b:51:0a:89:f3:0b:dc:24: 90:26:7c:54:c0:9a:d3:fc:4a:20:70:f3:28:b0:1f: 23:f9:77:3d:51:29:ba:4e:87:fc:af:fb:c5:8d:6e: d1:bb:5d:42:1e:cc:4f:6e:8d:46:49:5b:55:b9:5f: 87:77:34:bb:05:5f:25:6a:19:fd:58:be:a8:a3:b6: 53:2b:b5:a5:54:10:9e:42:64:39:83:f2:22:18:53: f1:f4:d0:bb:13:87:c7:35:78:75:5c:ad:0b:1d:0e: fa:f1:e4:34:14:e5:01:48:0e:f4:ee:4f:52:60:e5: e6:6f:3d:d9:64:59:82:09:39:d2:f0:ee:ab:d5:9c: 7a:f9:dd:8f:e8:24:11:df:03:13:33:ce:75:b7:38: e5:b2:58:68:77:21:e0:61:21:9a:77:07:02:1a:01: c3:20:43:8e:6b:68:51:d6:bc:bb:c8:5a:4a:1e:35: 06:44:59:42:8e:18:ed:8e:09:91:1b:d3:f0:c7:f0: d9:97:31:55:37:e6:62:6e:f1:f9:68:ee:53:7e:3c: 44:0a:dc:0e:0a:94:1d:01:3b:70:2c:d1:cf:de:60: 4d:58:56:55:2c:e5:55:14:12:d6:bc:93:63:06:3a: 37:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:75:B8:C6:A9:50:54:5A:92:C7:01:06:63:CF:DF:0B:21:98:11:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/2ae8aeab-aa09-31c6-a2f3-62a37183c65c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 104.241.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:84:88:87:93:7c:d0:23:fa:55:2d:c3:ac:1f:14:13:50:e3: eb:99:8f:db:49:2c:70:4a:6a:38:a8:fb:c6:66:d7:77:03:ee: 68:c5:9a:21:a5:70:a0:70:21:47:2e:58:70:e2:03:20:f3:1f: a4:ea:e2:32:d9:19:aa:2f:90:bb:6b:60:74:b0:f7:f3:3a:4f: 65:17:d2:62:44:8a:2b:a5:2e:d3:7b:f9:fc:14:aa:eb:29:77: 32:10:c2:e2:b7:cf:c4:1c:95:df:25:e7:a0:e6:a0:38:15:c7: f9:6f:e5:dc:17:39:03:7b:bd:8f:d7:73:1a:37:9d:da:41:a3: 4a:9c:b4:31:9f:23:44:15:28:05:23:b0:76:14:99:07:91:43: d2:f6:cd:f3:e6:c3:8c:46:66:89:f5:73:d0:36:d8:1a:65:eb: 97:e3:40:33:4c:6f:0c:27:05:9a:20:94:2a:b1:72:01:fc:dd: 06:7b:55:2c:24:c6:86:2b:83:44:87:4a:e1:b1:eb:c2:0b:78: 8a:6f:5c:a2:a4:21:4b:31:c9:fe:fa:9a:51:07:ec:46:a5:6e: e2:05:f0:90:43:b9:9c:53:79:19:48:97:5e:81:d5:a8:bb:56: fc:1f:51:48:f5:a5:0f:0e:74:08:11:07:bf:49:82:6d:d9:83: 99:31:92:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErjtpyjRHWprHY7AIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDgxNzE5MTcxMloXDTI1MTExNTIwMTcxMlowLzEtMCsGA1UEAxMk M2U5ZjI0N2EtYWNmZC00MmFmLWEyYzYtZGExZmQ2YWNlYTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kxeJuyBHXYCMFruqW7BkxCvBjzRe1EKifML 3CSQJnxUwJrT/EogcPMosB8j+Xc9USm6Tof8r/vFjW7Ru11CHsxPbo1GSVtVuV+H dzS7BV8lahn9WL6oo7ZTK7WlVBCeQmQ5g/IiGFPx9NC7E4fHNXh1XK0LHQ768eQ0 FOUBSA707k9SYOXmbz3ZZFmCCTnS8O6r1Zx6+d2P6CQR3wMTM851tzjlslhodyHg YSGadwcCGgHDIEOOa2hR1ry7yFpKHjUGRFlCjhjtjgmRG9Pwx/DZlzFVN+ZibvH5 aO5TfjxECtwOCpQdATtwLNHP3mBNWFZVLOVVFBLWvJNjBjo3twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE11uMapUFRakscBBmPP3wshmBGJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMmFlOGFlYWItYWEwOS0z MWM2LWEyZjMtNjJhMzcxODNjNjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPGXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACEiIeTfNAj+lUtw6wfFBNQ4+uZj9tJLHBKajio+8Zm13cD7mjFmiGl cKBwIUcuWHDiAyDzH6Tq4jLZGaovkLtrYHSw9/M6T2UX0mJEiiulLtN7+fwUqusp dzIQwuK3z8Qcld8l56DmoDgVx/lv5dwXOQN7vY/Xcxo3ndpBo0qctDGfI0QVKAUj sHYUmQeRQ9L2zfPmw4xGZon1c9A22Bpl65fjQDNMbwwnBZoglCqxcgH83QZ7VSwk xoYrg0SHSuGx68ILeIpvXKKkIUsxyf76mlEH7EalbuIF8JBDuZxTeRlIl16B1ai7 VvwfUUj1pQ8OdAgRB79Jgm3Zg5kxkrM= -----END CERTIFICATE-----Generated at Sat Aug 23 15:43:28 2025 by rpki-client