$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/4168211f-81ee-3a06-a39d-59f42a3495b8.roa File: 4168211f-81ee-3a06-a39d-59f42a3495b8.roa (raw, json) Hash identifier: zEtjX7KdrusiOfjI0eKtbz1STvJlswUA4OZmn2cnNkc= Subject key identifier: 0B:54:EF:77:7E:FF:52:0B:DE:E9:D7:32:1F:D2:EE:13:23:1F:AD:4A Certificate issuer: /CN=84052649-3401-4ba6-ad82-6f310741b104 Certificate serial: 010D0C9F4328584AAB265B23FA8F576981DEB800 Authority key identifier: C5:7E:94:BF:F8:88:D8:AD:FC:2A:56:CE:FC:62:CA:F7:50:07:B3:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/4168211f-81ee-3a06-a39d-59f42a3495b8.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 395129 IP address blocks: 108.59.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:5b:23:fa:8f:57:69:81:de:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84052649-3401-4ba6-ad82-6f310741b104 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=1c8726ad-1023-4ef0-9581-ad2bcd805373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:91:94:b3:8f:d2:18:82:1f:c0:b7:e6:e2:d1: a0:66:73:c5:11:10:c1:0a:ff:75:38:69:a9:59:d1: 14:eb:d2:bd:1b:10:31:4d:4f:71:8b:31:05:05:b7: 16:22:6c:4a:d4:a8:2b:04:80:2f:23:9c:9a:f9:e3: 0a:bc:d7:61:10:20:c9:8b:78:fc:ef:cc:c3:06:44: 9e:c3:61:e8:b8:02:86:35:e9:56:1e:94:bb:e4:4e: 3e:60:11:62:77:0b:12:72:ee:05:e3:6d:2d:a8:2b: e2:83:dc:3f:f6:fc:66:83:1a:d6:a7:02:e9:5e:67: 1c:82:47:83:4f:e6:20:f4:5d:4e:5a:ef:7b:6c:da: d0:d4:90:93:bf:1f:d7:f3:6d:17:78:38:b4:d6:af: 0e:3b:0d:77:35:eb:a8:51:ac:cb:86:58:81:ed:92: 2b:74:73:58:85:4e:fb:c2:29:4f:9f:93:57:39:ce: c9:08:a0:3c:65:97:11:73:bd:38:8e:1f:88:79:04: 32:34:b4:bf:af:be:91:b7:57:e3:b7:b0:a9:2b:5f: 37:e2:17:0f:e7:c0:4a:02:21:e4:8d:32:f2:11:78: f7:1f:33:d8:6f:69:4d:02:85:c6:65:57:2c:f9:66: af:bd:63:1a:1b:fa:f2:7f:2e:84:ac:c0:b7:5e:e7: 64:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:54:EF:77:7E:FF:52:0B:DE:E9:D7:32:1F:D2:EE:13:23:1F:AD:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/4168211f-81ee-3a06-a39d-59f42a3495b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.crl X509v3 Authority Key Identifier: keyid:C5:7E:94:BF:F8:88:D8:AD:FC:2A:56:CE:FC:62:CA:F7:50:07:B3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer sbgp-ipAddrBlock: critical IPv4: 108.59.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:4e:9e:1a:bf:cb:75:bf:89:f0:16:8a:14:4a:1f:a6:e5:e8: 06:99:72:fb:7a:18:57:87:50:40:36:00:9a:0f:40:ee:18:3e: c4:5b:d6:c0:4d:b3:8c:8f:4f:51:58:2b:bb:df:a1:09:1a:99: 48:90:c3:ff:bb:f0:8d:81:8d:c5:37:7c:d8:e8:83:b5:65:01: 59:71:dd:48:72:15:af:1b:42:5a:85:49:11:71:37:4b:48:8c: 36:34:de:63:33:40:2f:1f:49:6b:f7:d5:51:b7:6d:72:31:75: 50:74:6f:8f:43:cb:ed:aa:25:15:86:7d:a0:f6:e5:66:5f:a0: 8f:54:08:f0:72:80:1f:13:51:87:16:2d:60:98:f3:f9:ed:8b: 8c:1e:04:b0:c8:b0:a9:2a:55:79:62:16:40:b9:4d:16:a4:db: 9c:13:fe:01:0c:59:06:53:ee:fb:31:4f:71:1f:cf:53:a2:86: 6a:db:e6:40:e0:b1:9f:5b:e8:de:2f:9f:33:99:08:f6:7a:96: 24:f3:22:6b:02:a5:bd:37:48:99:6e:95:0e:c1:e6:81:5f:5e: 2f:16:6d:4e:10:f9:6f:a3:3d:67:14:51:d6:d3:66:cd:a7:3f: 50:38:bd:37:4d:05:74:5d:45:84:74:d7:18:e0:f5:1f:e5:b9: 3e:aa:b9:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlsj+o9XaYHeuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQwNTI2NDktMzQwMS00YmE2LWFkODItNmYzMTA3NDFi MTA0MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk MWM4NzI2YWQtMTAyMy00ZWYwLTk1ODEtYWQyYmNkODA1MzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZGUs4/SGIIfwLfm4tGgZnPFERDBCv91OGmp WdEU69K9GxAxTU9xizEFBbcWImxK1KgrBIAvI5ya+eMKvNdhECDJi3j878zDBkSe w2HouAKGNelWHpS75E4+YBFidwsScu4F420tqCvig9w/9vxmgxrWpwLpXmccgkeD T+Yg9F1OWu97bNrQ1JCTvx/X820XeDi01q8OOw13NeuoUazLhliB7ZIrdHNYhU77 wilPn5NXOc7JCKA8ZZcRc704jh+IeQQyNLS/r76Rt1fjt7CpK1834hcP58BKAiHk jTLyEXj3HzPYb2lNAoXGZVcs+WavvWMaG/ryfy6ErMC3XudkPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtU73d+/1IL3unXMh/S7hMjH61KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NDA1 MjY0OS0zNDAxLTRiYTYtYWQ4Mi02ZjMxMDc0MWIxMDQvNDE2ODIxMWYtODFlZS0z YTA2LWEzOWQtNTlmNDJhMzQ5NWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODQwNTI2NDktMzQwMS00YmE2LWFk ODItNmYzMTA3NDFiMTA0Lzg0MDUyNjQ5LTM0MDEtNGJhNi1hZDgyLTZmMzEwNzQx YjEwNC5jcmwwHwYDVR0jBBgwFoAUxX6Uv/iI2K38KlbO/GLK91AHs6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NDA1MjY0OS0zNDAxLTRiYTYtYWQ4Mi02ZjMx MDc0MWIxMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbDvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJOnhq/y3W/ifAWihRKH6bl6AaZcvt6GFeHUEA2AJoPQO4YPsRb1sBN s4yPT1FYK7vfoQkamUiQw/+78I2BjcU3fNjog7VlAVlx3UhyFa8bQlqFSRFxN0tI jDY03mMzQC8fSWv31VG3bXIxdVB0b49Dy+2qJRWGfaD25WZfoI9UCPBygB8TUYcW LWCY8/nti4weBLDIsKkqVXliFkC5TRak25wT/gEMWQZT7vsxT3Efz1Oihmrb5kDg sZ9b6N4vnzOZCPZ6liTzImsCpb03SJlulQ7B5oFfXi8WbU4Q+W+jPWcUUdbTZs2n P1A4vTdNBXRdRYR01xjg9R/luT6quRE= -----END CERTIFICATE-----Generated at Sun Aug 24 00:30:32 2025 by rpki-client