$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/7972f1ff-9f54-3af8-9eff-7da8a92874af.roa File: 7972f1ff-9f54-3af8-9eff-7da8a92874af.roa (raw, json) Hash identifier: Vwo2llocJsQWmegKB6L5vfToK5VIqgo/qgxJnC7WV+M= Subject key identifier: 11:B1:8A:D6:B0:91:64:AF:39:06:4F:3C:25:F7:60:5A:A5:B2:0A:DE Certificate issuer: /CN=1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82 Certificate serial: 010D0C9F4328584B80B75B912518439265154FD0 Authority key identifier: C3:86:33:E3:D7:3C:4D:34:25:8E:3E:1E:29:B3:54:DD:EE:51:23:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/7972f1ff-9f54-3af8-9eff-7da8a92874af.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 48252 IP address blocks: 104.245.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:5b:91:25:18:43:92:65:15:4f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=25b1761d-6782-4d33-80dd-c44a6a2cd8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f0:8a:06:cd:cb:72:e3:58:04:23:fe:ad:fa: df:c1:33:13:7a:aa:b1:8b:d3:63:ea:7b:07:54:42: 86:fe:63:27:87:8e:89:bd:7c:4e:f9:fe:0b:53:dd: 22:47:bf:ae:8a:ee:92:03:2b:5d:38:2d:54:63:09: 30:22:05:6e:ce:b3:4d:5b:e9:36:90:0a:2f:1c:68: 91:29:5b:25:9f:0d:f1:b9:2c:e0:d8:45:42:8a:49: e9:91:cf:18:98:4c:02:6e:9a:ab:98:96:71:4b:6b: 3d:2d:c4:eb:3a:6c:d9:ff:94:37:d5:92:dd:cb:49: 5d:d4:53:c4:e0:06:d4:c9:b1:c5:2b:46:7c:0f:c3: 9f:50:ce:be:ae:72:8b:37:0d:fe:b2:2a:f3:2e:24: 00:e8:ef:35:73:ff:d5:ad:93:99:c8:d8:d4:e8:b9: 42:66:7f:56:d3:1a:6d:eb:ae:41:14:61:c7:49:32: 2f:f3:7b:ec:9e:3a:fa:d1:62:72:2c:63:c5:76:41: d7:8d:ac:54:57:c2:f4:a6:d3:b5:4a:2a:4c:23:9c: 77:e8:df:0c:93:74:64:f7:ff:42:36:30:87:b3:b6: 94:82:78:4f:02:7e:fa:8c:63:ba:db:29:fa:4b:5e: 6a:5e:7e:0f:fe:88:05:7a:55:18:73:9c:6e:15:16: 04:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B1:8A:D6:B0:91:64:AF:39:06:4F:3C:25:F7:60:5A:A5:B2:0A:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/7972f1ff-9f54-3af8-9eff-7da8a92874af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.crl X509v3 Authority Key Identifier: keyid:C3:86:33:E3:D7:3C:4D:34:25:8E:3E:1E:29:B3:54:DD:EE:51:23:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.cer sbgp-ipAddrBlock: critical IPv4: 104.245.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:ef:2b:a7:59:45:b7:40:0a:77:a7:cd:a9:14:75:57:cc:b1: e2:57:cd:a9:f0:f6:e6:98:a3:ce:8b:24:c5:9c:72:51:7a:25: 50:e6:c5:c9:84:c0:46:42:34:22:18:11:83:46:fc:ca:91:40: 5a:53:d2:ac:9a:23:38:4b:29:75:84:b1:9d:85:7c:a2:e5:f7: 36:03:c1:1e:50:bf:6e:09:4d:b5:a5:07:06:74:3a:b8:6d:cc: 2a:01:f2:fb:61:8e:55:73:84:6d:79:8a:d4:7f:91:42:e9:37: 36:26:23:86:e7:ca:02:9c:c5:12:00:46:96:a2:fe:fa:be:57: 54:93:5f:a7:05:8e:e8:aa:4d:8c:3c:99:eb:0a:8f:73:e4:8b: 1e:d3:87:b2:d1:cc:c7:3c:c0:7c:16:00:eb:fa:86:ae:d3:99: c6:a6:08:a6:7b:96:af:7d:87:f5:0b:25:c6:c4:b7:7c:d6:dc: 2d:21:c2:18:1c:53:bc:bc:5f:b1:79:a3:80:7a:0e:e3:9c:5d: 1b:73:81:93:0d:13:87:39:78:8d:33:b3:d7:48:4f:42:a4:57: 1d:95:af:c1:20:72:ed:0b:fe:e3:8d:73:bd:7d:44:f3:e6:ad: 4d:9a:23:7d:02:ca:f5:f2:fc:cd:75:91:73:b1:80:0d:58:2f: de:e9:f2:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt1uRJRhDkmUVT9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ3Yzc3ZWMtMGFkMC00ODRiLWEwYzUtZjVjYjEyZDFk ZTgyMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk MjViMTc2MWQtNjc4Mi00ZDMzLTgwZGQtYzQ0YTZhMmNkOGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPCKBs3LcuNYBCP+rfrfwTMTeqqxi9Nj6nsH VEKG/mMnh46JvXxO+f4LU90iR7+uiu6SAytdOC1UYwkwIgVuzrNNW+k2kAovHGiR KVslnw3xuSzg2EVCiknpkc8YmEwCbpqrmJZxS2s9LcTrOmzZ/5Q31ZLdy0ld1FPE 4AbUybHFK0Z8D8OfUM6+rnKLNw3+sirzLiQA6O81c//VrZOZyNjU6LlCZn9W0xpt 665BFGHHSTIv83vsnjr60WJyLGPFdkHXjaxUV8L0ptO1SipMI5x36N8Mk3Rk9/9C NjCHs7aUgnhPAn76jGO62yn6S15qXn4P/ogFelUYc5xuFRYEtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGxitawkWSvOQZPPCX3YFqlsgreMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZDdj NzdlYy0wYWQwLTQ4NGItYTBjNS1mNWNiMTJkMWRlODIvNzk3MmYxZmYtOWY1NC0z YWY4LTllZmYtN2RhOGE5Mjg3NGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWQ3Yzc3ZWMtMGFkMC00ODRiLWEw YzUtZjVjYjEyZDFkZTgyLzFkN2M3N2VjLTBhZDAtNDg0Yi1hMGM1LWY1Y2IxMmQx ZGU4Mi5jcmwwHwYDVR0jBBgwFoAUw4Yz49c8TTQljj4eKbNU3e5RIyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZDdjNzdlYy0wYWQwLTQ4NGItYTBjNS1mNWNi MTJkMWRlODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaPVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/vK6dZRbdACnenzakUdVfMseJXzanw9uaYo86LJMWcclF6JVDmxcmE wEZCNCIYEYNG/MqRQFpT0qyaIzhLKXWEsZ2FfKLl9zYDwR5Qv24JTbWlBwZ0Orht zCoB8vthjlVzhG15itR/kULpNzYmI4bnygKcxRIARpai/vq+V1STX6cFjuiqTYw8 mesKj3Pkix7Th7LRzMc8wHwWAOv6hq7TmcamCKZ7lq99h/ULJcbEt3zW3C0hwhgc U7y8X7F5o4B6DuOcXRtzgZMNE4c5eI0zs9dIT0KkVx2Vr8Egcu0L/uONc719RPPm rU2aI30CyvXy/M11kXOxgA1YL97p8rg= -----END CERTIFICATE-----Generated at Mon Oct 20 02:39:14 2025 by rpki-client