$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/cd6e8527-6f2d-321d-94f8-790b9c71fea3.roa File: cd6e8527-6f2d-321d-94f8-790b9c71fea3.roa (raw, json) Hash identifier: CJCVultBi6sGmF4Z4W3fpqmr95a9N3jJIh86LiyfO0c= Subject key identifier: 88:0A:D6:CB:DD:16:45:41:1E:BD:D2:75:1E:93:53:A6:A4:D7:B3:76 Certificate issuer: /CN=1fcf03e6-ce00-46fb-a94d-ae02bfc41232 Certificate serial: 010D0C9F4328584B80B75BF942DB08E46E791680 Authority key identifier: AA:3C:33:55:FE:F6:2B:B1:51:3F:B9:E9:F9:A2:CC:9C:97:D0:C2:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/cd6e8527-6f2d-321d-94f8-790b9c71fea3.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 16509 IP address blocks: 104.232.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/1fcf03e6-ce00-46fb-a94d-ae02bfc41232.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/1fcf03e6-ce00-46fb-a94d-ae02bfc41232.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:5b:f9:42:db:08:e4:6e:79:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fcf03e6-ce00-46fb-a94d-ae02bfc41232 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=883b3242-6274-4971-8cc2-bcdeeee02b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:eb:65:39:49:d3:8b:9c:ec:53:be:cf:72:02: a4:4e:14:c2:96:88:80:c8:16:a3:e9:33:2e:de:1b: c1:85:c3:44:de:b0:78:0a:1b:71:63:e2:3a:b5:f9: 7a:f3:7e:b7:b5:cb:72:48:a8:d6:49:72:ae:54:ae: cd:1f:3b:3a:b4:70:4f:36:96:71:0e:69:2c:5d:29: 19:e3:80:92:96:da:ce:a8:77:20:63:3e:b8:d4:f8: 87:86:0d:2a:e3:c4:cf:16:63:02:3f:87:f6:6e:69: de:4f:5e:7c:59:4d:96:c4:4d:83:89:b9:08:bc:33: 58:78:18:cb:2e:45:c5:ba:9e:39:87:54:a3:91:d5: 32:0a:88:8a:91:00:ca:08:28:43:7c:43:bd:aa:bd: ea:15:92:33:7c:65:52:5e:a5:ca:28:d0:ca:2e:05: a2:2c:f2:cc:10:28:2d:bd:ba:4b:41:9f:ef:5b:8d: f8:a3:a2:04:1a:e8:0e:c0:21:7c:c4:a8:c5:a5:db: db:29:c4:1a:5a:83:7c:c6:79:46:e4:8b:dc:c3:f2: f7:18:ca:46:ea:b2:86:f9:7c:87:1b:75:38:ed:3a: ba:bf:9f:ab:42:fe:b7:dc:54:96:de:31:75:32:0a: fe:43:0d:7a:3a:25:93:97:58:32:5d:03:50:1d:44: 39:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0A:D6:CB:DD:16:45:41:1E:BD:D2:75:1E:93:53:A6:A4:D7:B3:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/cd6e8527-6f2d-321d-94f8-790b9c71fea3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/1fcf03e6-ce00-46fb-a94d-ae02bfc41232.crl X509v3 Authority Key Identifier: keyid:AA:3C:33:55:FE:F6:2B:B1:51:3F:B9:E9:F9:A2:CC:9C:97:D0:C2:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232.cer sbgp-ipAddrBlock: critical IPv4: 104.232.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:44:46:e0:86:07:6f:56:4f:75:72:2c:3f:c8:2f:e0:3e:7e: 2a:bc:74:24:ce:d5:0e:98:7c:46:83:37:b9:30:90:95:5d:7a: 73:05:a5:7f:cb:c0:bb:49:83:fe:91:a0:61:41:12:68:34:16: f2:e7:9b:23:a0:fd:2e:95:18:67:0b:77:87:07:31:d3:1e:27: 79:8f:de:54:14:85:78:28:36:cb:fc:fc:22:ae:ed:7b:ac:48: d0:49:ff:69:a1:27:9e:21:7b:bd:df:fe:12:5a:86:39:cb:7a: eb:7d:b1:74:8f:55:ea:cf:eb:f8:8e:d1:63:a9:1b:08:ec:cf: f0:36:fc:96:32:ad:ea:c0:69:8d:28:c0:02:dc:b9:e4:ba:f5: 34:fd:b9:f2:be:9c:f3:da:94:ae:62:3b:ee:49:3b:b5:c4:05: 67:9e:ad:d9:5d:e6:e2:93:23:e9:4b:0a:60:d3:09:19:ac:05: 66:e3:04:ae:7d:91:2e:34:56:a8:77:65:b3:e7:42:cb:53:8f: 95:cb:1c:f5:2c:45:e7:86:45:2e:99:a3:0b:7c:78:73:a2:3d: 15:fc:63:77:1e:6d:b5:21:f7:94:84:5b:84:77:e0:06:fc:c8: 4a:22:9d:fb:8d:5b:3f:b0:e5:f9:39:aa:fd:fd:e4:56:95:65: db:f2:45:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt1v5QtsI5G55FoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZjAzZTYtY2UwMC00NmZiLWE5NGQtYWUwMmJmYzQx MjMyMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk ODgzYjMyNDItNjI3NC00OTcxLThjYzItYmNkZWVlZTAyYjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkutlOUnTi5zsU77PcgKkThTCloiAyBaj6TMu 3hvBhcNE3rB4ChtxY+I6tfl68363tctySKjWSXKuVK7NHzs6tHBPNpZxDmksXSkZ 44CSltrOqHcgYz641PiHhg0q48TPFmMCP4f2bmneT158WU2WxE2DibkIvDNYeBjL LkXFup45h1SjkdUyCoiKkQDKCChDfEO9qr3qFZIzfGVSXqXKKNDKLgWiLPLMECgt vbpLQZ/vW434o6IEGugOwCF8xKjFpdvbKcQaWoN8xnlG5Ivcw/L3GMpG6rKG+XyH G3U47Tq6v5+rQv633FSW3jF1Mgr+Qw16OiWTl1gyXQNQHUQ5CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgK1svdFkVBHr3SdR6TU6ak17N2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZmNm MDNlNi1jZTAwLTQ2ZmItYTk0ZC1hZTAyYmZjNDEyMzIvY2Q2ZTg1MjctNmYyZC0z MjFkLTk0ZjgtNzkwYjljNzFmZWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWZjZjAzZTYtY2UwMC00NmZiLWE5 NGQtYWUwMmJmYzQxMjMyLzFmY2YwM2U2LWNlMDAtNDZmYi1hOTRkLWFlMDJiZmM0 MTIzMi5jcmwwHwYDVR0jBBgwFoAUqjwzVf72K7FRP7np+aLMnJfQwt8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZmNmMDNlNi1jZTAwLTQ2ZmItYTk0ZC1hZTAy YmZjNDEyMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOgtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhERuCGB29WT3VyLD/IL+A+fiq8dCTO1Q6YfEaDN7kwkJVdenMFpX/L wLtJg/6RoGFBEmg0FvLnmyOg/S6VGGcLd4cHMdMeJ3mP3lQUhXgoNsv8/CKu7Xus SNBJ/2mhJ54he73f/hJahjnLeut9sXSPVerP6/iO0WOpGwjsz/A2/JYyrerAaY0o wALcueS69TT9ufK+nPPalK5iO+5JO7XEBWeerdld5uKTI+lLCmDTCRmsBWbjBK59 kS40Vqh3ZbPnQstTj5XLHPUsReeGRS6Zowt8eHOiPRX8Y3cebbUh95SEW4R34Ab8 yEoinfuNWz+w5fk5qv395FaVZdvyRf0= -----END CERTIFICATE-----Generated at Mon Oct 20 12:56:50 2025 by rpki-client