$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/012f7b1f-4dda-3629-9c3d-e6d0828a40ff.roa File: 012f7b1f-4dda-3629-9c3d-e6d0828a40ff.roa (raw, json) Hash identifier: L1hqiP/qEBRMYC5mjpVeiThn2Vyt4U3uUM+wwdsp8HU= Subject key identifier: 00:FE:F7:38:0B:3B:8E:1F:68:1A:17:00:E9:E9:3F:2D:C3:A8:A3:2F Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F4328584B4081AEB5DBB216A3FAA27E80 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/012f7b1f-4dda-3629-9c3d-e6d0828a40ff.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 14618 IP address blocks: 104.218.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:ae:b5:db:b2:16:a3:fa:a2:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=b9dd6d6f-bbab-4685-b0e5-7c41eefb1085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7a:09:76:a2:0c:00:c4:e0:f1:50:a7:b5:75: 24:67:db:05:e1:71:69:07:fa:66:2e:87:a7:3c:7f: 2d:17:92:eb:65:e9:59:7c:70:7e:cd:4f:c2:73:d6: 05:f2:1c:bd:af:d5:ad:be:96:1d:2e:54:22:b0:8d: c4:74:55:ff:ed:e4:3e:03:34:fb:55:78:6b:39:b2: 97:50:43:03:9e:9d:c1:08:59:6c:8b:79:3b:4c:cf: c6:0b:c7:ff:8a:db:f8:02:e5:a7:50:e4:89:c7:6f: 34:ba:f6:c3:d5:76:32:30:4c:7f:83:4d:f8:05:2e: 51:32:28:4b:06:a4:3c:89:85:84:58:57:db:1e:f3: f9:f4:32:5a:9b:15:4e:2b:b1:99:b7:44:5f:1d:64: a6:20:c1:61:de:3f:4d:b4:c4:bd:59:66:43:45:f0: 7e:6e:24:f4:b6:10:eb:5f:87:66:f1:85:f5:b9:82: 4f:56:7c:d0:e4:ca:e3:23:9c:da:3f:da:78:37:29: 4b:6b:98:46:81:73:ca:0d:e8:8a:28:5f:26:99:83: 7e:1c:05:f0:64:67:42:43:04:e1:0b:f5:a6:62:17: 99:fe:89:52:7c:d3:f1:23:29:d5:46:b3:69:b9:c1: b8:92:7e:f5:b0:83:70:7e:7c:24:c7:54:c1:e3:19: 51:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FE:F7:38:0B:3B:8E:1F:68:1A:17:00:E9:E9:3F:2D:C3:A8:A3:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/012f7b1f-4dda-3629-9c3d-e6d0828a40ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv4: 104.218.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:19:72:89:86:10:60:e1:a7:77:a5:7d:56:a6:4a:49:88:72: fb:0f:f9:a6:11:bf:cb:68:a4:26:5d:64:5e:6b:b7:23:e4:f4: 84:4b:de:20:a8:12:3e:af:57:d4:e0:2f:7e:13:e3:fb:93:7a: 45:e4:13:4d:a9:6f:72:33:94:83:99:d5:ce:d3:3a:4e:37:3a: 24:93:92:2e:71:34:99:e2:57:a2:53:a3:e5:17:33:06:01:ca: 79:42:9b:03:52:1f:57:96:aa:3a:d7:57:77:16:46:06:23:98: ed:62:f0:3b:8c:e4:b9:78:7d:6e:23:76:21:76:a7:c5:77:00: 02:64:98:7e:de:6d:6a:13:3f:6f:f4:7f:8f:59:eb:95:16:df: fd:c2:34:1d:9a:de:dc:db:60:61:1f:6b:66:f9:e1:01:99:40: 05:a3:bf:f6:47:e7:6b:1b:5b:7b:5b:66:74:02:b9:91:b4:cb: 5e:3e:80:c8:93:bb:e2:2b:ea:b9:ad:8d:24:46:49:9b:ce:52: 16:45:24:7c:2f:c2:bb:bb:bb:d7:46:9e:9c:8e:d4:48:cd:28: 90:a1:19:7e:33:f5:42:cc:25:38:1a:e4:22:27:7c:a9:be:df: 46:82:51:2d:49:60:f0:e6:ab:8e:47:0f:a0:44:f0:61:85:e3: 5a:ac:c1:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAga6127IWo/qifoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk YjlkZDZkNmYtYmJhYi00Njg1LWIwZTUtN2M0MWVlZmIxMDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHoJdqIMAMTg8VCntXUkZ9sF4XFpB/pmLoen PH8tF5LrZelZfHB+zU/Cc9YF8hy9r9WtvpYdLlQisI3EdFX/7eQ+AzT7VXhrObKX UEMDnp3BCFlsi3k7TM/GC8f/itv4AuWnUOSJx280uvbD1XYyMEx/g034BS5RMihL BqQ8iYWEWFfbHvP59DJamxVOK7GZt0RfHWSmIMFh3j9NtMS9WWZDRfB+biT0thDr X4dm8YX1uYJPVnzQ5MrjI5zaP9p4NylLa5hGgXPKDeiKKF8mmYN+HAXwZGdCQwTh C/WmYheZ/olSfNPxIynVRrNpucG4kn71sINwfnwkx1TB4xlRJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAD+9zgLO44faBoXAOnpPy3DqKMvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvMDEyZjdiMWYtNGRkYS0z NjI5LTljM2QtZTZkMDgyOGE0MGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoZcomGEGDhp3elfVamSkmIcvsP+aYRv8topCZdZF5rtyPk9IRL3iCo Ej6vV9TgL34T4/uTekXkE02pb3IzlIOZ1c7TOk43OiSTki5xNJniV6JTo+UXMwYB ynlCmwNSH1eWqjrXV3cWRgYjmO1i8DuM5Ll4fW4jdiF2p8V3AAJkmH7ebWoTP2/0 f49Z65UW3/3CNB2a3tzbYGEfa2b54QGZQAWjv/ZH52sbW3tbZnQCuZG0y14+gMiT u+Ir6rmtjSRGSZvOUhZFJHwvwru7u9dGnpyO1EjNKJChGX4z9ULMJTga5CInfKm+ 30aCUS1JYPDmq45HD6BE8GGF41qswV4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:06:00 2025 by rpki-client