$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/f3bdbbeb-917f-3f84-9e87-7d64f37ccffc.roa File: f3bdbbeb-917f-3f84-9e87-7d64f37ccffc.roa (raw, json) Hash identifier: 66UbsexHE0JGf2Os+Ain4Wf7z9Fbi7j7I6kFndN2CDI= Subject key identifier: D0:43:2A:B9:63:94:05:2A:36:F8:BC:3A:02:0F:E1:71:8A:37:0A:04 Certificate issuer: /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4 Certificate serial: 010D0C9F4328584B7DECA9A6162F7EA58B5CBB0E Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/f3bdbbeb-917f-3f84-9e87-7d64f37ccffc.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 53334 IP address blocks: 104.153.196.0/24 maxlen: 24 104.153.197.0/24 maxlen: 24 104.153.198.0/24 maxlen: 24 104.153.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:a9:a6:16:2f:7e:a5:8b:5c:bb:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=487a1f01-e3f7-4615-b148-4f4aa82f9695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e4:a9:43:08:fc:cd:86:b8:9c:68:31:5e:f2: 08:95:61:c7:6a:b0:60:d0:4f:94:b0:c8:d0:4f:e3: 81:70:c4:d7:ab:12:d0:44:a1:ad:c4:1b:0b:b0:f3: f1:fe:25:c7:a8:54:19:18:89:50:30:a1:5c:97:23: 94:0f:13:3a:2a:5c:5e:ac:60:0d:bc:1b:b3:27:dd: 70:05:e2:12:5d:65:59:b7:47:c0:19:11:7b:11:a5: ea:98:57:3e:8b:e2:c4:3a:f4:da:d2:c8:09:c1:cf: d0:65:1e:1c:c2:e5:2c:f1:13:83:86:86:69:ab:37: 8b:8e:90:af:4a:c5:c6:54:52:58:49:a1:22:a5:5d: d3:96:11:a9:f7:0f:f8:78:59:af:a0:46:b1:fb:08: e1:fa:03:a2:98:72:66:5c:0a:b4:55:e3:57:a1:d1: 22:5d:94:13:33:cc:fe:87:36:04:de:4b:45:bf:33: 45:60:f7:df:04:66:7e:fb:47:b8:04:bf:61:dd:d6: 79:50:07:43:20:cb:6d:c8:0e:0b:e4:0a:9e:31:6b: bd:93:80:66:54:4d:49:bf:37:8e:ea:11:55:07:68: bf:c9:c7:34:7f:1d:8b:cd:44:12:d0:e6:a5:22:95: f6:5f:60:db:58:9f:e1:fd:45:81:1e:32:4e:e8:2b: 83:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:43:2A:B9:63:94:05:2A:36:F8:BC:3A:02:0F:E1:71:8A:37:0A:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/f3bdbbeb-917f-3f84-9e87-7d64f37ccffc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl X509v3 Authority Key Identifier: keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer sbgp-ipAddrBlock: critical IPv4: 104.153.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:74:89:19:1d:3e:81:bc:bc:62:7b:89:90:87:e4:7e:21:57: 68:c0:1b:b7:1b:68:10:93:d0:02:aa:5c:17:47:2f:3d:33:74: 92:96:ba:6b:fc:3f:19:8d:7a:94:b7:67:0b:4b:16:9c:a9:a1: 40:bb:7e:0a:c2:80:69:d3:0c:0e:62:8e:7f:cd:bb:66:ac:63: ea:62:f9:31:c1:e5:9c:74:4c:fd:c6:d9:bd:a5:d6:b2:bb:df: a6:85:6d:5e:3b:e7:1e:a5:6e:48:12:88:7e:04:b4:46:32:f1: 0c:47:28:44:12:16:d7:10:ee:f9:aa:11:97:1b:b9:e3:15:cc: 24:b2:a2:a1:5a:5b:4f:13:e9:f2:a6:98:e2:50:86:6b:6c:bb: d8:59:a6:43:56:0d:0c:da:bc:4e:d9:75:54:48:e2:59:ea:e5: e8:d1:f8:ab:56:a0:f2:56:c0:00:e8:17:4c:13:e6:75:a7:7b: f7:d3:a5:7d:ab:a9:98:15:03:bd:ef:99:49:0a:ab:bd:2d:10: 9d:4a:12:12:e9:d1:c3:66:bd:d9:d5:1c:3f:f9:98:89:a3:71: 64:49:7b:b8:59:36:29:e0:f4:ac:33:76:33:0b:2a:fe:1e:0c: 69:74:d4:b4:a3:d0:a2:23:77:0e:5c:21:91:63:bc:51:a6:18: 13:07:b6:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97KmmFi9+pYtcuw4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FhYmFjZGMtNjQxOS00OTcwLTgyOTgtYzdjNDRmZjhj OGQ0MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk NDg3YTFmMDEtZTNmNy00NjE1LWIxNDgtNGY0YWE4MmY5Njk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OSpQwj8zYa4nGgxXvIIlWHHarBg0E+UsMjQ T+OBcMTXqxLQRKGtxBsLsPPx/iXHqFQZGIlQMKFclyOUDxM6KlxerGANvBuzJ91w BeISXWVZt0fAGRF7EaXqmFc+i+LEOvTa0sgJwc/QZR4cwuUs8RODhoZpqzeLjpCv SsXGVFJYSaEipV3TlhGp9w/4eFmvoEax+wjh+gOimHJmXAq0VeNXodEiXZQTM8z+ hzYE3ktFvzNFYPffBGZ++0e4BL9h3dZ5UAdDIMttyA4L5AqeMWu9k4BmVE1JvzeO 6hFVB2i/ycc0fx2LzUQS0OalIpX2X2DbWJ/h/UWBHjJO6CuDzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBDKrljlAUqNvi8OgIP4XGKNwoEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83YWFi YWNkYy02NDE5LTQ5NzAtODI5OC1jN2M0NGZmOGM4ZDQvZjNiZGJiZWItOTE3Zi0z Zjg0LTllODctN2Q2NGYzN2NjZmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2FhYmFjZGMtNjQxOS00OTcwLTgy OTgtYzdjNDRmZjhjOGQ0LzdhYWJhY2RjLTY0MTktNDk3MC04Mjk4LWM3YzQ0ZmY4 YzhkNC5jcmwwHwYDVR0jBBgwFoAUSi2qGuvjHkLhZSpd8g0bkQM72TswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83YWFiYWNkYy02NDE5LTQ5NzAtODI5OC1jN2M0 NGZmOGM4ZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJnEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEh0iRkdPoG8vGJ7iZCH5H4hV2jAG7cbaBCT0AKqXBdHLz0zdJKWumv8 PxmNepS3ZwtLFpypoUC7fgrCgGnTDA5ijn/Nu2asY+pi+THB5Zx0TP3G2b2l1rK7 36aFbV475x6lbkgSiH4EtEYy8QxHKEQSFtcQ7vmqEZcbueMVzCSyoqFaW08T6fKm mOJQhmtsu9hZpkNWDQzavE7ZdVRI4lnq5ejR+KtWoPJWwADoF0wT5nWne/fTpX2r qZgVA73vmUkKq70tEJ1KEhLp0cNmvdnVHD/5mImjcWRJe7hZNing9KwzdjMLKv4e DGl01LSj0KIjdw5cIZFjvFGmGBMHtuY= -----END CERTIFICATE-----Generated at Mon Oct 20 14:21:15 2025 by rpki-client