$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2ca1fafd-5784-383a-86a2-45ab028896d0.roa File: 2ca1fafd-5784-383a-86a2-45ab028896d0.roa (raw, json) Hash identifier: 9+/mopJayBpVj7zMt6Z7PbBIBn+ICQ5PtjGQ58jfZo8= Subject key identifier: E5:00:54:26:1F:DE:D9:B8:32:F5:AE:D3:C4:82:B1:ED:BF:3D:1F:31 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584B609C9251D545E140844CE180 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2ca1fafd-5784-383a-86a2-45ab028896d0.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 931 IP address blocks: 104.224.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:92:51:d5:45:e1:40:84:4c:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=c7f8f75a-d856-403e-88fd-86582769506d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cf:bf:56:85:04:d7:5d:53:6e:6c:57:33:ac: 51:3a:e8:3a:5e:82:71:18:8a:b4:52:39:09:ae:89: d1:dd:aa:aa:ea:9c:be:72:61:eb:79:a9:38:06:9e: 63:31:ae:3c:6c:37:e1:06:39:84:74:7a:9b:6d:09: 8d:19:ee:9c:cb:77:5b:37:db:e0:f3:fc:12:4f:e2: 5b:f0:97:19:71:e7:26:16:0f:2d:bc:da:df:10:ee: de:cb:25:b3:52:a2:4d:75:ab:1a:f4:5d:6c:87:1a: c3:e3:17:4e:ac:7b:8e:b5:64:a3:aa:89:33:b9:ed: cb:87:c6:f4:94:d0:1a:75:2d:96:bb:42:10:b8:4d: 6e:4d:e5:16:cf:96:5f:d4:0c:70:ec:3b:7b:f3:1f: fa:68:15:77:cf:7e:12:55:41:41:0a:84:46:e0:b9: a2:d4:a2:3a:0a:9d:05:a0:51:65:63:e6:84:1d:f3: cc:45:6d:b6:13:25:2b:75:6a:5b:09:b4:78:73:15: 8c:6b:44:70:d2:d8:89:34:df:19:f2:1c:ea:d2:bc: 16:59:0c:fe:92:23:cb:9a:89:fa:7d:a7:0f:2b:f9: 88:56:25:4b:40:19:07:32:76:59:9d:23:ed:50:37: f8:50:42:a7:95:b2:f6:c6:9e:35:b7:06:f7:14:4e: 3e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:00:54:26:1F:DE:D9:B8:32:F5:AE:D3:C4:82:B1:ED:BF:3D:1F:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2ca1fafd-5784-383a-86a2-45ab028896d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.224.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:78:16:46:f1:21:7a:5e:7c:6d:28:25:1e:07:98:61:a3:87: df:79:e8:aa:c7:22:84:7c:71:d2:19:4b:ae:9e:66:8b:47:3b: 9c:79:91:3b:93:cf:46:9f:f3:8d:f5:c3:c8:fa:98:a4:5d:82: a7:f9:3d:ae:21:0e:6f:53:fb:b1:36:da:7e:12:7d:59:6e:9e: 0e:79:c1:a8:b6:c4:a6:fd:ae:4c:e3:de:ed:a1:fb:8c:16:50: 5c:38:8c:84:1b:4c:98:3f:10:10:77:e7:f3:ac:dd:7b:0f:16: a0:e0:ca:f9:5b:a2:f9:8c:dc:95:9a:4e:c3:7d:c1:88:78:06: 88:49:0b:9b:31:f2:84:7f:6a:0b:0e:1f:43:f2:cc:be:c9:0f: a9:11:08:e8:57:63:11:0f:d0:96:81:78:09:60:7e:ad:75:34: f7:a0:d8:b1:d6:ee:51:c7:b1:52:0d:49:ca:d4:51:70:e1:6f: b8:93:b2:76:a7:05:5f:d1:92:96:82:3f:c7:fd:88:26:99:c6: 5f:4f:98:bf:af:2e:15:b9:4a:bd:98:41:1e:d3:e6:1d:3c:44: 88:aa:f0:e6:93:2e:af:fa:6d:17:82:61:13:28:be:39:fa:7d: 1d:29:37:fc:5f:c2:6b:74:14:0c:48:29:b9:2b:e4:ba:7d:8e: 90:6b:9b:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJJR1UXhQIRM4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk YzdmOGY3NWEtZDg1Ni00MDNlLTg4ZmQtODY1ODI3Njk1MDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8+/VoUE111TbmxXM6xROug6XoJxGIq0UjkJ ronR3aqq6py+cmHreak4Bp5jMa48bDfhBjmEdHqbbQmNGe6cy3dbN9vg8/wST+Jb 8JcZcecmFg8tvNrfEO7eyyWzUqJNdasa9F1shxrD4xdOrHuOtWSjqokzue3Lh8b0 lNAadS2Wu0IQuE1uTeUWz5Zf1Axw7Dt78x/6aBV3z34SVUFBCoRG4Lmi1KI6Cp0F oFFlY+aEHfPMRW22EyUrdWpbCbR4cxWMa0Rw0tiJNN8Z8hzq0rwWWQz+kiPLmon6 facPK/mIViVLQBkHMnZZnSPtUDf4UEKnlbL2xp41twb3FE4+fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUAVCYf3tm4MvWu08SCse2/PR8xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvMmNhMWZhZmQtNTc4NC0z ODNhLTg2YTItNDVhYjAyODg5NmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHN4FkbxIXpefG0oJR4HmGGjh9956KrHIoR8cdIZS66eZotHO5x5kTuT z0af8431w8j6mKRdgqf5Pa4hDm9T+7E22n4SfVlung55wai2xKb9rkzj3u2h+4wW UFw4jIQbTJg/EBB35/Os3XsPFqDgyvlbovmM3JWaTsN9wYh4BohJC5sx8oR/agsO H0PyzL7JD6kRCOhXYxEP0JaBeAlgfq11NPeg2LHW7lHHsVINScrUUXDhb7iTsnan BV/RkpaCP8f9iCaZxl9PmL+vLhW5Sr2YQR7T5h08RIiq8OaTLq/6bReCYRMovjn6 fR0pN/xfwmt0FAxIKbkr5Lp9jpBrm7s= -----END CERTIFICATE-----Generated at Mon Oct 20 08:50:42 2025 by rpki-client