$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/41aa2418-55de-3229-a2aa-d80459343b30.roa File: 41aa2418-55de-3229-a2aa-d80459343b30.roa (raw, json) Hash identifier: 9bLgMQtkqnc9KgwbqQ17QyQnPlyo5Jyv3O++mMbU6R8= Subject key identifier: 5B:E6:84:BC:24:1D:5E:18:BC:54:CF:72:C4:95:38:E9:78:D5:3C:5D Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AF0F14CEF1648DE6C70B4EC00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/41aa2418-55de-3229-a2aa-d80459343b30.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 9009 IP address blocks: 104.253.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:4c:ef:16:48:de:6c:70:b4:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=c66f4dec-32e2-4fb1-bffe-8c2a18f2878a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:01:df:1e:24:4e:41:04:08:f6:1f:0b:c5:74: b3:a3:15:35:a6:eb:9a:20:1d:5f:8c:af:9c:b9:70: ed:2b:c7:c2:45:65:4a:2f:56:18:9d:3d:a6:26:d5: ef:6a:f6:1e:e6:5a:d2:eb:5f:60:70:23:91:2f:42: 57:4a:82:f5:e5:9c:06:13:71:69:43:63:17:c9:d1: d4:6b:12:36:38:53:92:e5:4d:31:2c:e1:83:ba:54: 30:be:29:c8:f1:04:fc:5a:aa:25:f6:42:22:5a:67: f3:8e:e0:79:85:9f:17:14:98:8a:31:d1:0b:e8:1d: 00:c7:40:41:db:86:1a:88:27:38:c9:0f:10:90:5d: 9e:0a:9f:10:71:ac:ed:46:80:d5:8b:68:f5:3d:40: cd:5c:3f:78:a1:23:87:43:f2:77:b3:06:ab:0d:e8: 7c:cb:e6:46:63:94:71:7a:67:c6:c6:32:c0:38:fa: 2c:e0:4e:c1:2e:2f:b4:c8:d9:81:9e:71:97:4b:ef: 14:79:0e:d2:83:e6:86:06:8e:14:08:11:23:bc:7a: 05:87:e1:5f:e6:b2:53:ad:76:56:0c:14:78:7b:ca: 45:6f:69:6c:7d:9d:6a:26:35:93:bc:99:f9:6d:20: c4:2c:cb:fd:84:f6:81:9e:07:9a:fb:76:7a:0f:dd: 7f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E6:84:BC:24:1D:5E:18:BC:54:CF:72:C4:95:38:E9:78:D5:3C:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/41aa2418-55de-3229-a2aa-d80459343b30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:44:39:e3:48:6f:c1:8e:97:66:4f:52:bf:9a:26:14:6d:63: 0a:ed:47:4e:cf:89:9d:09:06:28:56:36:66:92:05:0b:8b:3a: a8:87:2c:69:1f:36:ea:49:d8:39:de:8f:f6:b6:a5:e8:41:86: 1e:b2:49:87:53:4e:68:e0:07:c2:e1:d5:45:ac:61:2b:ae:3a: ed:0b:01:f6:d4:b9:24:ae:c0:f9:f0:2e:e7:f0:49:bf:f9:63: bc:6b:02:80:c6:bf:09:31:dd:c7:0d:c7:b5:25:d1:ff:7f:03: fc:19:d1:33:30:7d:3b:8b:3a:7c:f6:19:7e:c4:24:00:8d:a2: 4f:8b:29:bf:34:f4:8f:ed:f3:99:4a:1c:2a:8b:f8:b4:c6:72: 0d:d2:5c:65:da:3c:27:f8:ca:51:da:0b:d0:56:79:4d:4f:fe: 24:8f:4c:8b:c6:84:30:1f:c4:8a:e2:42:f8:62:25:56:2b:74: d2:5f:f5:ce:7d:b9:79:ad:b3:12:38:19:c0:85:80:3a:35:01: a8:f7:32:40:cb:fc:12:83:be:e9:ab:0a:09:33:79:ba:e9:a9: 6e:b8:02:bb:b9:2c:fd:d5:80:0d:92:bb:fe:d9:2c:08:57:6d: fc:62:f6:fc:62:08:e7:9c:0e:7e:a9:02:94:03:ad:b1:65:fe: 4b:62:33:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8UzvFkjebHC07AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YzY2ZjRkZWMtMzJlMi00ZmIxLWJmZmUtOGMyYTE4ZjI4NzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQHfHiROQQQI9h8LxXSzoxU1puuaIB1fjK+c uXDtK8fCRWVKL1YYnT2mJtXvavYe5lrS619gcCORL0JXSoL15ZwGE3FpQ2MXydHU axI2OFOS5U0xLOGDulQwvinI8QT8Wqol9kIiWmfzjuB5hZ8XFJiKMdEL6B0Ax0BB 24YaiCc4yQ8QkF2eCp8QcaztRoDVi2j1PUDNXD94oSOHQ/J3swarDeh8y+ZGY5Rx emfGxjLAOPos4E7BLi+0yNmBnnGXS+8UeQ7Sg+aGBo4UCBEjvHoFh+Ff5rJTrXZW DBR4e8pFb2lsfZ1qJjWTvJn5bSDELMv9hPaBngea+3Z6D91/FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvmhLwkHV4YvFTPcsSVOOl41TxdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDFhYTI0MTgtNTVkZS0z MjI5LWEyYWEtZDgwNDU5MzQzYjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhEOeNIb8GOl2ZPUr+aJhRtYwrtR07PiZ0JBihWNmaSBQuLOqiHLGkf NupJ2Dnej/a2pehBhh6ySYdTTmjgB8Lh1UWsYSuuOu0LAfbUuSSuwPnwLufwSb/5 Y7xrAoDGvwkx3ccNx7Ul0f9/A/wZ0TMwfTuLOnz2GX7EJACNok+LKb809I/t85lK HCqL+LTGcg3SXGXaPCf4ylHaC9BWeU1P/iSPTIvGhDAfxIriQvhiJVYrdNJf9c59 uXmtsxI4GcCFgDo1Aaj3MkDL/BKDvumrCgkzebrpqW64Aru5LP3VgA2Su/7ZLAhX bfxi9vxiCOecDn6pApQDrbFl/ktiMzQ= -----END CERTIFICATE-----Generated at Sat Aug 23 09:08:28 2025 by rpki-client