$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec35e326-54f2-3912-914b-00b0b4354213.roa File: ec35e326-54f2-3912-914b-00b0b4354213.roa (raw, json) Hash identifier: RKBVl4Sung0i8d1UXMzEseFwt6Hfz7eWNJgRlwoReCE= Subject key identifier: CE:9B:14:23:00:9D:0C:71:94:43:E0:E7:79:92:B7:57:A2:64:C3:74 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B8BE238A4695CC8C606562180 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec35e326-54f2-3912-914b-00b0b4354213.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 201106 IP address blocks: 104.253.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:38:a4:69:5c:c8:c6:06:56:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=3adb9c8a-2da9-4285-bac0-9d4ac71badb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dc:da:0a:55:cd:5c:8e:5e:bb:4e:ea:07:fc: c5:f0:9c:f7:b5:c6:a1:d2:95:f6:3f:b0:79:b3:59: 2e:27:90:0c:4c:e3:5f:2d:f3:c9:bd:cb:a1:7f:ba: 92:c8:02:20:0b:58:58:08:3d:84:1b:1b:b6:0e:5f: 3b:32:ae:a2:99:14:29:af:d4:22:6f:77:11:d6:17: 94:ce:14:59:02:50:b2:dd:52:a1:21:97:cf:6d:c8: 92:7b:7c:8b:96:18:bc:d2:23:42:16:3c:0a:4d:a6: e1:56:c1:6f:23:45:ca:b7:e3:0d:7a:31:0f:3f:65: 71:f0:8e:55:04:d5:79:1b:3b:a2:a8:33:e6:e1:d3: 58:1c:3b:eb:cf:4f:d4:7f:6c:01:e6:c5:e0:dd:86: 10:01:ca:ed:09:06:d1:32:85:b4:ef:c0:26:0a:0a: 90:55:07:35:5f:1a:04:1d:1e:8e:91:f3:b4:c1:1b: df:be:e2:35:7c:f1:e7:69:49:ad:05:cc:32:21:c6: 0d:a0:00:08:5e:2f:42:bf:38:2d:a1:7e:fd:0a:7b: 7f:b3:4e:eb:48:d8:a0:68:e5:30:88:9d:b6:db:25: d9:79:cb:75:42:10:80:27:39:dd:24:2a:c4:29:dd: d1:2b:86:8a:74:bc:21:1c:c4:12:d3:e7:4c:cb:5b: 30:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9B:14:23:00:9D:0C:71:94:43:E0:E7:79:92:B7:57:A2:64:C3:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec35e326-54f2-3912-914b-00b0b4354213.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:59:9b:98:64:a0:9a:23:2b:5b:6a:ea:94:43:91:a8:7b:c1: 89:0b:e8:83:d5:5b:61:82:66:0f:e4:9d:c5:80:5c:bb:89:c7: 17:06:85:78:67:df:c5:68:15:72:e2:f8:8a:8c:ad:59:fb:2f: aa:9b:b2:5f:42:5a:94:b8:8f:bc:08:cf:85:5c:de:3b:42:a4: 20:32:9f:46:34:2e:a1:c6:8f:b6:59:d9:ff:49:95:c4:64:65: c2:3e:42:22:e5:37:84:53:08:6f:fb:ef:ec:4a:ac:8d:60:da: 58:23:ec:54:fe:b7:07:66:61:9b:e8:30:65:c5:bb:37:3a:9a: 40:c3:5f:d4:ce:7a:f7:41:ce:09:b6:2a:ac:43:0b:72:90:62: b0:5c:e1:85:66:af:c5:1b:ae:b0:40:a8:9f:05:b6:a1:bd:c9: a6:e8:86:f1:90:be:cb:e7:c3:99:c1:2f:9b:a1:bc:31:89:12: d2:f2:02:20:d6:56:18:4c:25:e3:a3:52:65:99:aa:3c:06:b6: 0f:0f:3f:20:70:6a:36:c2:5b:fc:60:df:04:ec:dd:70:f7:61: 73:9b:e7:c2:af:04:b4:57:f8:e1:13:94:56:47:29:c1:7f:1f: c3:7e:97:f7:f1:58:f7:01:11:bf:37:7b:9a:4c:c2:f5:b9:74: f8:a0:17:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4jikaVzIxgZWIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk M2FkYjljOGEtMmRhOS00Mjg1LWJhYzAtOWQ0YWM3MWJhZGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9zaClXNXI5eu07qB/zF8Jz3tcah0pX2P7B5 s1kuJ5AMTONfLfPJvcuhf7qSyAIgC1hYCD2EGxu2Dl87Mq6imRQpr9Qib3cR1heU zhRZAlCy3VKhIZfPbciSe3yLlhi80iNCFjwKTabhVsFvI0XKt+MNejEPP2Vx8I5V BNV5GzuiqDPm4dNYHDvrz0/Uf2wB5sXg3YYQAcrtCQbRMoW078AmCgqQVQc1XxoE HR6OkfO0wRvfvuI1fPHnaUmtBcwyIcYNoAAIXi9CvzgtoX79Cnt/s07rSNigaOUw iJ222yXZect1QhCAJzndJCrEKd3RK4aKdLwhHMQS0+dMy1sw+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6bFCMAnQxxlEPg53mSt1eiZMN0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZWMzNWUzMjYtNTRmMi0z OTEyLTkxNGItMDBiMGI0MzU0MjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhZm5hkoJojK1tq6pRDkah7wYkL6IPVW2GCZg/kncWAXLuJxxcGhXhn 38VoFXLi+IqMrVn7L6qbsl9CWpS4j7wIz4Vc3jtCpCAyn0Y0LqHGj7ZZ2f9JlcRk ZcI+QiLlN4RTCG/77+xKrI1g2lgj7FT+twdmYZvoMGXFuzc6mkDDX9TOevdBzgm2 KqxDC3KQYrBc4YVmr8UbrrBAqJ8FtqG9yabohvGQvsvnw5nBL5uhvDGJEtLyAiDW VhhMJeOjUmWZqjwGtg8PPyBwajbCW/xg3wTs3XD3YXOb58KvBLRX+OETlFZHKcF/ H8N+l/fxWPcBEb83e5pMwvW5dPigF3Y= -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:01 2025 by rpki-client