$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9145fb5a-a667-3a3d-9d91-96a829b1d736.roa File: 9145fb5a-a667-3a3d-9d91-96a829b1d736.roa (raw, json) Hash identifier: yS/1NQdhMWZU1SHJqIOrrau0OEBlO8B+UXvzSGA1vCQ= Subject key identifier: 65:B3:E7:12:41:8C:38:5C:4C:C5:00:BB:E0:4E:DD:6A:1B:2F:45:94 Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F4328584B5F375F641FAF3D8F6E5D8340 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9145fb5a-a667-3a3d-9d91-96a829b1d736.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36040 IP address blocks: 104.237.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:5f:64:1f:af:3d:8f:6e:5d:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=dc62eaf9-a35a-434b-b9ca-d6fb01762e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e1:bd:6b:ab:54:6a:7d:65:4d:59:e3:67:1f: d9:5f:26:29:1a:cd:79:dc:2a:42:aa:ed:1e:a6:ed: 9a:e9:c2:d8:de:1e:6c:08:39:f3:17:93:63:a0:f6: 77:99:fa:56:3d:4f:6b:8f:97:0e:c3:bc:2f:b1:ff: ab:90:54:3c:c2:87:1f:2f:ff:d8:0d:ad:b2:09:da: 7b:5e:f7:94:46:55:75:72:cc:1d:51:52:96:fa:cf: 0c:a3:05:35:fa:65:ae:4a:c9:ea:d3:60:05:1d:da: 6d:c3:fb:ba:82:59:02:d2:40:18:43:cd:ab:45:fd: 9f:f9:50:1f:44:11:bc:10:67:7f:36:e4:a9:eb:65: 90:16:88:ff:c1:2b:79:65:1c:fe:e8:8d:ed:d9:1c: ca:dc:75:f6:7e:9b:e8:72:cd:44:46:27:de:d8:9e: 0c:c0:4a:bd:fb:25:32:93:f2:11:9b:82:e0:ff:53: bc:a1:ed:fa:cb:f5:40:60:b4:d2:77:d3:51:b8:2b: d8:bd:69:e0:14:1e:b1:f6:46:b0:9f:8d:1c:64:05: 6d:26:46:29:62:f0:e1:fd:44:d3:b7:7b:44:14:6d: c5:79:e9:a1:81:2f:ee:f3:f0:1e:6f:f6:32:d1:dd: 49:2d:0d:dc:46:94:54:fe:00:35:7a:d3:45:be:7d: 03:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B3:E7:12:41:8C:38:5C:4C:C5:00:BB:E0:4E:DD:6A:1B:2F:45:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9145fb5a-a667-3a3d-9d91-96a829b1d736.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 104.237.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ce:be:1e:6f:5a:1e:be:e3:3e:34:11:68:49:d0:03:d5:0d: c8:bc:3c:24:bc:71:3d:e8:9f:b8:c1:61:69:74:6f:4f:7d:c1: 61:b2:18:92:89:86:3d:5d:db:74:91:57:b9:96:06:64:88:f3: 5b:52:0e:a2:5b:99:f0:2c:6a:8b:52:12:d4:0e:6c:e3:b2:bc: b8:86:78:75:a2:9c:4d:6e:59:0a:78:3d:8a:2c:f0:e0:35:20: e4:13:8e:6c:73:47:2c:c4:d4:79:59:ba:6f:f9:51:f9:59:57: 97:12:c5:2a:c6:5b:d6:1e:24:a4:e7:1c:75:8a:dd:13:9b:d7: 9c:4e:8a:43:bb:1b:6f:cd:cd:ec:35:2c:72:7e:ce:42:1a:94: 5d:4c:f8:35:1d:be:79:2e:7f:91:54:5e:df:aa:4b:41:1d:be: c8:f0:01:fe:86:aa:af:80:a6:58:b0:22:d1:8f:0f:d3:8f:de: fe:58:ad:a7:94:0f:f0:c2:65:c5:dc:43:57:fd:03:31:ef:cf: 47:0e:5f:a2:4c:28:ff:f3:a6:ec:30:91:f2:50:26:6e:b8:a8: 93:c3:5a:f6:16:e7:a0:4c:8b:ef:dd:08:14:f0:d3:e6:c3:6b: 11:79:b4:cf:ec:b9:61:92:ec:42:54:9f:c6:fc:be:7d:eb:64: 61:56:ad:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN19kH689j25dg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZGM2MmVhZjktYTM1YS00MzRiLWI5Y2EtZDZmYjAxNzYyZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeG9a6tUan1lTVnjZx/ZXyYpGs153CpCqu0e pu2a6cLY3h5sCDnzF5NjoPZ3mfpWPU9rj5cOw7wvsf+rkFQ8wocfL//YDa2yCdp7 XveURlV1cswdUVKW+s8MowU1+mWuSsnq02AFHdptw/u6glkC0kAYQ82rRf2f+VAf RBG8EGd/NuSp62WQFoj/wSt5ZRz+6I3t2RzK3HX2fpvocs1ERife2J4MwEq9+yUy k/IRm4Lg/1O8oe36y/VAYLTSd9NRuCvYvWngFB6x9kawn40cZAVtJkYpYvDh/UTT t3tEFG3FeemhgS/u8/Aeb/Yy0d1JLQ3cRpRU/gA1etNFvn0DwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWz5xJBjDhcTMUAu+BO3WobL0WUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvOTE0NWZiNWEtYTY2Ny0z YTNkLTlkOTEtOTZhODI5YjFkNzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO2rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHOvh5vWh6+4z40EWhJ0APVDci8PCS8cT3on7jBYWl0b099wWGyGJKJ hj1d23SRV7mWBmSI81tSDqJbmfAsaotSEtQObOOyvLiGeHWinE1uWQp4PYos8OA1 IOQTjmxzRyzE1HlZum/5UflZV5cSxSrGW9YeJKTnHHWK3ROb15xOikO7G2/Nzew1 LHJ+zkIalF1M+DUdvnkuf5FUXt+qS0EdvsjwAf6Gqq+ApliwItGPD9OP3v5YraeU D/DCZcXcQ1f9AzHvz0cOX6JMKP/zpuwwkfJQJm64qJPDWvYW56BMi+/dCBTw0+bD axF5tM/suWGS7EJUn8b8vn3rZGFWrQ8= -----END CERTIFICATE-----Generated at Mon Oct 20 08:25:11 2025 by rpki-client