$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a1e4c146-0d89-3f2f-90e3-39b6dacb84e1.roa File: a1e4c146-0d89-3f2f-90e3-39b6dacb84e1.roa (raw, json) Hash identifier: T+OGcyRhz6GfJE5bQY+lDqX20XbPIApmEqEzfw6P87g= Subject key identifier: AB:7A:B2:4A:17:C3:E8:C0:F5:2D:C1:29:B7:81:03:FC:12:63:EA:85 Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F4328584B5F37643A47270037BCA3A60C Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a1e4c146-0d89-3f2f-90e3-39b6dacb84e1.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36040 IP address blocks: 104.237.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:64:3a:47:27:00:37:bc:a3:a6:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=b46d2c4b-05cd-4e86-95a2-b08401b5797b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:e2:97:e8:4e:82:0f:89:38:98:56:00:0b:33: 94:60:7c:26:2d:d2:13:a5:bb:7e:8f:6e:fd:e6:69: b8:a8:f9:f3:d1:1e:96:4e:a6:05:89:5c:51:f7:ae: be:66:f3:7a:0a:64:2c:0d:7f:38:85:cb:ec:b7:3f: 5c:40:17:63:ee:0d:72:65:cd:65:1d:cf:1f:2d:9d: ba:19:3e:83:08:fd:c8:1a:70:48:c7:f9:1b:9f:25: d6:51:1e:51:93:85:98:7b:af:71:07:ce:77:59:73: b8:6a:d7:5c:fa:88:c8:00:fe:fe:1c:80:5c:c4:88: 83:d0:dc:10:0e:37:cf:08:aa:e9:19:d9:76:9c:28: 58:b6:73:57:f2:6b:b9:cd:3b:5d:d0:75:11:40:ee: 47:3e:ea:85:67:a5:55:88:f1:69:14:16:df:09:28: 99:e8:df:5c:1a:74:4a:a6:5a:61:c5:70:9e:ff:2a: 55:36:a6:1a:0f:ed:d4:53:17:d1:07:8f:07:fd:e8: 49:a9:ac:e6:65:af:08:5b:5d:77:a8:2e:dd:36:bc: 8f:32:ad:e8:79:67:6a:1a:ed:b2:0d:95:bd:b5:63: 0a:8a:0c:74:bb:14:16:e6:e4:46:57:47:7b:32:d0: 10:bb:96:27:0d:89:f7:cb:7d:4c:4f:d4:fa:b6:cb: b1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7A:B2:4A:17:C3:E8:C0:F5:2D:C1:29:B7:81:03:FC:12:63:EA:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a1e4c146-0d89-3f2f-90e3-39b6dacb84e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 104.237.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:20:2a:4c:f1:e4:5a:e8:39:30:92:45:04:4d:26:6a:0c:1d: 61:a5:de:61:20:95:35:a5:8d:ad:50:3d:d4:b0:d1:24:3e:6d: e5:a9:0a:7d:29:a9:48:99:37:e1:d1:38:d9:70:b0:b2:0a:89: 44:bd:c9:80:b6:ce:e6:2d:00:43:d7:55:91:c4:11:2f:50:b3: 6a:10:71:db:89:98:60:44:bf:7f:66:ea:81:de:b2:af:cb:67: f1:d7:a4:ed:60:b9:ef:16:c2:f1:62:7c:c4:3b:65:ed:4b:8c: 9f:f9:ef:7f:c6:f0:6d:d9:b6:1d:81:dc:d3:48:d7:7a:10:c7: 7a:2a:c4:19:33:70:63:25:7a:76:5f:99:0e:bc:4e:c5:a2:ab: e7:d6:85:1e:e1:3e:31:3e:cd:3c:59:d1:2e:9a:c5:62:80:ff: 23:71:0f:4b:e0:a9:aa:d2:30:d6:07:02:50:ad:c4:1f:ed:da: 8e:df:62:fd:f6:ff:d2:55:a7:e6:1a:2f:8c:54:85:21:15:3a: 4a:21:d2:3b:61:13:f8:5f:30:69:6e:df:b2:01:fb:84:ee:37: b8:6d:76:36:e4:1f:68:4f:e3:ee:5e:2b:4a:7a:e8:31:8a:df: 7b:4d:16:29:d1:07:ed:64:95:ac:63:f1:1a:e4:99:e2:fb:47: d1:16:34:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2Q6RycAN7yjpgwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk YjQ2ZDJjNGItMDVjZC00ZTg2LTk1YTItYjA4NDAxYjU3OTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/OKX6E6CD4k4mFYACzOUYHwmLdITpbt+j279 5mm4qPnz0R6WTqYFiVxR966+ZvN6CmQsDX84hcvstz9cQBdj7g1yZc1lHc8fLZ26 GT6DCP3IGnBIx/kbnyXWUR5Rk4WYe69xB853WXO4atdc+ojIAP7+HIBcxIiD0NwQ DjfPCKrpGdl2nChYtnNX8mu5zTtd0HURQO5HPuqFZ6VViPFpFBbfCSiZ6N9cGnRK plphxXCe/ypVNqYaD+3UUxfRB48H/ehJqazmZa8IW113qC7dNryPMq3oeWdqGu2y DZW9tWMKigx0uxQW5uRGV0d7MtAQu5YnDYn3y31MT9T6tsuxCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKt6skoXw+jA9S3BKbeBA/wSY+qFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvYTFlNGMxNDYtMGQ4OS0z ZjJmLTkwZTMtMzliNmRhY2I4NGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaO2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4gKkzx5FroOTCSRQRNJmoMHWGl3mEglTWlja1QPdSw0SQ+beWpCn0p qUiZN+HRONlwsLIKiUS9yYC2zuYtAEPXVZHEES9Qs2oQcduJmGBEv39m6oHesq/L Z/HXpO1gue8WwvFifMQ7Ze1LjJ/573/G8G3Zth2B3NNI13oQx3oqxBkzcGMlenZf mQ68TsWiq+fWhR7hPjE+zTxZ0S6axWKA/yNxD0vgqarSMNYHAlCtxB/t2o7fYv32 /9JVp+YaL4xUhSEVOkoh0jthE/hfMGlu37IB+4TuN7htdjbkH2hP4+5eK0p66DGK 33tNFinRB+1klaxj8RrkmeL7R9EWNBY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:38:45 2025 by rpki-client