$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ca2bd6aa-5004-31d7-a1f4-7f5625f2112b.roa File: ca2bd6aa-5004-31d7-a1f4-7f5625f2112b.roa (raw, json) Hash identifier: dxk2xToH0S/UY0zWv6dhn/ERELdxvzktBKCYTH4u22w= Subject key identifier: 27:81:5C:4E:0F:1F:98:F0:68:0D:47:98:A1:31:37:D0:40:3C:0E:A5 Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F4328584B5F3737D63CEBD6ECB3C875C0 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ca2bd6aa-5004-31d7-a1f4-7f5625f2112b.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36040 IP address blocks: 104.237.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:37:d6:3c:eb:d6:ec:b3:c8:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=ac5f77d3-0e6c-4a02-8727-adaf52a0293b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:69:da:c6:5e:90:9b:02:50:5a:0c:bf:73:ab: 04:38:23:7d:5a:ed:c1:c4:a2:64:6c:52:24:ea:36: 11:02:6c:03:ca:cd:d5:04:f4:e9:c6:33:22:a6:8c: 5f:f4:8a:20:7c:4d:7f:e7:fc:35:ce:ee:58:74:57: 86:84:61:31:14:53:24:25:60:5c:79:77:d6:a9:ed: e5:c2:58:5f:60:51:2d:56:8e:eb:ea:23:c9:10:36: ad:d0:cb:29:51:63:c8:2a:1f:97:3c:98:4f:a7:c2: 4d:7a:53:11:31:bf:ee:ff:44:06:42:2e:c6:cd:aa: 7e:e7:09:c7:17:4a:58:7d:69:6c:4b:a5:50:dd:48: 04:60:6b:c4:13:59:03:6c:c3:41:15:3e:64:47:4a: 0e:57:77:21:09:4a:c5:90:41:32:0e:81:ac:73:3d: 75:92:c3:9a:e4:19:cb:f4:60:36:77:a4:35:c8:46: 3c:01:14:7e:da:3f:62:f2:96:21:78:b7:c3:a5:0d: ec:d6:28:bf:d0:8e:fc:e0:aa:09:8c:c5:a1:ac:f1: 55:c1:98:b0:28:3c:f9:bd:3f:7a:d3:b2:58:54:36: cb:b1:a7:35:6f:d0:9c:8a:ce:50:bb:45:0d:03:d3: 63:3e:51:0f:d4:43:98:f1:79:11:df:10:cd:16:ab: af:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:81:5C:4E:0F:1F:98:F0:68:0D:47:98:A1:31:37:D0:40:3C:0E:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ca2bd6aa-5004-31d7-a1f4-7f5625f2112b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 104.237.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a7:d4:86:3f:c9:6e:2c:24:64:fa:8b:36:47:39:db:37:9f: 7b:31:1e:d2:90:bc:bd:99:84:c9:ff:25:fc:ef:34:b8:56:92: 05:41:a1:82:4b:95:c2:3a:31:d3:db:59:24:1e:6c:50:0d:70: c2:ab:0d:02:90:9b:ec:d8:c5:40:12:49:35:33:af:35:d4:57: bb:89:3d:e2:0e:27:2d:6c:a5:a4:f4:53:b1:ee:fa:a2:7c:75: f7:2d:94:ba:7b:30:29:09:83:a6:95:49:0b:d7:0d:df:2b:16: ee:6e:57:09:9b:9d:0c:68:98:7d:aa:06:18:45:6b:1f:ae:e7: 51:8d:2c:78:58:30:87:a6:61:5a:1d:a9:db:75:40:a8:1c:a6: d5:2d:80:08:1a:2a:2b:39:b1:65:99:56:aa:b5:5f:4f:b8:7e: 3a:6c:5b:53:57:16:c6:90:29:37:7a:bb:13:c2:b1:ff:e0:a4: 3d:1b:75:20:dd:30:2a:68:fd:07:f7:dd:62:c2:c5:df:f7:09: a3:bc:20:e0:f3:85:81:e2:9b:8d:71:4a:0b:1c:59:89:82:e1: 82:12:04:bb:79:95:c6:a9:55:12:3b:f8:ea:5f:b8:ab:72:ce: 2a:3c:bd:17:f2:97:24:90:61:24:18:e9:5b:5e:70:fd:ca:6a: c3:a2:a5:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNzfWPOvW7LPIdcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk YWM1Zjc3ZDMtMGU2Yy00YTAyLTg3MjctYWRhZjUyYTAyOTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWnaxl6QmwJQWgy/c6sEOCN9Wu3BxKJkbFIk 6jYRAmwDys3VBPTpxjMipoxf9IogfE1/5/w1zu5YdFeGhGExFFMkJWBceXfWqe3l wlhfYFEtVo7r6iPJEDat0MspUWPIKh+XPJhPp8JNelMRMb/u/0QGQi7Gzap+5wnH F0pYfWlsS6VQ3UgEYGvEE1kDbMNBFT5kR0oOV3chCUrFkEEyDoGscz11ksOa5BnL 9GA2d6Q1yEY8ARR+2j9i8pYheLfDpQ3s1ii/0I784KoJjMWhrPFVwZiwKDz5vT96 07JYVDbLsac1b9Ccis5Qu0UNA9NjPlEP1EOY8XkR3xDNFquvKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeBXE4PH5jwaA1HmKExN9BAPA6lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvY2EyYmQ2YWEtNTAwNC0z MWQ3LWExZjQtN2Y1NjI1ZjIxMTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaO2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6n1IY/yW4sJGT6izZHOds3n3sxHtKQvL2ZhMn/JfzvNLhWkgVBoYJL lcI6MdPbWSQebFANcMKrDQKQm+zYxUASSTUzrzXUV7uJPeIOJy1spaT0U7Hu+qJ8 dfctlLp7MCkJg6aVSQvXDd8rFu5uVwmbnQxomH2qBhhFax+u51GNLHhYMIemYVod qdt1QKgcptUtgAgaKis5sWWZVqq1X0+4fjpsW1NXFsaQKTd6uxPCsf/gpD0bdSDd MCpo/Qf33WLCxd/3CaO8IODzhYHim41xSgscWYmC4YISBLt5lcapVRI7+OpfuKty zio8vRfylySQYSQY6VtecP3KasOipQE= -----END CERTIFICATE-----Generated at Mon Oct 20 05:04:45 2025 by rpki-client