$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/1914fa1b-2879-398b-99ae-9b5c6baf805d.roa File: 1914fa1b-2879-398b-99ae-9b5c6baf805d.roa (raw, json) Hash identifier: ItIjf1dhAVP6/dw2IevHt1jGnWDozt9/Ovnl9A2ZBSQ= Subject key identifier: 4C:D7:5F:14:53:27:B8:C2:13:0F:0C:81:8E:9F:29:C4:E3:D6:22:B4 Certificate issuer: /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Certificate serial: 010D0C9F4328584B8EACE7CF3D7E5B024D3AB680 Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/1914fa1b-2879-398b-99ae-9b5c6baf805d.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 398465 IP address blocks: 104.171.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:e7:cf:3d:7e:5b:02:4d:3a:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=af30c623-0957-45f2-937b-a56e8749724d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:61:c9:f0:74:d4:a4:82:de:a9:bd:87:24:37: bf:5d:30:25:3f:9f:6a:93:16:b8:86:bc:8b:9e:2d: 2b:ee:df:0d:af:06:f0:41:24:06:22:89:ba:c6:aa: a4:af:22:6a:5a:ee:ad:16:31:45:02:47:0f:54:d3: c8:2d:ff:a3:a3:ed:c0:7f:30:ce:b2:2c:ba:e9:03: 91:9b:e7:24:07:b4:78:e7:a8:f3:97:b5:03:30:5e: 99:5c:60:c6:19:d2:40:a1:b9:82:a6:f0:b0:b8:34: c0:0d:12:6a:c5:15:ee:a4:d6:9b:bb:62:4e:a4:05: cd:30:fc:c4:e7:69:f8:10:a3:30:87:72:50:57:e8: e8:e4:16:11:f7:a1:50:fb:eb:e5:0f:70:ec:9d:36: f8:a4:a2:e2:fa:8c:e2:f6:2e:3c:fa:4b:07:58:20: 26:66:de:4a:94:0f:04:83:22:6c:77:05:ad:33:36: 70:f3:95:50:30:cf:5b:f0:1a:aa:dd:b4:d8:f5:01: fc:fb:1d:f4:d6:86:3a:46:d2:30:1f:e9:20:7d:7c: 71:aa:76:f7:c7:49:d2:25:16:02:12:39:6a:a0:cc: 4a:a3:54:22:92:12:a0:a7:91:28:7d:fb:32:8d:29: 08:49:01:94:3e:2f:65:be:15:a6:ea:68:63:fd:d5: 80:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D7:5F:14:53:27:B8:C2:13:0F:0C:81:8E:9F:29:C4:E3:D6:22:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/1914fa1b-2879-398b-99ae-9b5c6baf805d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl X509v3 Authority Key Identifier: keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer sbgp-ipAddrBlock: critical IPv4: 104.171.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:40:2d:24:c2:ec:c3:dd:94:86:c0:e8:52:1c:5c:6a:ef:f4: 64:10:fe:9c:b1:4a:c4:5f:1c:49:33:1e:d3:f4:68:f6:d1:fa: 21:0e:d7:64:20:b2:3e:f0:7e:d8:34:e8:13:ec:5b:1b:51:e6: 15:c6:76:1a:a4:71:43:fe:9d:97:5d:0a:14:1f:35:9a:ec:21: b9:27:f2:b0:b1:6a:0c:a7:25:ca:92:b5:89:2b:70:f1:07:dd: 32:5b:d0:f8:dc:11:c9:25:09:d9:52:5a:88:83:05:4b:cb:0f: 65:98:e0:b3:07:ff:4e:2a:73:41:52:29:db:f8:6a:e8:39:94: c3:81:1a:3e:be:a2:a1:28:63:68:a7:05:df:96:20:ae:26:02: dd:cb:98:24:bc:98:7c:ed:d6:71:46:10:08:62:59:87:4a:f6: 52:17:20:00:b5:bb:d7:28:70:aa:bb:68:e2:68:f8:05:70:81: 32:5d:be:1e:af:ed:a7:e4:55:a5:a7:b2:68:56:61:46:a5:2b: 1a:bc:44:b6:d5:95:0e:16:62:6c:90:57:df:b0:09:86:e1:dc: fa:45:b5:b1:53:49:46:a8:cb:70:0a:9c:50:65:9e:cd:58:4c: 87:3e:75:93:9b:07:71:18:7c:70:4f:c9:b7:51:fb:4f:a1:0e: d4:99:83:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOfPPX5bAk06toAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVlMmU0YjAtNmY5YS00M2M3LWI2YmUtNmVmZjQ4ODc2 NjNlMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YWYzMGM2MjMtMDk1Ny00NWYyLTkzN2ItYTU2ZTg3NDk3MjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimHJ8HTUpILeqb2HJDe/XTAlP59qkxa4hryL ni0r7t8NrwbwQSQGIom6xqqkryJqWu6tFjFFAkcPVNPILf+jo+3AfzDOsiy66QOR m+ckB7R456jzl7UDMF6ZXGDGGdJAobmCpvCwuDTADRJqxRXupNabu2JOpAXNMPzE 52n4EKMwh3JQV+jo5BYR96FQ++vlD3DsnTb4pKLi+ozi9i48+ksHWCAmZt5KlA8E gyJsdwWtMzZw85VQMM9b8Bqq3bTY9QH8+x301oY6RtIwH+kgfXxxqnb3x0nSJRYC EjlqoMxKo1QikhKgp5EoffsyjSkISQGUPi9lvhWm6mhj/dWAIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzXXxRTJ7jCEw8MgY6fKcTj1iK0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUy ZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZmNDg4NzY2M2UvMTkxNGZhMWItMjg3OS0z OThiLTk5YWUtOWI1YzZiYWY4MDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWVlMmU0YjAtNmY5YS00M2M3LWI2 YmUtNmVmZjQ4ODc2NjNlLzVlZTJlNGIwLTZmOWEtNDNjNy1iNmJlLTZlZmY0ODg3 NjYzZS5jcmwwHwYDVR0jBBgwFoAUDhljVY9E40F4e1TAZyFIXjijozAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUyZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZm NDg4NzY2M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKukMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5ALSTC7MPdlIbA6FIcXGrv9GQQ/pyxSsRfHEkzHtP0aPbR+iEO12Qg sj7wftg06BPsWxtR5hXGdhqkcUP+nZddChQfNZrsIbkn8rCxagynJcqStYkrcPEH 3TJb0PjcEcklCdlSWoiDBUvLD2WY4LMH/04qc0FSKdv4aug5lMOBGj6+oqEoY2in Bd+WIK4mAt3LmCS8mHzt1nFGEAhiWYdK9lIXIAC1u9cocKq7aOJo+AVwgTJdvh6v 7afkVaWnsmhWYUalKxq8RLbVlQ4WYmyQV9+wCYbh3PpFtbFTSUaoy3AKnFBlns1Y TIc+dZObB3EYfHBPybdR+0+hDtSZg1Q= -----END CERTIFICATE-----Generated at Mon Oct 20 13:58:34 2025 by rpki-client