$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4fb9a481-635c-333e-8373-3856a78d029c.roa File: 4fb9a481-635c-333e-8373-3856a78d029c.roa (raw, json) Hash identifier: IQgS4obNyBThAtOh3pFiy6HC5ju29ML6Zhr5hbRNxtQ= Subject key identifier: 71:CC:40:9B:85:7D:F5:6F:47:93:DE:B0:DE:3F:EF:4C:87:17:5C:EA Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584B41E71D47C65FBF5E2F92C400 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4fb9a481-635c-333e-8373-3856a78d029c.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 398993 IP address blocks: 104.233.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:1d:47:c6:5f:bf:5e:2f:92:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=f3a4f61e-2a6b-440d-b042-bdc93ad35909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:80:af:48:f3:b8:7d:8b:6c:8b:7c:60:cf:5e: 79:ac:63:a4:fb:7d:3a:40:c5:65:04:7e:4a:39:62: 58:c2:05:1c:49:05:f7:3d:1e:03:5f:59:a9:90:10: 90:ae:15:d9:fd:03:22:c6:57:c0:55:7e:0b:33:71: df:f9:61:1f:19:3a:04:5a:c0:ed:42:49:e2:cc:f5: 24:d6:ce:b6:4f:d9:a6:58:f4:d4:ed:5b:e0:9c:9e: 0b:e4:12:6a:e9:1c:35:36:6f:48:92:e5:03:58:48: c4:f9:ec:5f:ae:b3:df:66:0c:2e:b4:ab:ee:d2:49: af:70:46:6b:14:0a:cc:0b:fe:a3:c4:30:7d:2c:3a: 22:48:6d:55:91:6b:ce:5d:61:ea:b1:e4:9b:9f:33: 9a:16:36:39:a9:68:5d:a9:13:35:62:17:f3:7d:4f: 65:0e:c0:46:8c:2a:f3:01:48:47:b6:43:d6:a1:58: 7a:c4:29:ae:69:68:85:60:08:9b:11:40:e9:1e:db: d9:26:cc:ad:3a:20:92:15:c4:3a:b2:ef:84:d5:0e: a2:2f:af:92:57:ce:84:09:5d:1b:07:09:0d:25:fe: 31:67:e8:a1:fc:41:1b:5c:13:b3:45:d7:ea:9d:cd: 52:3b:da:5a:f9:f5:4b:6e:49:94:c2:4f:c8:86:f0: ac:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CC:40:9B:85:7D:F5:6F:47:93:DE:B0:DE:3F:EF:4C:87:17:5C:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4fb9a481-635c-333e-8373-3856a78d029c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 104.233.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:95:1b:3d:75:f5:8b:f5:e3:80:c5:de:e8:ab:5e:db:af:40: 9c:33:64:61:59:21:d7:2f:17:1a:26:90:ba:c1:66:07:8a:96: 79:f6:f0:dd:38:3d:d0:86:77:69:49:5e:fa:30:08:38:cb:c3: df:8d:b1:55:f8:b8:31:6f:f4:87:55:98:be:57:fa:ce:ee:2d: a3:8a:8b:fa:ee:33:22:02:51:ae:06:36:bf:38:a9:eb:64:cc: 71:c7:72:d1:be:44:72:06:60:3a:17:53:d4:1d:f6:44:05:c5: f5:02:00:60:72:37:52:56:a2:0f:b6:bc:7a:1e:71:5b:dc:d8: 75:4d:ed:b8:af:b0:2f:b8:47:94:09:eb:a4:36:8f:6e:68:0e: 10:b9:42:a2:79:f0:4c:cd:0f:38:c6:bf:17:a5:42:ca:14:ae: 66:b1:9f:12:6d:18:57:7f:12:4c:9f:3c:69:91:7b:8f:85:c6: 6a:d2:30:16:62:d4:32:d0:4d:5a:3f:60:04:e4:12:d8:d8:ee: 05:86:8a:92:b9:ce:35:82:e4:3c:18:53:24:16:46:d8:f5:07: e6:c3:a8:7a:e6:c3:49:cd:5d:4a:b1:bc:d0:4b:0c:ad:43:49: 02:67:53:27:ca:c1:14:10:7e:72:a8:0f:e5:ef:bc:af:8c:96: 3b:df:0d:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5x1Hxl+/Xi+SxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZjNhNGY2MWUtMmE2Yi00NDBkLWIwNDItYmRjOTNhZDM1OTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4CvSPO4fYtsi3xgz155rGOk+306QMVlBH5K OWJYwgUcSQX3PR4DX1mpkBCQrhXZ/QMixlfAVX4LM3Hf+WEfGToEWsDtQknizPUk 1s62T9mmWPTU7VvgnJ4L5BJq6Rw1Nm9IkuUDWEjE+exfrrPfZgwutKvu0kmvcEZr FArMC/6jxDB9LDoiSG1VkWvOXWHqseSbnzOaFjY5qWhdqRM1YhfzfU9lDsBGjCrz AUhHtkPWoVh6xCmuaWiFYAibEUDpHtvZJsytOiCSFcQ6su+E1Q6iL6+SV86ECV0b BwkNJf4xZ+ih/EEbXBOzRdfqnc1SO9pa+fVLbkmUwk/IhvCs2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHMQJuFffVvR5PesN4/70yHF1zqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNGZiOWE0ODEtNjM1Yy0z MzNlLTgzNzMtMzg1NmE3OGQwMjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaOmoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuVGz119Yv144DF3uirXtuvQJwzZGFZIdcvFxomkLrBZgeKlnn28N04 PdCGd2lJXvowCDjLw9+NsVX4uDFv9IdVmL5X+s7uLaOKi/ruMyICUa4GNr84qetk zHHHctG+RHIGYDoXU9Qd9kQFxfUCAGByN1JWog+2vHoecVvc2HVN7bivsC+4R5QJ 66Q2j25oDhC5QqJ58EzNDzjGvxelQsoUrmaxnxJtGFd/EkyfPGmRe4+FxmrSMBZi 1DLQTVo/YATkEtjY7gWGipK5zjWC5DwYUyQWRtj1B+bDqHrmw0nNXUqxvNBLDK1D SQJnUyfKwRQQfnKoD+XvvK+MljvfDV4= -----END CERTIFICATE-----Generated at Mon Oct 20 01:10:58 2025 by rpki-client