$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6ae0695c-7373-30c9-af88-a010d02354d0.roa File: 6ae0695c-7373-30c9-af88-a010d02354d0.roa (raw, json) Hash identifier: VbiCetGmJioPFe///pd7un47oCzMdfkjjIMkRyNoiS4= Subject key identifier: 2D:07:F4:38:FC:4B:0D:32:FA:82:9E:80:55:A8:72:E7:B1:04:40:31 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584B41E71D706BECFBDFAD6E0780 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6ae0695c-7373-30c9-af88-a010d02354d0.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 398993 IP address blocks: 104.233.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:1d:70:6b:ec:fb:df:ad:6e:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=d71b8d4c-21c9-4f2e-b631-cf452119b1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5e:ce:03:c7:56:f1:a5:c7:fc:e0:53:dd:89: 55:a7:35:1f:43:31:23:43:03:89:cd:77:4a:c6:ab: ed:03:18:2f:88:08:97:3c:ac:46:84:d6:c5:96:9a: ac:cd:b4:1c:18:5d:aa:f2:6d:61:ac:04:b7:a8:23: 11:c5:d9:ae:90:94:d6:85:70:bb:dc:48:ed:88:bb: 9b:91:ba:29:86:e2:64:ae:11:a5:70:e1:c6:aa:d6: 18:46:d3:f8:e0:31:78:28:41:bb:84:6d:2d:85:db: 4d:65:5c:55:de:77:a4:ac:1a:a2:7b:20:26:5b:d1: 99:52:df:88:bf:5b:0f:1d:c9:0c:b8:de:f9:21:63: cb:81:7a:4e:8c:58:c4:5b:ac:3c:b1:74:17:5c:55: 42:e8:82:c7:1b:4a:9d:ad:e1:a0:29:78:8e:d5:83: a4:8d:d4:29:94:3f:78:7d:5a:05:69:d1:b6:ee:03: cb:eb:a8:e4:b8:34:51:96:2d:d2:69:46:7d:05:29: c4:19:32:f0:37:09:28:82:ce:d7:8c:88:f4:4d:00: 1b:95:6c:b6:e2:24:65:45:c4:df:2f:df:09:0d:04: 6f:84:7d:d3:0d:f4:2a:97:b7:b6:d1:f9:f6:f8:e9: d1:f7:9d:86:04:75:e9:15:b6:14:14:75:c4:28:d7: ca:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:07:F4:38:FC:4B:0D:32:FA:82:9E:80:55:A8:72:E7:B1:04:40:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6ae0695c-7373-30c9-af88-a010d02354d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 104.233.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:b4:75:b3:f0:97:ad:7e:78:a0:65:69:47:23:4d:45:30:9a: 57:f6:01:c6:7d:80:9a:70:2f:48:73:b9:12:2d:fa:70:01:bf: aa:0c:ab:84:d8:ef:47:94:f2:5e:cd:30:0a:b2:8a:df:79:7e: 13:ea:01:ad:53:3d:10:1c:7b:da:c8:89:5c:29:51:c5:12:db: f7:c8:46:6a:3d:04:5c:75:b1:59:9f:7a:60:21:1a:f1:e0:a4: 29:24:e8:de:80:fc:00:8c:d0:12:77:8e:f7:e9:47:4f:09:83: e6:48:da:ee:68:15:81:4f:04:85:8b:54:db:a8:98:6b:9e:f1: 93:a5:e7:99:cc:8e:13:1e:3d:4d:c6:05:ca:5e:1f:5a:f9:96: c3:87:d0:65:4e:c0:b2:99:77:3b:87:c1:97:a0:45:8c:7a:75: 3f:a4:43:42:dd:d4:d7:74:8c:40:3a:8d:b7:e5:8e:5c:fa:02: 81:7c:70:7d:fa:81:6b:62:59:b9:70:5b:5d:2f:e2:40:07:6e: 05:45:f6:6f:69:ca:88:42:4c:77:3b:0d:a5:41:1f:f7:9f:53: d3:3f:41:b4:2a:6b:02:af:7a:f5:28:e2:bd:d0:9c:f0:ee:14: 88:56:6e:55:ca:8c:3b:d3:da:d9:ba:fa:17:3d:da:af:78:d8: cb:cf:47:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5x1wa+z7361uB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZDcxYjhkNGMtMjFjOS00ZjJlLWI2MzEtY2Y0NTIxMTliMWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF7OA8dW8aXH/OBT3YlVpzUfQzEjQwOJzXdK xqvtAxgviAiXPKxGhNbFlpqszbQcGF2q8m1hrAS3qCMRxdmukJTWhXC73EjtiLub kbophuJkrhGlcOHGqtYYRtP44DF4KEG7hG0thdtNZVxV3nekrBqieyAmW9GZUt+I v1sPHckMuN75IWPLgXpOjFjEW6w8sXQXXFVC6ILHG0qdreGgKXiO1YOkjdQplD94 fVoFadG27gPL66jkuDRRli3SaUZ9BSnEGTLwNwkogs7XjIj0TQAblWy24iRlRcTf L98JDQRvhH3TDfQql7e20fn2+OnR952GBHXpFbYUFHXEKNfKVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0H9Dj8Sw0y+oKegFWocuexBEAxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNmFlMDY5NWMtNzM3My0z MGM5LWFmODgtYTAxMGQwMjM1NGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaOnaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIK0dbPwl61+eKBlaUcjTUUwmlf2AcZ9gJpwL0hzuRIt+nABv6oMq4TY 70eU8l7NMAqyit95fhPqAa1TPRAce9rIiVwpUcUS2/fIRmo9BFx1sVmfemAhGvHg pCkk6N6A/ACM0BJ3jvfpR08Jg+ZI2u5oFYFPBIWLVNuomGue8ZOl55nMjhMePU3G BcpeH1r5lsOH0GVOwLKZdzuHwZegRYx6dT+kQ0Ld1Nd0jEA6jbfljlz6AoF8cH36 gWtiWblwW10v4kAHbgVF9m9pyohCTHc7DaVBH/efU9M/QbQqawKvevUo4r3QnPDu FIhWblXKjDvT2tm6+hc92q942MvPR5o= -----END CERTIFICATE-----Generated at Mon Oct 20 06:37:40 2025 by rpki-client