$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/372300b1-92ff-3bda-8798-f61257b39942.roa File: 372300b1-92ff-3bda-8798-f61257b39942.roa (raw, json) Hash identifier: hpMcRC84Wb2tl+5d4FAgJPib4hKV6iWZDpXYjmaoYoc= Subject key identifier: 49:B4:00:FB:A9:E4:2B:12:35:81:9F:17:F5:71:FA:0A:09:88:15:8E Certificate issuer: /CN=d106a247-9308-46e9-9d88-ae987a6bdace Certificate serial: 010D0C9F4328584B5B072C76023C5CF4CEC0AB00 Authority key identifier: E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/372300b1-92ff-3bda-8798-f61257b39942.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 50131 IP address blocks: 104.218.232.0/22 maxlen: 32 172.83.152.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:2c:76:02:3c:5c:f4:ce:c0:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d106a247-9308-46e9-9d88-ae987a6bdace Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=4df3db25-c593-4a21-b2f8-28d7f091afab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b0:c1:44:92:37:be:13:bb:86:0c:81:fb:68: b2:35:2e:b8:cd:96:27:65:62:7f:92:0e:d9:aa:0f: 47:d0:1e:3d:90:7d:d4:44:9c:dc:1f:68:36:b4:2d: b9:0c:53:7e:8a:ba:19:fa:79:e1:e4:bb:58:ce:9a: 6a:42:9c:0b:9d:df:ec:a9:c6:e5:ac:b3:aa:ec:8e: 84:97:8a:52:16:e2:51:76:d3:34:f0:60:57:ea:82: 9d:74:9a:26:9c:45:1a:b6:f8:32:2f:fe:a5:d3:11: 76:3d:25:cc:eb:62:9f:8c:ac:2b:e6:d3:2f:c8:6d: dc:e6:9a:c6:30:b6:6e:69:d5:46:0c:29:75:f8:90: 5f:3e:2a:a6:e8:72:2a:f1:46:8c:b2:13:8d:38:fb: 2a:20:54:c9:f9:49:60:60:e5:e2:1f:3b:6d:1f:e4: a4:2c:bc:49:af:da:8f:5a:d7:79:86:91:0c:8a:36: 04:7b:96:76:6f:10:75:59:fa:c1:ff:2e:51:ad:f9: a7:5b:e6:ca:bf:81:b3:07:45:49:d9:10:4e:d9:1e: 69:f9:71:bc:96:ff:b0:c5:ac:24:0d:eb:ee:3d:0a: 44:fd:4e:bc:94:94:2f:49:d5:80:b6:09:c5:03:81: 13:c4:b4:3f:cd:43:5c:c9:37:f9:06:8a:04:28:03: 51:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B4:00:FB:A9:E4:2B:12:35:81:9F:17:F5:71:FA:0A:09:88:15:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/372300b1-92ff-3bda-8798-f61257b39942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl X509v3 Authority Key Identifier: keyid:E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer sbgp-ipAddrBlock: critical IPv4: 104.218.232.0/22 172.83.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:8f:04:52:2c:e1:18:de:d7:d0:07:61:49:8f:8e:a9:d0:6b: 54:c1:c4:b5:cb:c4:1c:5c:b7:5e:07:f8:2d:93:49:48:d0:11: f2:47:8c:47:93:22:a6:6f:13:29:b9:8a:cf:ed:00:a7:57:af: 8e:f0:ad:c0:33:f5:07:3e:02:1a:84:c8:4c:d0:35:46:06:7e: 50:ad:82:b0:25:b6:36:f9:32:47:1a:30:eb:f8:15:c9:ba:89: e3:57:ec:5a:2b:59:b4:5b:09:df:58:f3:8c:05:89:79:3c:4d: af:c0:c0:2d:3c:58:e3:ab:a9:8e:b7:22:dc:1d:16:a2:a7:09: cf:c4:aa:b7:1b:dc:87:f0:3c:7f:4b:92:08:8e:ad:ef:40:60: c0:e3:20:45:12:dc:8c:b4:c5:26:f6:6e:cc:4b:d2:7b:02:cc: 3b:af:8b:84:21:dc:6d:e3:e5:71:53:6d:64:09:7a:d7:1e:ab: 30:d6:59:91:f5:43:00:af:7c:0d:32:6b:8e:ff:81:cc:97:6f: 54:b2:a4:7e:47:56:64:1b:c8:28:4e:66:99:5d:36:95:83:bb: de:55:7f:7f:18:62:a1:04:89:11:19:92:dd:d5:ff:30:2c:18: 33:c1:2d:5f:c5:88:21:b5:6e:be:9d:73:a0:41:e8:5c:21:c2: 68:4f:c1:9e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtbByx2Ajxc9M7AqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDEwNmEyNDctOTMwOC00NmU5LTlkODgtYWU5ODdhNmJk YWNlMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NGRmM2RiMjUtYzU5My00YTIxLWIyZjgtMjhkN2YwOTFhZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7DBRJI3vhO7hgyB+2iyNS64zZYnZWJ/kg7Z qg9H0B49kH3URJzcH2g2tC25DFN+iroZ+nnh5LtYzppqQpwLnd/sqcblrLOq7I6E l4pSFuJRdtM08GBX6oKddJomnEUatvgyL/6l0xF2PSXM62KfjKwr5tMvyG3c5prG MLZuadVGDCl1+JBfPiqm6HIq8UaMshONOPsqIFTJ+UlgYOXiHzttH+SkLLxJr9qP Wtd5hpEMijYEe5Z2bxB1WfrB/y5RrfmnW+bKv4GzB0VJ2RBO2R5p+XG8lv+wxawk DevuPQpE/U68lJQvSdWAtgnFA4ETxLQ/zUNcyTf5BooEKANRqQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEm0APup5CsSNYGfF/Vx+goJiBWOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTA2 YTI0Ny05MzA4LTQ2ZTktOWQ4OC1hZTk4N2E2YmRhY2UvMzcyMzAwYjEtOTJmZi0z YmRhLTg3OTgtZjYxMjU3YjM5OTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDEwNmEyNDctOTMwOC00NmU5LTlk ODgtYWU5ODdhNmJkYWNlL2QxMDZhMjQ3LTkzMDgtNDZlOS05ZDg4LWFlOTg3YTZi ZGFjZS5jcmwwHwYDVR0jBBgwFoAU59w75Vb/HV/fyvRlHD0ubP3+gjowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTA2YTI0Ny05MzA4LTQ2ZTktOWQ4OC1hZTk4 N2E2YmRhY2UuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCaNroAwQD rFOYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFKPBFIs4Rje19AHYUmPjqnQa1TBxLXLxBxct14H+C2TSUjQ EfJHjEeTIqZvEym5is/tAKdXr47wrcAz9Qc+AhqEyEzQNUYGflCtgrAltjb5Mkca MOv4Fcm6ieNX7ForWbRbCd9Y84wFiXk8Ta/AwC08WOOrqY63ItwdFqKnCc/Eqrcb 3IfwPH9LkgiOre9AYMDjIEUS3Iy0xSb2bsxL0nsCzDuvi4Qh3G3j5XFTbWQJetce qzDWWZH1QwCvfA0ya47/gcyXb1SypH5HVmQbyChOZpldNpWDu95Vf38YYqEEiREZ kt3V/zAsGDPBLV/FiCG1br6dc6BB6FwhwmhPwZ4= -----END CERTIFICATE-----Generated at Mon Oct 20 09:37:01 2025 by rpki-client