$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cbb33f41-f493-4fe5-8254-63482c6f008d/7b424971-abbb-385a-a16b-7ef35ee889af.roa File: 7b424971-abbb-385a-a16b-7ef35ee889af.roa (raw, json) Hash identifier: N381L5k9upf5Yr04L602st0LTC7zIAzfSZgaZL+f1ws= Subject key identifier: 16:23:17:56:EF:7D:45:4E:7C:65:52:BD:EF:21:4B:DF:2E:E1:5F:94 Certificate issuer: /CN=cbb33f41-f493-4fe5-8254-63482c6f008d Certificate serial: 010D0C9F4328584B859CD83E568CAA5B46D77880 Authority key identifier: A8:52:B4:85:05:69:95:F8:76:47:B0:E2:7C:B4:3F:41:1E:A7:44:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cbb33f41-f493-4fe5-8254-63482c6f008d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cbb33f41-f493-4fe5-8254-63482c6f008d/7b424971-abbb-385a-a16b-7ef35ee889af.roa Signing time: Tue 14 Oct 2025 19:06:14 +0000 ROA not before: Tue 14 Oct 2025 19:06:14 +0000 ROA not after: Mon 12 Jan 2026 20:06:14 +0000 asID: 15292 IP address blocks: 104.243.221.0/24 maxlen: 24 192.228.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cbb33f41-f493-4fe5-8254-63482c6f008d/cbb33f41-f493-4fe5-8254-63482c6f008d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cbb33f41-f493-4fe5-8254-63482c6f008d/cbb33f41-f493-4fe5-8254-63482c6f008d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cbb33f41-f493-4fe5-8254-63482c6f008d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:9c:d8:3e:56:8c:aa:5b:46:d7:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbb33f41-f493-4fe5-8254-63482c6f008d Validity Not Before: Oct 14 19:06:14 2025 GMT Not After : Jan 12 20:06:14 2026 GMT Subject: CN=ed3a9cec-2cd9-494a-ad70-cf7321e0e5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f4:fd:7e:39:3d:a4:67:4d:80:19:83:5b:b8: 6b:6d:76:3d:c6:e5:ab:e9:7f:bb:f1:26:de:1b:b8: 62:b5:54:99:40:16:c7:71:3f:57:89:6c:3b:f0:74: 3f:73:09:21:5f:5b:dd:f2:05:a2:0b:bf:2a:2e:d7: 66:95:55:c1:70:ab:e6:83:ad:44:fa:2a:60:4b:c8: f0:15:3c:e1:35:73:56:d8:d4:9b:67:1d:a7:ab:0e: 9a:fd:c6:31:a9:85:57:ec:86:4b:7f:3c:7f:49:ef: d2:3f:af:19:ba:26:5d:a9:b8:f2:62:60:d6:af:8e: 2b:dc:cb:54:63:6a:08:90:84:c0:de:4d:dc:72:b9: 2a:82:57:83:54:58:a1:c9:14:16:10:26:04:71:ec: f7:a7:f2:5e:7e:a3:ab:75:89:a0:71:6f:e4:6c:14: ef:f9:97:48:2b:2e:e0:cb:fd:84:ee:c3:dc:37:13: a9:ed:30:bb:dc:71:df:4c:6d:b8:82:53:f2:6d:b9: c9:9b:de:ec:ee:46:22:a4:c1:6d:03:64:7d:d5:e8: 9c:4d:a1:9e:0e:c2:03:e5:ea:0d:97:6c:f6:bf:a4: df:d0:2e:a4:48:45:1b:f2:b1:2f:6f:c8:5d:ed:4e: 2b:7a:ca:5a:b0:2f:72:8f:ed:84:68:ba:0d:d4:42: 78:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:23:17:56:EF:7D:45:4E:7C:65:52:BD:EF:21:4B:DF:2E:E1:5F:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cbb33f41-f493-4fe5-8254-63482c6f008d/7b424971-abbb-385a-a16b-7ef35ee889af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cbb33f41-f493-4fe5-8254-63482c6f008d/cbb33f41-f493-4fe5-8254-63482c6f008d.crl X509v3 Authority Key Identifier: keyid:A8:52:B4:85:05:69:95:F8:76:47:B0:E2:7C:B4:3F:41:1E:A7:44:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cbb33f41-f493-4fe5-8254-63482c6f008d.cer sbgp-ipAddrBlock: critical IPv4: 104.243.221.0/24 192.228.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:76:3f:53:a3:01:64:28:70:ba:e6:87:7c:2b:b2:ba:83:72: 15:05:e1:c2:a1:a9:f8:ba:44:3a:78:29:f1:5d:40:09:c6:f7: c5:ef:a5:25:c0:85:6d:a9:12:6e:89:cf:51:e4:7d:1f:1c:e2: 48:07:c5:d0:e7:cc:0c:77:b3:74:5a:e5:51:31:12:12:e0:66: 0f:6a:65:dd:ca:3e:6c:16:eb:2d:6a:01:de:42:45:cd:6a:b7: e4:ad:5e:59:20:24:e0:18:ef:6a:40:c7:ec:2d:57:ab:cd:62: 53:9f:bf:bb:cd:82:43:46:ff:17:ca:9d:2e:1f:63:8d:09:3d: f4:5b:e2:4a:eb:3a:1c:ac:cc:71:6d:0e:29:a5:f0:2d:3b:d4: 28:42:77:87:80:4c:f0:96:21:cb:05:cd:fd:02:e1:fb:0d:7c: aa:4f:23:0e:6c:a6:3a:ce:cd:1b:36:c5:b3:c0:29:d4:2f:cd: 95:d7:15:8f:d8:16:4c:c0:c1:0f:0b:aa:6b:d1:40:44:65:e5: bf:39:c2:50:8e:f9:68:8c:1a:2d:c2:09:26:9f:f0:99:e0:38: 46:3a:f5:3f:9b:23:c2:36:9b:c9:71:e2:a5:70:2e:f9:f3:ea: e4:ae:08:63:95:4a:ef:dd:7b:19:d0:29:f0:a0:de:8b:57:7d: f7:8c:74:be -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuFnNg+VoyqW0bXeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JiMzNmNDEtZjQ5My00ZmU1LTgyNTQtNjM0ODJjNmYw MDhkMB4XDTI1MTAxNDE5MDYxNFoXDTI2MDExMjIwMDYxNFowLzEtMCsGA1UEAxMk ZWQzYTljZWMtMmNkOS00OTRhLWFkNzAtY2Y3MzIxZTBlNWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/T9fjk9pGdNgBmDW7hrbXY9xuWr6X+78Sbe G7hitVSZQBbHcT9XiWw78HQ/cwkhX1vd8gWiC78qLtdmlVXBcKvmg61E+ipgS8jw FTzhNXNW2NSbZx2nqw6a/cYxqYVX7IZLfzx/Se/SP68ZuiZdqbjyYmDWr44r3MtU Y2oIkITA3k3ccrkqgleDVFihyRQWECYEcez3p/JefqOrdYmgcW/kbBTv+ZdIKy7g y/2E7sPcNxOp7TC73HHfTG24glPybbnJm97s7kYipMFtA2R91eicTaGeDsID5eoN l2z2v6Tf0C6kSEUb8rEvb8hd7U4respasC9yj+2EaLoN1EJ4swIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBYjF1bvfUVOfGVSve8hS98u4V+UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jYmIz M2Y0MS1mNDkzLTRmZTUtODI1NC02MzQ4MmM2ZjAwOGQvN2I0MjQ5NzEtYWJiYi0z ODVhLWExNmItN2VmMzVlZTg4OWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2JiMzNmNDEtZjQ5My00ZmU1LTgy NTQtNjM0ODJjNmYwMDhkL2NiYjMzZjQxLWY0OTMtNGZlNS04MjU0LTYzNDgyYzZm MDA4ZC5jcmwwHwYDVR0jBBgwFoAUqFK0hQVplfh2R7DifLQ/QR6nRLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jYmIzM2Y0MS1mNDkzLTRmZTUtODI1NC02MzQ4 MmM2ZjAwOGQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaPPdAwQB wORuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHx2P1OjAWQocLrmh3wrsrqDchUF4cKhqfi6RDp4KfFdQAnG 98XvpSXAhW2pEm6Jz1HkfR8c4kgHxdDnzAx3s3Ra5VExEhLgZg9qZd3KPmwW6y1q Ad5CRc1qt+StXlkgJOAY72pAx+wtV6vNYlOfv7vNgkNG/xfKnS4fY40JPfRb4krr OhyszHFtDiml8C071ChCd4eATPCWIcsFzf0C4fsNfKpPIw5spjrOzRs2xbPAKdQv zZXXFY/YFkzAwQ8LqmvRQERl5b85wlCO+WiMGi3CCSaf8JngOEY69T+bI8I2m8lx 4qVwLvnz6uSuCGOVSu/dexnQKfCg3otXffeMdL4= -----END CERTIFICATE-----Generated at Mon Oct 20 18:32:08 2025 by rpki-client