$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/4749d5a9-351a-310d-a4b1-7d0866c068cd.roa File: 4749d5a9-351a-310d-a4b1-7d0866c068cd.roa (raw, json) Hash identifier: xjFBCJ525NlIzSq/m5+Tsfj3vcCcbj2EsxtKyTR/AUk= Subject key identifier: 72:82:F4:2C:F3:7D:43:38:90:C8:37:14:66:13:50:28:F5:7B:D1:EF Certificate issuer: /CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Certificate serial: 010D0C9F4328584B4D11D41028E9059630C9A1A0 Authority key identifier: C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/4749d5a9-351a-310d-a4b1-7d0866c068cd.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 49585 IP address blocks: 104.156.136.0/24 maxlen: 24 104.156.137.0/24 maxlen: 24 104.156.138.0/24 maxlen: 24 104.156.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d4:10:28:e9:05:96:30:c9:a1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=a75f7a37-f488-4511-82be-6108204647cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:34:27:aa:5b:1d:88:98:54:12:93:5f:c9:d7: 48:19:a9:da:b0:89:64:db:5b:6c:a9:4e:2d:ce:73: 10:24:fd:ea:04:f1:cc:44:4f:6b:92:a0:8f:10:a1: 9a:24:d9:62:8d:bc:e1:a0:b2:ee:cb:d9:46:e6:f3: 87:e0:92:09:d4:93:94:90:b9:ef:fb:36:c1:b1:66: 07:6c:f0:fa:d2:f4:7b:25:c3:51:c2:9f:17:b4:2c: 7a:65:77:ec:3c:42:6b:1e:ed:91:d8:4c:c3:7a:73: a6:5a:c2:58:59:64:7a:64:e1:fc:3c:bb:0d:ef:e1: 58:97:aa:8e:d0:c1:e1:08:d5:23:18:68:c6:7c:b9: 36:43:b4:06:0b:0a:2e:f7:ea:b8:ab:cd:10:57:4a: d5:a4:66:b7:aa:44:3c:aa:42:c2:ae:9c:d8:8a:7e: b4:56:e7:c3:2b:cf:24:ce:75:6d:9c:e8:d9:32:14: d1:33:c1:82:11:93:f4:b7:09:f1:b1:8a:7d:42:2e: c8:31:6d:9a:cc:f4:c0:56:cf:e2:65:6a:44:75:ff: 1b:55:8a:a5:84:f0:4d:c2:eb:21:ad:3e:2a:1e:ca: 76:bf:73:08:f3:c5:0d:9f:44:06:c8:8d:8d:40:19: 54:66:4e:60:22:bf:8e:f2:db:cd:12:12:56:fe:db: 58:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:82:F4:2C:F3:7D:43:38:90:C8:37:14:66:13:50:28:F5:7B:D1:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/4749d5a9-351a-310d-a4b1-7d0866c068cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl X509v3 Authority Key Identifier: keyid:C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer sbgp-ipAddrBlock: critical IPv4: 104.156.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:4b:ec:69:74:2f:da:48:64:54:ff:a9:e6:b9:bd:12:5a:e8: 2a:af:d6:e9:0a:cb:a7:99:40:c4:00:18:da:3a:a1:c0:61:9e: e8:a7:1d:4f:e9:6a:4f:36:8c:c1:d4:c9:eb:74:bc:71:d0:89: 05:7e:f5:c5:e5:35:47:8b:21:55:67:09:e1:f1:3e:e3:19:c1: e9:a7:b7:f0:12:39:bf:8b:8b:b2:c4:c2:b9:67:10:1f:33:20: 5f:56:95:05:f2:0e:5b:94:8f:3e:fc:c2:d3:a5:92:54:06:01: 41:fc:57:d0:95:ed:b7:0f:0f:cb:42:fd:c2:23:b0:e2:a0:36: 5b:b8:f5:ed:d7:c1:98:95:d2:04:c3:a8:ce:3d:39:bb:13:25: a4:28:f0:13:ad:87:3a:8c:e6:2b:82:a6:1b:28:f1:ad:23:d0: ba:5b:f3:0e:a2:91:ff:c8:02:7f:e5:4d:32:55:ed:be:27:90: ed:85:68:6d:68:c6:3d:d3:20:1c:e8:24:32:44:74:ed:c1:08: db:9c:e2:23:e1:c1:1d:74:f6:17:f1:38:73:d4:f3:a4:dc:b5: 64:40:4d:74:55:5f:f6:d7:71:9d:d1:69:79:0c:fc:0f:6d:f4: c8:e5:40:25:a5:22:c4:81:40:de:6d:38:02:06:01:4e:bd:6f: cc:63:7f:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdQQKOkFljDJoaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE4NzNlNWEtYTE2ZC00ODkwLThkZmUtYzI4MWJmNmUw MjBlMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk YTc1ZjdhMzctZjQ4OC00NTExLTgyYmUtNjEwODIwNDY0N2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzQnqlsdiJhUEpNfyddIGanasIlk21tsqU4t znMQJP3qBPHMRE9rkqCPEKGaJNlijbzhoLLuy9lG5vOH4JIJ1JOUkLnv+zbBsWYH bPD60vR7JcNRwp8XtCx6ZXfsPEJrHu2R2EzDenOmWsJYWWR6ZOH8PLsN7+FYl6qO 0MHhCNUjGGjGfLk2Q7QGCwou9+q4q80QV0rVpGa3qkQ8qkLCrpzYin60VufDK88k znVtnOjZMhTRM8GCEZP0twnxsYp9Qi7IMW2azPTAVs/iZWpEdf8bVYqlhPBNwush rT4qHsp2v3MI88UNn0QGyI2NQBlUZk5gIr+O8tvNEhJW/ttYYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKC9CzzfUM4kMg3FGYTUCj1e9HvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3 M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgxYmY2ZTAyMGUvNDc0OWQ1YTktMzUxYS0z MTBkLWE0YjEtN2QwODY2YzA2OGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjE4NzNlNWEtYTE2ZC00ODkwLThk ZmUtYzI4MWJmNmUwMjBlLzIxODczZTVhLWExNmQtNDg5MC04ZGZlLWMyODFiZjZl MDIwZS5jcmwwHwYDVR0jBBgwFoAUx3mnxj/aW1dVPvxCh5HuGzfxwqYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgx YmY2ZTAyMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1L7Gl0L9pIZFT/qea5vRJa6Cqv1ukKy6eZQMQAGNo6ocBhnuinHU/p ak82jMHUyet0vHHQiQV+9cXlNUeLIVVnCeHxPuMZwemnt/ASOb+Li7LEwrlnEB8z IF9WlQXyDluUjz78wtOlklQGAUH8V9CV7bcPD8tC/cIjsOKgNlu49e3XwZiV0gTD qM49ObsTJaQo8BOthzqM5iuCphso8a0j0Lpb8w6ikf/IAn/lTTJV7b4nkO2FaG1o xj3TIBzoJDJEdO3BCNuc4iPhwR109hfxOHPU86TctWRATXRVX/bXcZ3RaXkM/A9t 9MjlQCWlIsSBQN5tOAIGAU69b8xjfwk= -----END CERTIFICATE-----Generated at Tue Oct 21 00:01:18 2025 by rpki-client