$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/5225e9df-ff27-341c-bb4c-a55d2b37245e.roa File: 5225e9df-ff27-341c-bb4c-a55d2b37245e.roa (raw, json) Hash identifier: DkDjIcPYOTzO3E2OpOGpsjyPy1Tr+tzl56wls0UnFVw= Subject key identifier: AE:41:AC:EA:B6:5F:4A:D8:BC:8B:BB:B9:25:73:C9:70:9B:4E:4A:DB Certificate issuer: /CN=a1b7e801-0cb9-4602-b697-f6df0c2beb40 Certificate serial: 010D0C9F4328584AC9DBA030E8DB7841CBA33380 Authority key identifier: 98:6A:28:EE:B7:EC:65:16:13:49:EA:17:75:6F:A5:D3:07:5C:3B:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/5225e9df-ff27-341c-bb4c-a55d2b37245e.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 19257 IP address blocks: 104.255.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/a1b7e801-0cb9-4602-b697-f6df0c2beb40.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/a1b7e801-0cb9-4602-b697-f6df0c2beb40.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:a0:30:e8:db:78:41:cb:a3:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b7e801-0cb9-4602-b697-f6df0c2beb40 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=be96cf58-8a03-430d-874b-385b9ba54b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f1:15:74:29:b3:4f:d3:4a:75:0b:9b:48:54: 73:b7:00:68:15:a7:66:c0:19:c1:9c:01:1f:87:6f: dd:e2:7b:58:4b:94:ae:8b:01:81:e3:28:ce:b8:53: f1:c4:dd:2b:62:97:00:5b:51:8e:46:4a:f4:01:66: 54:89:be:d5:46:3c:3c:40:fe:2c:8a:e5:e1:10:c6: 94:06:f7:43:f7:c6:9c:f5:cd:31:b5:36:2f:52:a1: 0c:2a:0e:64:27:5d:fa:21:3e:d3:5e:5d:10:56:04: 2e:ae:5f:98:25:87:69:47:11:69:40:8c:cd:8f:2d: bd:44:5f:61:5f:58:ca:c0:f7:e1:68:49:ba:7c:bd: ec:84:af:87:3f:1f:b9:bc:1b:c4:e1:4c:4b:26:a9: 24:cf:76:34:9b:c8:90:0c:9f:f2:a6:61:db:5c:29: 45:7c:4a:e4:ba:b2:c2:cb:2a:42:ef:0b:36:38:4e: fb:a5:15:8b:80:01:e3:bb:7c:72:fd:f7:36:14:f0: 18:2b:d8:81:dd:6e:e6:df:9c:ef:9c:83:22:36:cb: 24:6d:91:b7:77:02:cc:aa:e8:aa:ea:b2:9a:49:b8: 4e:61:7f:f2:c4:1b:fc:5d:ff:7b:12:df:ad:35:94: 75:2a:6a:0c:65:79:c1:09:c4:bb:5e:2e:a6:05:37: 19:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:41:AC:EA:B6:5F:4A:D8:BC:8B:BB:B9:25:73:C9:70:9B:4E:4A:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/5225e9df-ff27-341c-bb4c-a55d2b37245e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/a1b7e801-0cb9-4602-b697-f6df0c2beb40.crl X509v3 Authority Key Identifier: keyid:98:6A:28:EE:B7:EC:65:16:13:49:EA:17:75:6F:A5:D3:07:5C:3B:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40.cer sbgp-ipAddrBlock: critical IPv4: 104.255.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:fc:be:eb:84:a3:bd:a4:94:32:ed:d9:38:cc:44:d8:32:f0: 97:33:48:63:4a:a8:e0:04:b9:f6:ae:0b:1b:e0:b1:53:3e:38: 35:e7:18:ce:87:9a:33:79:88:c2:dd:d4:ad:8f:52:d2:c6:2a: d7:c5:b4:aa:a9:15:3a:a8:87:bf:ea:aa:e9:8a:82:db:33:51: fe:46:71:97:92:ba:8d:b9:64:79:8b:97:88:56:f3:b7:19:cd: 97:ef:05:44:24:98:b3:7c:38:d9:ec:4a:f6:d0:2c:67:81:41: 7d:02:f9:7f:56:0e:b0:3d:19:b8:fb:cb:c4:a8:97:67:ab:90: 1f:8c:2a:96:e1:f8:f4:90:13:16:52:d2:79:5a:2b:62:4d:c9: e1:ae:71:1d:14:d7:66:10:78:44:40:be:94:99:e2:31:18:cc: 30:94:50:f2:9c:bc:f0:da:15:80:58:d2:c6:aa:9c:32:9d:df: a8:a2:54:73:3f:94:21:69:35:16:00:4b:dd:3b:4e:95:2b:43: 67:69:da:f1:89:85:26:c1:26:bd:68:b1:02:5c:30:de:81:41: 1e:bc:8a:4c:b8:7c:5e:82:3f:fc:0b:30:ad:c9:f4:ba:24:78: bc:27:4f:5c:d1:96:22:6c:b6:b8:d5:48:5f:31:1e:46:02:ee: 73:a4:a3:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ26Aw6Nt4QcujM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiN2U4MDEtMGNiOS00NjAyLWI2OTctZjZkZjBjMmJl YjQwMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk YmU5NmNmNTgtOGEwMy00MzBkLTg3NGItMzg1YjliYTU0YjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPEVdCmzT9NKdQubSFRztwBoFadmwBnBnAEf h2/d4ntYS5SuiwGB4yjOuFPxxN0rYpcAW1GORkr0AWZUib7VRjw8QP4siuXhEMaU BvdD98ac9c0xtTYvUqEMKg5kJ136IT7TXl0QVgQurl+YJYdpRxFpQIzNjy29RF9h X1jKwPfhaEm6fL3shK+HPx+5vBvE4UxLJqkkz3Y0m8iQDJ/ypmHbXClFfErkurLC yypC7ws2OE77pRWLgAHju3xy/fc2FPAYK9iB3W7m35zvnIMiNsskbZG3dwLMquiq 6rKaSbhOYX/yxBv8Xf97Et+tNZR1KmoMZXnBCcS7Xi6mBTcZ+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5BrOq2X0rYvIu7uSVzyXCbTkrbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMWI3 ZTgwMS0wY2I5LTQ2MDItYjY5Ny1mNmRmMGMyYmViNDAvNTIyNWU5ZGYtZmYyNy0z NDFjLWJiNGMtYTU1ZDJiMzcyNDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTFiN2U4MDEtMGNiOS00NjAyLWI2 OTctZjZkZjBjMmJlYjQwL2ExYjdlODAxLTBjYjktNDYwMi1iNjk3LWY2ZGYwYzJi ZWI0MC5jcmwwHwYDVR0jBBgwFoAUmGoo7rfsZRYTSeoXdW+l0wdcOzYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMWI3ZTgwMS0wY2I5LTQ2MDItYjY5Ny1mNmRm MGMyYmViNDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP+UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADX8vuuEo72klDLt2TjMRNgy8JczSGNKqOAEufauCxvgsVM+ODXnGM6H mjN5iMLd1K2PUtLGKtfFtKqpFTqoh7/qqumKgtszUf5GcZeSuo25ZHmLl4hW87cZ zZfvBUQkmLN8ONnsSvbQLGeBQX0C+X9WDrA9Gbj7y8Sol2erkB+MKpbh+PSQExZS 0nlaK2JNyeGucR0U12YQeERAvpSZ4jEYzDCUUPKcvPDaFYBY0saqnDKd36iiVHM/ lCFpNRYAS907TpUrQ2dp2vGJhSbBJr1osQJcMN6BQR68iky4fF6CP/wLMK3J9Lok eLwnT1zRliJstrjVSF8xHkYC7nOkoxE= -----END CERTIFICATE-----Generated at Sun Aug 24 03:54:47 2025 by rpki-client