$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa File: eff20afa-d256-340d-8b13-7a8f9e404a25.roa (raw, json) Hash identifier: wZM+h/CjIv1oMu9eWdLDeuWJTzmAKcA79O759bcjgac= Subject key identifier: 58:07:E8:5E:3C:79:7C:EA:50:19:F5:C4:08:3C:B4:C1:95:95:92:A1 Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Certificate serial: 010D0C9F4328584B110C047C9B03EFC5655B8790 Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 21559 IP address blocks: 104.238.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:04:7c:9b:03:ef:c5:65:5b:87:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=14d10162-b253-409f-9361-466693956d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e4:00:83:79:d6:3c:f3:c6:80:ec:da:b5:b2: b7:a2:80:e6:98:6d:a3:6c:e8:c6:26:86:76:ca:be: 38:5b:d9:cf:c5:bb:f5:8c:e3:dd:2b:1e:3c:bd:8c: 8f:33:14:79:da:88:44:3c:cb:99:0d:2c:5d:25:d1: a7:c7:e6:3b:64:9f:96:b8:0e:5d:7b:09:24:9d:74: 93:d9:d4:b3:5d:fb:94:3b:0d:aa:d5:01:1a:1c:d3: 90:61:46:b6:e8:91:09:4d:74:77:c1:b0:11:8f:5a: 33:71:6f:61:dc:4d:60:09:2b:0c:2f:dc:15:ed:0b: aa:4b:e1:57:40:ca:bf:de:09:bd:bd:0b:45:36:45: 7d:25:32:98:9f:6b:94:17:28:57:af:9f:69:c3:59: 70:1d:ec:22:ae:cb:cd:b4:77:a7:75:b5:72:82:bf: 4e:cd:d8:de:f2:f7:e2:ba:11:f6:3b:8b:e3:32:99: d2:fd:3d:98:36:f7:49:c5:22:4a:60:75:ff:f3:67: bc:2e:f5:31:82:f8:84:1a:49:f3:15:27:ce:50:d2: 4f:77:49:c6:6b:ee:08:7e:1b:6b:12:ac:9e:f0:49: cd:a4:0d:ce:a0:ae:0e:02:81:3c:8b:e2:6c:00:0a: 68:f4:21:69:f8:ae:30:a9:71:2e:26:88:9f:4e:dc: c4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:07:E8:5E:3C:79:7C:EA:50:19:F5:C4:08:3C:B4:C1:95:95:92:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl X509v3 Authority Key Identifier: keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer sbgp-ipAddrBlock: critical IPv4: 104.238.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:1f:93:b3:b8:7c:67:e3:ac:d7:8e:1d:df:71:68:91:53:f6: e0:a6:6b:b0:1f:d7:7c:bb:f6:5e:e6:84:c6:ce:09:95:e0:6a: ea:70:3e:fd:f9:02:4e:43:5a:78:d1:b6:80:d5:f1:a2:b7:79: 98:13:10:d9:c7:bb:94:59:02:1a:68:c4:d1:7c:59:ac:17:f5: 8b:6e:5c:76:42:92:54:7a:95:5d:8c:61:f4:fe:99:da:13:d1: 9d:eb:e4:b6:c9:d7:81:81:3f:d9:fa:64:9e:ba:36:47:e7:56: 55:7c:aa:29:19:e7:3a:2f:e5:bb:d8:68:31:61:01:cf:86:aa: d1:1f:fa:81:11:e2:ce:f7:f9:fb:2f:43:ca:3f:e3:7b:a4:37: a5:3d:a5:32:fd:ee:a9:10:c9:94:4f:de:ca:f2:af:9f:f8:eb: 15:2a:55:6a:3f:fc:60:a3:99:45:11:09:cf:9a:a2:d5:e9:65: 91:ee:52:a6:da:74:46:d8:80:23:c5:33:29:a9:3d:53:71:c9: bc:45:a4:3e:cf:e3:24:e2:55:a9:fb:b7:ca:e3:6d:2f:d4:56: b3:2b:7c:cd:1c:35:18:50:47:f2:66:8e:60:a4:5b:9a:53:96: 8a:9d:44:11:11:2f:2c:a1:cc:33:8a:f8:2a:27:bb:16:66:b4: a6:3b:fc:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDAR8mwPvxWVbh5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh YTNjMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk MTRkMTAxNjItYjI1My00MDlmLTkzNjEtNDY2NjkzOTU2ZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluQAg3nWPPPGgOzatbK3ooDmmG2jbOjGJoZ2 yr44W9nPxbv1jOPdKx48vYyPMxR52ohEPMuZDSxdJdGnx+Y7ZJ+WuA5dewkknXST 2dSzXfuUOw2q1QEaHNOQYUa26JEJTXR3wbARj1ozcW9h3E1gCSsML9wV7QuqS+FX QMq/3gm9vQtFNkV9JTKYn2uUFyhXr59pw1lwHewirsvNtHendbVygr9Ozdje8vfi uhH2O4vjMpnS/T2YNvdJxSJKYHX/82e8LvUxgviEGknzFSfOUNJPd0nGa+4Ifhtr Eqye8EnNpA3OoK4OAoE8i+JsAApo9CFp+K4wqXEuJoifTtzENwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgH6F48eXzqUBn1xAg8tMGVlZKhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvZWZmMjBhZmEtZDI1Ni0z NDBkLThiMTMtN2E4ZjllNDA0YTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2 YmFlMGFhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaO7oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0fk7O4fGfjrNeOHd9xaJFT9uCma7Af13y79l7mhMbOCZXgaupwPv35 Ak5DWnjRtoDV8aK3eZgTENnHu5RZAhpoxNF8WawX9YtuXHZCklR6lV2MYfT+mdoT 0Z3r5LbJ14GBP9n6ZJ66NkfnVlV8qikZ5zov5bvYaDFhAc+GqtEf+oER4s73+fsv Q8o/43ukN6U9pTL97qkQyZRP3sryr5/46xUqVWo//GCjmUURCc+aotXpZZHuUqba dEbYgCPFMympPVNxybxFpD7P4yTiVan7t8rjbS/UVrMrfM0cNRhQR/JmjmCkW5pT loqdRBERLyyhzDOK+ConuxZmtKY7/Ho= -----END CERTIFICATE-----Generated at Tue Oct 21 18:00:53 2025 by rpki-client