$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/499cf111-e9c6-38d0-a6ba-d9d43accee6e.roa File: 499cf111-e9c6-38d0-a6ba-d9d43accee6e.roa (raw, json) Hash identifier: MFdTpVsNozrzhFPB8CRiQRfs8acGfcR9vzXG+5NCz3U= Subject key identifier: E7:A0:51:3F:8C:F2:F4:39:D9:7B:EE:11:CF:64:E5:56:01:28:CF:D9 Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Certificate serial: 010D0C9F4328584B4081AA6EC5950F04BCF677A0 Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/499cf111-e9c6-38d0-a6ba-d9d43accee6e.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 21559 IP address blocks: 104.218.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:aa:6e:c5:95:0f:04:bc:f6:77:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=67af8fd5-6f17-4aad-8ce7-f874389c8a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4c:93:6d:25:86:d5:92:e0:6c:0e:d0:84:18: 29:af:ef:d6:6a:ee:fe:06:68:5d:0d:9f:50:94:99: 86:b2:d0:a9:7d:e5:a4:2c:06:25:5f:89:c9:3c:88: 17:48:0c:09:25:4b:42:d0:a0:ed:64:c1:13:9e:16: 41:b7:fb:1f:c0:2f:a9:68:58:5d:60:5e:05:78:56: 9b:be:64:fc:1a:84:f6:48:84:71:39:cb:4b:69:52: 10:c3:d7:e4:d9:04:de:b3:68:1e:57:7d:52:3a:32: 3e:e7:1a:fc:11:2a:29:50:93:c2:21:c4:60:73:70: bb:e8:d9:c8:08:6c:56:b4:a3:59:ae:8c:32:10:ad: c3:cb:29:e5:5f:43:01:e7:be:f6:17:06:94:f3:6f: 03:d1:27:90:bb:04:7c:b2:62:86:4f:8f:97:0f:fb: ce:07:db:7c:7d:1b:e6:d8:bb:e1:2f:51:6d:b6:d3: b5:67:f7:92:7a:74:e2:09:cd:26:2a:da:64:c2:ac: ee:32:88:a3:e7:73:c7:48:52:bc:3a:5c:18:0f:98: 06:1f:0e:93:4a:4b:83:8e:b5:2c:3e:b0:53:ad:c8: fb:7c:e9:b3:6a:e7:de:b1:bb:50:a9:11:8c:77:cb: fa:91:fa:d9:6e:f6:91:25:4c:a8:97:7c:c3:8d:be: 04:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A0:51:3F:8C:F2:F4:39:D9:7B:EE:11:CF:64:E5:56:01:28:CF:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/499cf111-e9c6-38d0-a6ba-d9d43accee6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl X509v3 Authority Key Identifier: keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer sbgp-ipAddrBlock: critical IPv4: 104.218.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:77:e1:de:52:cc:44:a9:20:9a:75:93:e5:d8:5d:43:5c:d5: df:6e:8a:38:9e:88:bc:ac:bd:e1:cd:a7:a2:cd:75:d7:8e:64: 7d:57:60:d6:fc:c6:8e:03:b8:f1:e2:5b:f6:7f:52:01:de:bb: 54:8c:39:0c:ee:cc:84:c7:ee:94:9b:c7:cc:f0:fd:13:38:bc: ab:28:c0:d3:bc:ea:b8:41:74:70:e2:df:5e:2c:16:40:e4:53: f4:cd:0a:78:6e:e9:22:71:94:92:83:58:ba:68:1a:cc:b8:6d: 44:69:69:51:eb:f6:0f:99:bc:2b:49:4d:64:8f:da:d6:22:f0: c5:b2:56:b1:99:04:0a:f3:06:58:97:51:d6:af:ff:98:d6:d0: 1f:91:12:98:75:7f:a6:4b:31:81:ea:7a:6c:88:25:7b:48:ae: c7:d9:3b:a1:eb:39:ef:7a:fe:fc:b1:8d:c7:3a:64:71:48:86: 7c:43:ca:b4:9d:a7:03:6e:9c:bb:9e:5b:66:9a:6d:4b:14:14: 00:71:9e:30:bc:fd:9f:18:58:d6:d9:87:86:32:89:52:b0:8d: c0:90:32:54:5a:78:d1:0d:c7:91:cf:80:b1:05:30:42:9f:d6: 0d:0e:ba:34:bc:36:b2:18:29:ab:1f:24:8c:bf:0f:03:6e:dd: 84:c6:33:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgapuxZUPBLz2d6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5 ZDVhMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk NjdhZjhmZDUtNmYxNy00YWFkLThjZTctZjg3NDM4OWM4YTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0yTbSWG1ZLgbA7QhBgpr+/Wau7+BmhdDZ9Q lJmGstCpfeWkLAYlX4nJPIgXSAwJJUtC0KDtZMETnhZBt/sfwC+paFhdYF4FeFab vmT8GoT2SIRxOctLaVIQw9fk2QTes2geV31SOjI+5xr8ESopUJPCIcRgc3C76NnI CGxWtKNZrowyEK3DyynlX0MB5772FwaU828D0SeQuwR8smKGT4+XD/vOB9t8fRvm 2LvhL1FtttO1Z/eSenTiCc0mKtpkwqzuMoij53PHSFK8OlwYD5gGHw6TSkuDjrUs PrBTrcj7fOmzaufesbtQqRGMd8v6kfrZbvaRJUyol3zDjb4EXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOegUT+M8vQ52XvuEc9k5VYBKM/ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvNDk5Y2YxMTEtZTljNi0z OGQwLWE2YmEtZDlkNDNhY2NlZTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk ZjA3MjlkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaNrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFB34d5SzESpIJp1k+XYXUNc1d9uijieiLysveHNp6LNddeOZH1XYNb8 xo4DuPHiW/Z/UgHeu1SMOQzuzITH7pSbx8zw/RM4vKsowNO86rhBdHDi314sFkDk U/TNCnhu6SJxlJKDWLpoGsy4bURpaVHr9g+ZvCtJTWSP2tYi8MWyVrGZBArzBliX Udav/5jW0B+REph1f6ZLMYHqemyIJXtIrsfZO6HrOe96/vyxjcc6ZHFIhnxDyrSd pwNunLueW2aabUsUFABxnjC8/Z8YWNbZh4YyiVKwjcCQMlRaeNENx5HPgLEFMEKf 1g0OujS8NrIYKasfJIy/DwNu3YTGMzU= -----END CERTIFICATE-----Generated at Tue Oct 21 22:25:34 2025 by rpki-client