$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/5b0abce2-8358-3937-a7a4-4e3cc004db1a.roa File: 5b0abce2-8358-3937-a7a4-4e3cc004db1a.roa (raw, json) Hash identifier: GqPs4NizUgVvxDim2Nfl00fzPMnniG23AhUuX8A60NM= Subject key identifier: BB:61:14:55:00:CE:72:4F:6F:EF:22:80:E9:A2:A5:C6:A5:AE:CB:C3 Certificate issuer: /CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861 Certificate serial: 010D0C9F4328584B56C9D6C0AE31155C1AF43A00 Authority key identifier: 7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/5b0abce2-8358-3937-a7a4-4e3cc004db1a.roa Signing time: Sun 28 Sep 2025 00:33:54 +0000 ROA not before: Sun 28 Sep 2025 00:33:54 +0000 ROA not after: Sat 27 Dec 2025 01:33:54 +0000 asID: 63201 IP address blocks: 104.193.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:c9:d6:c0:ae:31:15:5c:1a:f4:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861 Validity Not Before: Sep 28 00:33:54 2025 GMT Not After : Dec 27 01:33:54 2025 GMT Subject: CN=f1dbbdac-de72-4abf-8921-beb97c9f1b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3e:06:51:f8:23:a1:91:03:8b:18:65:48:02: d6:c6:83:98:b1:1c:9e:d0:9c:9a:96:6c:f9:30:76: 83:33:5c:f6:55:de:16:24:c4:fc:0d:d9:5a:d0:c5: c6:44:40:ca:04:a6:0b:65:5b:74:b8:e3:3d:7b:33: 08:b8:39:a5:4a:42:5f:16:a6:41:04:61:2c:a4:7f: eb:b8:2f:84:06:5f:1e:5f:54:fa:44:e3:01:02:26: 40:27:fe:00:d5:fc:7b:e3:2b:75:c7:e1:62:76:fd: a8:ce:c1:9a:f6:97:b5:65:85:a1:6d:50:28:82:66: 9c:cb:f2:e7:9c:00:4b:dd:1f:f4:1d:35:3e:a1:46: b4:a6:64:84:c3:d4:58:a0:6e:aa:69:a6:fc:69:0d: 73:b2:24:06:a5:62:bd:0e:74:af:6e:42:77:68:cd: 83:b5:b4:1a:af:9f:37:c3:9c:39:cf:66:2a:11:5e: 55:8c:a3:50:89:0e:46:3e:0d:ee:83:a0:f4:67:fb: b6:b4:db:49:25:7a:a7:97:39:8e:dc:84:05:18:73: f7:5b:d8:dc:0d:81:c8:d0:6c:db:7f:d1:59:ae:04: 53:ea:5a:68:58:49:b6:09:15:11:9e:3f:57:31:81: 1c:79:d1:7c:b5:86:2c:31:bb:b4:db:f2:88:fb:83: 3b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:61:14:55:00:CE:72:4F:6F:EF:22:80:E9:A2:A5:C6:A5:AE:CB:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/5b0abce2-8358-3937-a7a4-4e3cc004db1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl X509v3 Authority Key Identifier: keyid:7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer sbgp-ipAddrBlock: critical IPv4: 104.193.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:0d:e9:c8:16:a2:4d:cb:81:99:23:61:6e:71:f5:be:2c:a6: c5:86:08:f9:6d:56:5c:1a:15:57:d9:8d:f5:9e:bc:18:bf:7a: 2d:7f:8c:38:02:96:61:6d:71:a4:77:ad:05:2a:4d:81:c2:30: 70:ac:99:b6:d7:d3:35:25:d3:24:b3:39:06:a2:18:67:27:77: 74:e5:36:89:1d:ae:04:00:28:eb:b5:ab:57:80:b2:97:d0:5c: 39:02:3c:d7:f2:05:54:a3:4e:d5:1a:97:ee:18:3f:4e:02:00: 6f:a7:14:4b:9d:34:35:e7:44:fa:65:9d:e5:36:16:ed:68:bd: 61:03:30:a1:07:47:7a:18:e6:78:bd:a2:6f:55:47:dc:87:64: b7:83:5a:4b:b6:f5:98:49:b8:99:82:e0:d9:26:c2:da:e8:45: c8:28:1c:80:42:06:7f:b4:e5:25:8f:6b:17:ff:ef:eb:97:32: 9d:66:74:77:3e:dd:e0:b3:75:49:4b:57:4b:13:bf:ad:ea:57: 08:f5:3b:e9:2e:b5:24:00:8c:17:aa:07:b7:8a:81:f6:d7:b1: 38:8d:76:49:45:e0:96:eb:9a:94:36:6f:15:ff:37:0b:ea:47: ec:9b:c7:9d:71:82:41:61:d3:5e:ec:2b:32:12:23:53:20:a8: 98:22:8a:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtWydbArjEVXBr0OgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJkMGUwMmEtZTRmMC00OTYwLWFkNzktNjhmM2I1M2Ez ODYxMB4XDTI1MDkyODAwMzM1NFoXDTI1MTIyNzAxMzM1NFowLzEtMCsGA1UEAxMk ZjFkYmJkYWMtZGU3Mi00YWJmLTg5MjEtYmViOTdjOWYxYjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz4GUfgjoZEDixhlSALWxoOYsRye0Jyalmz5 MHaDM1z2Vd4WJMT8Ddla0MXGREDKBKYLZVt0uOM9ezMIuDmlSkJfFqZBBGEspH/r uC+EBl8eX1T6ROMBAiZAJ/4A1fx74yt1x+Fidv2ozsGa9pe1ZYWhbVAogmacy/Ln nABL3R/0HTU+oUa0pmSEw9RYoG6qaab8aQ1zsiQGpWK9DnSvbkJ3aM2DtbQar583 w5w5z2YqEV5VjKNQiQ5GPg3ug6D0Z/u2tNtJJXqnlzmO3IQFGHP3W9jcDYHI0Gzb f9FZrgRT6lpoWEm2CRURnj9XMYEcedF8tYYsMbu02/KI+4M7gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLthFFUAznJPb+8igOmipcalrsvDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMmQw ZTAyYS1lNGYwLTQ5NjAtYWQ3OS02OGYzYjUzYTM4NjEvNWIwYWJjZTItODM1OC0z OTM3LWE3YTQtNGUzY2MwMDRkYjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjJkMGUwMmEtZTRmMC00OTYwLWFk NzktNjhmM2I1M2EzODYxLzIyZDBlMDJhLWU0ZjAtNDk2MC1hZDc5LTY4ZjNiNTNh Mzg2MS5jcmwwHwYDVR0jBBgwFoAUe63A+wvfQ2rIyKWeWz1EEpSjXD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMmQwZTAyYS1lNGYwLTQ5NjAtYWQ3OS02OGYz YjUzYTM4NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaMF2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYN6cgWok3LgZkjYW5x9b4spsWGCPltVlwaFVfZjfWevBi/ei1/jDgC lmFtcaR3rQUqTYHCMHCsmbbX0zUl0ySzOQaiGGcnd3TlNokdrgQAKOu1q1eAspfQ XDkCPNfyBVSjTtUal+4YP04CAG+nFEudNDXnRPplneU2Fu1ovWEDMKEHR3oY5ni9 om9VR9yHZLeDWku29ZhJuJmC4NkmwtroRcgoHIBCBn+05SWPaxf/7+uXMp1mdHc+ 3eCzdUlLV0sTv63qVwj1O+kutSQAjBeqB7eKgfbXsTiNdklF4JbrmpQ2bxX/Nwvq R+ybx51xgkFh017sKzISI1MgqJgiigU= -----END CERTIFICATE-----Generated at Mon Oct 20 09:48:29 2025 by rpki-client