$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/09a06ab5-9394-3c03-9d86-7025aba58fe1.roa File: 09a06ab5-9394-3c03-9d86-7025aba58fe1.roa (raw, json) Hash identifier: 91A0zEJF2e6EJhKSU/ogt0lyXBC2Yvg3qsv72KDaEgo= Subject key identifier: 28:F8:D0:D8:7F:84:D7:15:48:8D:AE:C3:46:FF:38:24:87:50:FF:04 Certificate issuer: /CN=a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13 Certificate serial: 010D0C9F4328584B196C11057332A5B29A536550 Authority key identifier: BA:CA:B1:CC:95:8A:80:DF:CB:14:94:8D:05:44:9E:A7:B0:46:28:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/09a06ab5-9394-3c03-9d86-7025aba58fe1.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 14576 IP address blocks: 104.193.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:11:05:73:32:a5:b2:9a:53:65:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=26ede7c4-b800-474e-b0de-ac1f3d9827a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e9:37:4e:03:57:b4:f7:4f:49:76:de:c5:5b: ea:ed:6c:cb:7a:52:8e:42:e1:04:9b:7a:35:cb:86: fa:fa:e3:99:20:8e:81:41:10:7b:5c:ac:dd:72:bd: 23:cd:36:ef:b5:8b:39:00:9d:4d:b3:77:27:33:55: 0e:7c:c5:d4:ec:ad:06:56:3e:35:e3:ad:e5:88:b5: 7c:10:6c:d1:60:77:e2:9b:98:ed:80:23:bc:71:db: a7:ab:54:55:1c:d1:7d:d0:af:cb:05:c7:01:e7:9c: 7a:14:66:f1:63:e7:2e:6e:b5:29:dd:99:e3:08:df: 0e:31:6a:34:bb:b2:7e:bd:a6:dd:00:60:f7:24:1f: 78:5d:29:24:56:d6:c5:99:4c:45:cf:6f:74:0f:3f: d0:65:d1:f9:3b:eb:e6:cd:fb:e7:cd:5f:8f:33:3b: 3a:de:10:da:89:d9:3b:38:04:8c:fd:85:c1:c9:08: 1f:63:49:a7:20:2b:5b:09:ff:42:1c:89:d5:85:56: 2d:85:fc:05:b3:de:85:ee:35:74:9c:c0:1d:a7:47: 43:f9:be:f8:17:79:2e:0e:ca:eb:50:f3:3e:f4:a1: 82:b7:ba:03:7b:b3:ff:b7:f1:47:fd:fa:cf:30:a3: b3:91:35:c6:d9:4b:ad:7c:88:85:74:7b:99:24:38: d9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F8:D0:D8:7F:84:D7:15:48:8D:AE:C3:46:FF:38:24:87:50:FF:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/09a06ab5-9394-3c03-9d86-7025aba58fe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.crl X509v3 Authority Key Identifier: keyid:BA:CA:B1:CC:95:8A:80:DF:CB:14:94:8D:05:44:9E:A7:B0:46:28:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.cer sbgp-ipAddrBlock: critical IPv4: 104.193.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:97:eb:de:58:2a:3b:51:49:75:32:dc:16:c8:18:f9:95:b8: 63:33:2a:af:46:46:96:43:5f:ff:62:40:2d:6c:aa:c8:3c:cc: 75:8b:87:1f:df:41:64:04:4f:74:3a:d2:8e:84:60:69:c7:ad: 61:be:df:77:64:bc:2a:3a:9f:e3:54:75:d2:90:9b:9f:40:a2: a8:19:2f:3b:d1:03:5c:3d:05:4f:10:2c:f6:ba:54:97:aa:52: 3a:2e:04:2d:2b:73:f0:5b:7f:75:36:0f:13:d3:e4:dd:11:a8: 6c:3d:40:77:56:08:78:0c:58:09:be:ac:e0:42:0c:39:5c:c3: 87:04:23:b8:4d:d5:d0:db:43:49:f3:0b:f0:a9:d2:2d:d4:eb: d0:22:80:46:a1:87:b7:a5:30:12:cb:ef:d9:75:b1:a0:a2:e3: 01:f9:32:05:85:3e:c0:46:f5:a5:bf:87:4d:98:a0:03:ed:e3: ba:c8:37:31:c6:85:6f:9d:a5:5f:37:ab:93:95:21:54:36:e6: f1:54:4f:d2:94:5c:98:4c:33:e6:4e:12:5f:c6:0a:c3:97:b1: 44:af:ae:33:c9:28:5e:18:fe:b5:88:f4:49:80:c9:3c:92:e7: 77:70:36:14:f1:27:92:d8:2b:74:ad:7b:aa:f4:cb:74:79:21: 0f:4b:da:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbBEFczKlsppTZVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlZTAyNTktY2RiMy00MWNlLWJiZjctN2EwMjhmNGI5 YjEzMB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk MjZlZGU3YzQtYjgwMC00NzRlLWIwZGUtYWMxZjNkOTgyN2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsek3TgNXtPdPSXbexVvq7WzLelKOQuEEm3o1 y4b6+uOZII6BQRB7XKzdcr0jzTbvtYs5AJ1Ns3cnM1UOfMXU7K0GVj41463liLV8 EGzRYHfim5jtgCO8cdunq1RVHNF90K/LBccB55x6FGbxY+cubrUp3ZnjCN8OMWo0 u7J+vabdAGD3JB94XSkkVtbFmUxFz290Dz/QZdH5O+vmzfvnzV+PMzs63hDaidk7 OASM/YXByQgfY0mnICtbCf9CHInVhVYthfwFs96F7jV0nMAdp0dD+b74F3kuDsrr UPM+9KGCt7oDe7P/t/FH/frPMKOzkTXG2UutfIiFdHuZJDjZBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCj40Nh/hNcVSI2uw0b/OCSHUP8EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2Vl MDI1OS1jZGIzLTQxY2UtYmJmNy03YTAyOGY0YjliMTMvMDlhMDZhYjUtOTM5NC0z YzAzLTlkODYtNzAyNWFiYTU4ZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlZTAyNTktY2RiMy00MWNlLWJi ZjctN2EwMjhmNGI5YjEzL2EzZWUwMjU5LWNkYjMtNDFjZS1iYmY3LTdhMDI4ZjRi OWIxMy5jcmwwHwYDVR0jBBgwFoAUusqxzJWKgN/LFJSNBUSep7BGKLUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2VlMDI1OS1jZGIzLTQxY2UtYmJmNy03YTAy OGY0YjliMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaMH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiX695YKjtRSXUy3BbIGPmVuGMzKq9GRpZDX/9iQC1sqsg8zHWLhx/f QWQET3Q60o6EYGnHrWG+33dkvCo6n+NUddKQm59AoqgZLzvRA1w9BU8QLPa6VJeq UjouBC0rc/Bbf3U2DxPT5N0RqGw9QHdWCHgMWAm+rOBCDDlcw4cEI7hN1dDbQ0nz C/Cp0i3U69AigEahh7elMBLL79l1saCi4wH5MgWFPsBG9aW/h02YoAPt47rINzHG hW+dpV83q5OVIVQ25vFUT9KUXJhMM+ZOEl/GCsOXsUSvrjPJKF4Y/rWI9EmAyTyS 53dwNhTxJ5LYK3Ste6r0y3R5IQ9L2o0= -----END CERTIFICATE-----Generated at Sun Oct 19 23:52:49 2025 by rpki-client