$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/731e66c1-a71e-3d9f-a838-e78228e9ff90.roa File: 731e66c1-a71e-3d9f-a838-e78228e9ff90.roa (raw, json) Hash identifier: mD3ROMwBejhpXGJxI5Z2ddlmoejiaaKIE8HPhzg/ga4= Subject key identifier: 95:5A:2A:CC:BD:E5:92:F1:7F:13:FF:54:84:15:0E:47:D2:13:EC:A2 Certificate issuer: /CN=43ac5ede-1d27-41a5-932c-21832f3ef95c Certificate serial: 010D0C9F4328584AC8763FEC4E77F1EB56B51980 Authority key identifier: 09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/731e66c1-a71e-3d9f-a838-e78228e9ff90.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 11734 IP address blocks: 104.151.136.0/21 maxlen: 24 104.153.192.0/22 maxlen: 24 199.19.208.0/22 maxlen: 24 199.189.64.0/22 maxlen: 24 208.74.28.0/22 maxlen: 24 208.74.48.0/22 maxlen: 24 208.82.204.0/22 maxlen: 24 208.91.48.0/22 maxlen: 24 209.134.48.0/20 maxlen: 24 2607:f148::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:3f:ec:4e:77:f1:eb:56:b5:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43ac5ede-1d27-41a5-932c-21832f3ef95c Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=33ee2d53-2084-43d0-afc0-bd05ffd2e415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d7:55:87:96:36:a5:85:a6:19:fd:60:b2:02: b0:e0:07:3c:9b:f6:f8:5a:ed:f8:79:d3:aa:28:99: 5e:dd:3e:e1:02:15:4c:5d:fb:7f:1f:bd:92:62:05: c4:39:11:7f:0c:17:cb:84:b7:47:07:84:ee:b0:0d: 98:3d:00:d8:9a:b9:4f:24:8d:05:ae:ca:47:91:a5: 25:5c:39:05:6b:c1:3e:cf:92:45:bf:30:86:07:3a: 56:00:c6:59:ff:35:d6:1b:01:b8:f5:a8:ad:6b:0b: 83:72:49:68:e5:da:5d:28:1f:36:14:3b:d6:49:35: 3f:a1:76:04:20:64:1c:4f:2f:26:ce:91:0c:ca:af: b4:49:7b:c7:60:8e:84:0f:d0:9c:51:2f:73:ef:41: a4:66:cc:86:0b:e2:d2:08:05:23:c9:20:c7:6e:4a: 52:eb:f4:d8:ce:d9:be:7a:2e:3d:aa:67:a1:f4:08: 3b:cc:c0:5a:39:29:04:50:38:88:a1:e9:85:fe:f2: 51:58:48:5d:f0:33:46:38:74:2c:93:ab:b9:87:74: f9:d9:f5:d6:d3:f9:7c:0a:6b:56:2e:61:9d:71:f2: 1a:a8:37:a5:7f:3f:f9:8b:da:5c:fa:ca:1c:49:77: 14:3c:bc:8b:ff:43:e0:04:76:29:62:da:72:9a:01: 09:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5A:2A:CC:BD:E5:92:F1:7F:13:FF:54:84:15:0E:47:D2:13:EC:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/731e66c1-a71e-3d9f-a838-e78228e9ff90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl X509v3 Authority Key Identifier: keyid:09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer sbgp-ipAddrBlock: critical IPv4: 104.151.136.0/21 104.153.192.0/22 199.19.208.0/22 199.189.64.0/22 208.74.28.0/22 208.74.48.0/22 208.82.204.0/22 208.91.48.0/22 209.134.48.0/20 IPv6: 2607:f148::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:f7:2c:63:3e:e4:b2:de:96:09:1a:8a:2b:fc:db:ad:13:f5: b2:d0:86:ad:78:05:85:d3:e7:9d:58:50:d3:7d:8c:6e:f1:0a: 0c:1b:4e:d6:2d:dd:60:eb:79:70:c2:09:c1:94:1a:5a:93:36: 96:e8:6e:d5:46:f7:50:f0:e4:41:5c:cf:d3:1c:84:c2:b8:39: 71:0d:88:52:ff:8c:cd:1a:c0:68:4e:c0:c3:fb:ec:72:e3:4f: 05:9e:92:cb:fe:f9:9a:b7:f2:be:88:ad:55:6a:03:7f:89:f6: 35:17:f0:8f:20:0e:0b:70:17:30:7f:ba:49:14:ac:0c:2d:0d: 8f:d0:4e:40:22:16:0a:19:34:8f:fe:57:ed:50:23:92:62:bd: 2d:5d:6e:7a:d2:34:d3:d7:b0:68:74:ad:a7:d5:f1:00:05:f2: 7a:71:9d:bc:34:db:a0:bf:33:1e:4b:cc:3d:03:bd:c4:cc:f4: 86:66:f5:e7:7a:f1:2c:9a:4a:c2:f2:60:3c:12:d6:cb:6e:c4: a4:2b:77:6d:a2:dc:01:df:ff:bf:5d:0e:17:55:22:74:c9:9c: 6d:76:31:af:5f:79:5b:ab:01:3b:ff:ba:d6:92:29:39:f9:59: 78:37:cf:c4:45:10:66:05:f4:a2:e9:ed:69:95:9d:c8:06:74: 5d:06:a5:ba -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWErIdj/sTnfx61a1GYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNhYzVlZGUtMWQyNy00MWE1LTkzMmMtMjE4MzJmM2Vm OTVjMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MzNlZTJkNTMtMjA4NC00M2QwLWFmYzAtYmQwNWZmZDJlNDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tdVh5Y2pYWmGf1gsgKw4Ac8m/b4Wu34edOq KJle3T7hAhVMXft/H72SYgXEORF/DBfLhLdHB4TusA2YPQDYmrlPJI0FrspHkaUl XDkFa8E+z5JFvzCGBzpWAMZZ/zXWGwG49aitawuDcklo5dpdKB82FDvWSTU/oXYE IGQcTy8mzpEMyq+0SXvHYI6ED9CcUS9z70GkZsyGC+LSCAUjySDHbkpS6/TYztm+ ei49qmeh9Ag7zMBaOSkEUDiIoemF/vJRWEhd8DNGOHQsk6u5h3T52fXW0/l8CmtW LmGdcfIaqDelfz/5i9pc+socSXcUPLyL/0PgBHYpYtpymgEJlQIDAQABo4IDlDCC A5AwHQYDVR0OBBYEFJVaKsy95ZLxfxP/VIQVDkfSE+yiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80M2Fj NWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgzMmYzZWY5NWMvNzMxZTY2YzEtYTcxZS0z ZDlmLWE4MzgtZTc4MjI4ZTlmZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDNhYzVlZGUtMWQyNy00MWE1LTkz MmMtMjE4MzJmM2VmOTVjLzQzYWM1ZWRlLTFkMjctNDFhNS05MzJjLTIxODMyZjNl Zjk1Yy5jcmwwHwYDVR0jBBgwFoAUCT5IKHeuyWZd5/E/OeO3foSfms0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80M2FjNWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgz MmYzZWY5NWMuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDaJeIAwQC aJnAAwQCxxPQAwQCx71AAwQC0EocAwQC0EowAwQC0FLMAwQC0FswAwQE0YYwMA0E AgACMAcDBQAmB/FIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAAT3LGM+5LLelgkaiiv8260T9bLQhq14BYXT 551YUNN9jG7xCgwbTtYt3WDreXDCCcGUGlqTNpbobtVG91Dw5EFcz9MchMK4OXEN iFL/jM0awGhOwMP77HLjTwWeksv++Zq38r6IrVVqA3+J9jUX8I8gDgtwFzB/ukkU rAwtDY/QTkAiFgoZNI/+V+1QI5JivS1dbnrSNNPXsGh0rafV8QAF8npxnbw026C/ Mx5LzD0DvcTM9IZm9ed68SyaSsLyYDwS1stuxKQrd22i3AHf/79dDhdVInTJnG12 Ma9feVurATv/utaSKTn5WXg3z8RFEGYF9KLp7WmVncgGdF0Gpbo= -----END CERTIFICATE-----Generated at Sat Aug 23 21:46:42 2025 by rpki-client