$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/7356e457-670a-3033-a781-b9366fd8a801.roa File: 7356e457-670a-3033-a781-b9366fd8a801.roa (raw, json) Hash identifier: WI2+EECbSRTRlAmngk0Mpg9F7mzaMg8MCu0N6rpR9Co= Subject key identifier: 05:29:53:86:41:53:00:BA:BF:D4:D6:59:EA:0F:70:AB:11:B6:97:F8 Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F4328584B8EACD2AF3E9E00D10D601480 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/7356e457-670a-3033-a781-b9366fd8a801.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 46408 IP address blocks: 104.219.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:d2:af:3e:9e:00:d1:0d:60:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=d81287ab-3551-4a43-81e0-e9e3858b05c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:80:0e:a5:c7:f0:7e:27:fc:8c:c7:09:c0:a0: 5b:33:6f:55:eb:8f:71:49:e5:00:c7:ca:76:01:e6: 9d:88:95:1b:c0:7c:02:5e:55:ab:ed:90:cd:01:ac: 99:cd:5b:0e:30:23:86:24:51:76:2c:52:35:69:34: 9e:80:4a:0e:dd:ba:00:2e:7d:d0:93:63:f9:91:b6: 61:59:7d:d0:bf:19:cd:cf:68:33:3b:d2:38:de:d1: 43:9e:29:7e:e2:44:63:cd:e4:03:60:02:05:2d:b4: ac:f5:c2:93:bf:34:ab:ec:b1:5f:68:5d:d3:d9:77: 5e:83:7b:e9:8c:4b:61:67:fc:67:e7:31:ca:2e:30: 36:26:c4:a9:25:a8:bb:1b:96:cc:da:cd:fa:ce:7e: e6:9b:db:7c:2d:ff:a4:ce:b1:80:93:f3:4c:31:ea: 03:a2:3d:57:34:fa:11:0a:bd:82:bc:9d:4f:9a:9c: 48:33:fa:a9:7a:86:45:f9:61:9a:41:11:28:90:e7: ff:1f:dc:32:bf:41:23:d1:b8:29:5d:19:b7:3a:ba: e5:fc:71:77:9b:50:d4:b6:be:fa:99:89:25:a4:01: 7b:db:e6:a0:64:f4:e5:49:e6:05:29:a5:be:e5:2c: 8b:d9:6a:2b:97:5f:d9:40:5b:69:29:d6:28:1d:2b: 02:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:29:53:86:41:53:00:BA:BF:D4:D6:59:EA:0F:70:AB:11:B6:97:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/7356e457-670a-3033-a781-b9366fd8a801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv4: 104.219.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:90:b5:46:e9:56:4d:e1:41:e6:a1:bc:70:e6:dc:1e:96:97: 6a:11:39:6c:d3:c1:02:6d:90:82:cb:99:91:eb:a2:be:f8:67: 62:03:53:c3:2f:69:6e:1f:1e:a9:e4:c0:2b:8e:f3:c5:8c:09: 3a:58:08:2a:5e:6b:0e:03:b0:10:69:f4:44:93:37:19:9b:b1: f6:cd:40:af:cd:90:6a:09:81:08:97:4c:23:1a:46:1d:55:58: 66:ed:82:7f:4d:52:32:bb:ca:f2:01:53:d4:30:14:7a:f5:6d: 97:43:c4:2d:c7:56:5c:a9:ea:c1:e0:00:48:35:39:af:c7:1a: 0a:b1:47:3f:ef:a6:16:c0:ee:a4:9d:59:91:c4:d6:03:2f:90: 4c:31:c7:d9:09:7c:38:31:f3:68:eb:74:d6:ad:8d:e5:6b:53: d4:0f:ad:98:13:8d:1d:5c:de:41:8a:01:2c:c9:5a:92:0a:63: 37:55:d8:15:3e:54:ec:a0:db:4d:bb:3b:21:b7:7f:c5:88:66: ff:ae:26:54:ca:7e:22:47:df:fe:a2:85:eb:95:de:c8:35:2f: b1:9a:4b:46:9f:ba:1e:58:c6:2e:4e:95:53:b1:a8:92:20:54: 67:b0:5e:62:6c:7b:c3:36:c7:57:72:e9:9a:4b:62:3c:d7:84: bd:6b:5d:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrNKvPp4A0Q1gFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZDgxMjg3YWItMzU1MS00YTQzLTgxZTAtZTllMzg1OGIwNWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoAOpcfwfif8jMcJwKBbM29V649xSeUAx8p2 AeadiJUbwHwCXlWr7ZDNAayZzVsOMCOGJFF2LFI1aTSegEoO3boALn3Qk2P5kbZh WX3QvxnNz2gzO9I43tFDnil+4kRjzeQDYAIFLbSs9cKTvzSr7LFfaF3T2Xdeg3vp jEthZ/xn5zHKLjA2JsSpJai7G5bM2s36zn7mm9t8Lf+kzrGAk/NMMeoDoj1XNPoR Cr2CvJ1PmpxIM/qpeoZF+WGaQREokOf/H9wyv0Ej0bgpXRm3Orrl/HF3m1DUtr76 mYklpAF72+agZPTlSeYFKaW+5SyL2Worl1/ZQFtpKdYoHSsCdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUpU4ZBUwC6v9TWWeoPcKsRtpf4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvNzM1NmU0NTctNjcwYS0z MDMzLWE3ODEtYjkzNjZmZDhhODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaNsYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6QtUbpVk3hQeahvHDm3B6Wl2oROWzTwQJtkILLmZHror74Z2IDU8Mv aW4fHqnkwCuO88WMCTpYCCpeaw4DsBBp9ESTNxmbsfbNQK/NkGoJgQiXTCMaRh1V WGbtgn9NUjK7yvIBU9QwFHr1bZdDxC3HVlyp6sHgAEg1Oa/HGgqxRz/vphbA7qSd WZHE1gMvkEwxx9kJfDgx82jrdNatjeVrU9QPrZgTjR1c3kGKASzJWpIKYzdV2BU+ VOyg2027OyG3f8WIZv+uJlTKfiJH3/6iheuV3sg1L7GaS0afuh5Yxi5OlVOxqJIg VGewXmJse8M2x1dy6ZpLYjzXhL1rXXA= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:49 2025 by rpki-client