$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/a7c09575-72cc-3952-b382-ea4135871ede.roa File: a7c09575-72cc-3952-b382-ea4135871ede.roa (raw, json) Hash identifier: 2CJauVvVhYHW+iyQKiCWWgTyYufD8RhW4uDvlJEuGXQ= Subject key identifier: 3E:A7:AB:81:FE:39:B0:9C:72:E4:28:37:4A:9B:3A:10:16:8C:CC:FD Certificate issuer: /CN=174db496-399b-48c7-919e-3e6dfd4a5584 Certificate serial: 010D0C9F4328584B970D03B13DC68B806F283340 Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/a7c09575-72cc-3952-b382-ea4135871ede.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 104.204.255.0/24 maxlen: 24 199.4.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0d:03:b1:3d:c6:8b:80:6f:28:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=d7d9fc50-667f-42f4-94c3-225ab12f1e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:20:57:78:8a:82:05:b8:a7:ea:3a:68:54:76: 30:c9:b7:1f:a2:6c:c9:b3:4f:15:5d:27:b3:4b:f0: 8c:16:37:99:3f:2d:5b:d8:c7:77:08:24:af:e9:1c: 58:4d:f2:2c:84:a6:6a:83:39:7f:2d:4e:69:b1:95: a0:fc:e6:74:26:14:3b:80:57:f8:ed:04:43:9a:e4: 09:e8:13:92:41:da:a5:b1:84:76:4a:62:59:e1:59: 98:13:98:b6:15:07:ce:97:87:7c:9a:02:ec:a7:a8: 55:53:ff:bd:ae:9f:6a:d4:41:3b:51:dd:31:50:5e: 33:37:03:02:95:71:7f:1f:fe:d3:92:fe:fd:61:40: eb:6a:f5:33:b2:2b:ce:df:6e:e0:37:b6:79:54:0b: b7:a1:f4:31:be:7c:35:12:7e:b1:1b:ff:a8:30:77: dc:60:16:3d:d6:c0:a8:a7:04:ba:69:72:f9:ab:02: a1:47:89:bf:32:a7:08:ec:49:f5:b6:4f:1f:25:25: 10:72:34:16:80:bb:e4:bd:81:41:e1:d9:ab:a1:ea: 35:74:7a:bf:94:c7:71:0b:39:c3:be:15:b0:f2:bb: 04:f9:3d:39:83:b5:e8:43:ef:5e:bb:02:9a:92:d9: 83:6d:7c:33:e0:35:9f:20:dd:f7:3e:6b:ca:4a:4c: 2f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A7:AB:81:FE:39:B0:9C:72:E4:28:37:4A:9B:3A:10:16:8C:CC:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/a7c09575-72cc-3952-b382-ea4135871ede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl X509v3 Authority Key Identifier: keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer sbgp-ipAddrBlock: critical IPv4: 104.204.255.0/24 199.4.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:da:23:a3:4a:f3:d0:cc:b8:1b:1f:fd:fe:05:77:b3:ee:2b: d3:54:d0:3d:ac:8f:ca:b1:19:97:11:63:61:da:08:65:ef:88: 3d:6a:51:bc:fd:34:a3:23:c2:ab:52:53:e6:9b:bb:45:94:91: 18:40:4e:70:0e:db:21:df:d7:f7:54:0f:63:30:ff:b1:e9:06: d5:91:f3:02:83:1e:36:5d:64:03:5b:1b:27:78:0f:38:6c:98: 64:0b:23:9f:b1:07:4a:99:55:65:5b:52:ac:95:de:82:13:ec: 12:81:28:8f:55:7e:ce:46:fa:74:fa:20:2f:c9:fb:40:d5:da: 96:c8:bd:11:6e:e5:71:6b:f8:f8:e2:a9:28:b6:21:02:6d:a0: a2:da:7b:25:c7:01:5c:ef:1c:b4:f0:2f:f0:38:02:86:07:a5: 8c:67:cc:c4:ba:57:bb:d2:e4:50:b7:77:48:bd:60:0a:f1:8c: b2:06:ae:44:e2:0c:ed:bc:3c:18:90:79:ee:04:f9:21:e8:bb: 05:48:88:3c:cc:7b:ec:a5:e4:78:93:80:ae:ff:dc:9b:09:62: 70:f3:9a:29:57:23:6f:47:f0:ee:48:b8:d2:3f:f0:ff:d1:ff: cd:dd:46:01:4b:19:04:48:69:98:a0:75:f6:a8:26:47:17:d2: 55:53:69:23 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuXDQOxPcaLgG8oM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1 NTg0MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZDdkOWZjNTAtNjY3Zi00MmY0LTk0YzMtMjI1YWIxMmYxZTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCBXeIqCBbin6jpoVHYwybcfomzJs08VXSez S/CMFjeZPy1b2Md3CCSv6RxYTfIshKZqgzl/LU5psZWg/OZ0JhQ7gFf47QRDmuQJ 6BOSQdqlsYR2SmJZ4VmYE5i2FQfOl4d8mgLsp6hVU/+9rp9q1EE7Ud0xUF4zNwMC lXF/H/7Tkv79YUDravUzsivO327gN7Z5VAu3ofQxvnw1En6xG/+oMHfcYBY91sCo pwS6aXL5qwKhR4m/MqcI7En1tk8fJSUQcjQWgLvkvYFB4dmroeo1dHq/lMdxCznD vhWw8rsE+T05g7XoQ+9euwKaktmDbXwz4DWfIN33PmvKSkwv2QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFD6nq4H+ObCccuQoN0qbOhAWjMz9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvYTdjMDk1NzUtNzJjYy0z OTUyLWIzODItZWE0MTM1ODcxZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk ZmQ0YTU1ODQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaMz/AwQA xwTTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGLaI6NK89DMuBsf/f4Fd7PuK9NU0D2sj8qxGZcRY2HaCGXv iD1qUbz9NKMjwqtSU+abu0WUkRhATnAO2yHf1/dUD2Mw/7HpBtWR8wKDHjZdZANb Gyd4DzhsmGQLI5+xB0qZVWVbUqyV3oIT7BKBKI9Vfs5G+nT6IC/J+0DV2pbIvRFu 5XFr+PjiqSi2IQJtoKLaeyXHAVzvHLTwL/A4AoYHpYxnzMS6V7vS5FC3d0i9YArx jLIGrkTiDO28PBiQee4E+SHouwVIiDzMe+yl5HiTgK7/3JsJYnDzmilXI29H8O5I uNI/8P/R/83dRgFLGQRIaZigdfaoJkcX0lVTaSM= -----END CERTIFICATE-----Generated at Wed Nov 5 02:04:38 2025 by rpki-client