$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/b97a4bd7-5509-3b4c-b144-618edbe6fa2d.roa File: b97a4bd7-5509-3b4c-b144-618edbe6fa2d.roa (raw, json) Hash identifier: Xm2oLSM4MNHiDp+DeUGS3tLYC3XTXOO25ELeCtzdzCc= Subject key identifier: E3:53:41:5C:94:5A:0C:27:0C:97:72:11:49:E5:0F:9B:CC:14:B4:B8 Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F4328584B4081AECAF866126251753F40 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/b97a4bd7-5509-3b4c-b144-618edbe6fa2d.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 16509 IP address blocks: 104.218.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:ae:ca:f8:66:12:62:51:75:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=7cd9425a-3da0-43d7-ac81-56cbf622bad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f9:9a:da:62:e7:87:ec:ad:76:63:82:e6:55: a2:80:64:38:c6:ef:ec:35:50:6b:3b:8f:c3:04:4b: ec:9d:26:4c:f1:8e:a1:5f:4d:12:9c:2e:1f:8b:c7: 27:7f:e0:8e:38:38:3f:e7:8f:90:27:06:88:b0:fb: 91:ec:56:b3:a1:50:39:c5:97:0b:18:84:d4:70:da: fd:98:b9:90:cf:7e:90:61:ea:d7:93:1b:0e:d8:51: d8:63:2d:20:6a:a2:b4:46:72:9f:2a:5a:28:58:ff: 28:a0:06:80:92:27:d6:4a:7f:82:06:8d:6f:66:ae: 05:8a:50:ea:6c:b8:d1:18:88:61:66:64:63:82:bb: 49:c0:77:ad:7b:40:a2:56:7a:f4:1f:47:84:88:da: 74:a5:9f:e4:98:f4:ee:e9:8f:c9:18:9d:c8:fc:b3: 52:e2:c5:db:d6:fa:ab:b2:41:8d:59:e6:fd:7a:d8: a8:6c:b4:c6:ff:44:cb:ef:f4:29:f8:07:5c:50:89: 5c:9b:c1:c7:23:ae:fd:6c:9a:24:1f:0a:06:e5:c1: 50:b9:86:55:7e:09:2e:41:43:c9:55:a1:d6:98:8a: c3:86:b1:1c:31:a8:f4:01:27:a6:da:33:d4:97:78: 95:3a:41:64:2c:3f:d6:40:45:64:77:ff:14:2e:c6: 0d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:53:41:5C:94:5A:0C:27:0C:97:72:11:49:E5:0F:9B:CC:14:B4:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/b97a4bd7-5509-3b4c-b144-618edbe6fa2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv4: 104.218.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:dc:d6:a8:ce:e6:8f:2c:83:0c:82:7c:34:ff:d9:c5:39:ca: b8:2b:fc:86:4a:09:96:68:df:ca:ef:f0:49:f4:a3:e2:6f:09: 8f:73:3a:ad:bd:cf:ed:cf:9e:f0:14:f4:9d:8c:86:8e:99:45: d7:b0:b4:7d:84:d7:16:08:9b:43:15:e2:17:b3:8c:9f:19:7d: d0:8b:98:63:f8:36:1f:29:e3:02:da:2c:60:27:9e:f9:a6:6b: 27:5a:81:92:99:59:e1:7c:ad:b8:cb:15:df:8d:af:25:d6:78: 1f:cf:97:38:d6:35:b1:66:58:76:f0:d3:ac:a5:9e:e8:0b:14: 8b:80:01:0c:5c:22:15:a3:a1:fb:71:1f:4d:ff:30:2d:08:f5: 0a:07:83:fe:fe:03:50:e2:e4:a9:02:6a:ce:60:a2:05:40:8d: 1b:39:5d:6c:a0:c3:de:2d:4f:ef:4f:92:de:50:44:5f:13:fd: dc:11:fd:a2:d1:e6:7b:d0:69:6f:d0:52:5b:2c:ed:7a:52:fa: 1d:eb:15:6e:08:70:b7:ea:f8:0f:25:63:76:da:c0:25:1b:c0: d2:e5:bb:27:8b:24:28:56:63:e7:5a:04:7d:15:22:17:82:e1: 3c:1f:e7:53:a1:e6:fc:5a:26:82:f8:1f:a6:ba:cd:e4:bc:03: f1:e0:39:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAga7K+GYSYlF1P0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk N2NkOTQyNWEtM2RhMC00M2Q3LWFjODEtNTZjYmY2MjJiYWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/ma2mLnh+ytdmOC5lWigGQ4xu/sNVBrO4/D BEvsnSZM8Y6hX00SnC4fi8cnf+COODg/54+QJwaIsPuR7FazoVA5xZcLGITUcNr9 mLmQz36QYerXkxsO2FHYYy0gaqK0RnKfKlooWP8ooAaAkifWSn+CBo1vZq4FilDq bLjRGIhhZmRjgrtJwHete0CiVnr0H0eEiNp0pZ/kmPTu6Y/JGJ3I/LNS4sXb1vqr skGNWeb9etiobLTG/0TL7/Qp+AdcUIlcm8HHI679bJokHwoG5cFQuYZVfgkuQUPJ VaHWmIrDhrEcMaj0ASem2jPUl3iVOkFkLD/WQEVkd/8ULsYN/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONTQVyUWgwnDJdyEUnlD5vMFLS4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvYjk3YTRiZDctNTUwOS0z YjRjLWIxNDQtNjE4ZWRiZTZmYTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjc1qjO5o8sgwyCfDT/2cU5yrgr/IZKCZZo38rv8En0o+JvCY9zOq29 z+3PnvAU9J2Mho6ZRdewtH2E1xYIm0MV4hezjJ8ZfdCLmGP4Nh8p4wLaLGAnnvmm aydagZKZWeF8rbjLFd+NryXWeB/PlzjWNbFmWHbw06ylnugLFIuAAQxcIhWjoftx H03/MC0I9QoHg/7+A1Di5KkCas5gogVAjRs5XWygw94tT+9Pkt5QRF8T/dwR/aLR 5nvQaW/QUlss7XpS+h3rFW4IcLfq+A8lY3bawCUbwNLluyeLJChWY+daBH0VIheC 4Twf51Oh5vxaJoL4H6a6zeS8A/HgOcM= -----END CERTIFICATE-----Generated at Wed Nov 5 07:59:11 2025 by rpki-client