$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/4208042c-c6f2-34fa-a016-52a141e0b6e1.roa File: 4208042c-c6f2-34fa-a016-52a141e0b6e1.roa (raw, json) Hash identifier: IFl7Im5pO+J13vejXpOtwmhSIQIlQPyxI5d8rfGfD0Q= Subject key identifier: 27:0A:D2:E4:F8:BB:5F:0C:E0:C9:05:98:75:2A:4B:5D:C3:AA:A6:C5 Certificate issuer: /CN=e9c0ae31-2052-4d10-8904-5d08b09aa688 Certificate serial: 010D0C9F4328584BAEC7B37C65EA24B778D29500 Authority key identifier: 10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/4208042c-c6f2-34fa-a016-52a141e0b6e1.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 14618 IP address blocks: 104.192.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:b3:7c:65:ea:24:b7:78:d2:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9c0ae31-2052-4d10-8904-5d08b09aa688 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=292992b0-5ca9-4e74-b633-590b5efaf41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8d:d3:92:24:c2:49:59:22:96:b4:ab:8a:ad: a7:be:8e:6f:d1:7a:b6:72:ce:5a:42:81:ae:0f:45: 1d:87:a4:af:21:bf:95:69:b9:e4:ae:e5:a1:2e:c1: 14:d9:6d:8f:14:2e:24:31:61:ed:5d:a6:20:9d:08: 31:c2:cf:11:6e:cb:da:f4:7d:a4:18:94:76:88:f1: 47:8d:a4:fd:95:0f:14:12:7a:8b:6e:37:70:b6:e4: 66:37:18:a9:b2:e6:31:b5:0f:1d:d7:d3:b9:82:79: d4:f4:ad:b9:85:de:14:dd:c7:21:85:02:29:b7:e1: 7d:b5:91:51:28:7a:8e:24:81:7d:ab:c5:70:50:88: 48:c7:10:e3:37:83:88:c8:3e:f3:73:e7:8f:44:53: 7b:52:c8:ed:22:6f:b6:28:4b:c3:de:5c:f3:f4:63: b9:27:b7:de:fe:0d:35:35:28:99:20:85:ba:36:65: 45:1e:22:d2:00:f0:68:e2:52:0b:26:b1:d4:da:b9: b0:d3:5a:79:6d:69:a8:27:26:20:1d:41:2a:9e:d5: c5:4d:44:61:91:11:6e:8b:80:05:61:f2:48:38:6c: 1e:a0:28:f7:5e:13:44:24:8e:88:67:0a:82:5c:2c: ee:e2:96:b6:9b:47:6a:08:79:02:e1:35:f9:a4:42: 58:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0A:D2:E4:F8:BB:5F:0C:E0:C9:05:98:75:2A:4B:5D:C3:AA:A6:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/4208042c-c6f2-34fa-a016-52a141e0b6e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl X509v3 Authority Key Identifier: keyid:10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer sbgp-ipAddrBlock: critical IPv4: 104.192.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:6b:01:24:63:21:bd:8e:44:e1:61:4c:f0:fe:73:82:95:9d: 3a:7b:2c:ad:f8:8b:66:b8:ae:1a:ef:ef:f6:a2:69:26:7f:e4: 9e:f0:29:1b:40:e5:13:83:a8:fc:bf:ca:91:cc:ed:6a:95:a0: c3:ba:3a:f1:d1:5c:5c:b2:62:40:0d:a9:14:88:85:99:3d:55: 27:2e:96:f8:59:68:76:39:5f:3a:10:c9:51:c3:70:e5:1d:76: 10:65:cd:1d:b8:32:98:f5:50:e1:d3:b7:26:25:95:44:5c:35: 7e:a6:9d:86:8e:74:12:c1:73:8e:04:16:8c:a4:86:40:68:16: 37:3a:e1:69:26:e1:a6:11:5a:db:4e:80:9a:88:a7:ea:39:a4: 80:3e:48:dd:a7:51:87:36:8c:42:e8:48:59:d8:3d:9b:35:a3: 52:30:09:88:b0:2a:af:9b:6f:32:21:30:6c:25:e3:21:18:7c: 42:09:93:7b:96:61:19:34:d9:8c:c6:80:4a:4c:bc:93:55:50: 15:1c:0e:1a:95:9a:17:cf:c8:eb:3c:82:0d:c4:8b:12:f5:5a: 5b:ee:f2:5d:fe:33:63:ce:e6:ce:dd:15:81:59:83:c9:e6:ca: 4f:5d:83:97:da:e7:8c:a2:a0:48:69:4c:7d:6d:93:b0:04:01: 0e:44:7b:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux7N8Zeokt3jSlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTljMGFlMzEtMjA1Mi00ZDEwLTg5MDQtNWQwOGIwOWFh Njg4MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk MjkyOTkyYjAtNWNhOS00ZTc0LWI2MzMtNTkwYjVlZmFmNDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY3TkiTCSVkilrSriq2nvo5v0Xq2cs5aQoGu D0Udh6SvIb+VabnkruWhLsEU2W2PFC4kMWHtXaYgnQgxws8Rbsva9H2kGJR2iPFH jaT9lQ8UEnqLbjdwtuRmNxipsuYxtQ8d19O5gnnU9K25hd4U3cchhQIpt+F9tZFR KHqOJIF9q8VwUIhIxxDjN4OIyD7zc+ePRFN7UsjtIm+2KEvD3lzz9GO5J7fe/g01 NSiZIIW6NmVFHiLSAPBo4lILJrHU2rmw01p5bWmoJyYgHUEqntXFTURhkRFui4AF YfJIOGweoCj3XhNEJI6IZwqCXCzu4pa2m0dqCHkC4TX5pEJY3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcK0uT4u18M4MkFmHUqS13DqqbFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOWMw YWUzMS0yMDUyLTRkMTAtODkwNC01ZDA4YjA5YWE2ODgvNDIwODA0MmMtYzZmMi0z NGZhLWEwMTYtNTJhMTQxZTBiNmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTljMGFlMzEtMjA1Mi00ZDEwLTg5 MDQtNWQwOGIwOWFhNjg4L2U5YzBhZTMxLTIwNTItNGQxMC04OTA0LTVkMDhiMDlh YTY4OC5jcmwwHwYDVR0jBBgwFoAUEE/5PFM5NWknNBy24fS5isdQF2EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOWMwYWUzMS0yMDUyLTRkMTAtODkwNC01ZDA4 YjA5YWE2ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMCKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtrASRjIb2OROFhTPD+c4KVnTp7LK34i2a4rhrv7/aiaSZ/5J7wKRtA 5RODqPy/ypHM7WqVoMO6OvHRXFyyYkANqRSIhZk9VSculvhZaHY5XzoQyVHDcOUd dhBlzR24Mpj1UOHTtyYllURcNX6mnYaOdBLBc44EFoykhkBoFjc64Wkm4aYRWttO gJqIp+o5pIA+SN2nUYc2jELoSFnYPZs1o1IwCYiwKq+bbzIhMGwl4yEYfEIJk3uW YRk02YzGgEpMvJNVUBUcDhqVmhfPyOs8gg3EixL1Wlvu8l3+M2PO5s7dFYFZg8nm yk9dg5fa54yioEhpTH1tk7AEAQ5Ee94= -----END CERTIFICATE-----Generated at Wed Nov 5 11:36:31 2025 by rpki-client