$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/6757d0ec-3da9-362b-964a-6f6259402d74.roa File: 6757d0ec-3da9-362b-964a-6f6259402d74.roa (raw, json) Hash identifier: xC/9Dmuc0qCHsocrnCZJfXJ1kR9LBZrEfs/V/0kWv8I= Subject key identifier: 24:1C:30:10:F2:21:5D:AF:C0:CC:34:7E:32:DE:D9:8C:94:34:41:8D Certificate issuer: /CN=41d819be-21e8-4d68-8993-33ab237e51ae Certificate serial: 010D0C9F4328584BB02CFB4873FF2A413EF7C800 Authority key identifier: BF:F7:3C:D9:CA:4A:32:C7:FF:0B:FD:F3:E5:54:10:42:3C:C8:97:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/6757d0ec-3da9-362b-964a-6f6259402d74.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 395324 IP address blocks: 104.219.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/41d819be-21e8-4d68-8993-33ab237e51ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/41d819be-21e8-4d68-8993-33ab237e51ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2c:fb:48:73:ff:2a:41:3e:f7:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41d819be-21e8-4d68-8993-33ab237e51ae Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=eb8fc490-9dd7-4547-8e04-d8310975e776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d1:ea:09:11:8c:e5:cb:b5:51:0b:d5:23:ac: 71:82:15:f3:97:aa:cd:fa:24:d5:cc:4a:57:39:8e: 18:e4:9e:72:5e:af:a8:c0:74:87:23:97:08:97:48: 86:50:03:6f:2a:0e:c3:d9:43:96:1d:9e:87:80:c0: e4:cf:a7:22:0a:66:d9:fd:bf:1d:91:38:63:db:14: 16:61:e8:1f:cd:c7:e2:bf:0e:5a:9e:ac:f5:5d:49: 93:17:45:54:25:11:34:78:99:ca:4e:2a:fb:5f:36: e4:f0:23:d6:5e:d8:b8:c4:76:1d:f6:5f:b0:00:f9: c1:d6:ab:85:f4:18:ad:74:46:93:fb:50:93:15:52: a5:ba:e2:cd:2e:e8:93:06:67:c4:2a:35:fe:7f:d4: a2:3b:d9:70:2a:f2:86:b5:e9:e8:fb:cd:56:0d:d4: a6:9a:18:66:b1:5e:76:33:d4:a1:c2:0d:82:9d:b3: e8:b6:3e:ae:bb:3c:6e:8c:f0:d3:f2:49:02:8c:f3: 7a:15:6b:85:fc:7e:62:74:63:e7:9c:e9:a3:55:7f: 2f:0f:3a:4c:c9:29:58:2e:a4:21:5e:ad:6c:66:28: 9a:fd:28:14:89:01:0a:ef:cc:38:7b:06:d5:e0:27: 3a:8c:9f:9f:fd:6c:b7:c9:bd:28:84:4d:3c:2a:5f: 76:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1C:30:10:F2:21:5D:AF:C0:CC:34:7E:32:DE:D9:8C:94:34:41:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/6757d0ec-3da9-362b-964a-6f6259402d74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/41d819be-21e8-4d68-8993-33ab237e51ae.crl X509v3 Authority Key Identifier: keyid:BF:F7:3C:D9:CA:4A:32:C7:FF:0B:FD:F3:E5:54:10:42:3C:C8:97:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae.cer sbgp-ipAddrBlock: critical IPv4: 104.219.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c6:b7:89:56:a5:04:7e:2e:50:78:a8:bc:35:07:f9:b0:58: 7f:6b:26:5c:19:dd:8e:90:b3:9c:e4:c0:62:be:52:32:3f:d0: 2a:46:9f:a5:b5:18:dc:02:07:ed:25:48:4e:fb:d2:fa:15:06: 5b:ad:61:0d:c1:c0:1b:7a:0e:22:e3:cd:15:c7:cc:c4:62:f6: 6b:d1:42:95:4f:b2:e2:cf:21:12:46:65:69:27:f7:e1:95:97: f1:3e:05:30:0b:7c:05:89:80:76:7e:08:e1:10:45:86:9e:75: b9:f1:cb:20:35:5e:34:d8:fc:9c:78:09:29:bc:c8:52:40:cb: 69:66:ea:ec:d2:16:fa:43:22:35:27:e0:99:49:8f:a0:08:21: c4:c0:48:80:4c:68:d7:5c:e0:b4:ac:69:53:dc:da:95:dd:12: 5a:cf:38:f0:7d:d6:71:07:ff:15:d9:58:91:d6:01:45:14:c3: b1:d7:1a:64:38:e6:f7:7b:dd:b7:07:8a:79:37:b3:f0:14:b0: 67:e4:25:78:17:c1:95:2d:dd:b5:af:ac:11:eb:35:12:4b:e9: af:5c:32:71:1b:48:4c:7d:1d:2a:08:95:af:e5:e7:5e:f9:37: 17:58:ac:4f:ba:2a:9c:3f:b4:cf:f5:6b:81:90:bf:d7:3d:b1: df:08:48:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLPtIc/8qQT73yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkODE5YmUtMjFlOC00ZDY4LTg5OTMtMzNhYjIzN2U1 MWFlMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk ZWI4ZmM0OTAtOWRkNy00NTQ3LThlMDQtZDgzMTA5NzVlNzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNHqCRGM5cu1UQvVI6xxghXzl6rN+iTVzEpX OY4Y5J5yXq+owHSHI5cIl0iGUANvKg7D2UOWHZ6HgMDkz6ciCmbZ/b8dkThj2xQW Yegfzcfivw5anqz1XUmTF0VUJRE0eJnKTir7Xzbk8CPWXti4xHYd9l+wAPnB1quF 9BitdEaT+1CTFVKluuLNLuiTBmfEKjX+f9SiO9lwKvKGteno+81WDdSmmhhmsV52 M9Shwg2CnbPotj6uuzxujPDT8kkCjPN6FWuF/H5idGPnnOmjVX8vDzpMySlYLqQh Xq1sZiia/SgUiQEK78w4ewbV4Cc6jJ+f/Wy3yb0ohE08Kl92XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQcMBDyIV2vwMw0fjLe2YyUNEGNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MWQ4 MTliZS0yMWU4LTRkNjgtODk5My0zM2FiMjM3ZTUxYWUvNjc1N2QwZWMtM2RhOS0z NjJiLTk2NGEtNmY2MjU5NDAyZDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDFkODE5YmUtMjFlOC00ZDY4LTg5 OTMtMzNhYjIzN2U1MWFlLzQxZDgxOWJlLTIxZTgtNGQ2OC04OTkzLTMzYWIyMzdl NTFhZS5jcmwwHwYDVR0jBBgwFoAUv/c82cpKMsf/C/3z5VQQQjzIl2YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MWQ4MTliZS0yMWU4LTRkNjgtODk5My0zM2Fi MjM3ZTUxYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNtfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDGt4lWpQR+LlB4qLw1B/mwWH9rJlwZ3Y6Qs5zkwGK+UjI/0CpGn6W1 GNwCB+0lSE770voVBlutYQ3BwBt6DiLjzRXHzMRi9mvRQpVPsuLPIRJGZWkn9+GV l/E+BTALfAWJgHZ+COEQRYaedbnxyyA1XjTY/Jx4CSm8yFJAy2lm6uzSFvpDIjUn 4JlJj6AIIcTASIBMaNdc4LSsaVPc2pXdElrPOPB91nEH/xXZWJHWAUUUw7HXGmQ4 5vd73bcHink3s/AUsGfkJXgXwZUt3bWvrBHrNRJL6a9cMnEbSEx9HSoIla/l5175 NxdYrE+6Kpw/tM/1a4GQv9c9sd8ISEA= -----END CERTIFICATE-----Generated at Wed Nov 5 15:12:52 2025 by rpki-client