$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/2f04a05d-5efa-3ec4-af20-fd94bb74878b.roa File: 2f04a05d-5efa-3ec4-af20-fd94bb74878b.roa (raw, json) Hash identifier: u/a69bAdYbKs6cmGVlszzB1cj6yrUI36BdjLIOpX6wY= Subject key identifier: 84:F6:09:B2:44:FD:43:FF:39:90:98:4C:63:22:9C:24:CA:0F:AE:36 Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584AECC14022840D2E89BCBA8020 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/2f04a05d-5efa-3ec4-af20-fd94bb74878b.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 140042 IP address blocks: 104.143.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:40:22:84:0d:2e:89:bc:ba:80:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=fa6074ac-5cba-4a48-bf6a-1776723dbed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dd:90:bd:eb:1d:73:42:9f:3b:66:b4:26:28: 50:22:dc:1c:03:fd:14:df:32:be:cd:dc:db:ec:c0: 6c:97:d4:03:3d:7a:4f:4f:0a:21:61:86:9f:a3:42: 4d:38:fc:e3:1c:5d:03:cb:e9:9f:62:65:e1:d5:c0: a9:c3:b7:cb:c8:a0:2d:91:34:17:5c:3a:af:c8:34: 65:c6:0a:b9:ad:c5:24:9e:a8:81:82:a5:72:7a:5a: e0:a5:f9:41:4c:46:77:a5:b9:4a:9c:33:9e:3e:41: 1c:05:24:b7:57:7d:9c:fc:45:f9:a6:46:af:1e:ba: 7d:2f:db:16:b1:ff:71:f6:f8:45:39:48:36:5d:1c: 18:2e:f5:14:42:db:48:a3:3c:d9:5c:83:95:53:cf: 2b:a5:c8:8d:5f:3c:07:14:6a:bc:b8:6c:13:f4:60: c2:1d:04:9f:35:64:b1:47:78:d7:f6:c9:a0:6d:dd: 18:7d:aa:9f:d1:73:c9:6f:f8:95:01:eb:b0:1c:2f: a8:ca:9b:3b:13:81:d3:89:13:4e:5d:88:4d:63:3f: 16:a4:2f:c7:05:d3:e0:81:de:84:ed:1a:db:d0:68: 43:83:78:7b:90:e2:ee:55:72:19:a1:b8:7a:68:67: 20:92:ee:28:fc:78:d5:51:5e:a8:6c:0f:2a:cc:74: aa:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F6:09:B2:44:FD:43:FF:39:90:98:4C:63:22:9C:24:CA:0F:AE:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/2f04a05d-5efa-3ec4-af20-fd94bb74878b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 104.143.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:5d:c6:ac:82:97:a6:59:ce:da:d9:2a:ca:91:f8:93:c0:0c: 18:8c:9d:f0:7a:0f:9b:c0:30:97:59:c7:3d:2e:58:2a:d8:46: d3:6f:92:35:42:e7:c1:83:ea:0c:42:1f:65:fc:4c:ed:66:8b: d0:c5:7a:68:90:a2:e8:18:ae:10:51:82:2b:27:5e:f0:9e:40: da:56:94:e4:fc:0f:a0:70:e6:9e:12:ea:bd:af:40:93:d0:f9: 84:45:e9:74:1b:b0:ca:10:c1:76:53:df:eb:ab:40:10:0f:d5: 77:a4:40:3e:75:cf:8d:90:f4:b2:1b:8b:a4:f5:fb:5b:90:29: 0b:ae:8f:94:b1:26:cb:88:da:92:cb:6e:3f:05:d6:ad:5b:60: 76:63:6b:59:f3:95:f0:98:15:50:f5:75:7a:23:65:72:cf:d7: 1d:c8:4f:6d:d1:e5:c6:e3:9b:2f:ad:8a:54:bc:a0:68:aa:2c: 92:d2:7f:c0:15:fe:41:1b:73:b2:85:30:f4:5c:35:22:17:57: 13:b2:f7:42:36:2b:5b:52:08:25:68:d3:f7:59:2e:ba:36:96: 13:79:23:e8:dd:75:28:86:e5:49:36:ea:13:8d:4d:bb:1f:df: eb:2e:ee:61:64:fd:8b:13:34:b9:3b:a7:67:84:da:39:e2:7c: 57:01:7a:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUAihA0uiby6gCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZmE2MDc0YWMtNWNiYS00YTQ4LWJmNmEtMTc3NjcyM2RiZWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN2Qvesdc0KfO2a0JihQItwcA/0U3zK+zdzb 7MBsl9QDPXpPTwohYYafo0JNOPzjHF0Dy+mfYmXh1cCpw7fLyKAtkTQXXDqvyDRl xgq5rcUknqiBgqVyelrgpflBTEZ3pblKnDOePkEcBSS3V32c/EX5pkavHrp9L9sW sf9x9vhFOUg2XRwYLvUUQttIozzZXIOVU88rpciNXzwHFGq8uGwT9GDCHQSfNWSx R3jX9smgbd0Yfaqf0XPJb/iVAeuwHC+oyps7E4HTiRNOXYhNYz8WpC/HBdPggd6E 7Rrb0GhDg3h7kOLuVXIZobh6aGcgku4o/HjVUV6obA8qzHSqSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIT2CbJE/UP/OZCYTGMinCTKD642MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvMmYwNGEwNWQtNWVmYS0z ZWM0LWFmMjAtZmQ5NGJiNzQ4NzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaI8tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9dxqyCl6ZZztrZKsqR+JPADBiMnfB6D5vAMJdZxz0uWCrYRtNvkjVC 58GD6gxCH2X8TO1mi9DFemiQougYrhBRgisnXvCeQNpWlOT8D6Bw5p4S6r2vQJPQ +YRF6XQbsMoQwXZT3+urQBAP1XekQD51z42Q9LIbi6T1+1uQKQuuj5SxJsuI2pLL bj8F1q1bYHZja1nzlfCYFVD1dXojZXLP1x3IT23R5cbjmy+tilS8oGiqLJLSf8AV /kEbc7KFMPRcNSIXVxOy90I2K1tSCCVo0/dZLro2lhN5I+jddSiG5Uk26hONTbsf 3+su7mFk/YsTNLk7p2eE2jnifFcBekk= -----END CERTIFICATE-----Generated at Tue Nov 4 22:18:47 2025 by rpki-client