$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580/5ddff821-af6b-3cd0-80c1-a4cecb21862a.roa File: 5ddff821-af6b-3cd0-80c1-a4cecb21862a.roa (raw, json) Hash identifier: B2Pq6HJ4PptJx4KZwpwH0PtJFBUBv4pKrp+nLV8Yzcg= Subject key identifier: 22:9A:7A:BC:5D:98:0C:A2:19:9E:8B:DE:47:1E:7D:04:E4:02:76:9D Certificate issuer: /CN=b8726973-ff15-4a26-89ff-62843d7ac580 Certificate serial: 010D0C9F4328584AFC1C09EDF98447D53A282C60 Authority key identifier: 01:E6:D6:E9:E7:00:84:AC:F4:2E:D2:2C:D5:36:FD:A4:2A:3F:DF:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580/5ddff821-af6b-3cd0-80c1-a4cecb21862a.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 36048 IP address blocks: 104.219.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580/b8726973-ff15-4a26-89ff-62843d7ac580.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580/b8726973-ff15-4a26-89ff-62843d7ac580.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:09:ed:f9:84:47:d5:3a:28:2c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8726973-ff15-4a26-89ff-62843d7ac580 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=df558d18-5a0e-434a-a789-1d499fc4eb85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2b:29:30:3d:d9:2f:3e:22:87:26:bb:fb:18: fd:08:8d:af:ab:fc:a1:76:c7:c1:d2:59:d1:57:43: a6:7d:ca:5e:60:94:2a:65:14:bb:33:bf:18:1e:13: b7:dd:41:57:57:f2:48:56:6a:ae:dd:3b:b2:2e:2f: f5:c4:79:8e:5e:c0:9d:e8:88:6f:ef:74:83:b9:af: c6:54:e5:fa:d1:4e:38:41:ce:a2:5b:a7:42:95:d7: b9:f1:4f:43:fa:10:00:a9:06:19:1a:fb:53:98:22: 86:40:c7:a1:5e:59:2e:16:85:9c:14:4f:1e:f1:0d: 44:64:de:db:a4:a4:c7:5d:5f:39:22:ed:db:6e:06: a7:dc:51:f5:8c:51:66:e3:c9:3e:12:e6:b4:b4:49: 01:89:4d:cb:ce:29:68:74:64:b8:ff:6b:1c:40:50: 8d:f3:7b:a2:d1:1a:af:d3:a6:e4:36:6d:ad:20:13: 72:2c:dc:48:7a:12:8e:2d:6c:2d:40:d2:2b:ed:fd: 8b:df:24:cf:2c:cc:e4:3d:b7:58:63:40:da:85:b2: 1d:49:66:de:08:4d:3b:46:31:0a:d6:09:c2:53:16: 0d:c0:b7:d5:d3:27:6c:c4:36:e5:9f:d8:b5:85:6a: 22:aa:46:6e:a9:ce:3f:bf:d7:58:f5:53:c5:28:13: 57:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9A:7A:BC:5D:98:0C:A2:19:9E:8B:DE:47:1E:7D:04:E4:02:76:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580/5ddff821-af6b-3cd0-80c1-a4cecb21862a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580/b8726973-ff15-4a26-89ff-62843d7ac580.crl X509v3 Authority Key Identifier: keyid:01:E6:D6:E9:E7:00:84:AC:F4:2E:D2:2C:D5:36:FD:A4:2A:3F:DF:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580.cer sbgp-ipAddrBlock: critical IPv4: 104.219.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:db:6f:c8:91:de:2a:0e:76:84:c0:68:83:fd:fe:84:af:33: cd:eb:f7:89:4b:32:14:56:4b:75:5c:89:5e:e9:9f:95:96:52: cd:7b:19:30:da:4e:6b:aa:55:df:56:55:37:ec:f3:40:52:db: f4:78:83:30:e5:b5:ee:37:a6:6d:84:98:47:b5:f7:74:e7:2f: 8c:73:f5:91:0a:d1:e3:2e:3c:c1:8c:ae:75:c5:be:62:11:3b: 7e:74:bf:b4:61:aa:4b:5a:74:b8:48:fa:88:27:c8:1a:ee:21: 41:98:18:7b:81:17:e3:f9:5c:75:32:75:78:9f:ac:2c:f2:d9: f9:f4:3f:69:96:74:25:a5:a2:9a:2b:c7:fa:93:1f:00:70:71: 81:b9:3d:20:c5:af:54:2f:80:e3:28:a4:f3:8d:eb:7d:88:ec: ff:cb:68:33:cc:00:e9:4f:3a:fe:0d:e6:16:8b:bc:ef:d5:55: 0f:a0:62:ae:a5:10:c5:48:70:21:68:ce:20:fa:5b:81:e4:7c: d9:80:af:64:37:d1:74:6f:93:b4:8d:d2:59:bb:0f:9c:9c:72: ff:c7:f5:25:05:6d:a3:95:68:06:d4:ae:a8:bc:3d:13:8e:ee: da:1d:ea:6a:72:e3:7b:3c:71:af:ba:13:53:54:2f:74:81:87: 4c:b5:19:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAnt+YRH1TooLGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3MjY5NzMtZmYxNS00YTI2LTg5ZmYtNjI4NDNkN2Fj NTgwMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZGY1NThkMTgtNWEwZS00MzRhLWE3ODktMWQ0OTlmYzRlYjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSspMD3ZLz4ihya7+xj9CI2vq/yhdsfB0lnR V0OmfcpeYJQqZRS7M78YHhO33UFXV/JIVmqu3TuyLi/1xHmOXsCd6Ihv73SDua/G VOX60U44Qc6iW6dClde58U9D+hAAqQYZGvtTmCKGQMehXlkuFoWcFE8e8Q1EZN7b pKTHXV85Iu3bbgan3FH1jFFm48k+Eua0tEkBiU3LzilodGS4/2scQFCN83ui0Rqv 06bkNm2tIBNyLNxIehKOLWwtQNIr7f2L3yTPLMzkPbdYY0DahbIdSWbeCE07RjEK 1gnCUxYNwLfV0ydsxDbln9i1hWoiqkZuqc4/v9dY9VPFKBNXVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKaerxdmAyiGZ6L3kcefQTkAnadMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iODcy Njk3My1mZjE1LTRhMjYtODlmZi02Mjg0M2Q3YWM1ODAvNWRkZmY4MjEtYWY2Yi0z Y2QwLTgwYzEtYTRjZWNiMjE4NjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjg3MjY5NzMtZmYxNS00YTI2LTg5 ZmYtNjI4NDNkN2FjNTgwL2I4NzI2OTczLWZmMTUtNGEyNi04OWZmLTYyODQzZDdh YzU4MC5jcmwwHwYDVR0jBBgwFoAUAebW6ecAhKz0LtIs1Tb9pCo/32IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iODcyNjk3My1mZjE1LTRhMjYtODlmZi02Mjg0 M2Q3YWM1ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaNsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDbb8iR3ioOdoTAaIP9/oSvM83r94lLMhRWS3VciV7pn5WWUs17GTDa TmuqVd9WVTfs80BS2/R4gzDlte43pm2EmEe193TnL4xz9ZEK0eMuPMGMrnXFvmIR O350v7RhqktadLhI+ognyBruIUGYGHuBF+P5XHUydXifrCzy2fn0P2mWdCWlopor x/qTHwBwcYG5PSDFr1QvgOMopPON632I7P/LaDPMAOlPOv4N5haLvO/VVQ+gYq6l EMVIcCFoziD6W4HkfNmAr2Q30XRvk7SN0lm7D5yccv/H9SUFbaOVaAbUrqi8PROO 7tod6mpy43s8ca+6E1NUL3SBh0y1GdE= -----END CERTIFICATE-----Generated at Wed Nov 5 18:20:44 2025 by rpki-client