$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/b040a988-fc2f-3b79-b962-453ddd2ae85a.roa File: b040a988-fc2f-3b79-b962-453ddd2ae85a.roa (raw, json) Hash identifier: TPle9eivPlemUT35b4HJQOgXsQHKPoHdLEcXlkCneLs= Subject key identifier: F0:0A:FD:AC:25:06:5C:F2:4F:37:29:89:4A:56:40:CB:9F:FD:0C:F5 Certificate issuer: /CN=657b5e5f-0699-429f-8c83-a39c9a7a0322 Certificate serial: 010D0C9F4328584BA39D294C12759D7339C683F0 Authority key identifier: 85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/b040a988-fc2f-3b79-b962-453ddd2ae85a.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16676 IP address blocks: 104.243.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:29:4c:12:75:9d:73:39:c6:83:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=657b5e5f-0699-429f-8c83-a39c9a7a0322 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=e7d5f34e-33b8-436a-ad0e-417b6ae85029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:29:a0:1d:da:78:96:95:ff:fc:4e:76:03:23: b0:a9:4c:71:33:90:2e:6e:51:5e:6b:48:18:24:f1: 76:6a:2b:6f:9b:7d:d8:35:32:30:c9:73:f1:ef:75: a6:1f:3c:05:f2:93:43:d2:fe:36:90:17:59:be:b4: 1d:61:f4:c9:3c:92:68:06:1c:79:97:2e:56:b9:44: 4c:29:e9:8c:9c:f7:96:0f:a8:84:25:f9:56:3e:88: 58:67:2d:e4:fc:db:f7:6f:50:01:cb:8d:a5:07:86: fa:75:e2:23:29:f2:b8:d8:da:e7:04:2b:76:7f:10: 35:dc:35:cc:28:c9:ae:aa:37:7e:8e:15:ca:79:ba: 01:37:35:89:9c:62:38:2c:7d:d1:4e:5d:ea:6a:c7: a1:aa:42:27:e7:a3:91:16:26:2d:c9:71:c2:54:d4: a8:ea:1d:3a:41:b1:1c:0d:85:81:2a:ba:23:7c:6f: db:63:9d:35:cc:f6:a2:fd:42:7c:16:78:d9:6f:c9: fc:66:17:cb:d8:a7:7f:21:4e:6c:fd:d0:81:f0:a7: e9:16:52:9b:9b:5c:08:90:7c:02:2d:53:8d:77:9d: 94:e4:54:dc:fe:b5:85:3b:7b:6f:e1:db:c9:dc:a2: 0b:0d:7e:4f:41:2d:4d:60:27:6a:1b:53:6a:7d:a8: ea:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0A:FD:AC:25:06:5C:F2:4F:37:29:89:4A:56:40:CB:9F:FD:0C:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/b040a988-fc2f-3b79-b962-453ddd2ae85a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl X509v3 Authority Key Identifier: keyid:85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer sbgp-ipAddrBlock: critical IPv4: 104.243.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:f2:5c:42:87:52:d6:63:32:c9:69:41:bf:cb:80:5b:80:93: d5:be:5c:4a:58:46:96:bb:76:9a:14:5a:b5:34:a4:cd:26:d2: cb:7a:06:24:cf:88:8d:f4:de:0d:a4:2f:42:ae:20:22:73:b2: 59:54:e7:d0:48:e2:5a:29:f8:5c:5e:ef:be:f3:85:8e:ff:b5: aa:08:b4:bd:d8:32:b2:ad:57:ef:33:2f:39:a8:37:a9:47:13: b2:b8:8a:d6:3d:f5:0b:74:b6:97:10:8f:3c:1e:b3:fa:e4:30: aa:a7:a2:d2:ad:2a:9c:90:28:62:61:70:28:97:e1:f7:4e:42: 71:0d:ee:a4:fd:ed:48:21:34:8f:59:d6:d2:1d:54:ec:f7:58: 8d:57:03:26:a4:3a:68:32:59:ee:55:e7:5f:65:76:69:a3:bd: 2b:84:58:1e:3e:0a:34:0d:de:80:c2:d1:af:5f:96:37:3c:16: d7:fd:5c:c9:e2:c5:a1:0c:6c:1c:60:b1:28:3a:a7:a6:4d:3f: f8:8b:ce:dd:34:ae:27:7b:27:82:88:ee:81:1a:3b:87:ae:73: e9:d5:79:6c:25:8b:65:a6:97:b4:8a:93:4e:24:13:30:91:8f: 45:c5:0d:c9:69:ed:0f:79:79:76:04:59:f5:b9:f9:3f:d0:ce: 39:9c:20:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSlMEnWdcznGg/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU3YjVlNWYtMDY5OS00MjlmLThjODMtYTM5YzlhN2Ew MzIyMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZTdkNWYzNGUtMzNiOC00MzZhLWFkMGUtNDE3YjZhZTg1MDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiymgHdp4lpX//E52AyOwqUxxM5AublFea0gY JPF2aitvm33YNTIwyXPx73WmHzwF8pND0v42kBdZvrQdYfTJPJJoBhx5ly5WuURM KemMnPeWD6iEJflWPohYZy3k/Nv3b1ABy42lB4b6deIjKfK42NrnBCt2fxA13DXM KMmuqjd+jhXKeboBNzWJnGI4LH3RTl3qasehqkIn56ORFiYtyXHCVNSo6h06QbEc DYWBKrojfG/bY501zPai/UJ8FnjZb8n8ZhfL2Kd/IU5s/dCB8KfpFlKbm1wIkHwC LVONd52U5FTc/rWFO3tv4dvJ3KILDX5PQS1NYCdqG1NqfajqkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAK/awlBlzyTzcpiUpWQMuf/Qz1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82NTdi NWU1Zi0wNjk5LTQyOWYtOGM4My1hMzljOWE3YTAzMjIvYjA0MGE5ODgtZmMyZi0z Yjc5LWI5NjItNDUzZGRkMmFlODVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjU3YjVlNWYtMDY5OS00MjlmLThj ODMtYTM5YzlhN2EwMzIyLzY1N2I1ZTVmLTA2OTktNDI5Zi04YzgzLWEzOWM5YTdh MDMyMi5jcmwwHwYDVR0jBBgwFoAUhSb8rQNqMi+Cj148GAC/WbmIDswwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82NTdiNWU1Zi0wNjk5LTQyOWYtOGM4My1hMzlj OWE3YTAzMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMTyXEKHUtZjMslpQb/LgFuAk9W+XEpYRpa7dpoUWrU0pM0m0st6BiTP iI303g2kL0KuICJzsllU59BI4lop+Fxe777zhY7/taoItL3YMrKtV+8zLzmoN6lH E7K4itY99Qt0tpcQjzwes/rkMKqnotKtKpyQKGJhcCiX4fdOQnEN7qT97UghNI9Z 1tIdVOz3WI1XAyakOmgyWe5V519ldmmjvSuEWB4+CjQN3oDC0a9fljc8Ftf9XMni xaEMbBxgsSg6p6ZNP/iLzt00rid7J4KI7oEaO4euc+nVeWwli2Wml7SKk04kEzCR j0XFDclp7Q95eXYEWfW5+T/QzjmcIHw= -----END CERTIFICATE-----Generated at Wed Nov 5 11:23:38 2025 by rpki-client