$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/20966557-eff3-3d8a-a800-0556961c5bfb.roa File: 20966557-eff3-3d8a-a800-0556961c5bfb.roa (raw, json) Hash identifier: h3cLHqDbYNbsubGO3Y0UtlsjmwFiEdkV/UFSeMsxCt8= Subject key identifier: 79:3F:78:93:56:9B:DE:BC:1F:77:A1:E9:CB:1E:B1:E3:93:1E:D0:BB Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584B609C928291ADA8C05B4FE67B Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/20966557-eff3-3d8a-a800-0556961c5bfb.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 931 IP address blocks: 104.224.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:92:82:91:ad:a8:c0:5b:4f:e6:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=fab03dae-8d94-4064-8361-fdb48cbaad24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:08:f8:b7:15:db:96:d3:6c:a3:d0:e2:da:f0: b5:cd:70:2c:db:f5:54:3d:33:a7:8b:bf:8f:02:c0: 58:d1:fb:d8:24:c3:71:b7:5d:33:31:92:b5:7d:4e: 43:55:29:8b:10:e8:fa:67:d1:11:aa:28:94:69:6b: 4f:a7:d5:46:76:7c:fa:84:a4:4f:b6:48:02:6a:d2: d9:26:18:3b:91:69:7d:a4:74:05:60:60:44:bc:0f: c4:41:54:49:a0:b2:2d:fd:98:06:72:93:ea:e0:89: e2:1f:a5:38:58:9f:93:fc:b6:3b:9b:06:84:f9:ee: 19:82:0a:53:74:f2:20:3a:8b:9d:16:1f:9c:2a:9d: f4:f1:9d:82:cd:74:58:01:a8:a9:b7:74:04:35:bd: c0:0e:3c:f2:9e:24:4e:e7:07:79:41:39:44:c6:9e: 94:25:a8:ed:8e:06:04:0b:42:e9:ce:41:26:6b:19: 32:5c:34:58:ef:49:ef:e9:1d:e6:a0:eb:ca:d3:2a: 08:08:58:56:1f:c3:10:b8:f6:66:b2:12:5a:66:97: 63:69:ff:03:7c:9d:b3:b9:26:8f:e4:55:b3:e0:2a: e1:29:ed:43:3b:23:04:1b:a8:36:70:4d:3b:5c:8b: 0b:77:1a:7c:9e:95:29:bb:cc:e6:8b:c5:c8:4e:34: 07:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3F:78:93:56:9B:DE:BC:1F:77:A1:E9:CB:1E:B1:E3:93:1E:D0:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/20966557-eff3-3d8a-a800-0556961c5bfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.224.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:df:a2:3c:a6:94:7e:21:ad:a0:49:0d:e6:61:a1:e6:71:23: 9a:9b:95:18:69:96:a9:fd:40:c1:b9:e6:55:ca:40:10:5c:fa: e8:0d:9d:f4:dc:39:93:4f:58:a6:fb:91:57:86:a1:29:50:d2: 7a:07:a0:8f:0b:99:b2:fb:94:21:d6:e4:61:7c:ca:af:a3:7d: aa:5f:79:4e:5e:47:a3:8b:70:cf:44:dc:72:a4:48:3b:bc:7f: 9c:f5:50:be:27:30:06:38:8c:1e:7c:58:4d:da:be:93:b1:2b: 50:f2:78:a6:93:05:19:5d:56:da:2e:cc:a2:53:cd:b7:6b:64: fc:41:bd:d7:e6:9c:34:b1:d3:96:56:63:7c:e4:67:8b:88:2d: 5b:fd:07:d4:21:f1:3e:23:c4:36:0a:3c:24:ab:a2:56:f3:5a: e4:1c:b7:75:cb:bf:00:aa:79:94:31:29:c0:50:4b:a6:a8:0d: 1a:f1:1c:11:68:66:cc:79:0f:90:81:2c:ff:bc:63:a0:51:ae: ac:5b:f5:49:39:6a:b4:6d:0e:7c:42:6a:e4:56:20:c3:30:09: 16:cc:46:42:e0:7e:cd:84:b8:c1:ef:9f:a6:68:e2:ec:6f:de: 6e:76:76:48:30:d0:c5:85:fb:91:35:4b:b7:5a:89:2a:63:fe: 93:ca:5f:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJKCka2owFtP5nswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk ZmFiMDNkYWUtOGQ5NC00MDY0LTgzNjEtZmRiNDhjYmFhZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwj4txXbltNso9Di2vC1zXAs2/VUPTOni7+P AsBY0fvYJMNxt10zMZK1fU5DVSmLEOj6Z9ERqiiUaWtPp9VGdnz6hKRPtkgCatLZ Jhg7kWl9pHQFYGBEvA/EQVRJoLIt/ZgGcpPq4IniH6U4WJ+T/LY7mwaE+e4ZggpT dPIgOoudFh+cKp308Z2CzXRYAaipt3QENb3ADjzyniRO5wd5QTlExp6UJajtjgYE C0LpzkEmaxkyXDRY70nv6R3moOvK0yoICFhWH8MQuPZmshJaZpdjaf8DfJ2zuSaP 5FWz4CrhKe1DOyMEG6g2cE07XIsLdxp8npUpu8zmi8XITjQHwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHk/eJNWm968H3eh6cseseOTHtC7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvMjA5NjY1NTctZWZmMy0z ZDhhLWE4MDAtMDU1Njk2MWM1YmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOAeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPfojymlH4hraBJDeZhoeZxI5qblRhplqn9QMG55lXKQBBc+ugNnfTc OZNPWKb7kVeGoSlQ0noHoI8LmbL7lCHW5GF8yq+jfapfeU5eR6OLcM9E3HKkSDu8 f5z1UL4nMAY4jB58WE3avpOxK1DyeKaTBRldVtouzKJTzbdrZPxBvdfmnDSx05ZW Y3zkZ4uILVv9B9Qh8T4jxDYKPCSrolbzWuQct3XLvwCqeZQxKcBQS6aoDRrxHBFo Zsx5D5CBLP+8Y6BRrqxb9Uk5arRtDnxCauRWIMMwCRbMRkLgfs2EuMHvn6Zo4uxv 3m52dkgw0MWF+5E1S7daiSpj/pPKXzw= -----END CERTIFICATE-----Generated at Wed Nov 5 14:44:34 2025 by rpki-client