$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831/859da646-a794-3807-8ec6-c22432171131.roa File: 859da646-a794-3807-8ec6-c22432171131.roa (raw, json) Hash identifier: N0sNwyL0fvmv4r9abAT/Gc7J49BEhPdEiKM43k91hMc= Subject key identifier: 3C:AC:4F:1D:DB:56:20:06:A3:DE:94:05:60:F0:97:87:9B:FD:A5:28 Certificate issuer: /CN=9bd19c73-b597-446a-af11-1f8e6c172831 Certificate serial: 010D0C9F4328584B2066D5E4F3D1DBE85C137A00 Authority key identifier: 1B:0D:5A:96:2C:56:0E:2E:27:A6:8E:66:EF:80:8F:98:3C:DF:71:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831/859da646-a794-3807-8ec6-c22432171131.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 395508 IP address blocks: 104.255.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831/9bd19c73-b597-446a-af11-1f8e6c172831.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831/9bd19c73-b597-446a-af11-1f8e6c172831.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:d5:e4:f3:d1:db:e8:5c:13:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd19c73-b597-446a-af11-1f8e6c172831 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=aa332cc2-2f56-4958-9f2e-c3468f6beca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b3:dc:9f:b9:38:41:ee:c6:25:5d:e0:fb:cf: 1a:de:dd:ba:87:30:53:4c:cd:f1:9d:b8:51:29:f2: 10:9e:13:84:81:96:be:94:5c:5a:fa:00:4d:fc:e7: 52:d4:8c:b5:3d:90:9e:00:db:77:30:ca:53:3f:ae: f9:52:54:46:93:72:89:44:b9:ea:de:ef:8b:09:c3: 5b:70:70:81:f9:c0:9b:db:43:f3:02:3e:61:ea:a2: b7:aa:77:18:73:36:0b:2f:64:28:69:e7:e3:4e:f3: 61:55:e4:39:2e:48:8a:eb:f5:33:65:3b:ee:50:a5: 8c:1a:21:dd:86:4c:74:9a:ec:a2:b6:e0:b4:4f:99: 6f:fc:5f:27:94:fd:49:71:ea:e4:b3:f1:fb:45:13: cc:fc:d9:ba:75:17:30:ff:15:0a:e9:90:04:94:93: 9a:17:c6:04:7a:82:1f:c6:01:bf:99:0e:4c:26:d9: 59:72:0f:c0:96:09:cd:a4:43:6f:a3:d8:35:3c:d8: e8:ec:c8:07:3d:82:28:48:ec:16:3b:e4:2a:71:5f: 2d:bf:12:2e:fa:72:79:49:c3:87:25:eb:6b:3e:6e: e1:ee:b0:06:a3:59:23:79:63:4b:f1:4e:29:14:99: 79:33:99:cd:96:d1:13:b3:c2:c3:58:32:3e:54:03: 1f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AC:4F:1D:DB:56:20:06:A3:DE:94:05:60:F0:97:87:9B:FD:A5:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831/859da646-a794-3807-8ec6-c22432171131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831/9bd19c73-b597-446a-af11-1f8e6c172831.crl X509v3 Authority Key Identifier: keyid:1B:0D:5A:96:2C:56:0E:2E:27:A6:8E:66:EF:80:8F:98:3C:DF:71:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831.cer sbgp-ipAddrBlock: critical IPv4: 104.255.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:bb:e7:29:4b:8e:ba:1e:12:52:0e:5f:4b:df:e0:72:bc:1e: 30:d6:1f:5e:3d:91:bf:01:4b:d5:38:f8:50:62:2c:af:a6:0e: 45:79:76:f5:66:fc:aa:c2:ce:03:b1:c1:db:53:f4:a4:dd:2c: c1:62:ff:30:8f:6f:53:78:0d:9b:54:f7:a3:6b:01:c6:7d:0b: 9e:b0:f8:cd:43:e8:80:28:dc:af:0c:9c:d8:31:e6:76:74:1c: 08:d8:22:65:c9:e1:f0:55:05:ca:ea:dd:13:3b:29:c4:d6:a3: e9:ef:45:22:22:c5:13:ba:60:ee:d6:4e:9a:27:12:83:f0:7a: 13:46:e5:96:f8:cb:10:7c:4b:ec:a3:9f:0b:f9:5c:30:ba:20: 96:d1:b2:1b:71:d1:19:18:b9:3b:c5:77:c5:3e:d8:ac:ef:5e: 74:81:68:32:e7:aa:15:6e:cc:c9:10:b3:f7:99:05:07:71:74: 74:23:77:b9:7e:30:8d:bd:11:b4:cf:a7:86:38:8a:e6:32:b3: 67:0d:c3:64:5a:73:ad:a9:39:67:79:98:81:8b:83:7a:67:46: 55:d4:b6:a4:a9:75:7a:35:16:72:8e:33:25:c3:22:1b:a4:b1: a7:6e:7f:4a:3b:44:20:9e:b4:5e:eb:17:5a:56:a1:2d:1b:51: c6:a7:7b:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZtXk89Hb6FwTegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJkMTljNzMtYjU5Ny00NDZhLWFmMTEtMWY4ZTZjMTcy ODMxMB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk YWEzMzJjYzItMmY1Ni00OTU4LTlmMmUtYzM0NjhmNmJlY2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrPcn7k4Qe7GJV3g+88a3t26hzBTTM3xnbhR KfIQnhOEgZa+lFxa+gBN/OdS1Iy1PZCeANt3MMpTP675UlRGk3KJRLnq3u+LCcNb cHCB+cCb20PzAj5h6qK3qncYczYLL2QoaefjTvNhVeQ5LkiK6/UzZTvuUKWMGiHd hkx0muyituC0T5lv/F8nlP1Jcerks/H7RRPM/Nm6dRcw/xUK6ZAElJOaF8YEeoIf xgG/mQ5MJtlZcg/AlgnNpENvo9g1PNjo7MgHPYIoSOwWO+QqcV8tvxIu+nJ5ScOH JetrPm7h7rAGo1kjeWNL8U4pFJl5M5nNltETs8LDWDI+VAMfcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDysTx3bViAGo96UBWDwl4eb/aUoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85YmQx OWM3My1iNTk3LTQ0NmEtYWYxMS0xZjhlNmMxNzI4MzEvODU5ZGE2NDYtYTc5NC0z ODA3LThlYzYtYzIyNDMyMTcxMTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOWJkMTljNzMtYjU5Ny00NDZhLWFm MTEtMWY4ZTZjMTcyODMxLzliZDE5YzczLWI1OTctNDQ2YS1hZjExLTFmOGU2YzE3 MjgzMS5jcmwwHwYDVR0jBBgwFoAUGw1alixWDi4npo5m74CPmDzfcfkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85YmQxOWM3My1iNTk3LTQ0NmEtYWYxMS0xZjhl NmMxNzI4MzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaP+OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGC75ylLjroeElIOX0vf4HK8HjDWH149kb8BS9U4+FBiLK+mDkV5dvVm /KrCzgOxwdtT9KTdLMFi/zCPb1N4DZtU96NrAcZ9C56w+M1D6IAo3K8MnNgx5nZ0 HAjYImXJ4fBVBcrq3RM7KcTWo+nvRSIixRO6YO7WTponEoPwehNG5Zb4yxB8S+yj nwv5XDC6IJbRshtx0RkYuTvFd8U+2KzvXnSBaDLnqhVuzMkQs/eZBQdxdHQjd7l+ MI29EbTPp4Y4iuYys2cNw2Rac62pOWd5mIGLg3pnRlXUtqSpdXo1FnKOMyXDIhuk saduf0o7RCCetF7rF1pWoS0bUcane9o= -----END CERTIFICATE-----Generated at Wed Nov 5 21:36:11 2025 by rpki-client