$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a4c08275-4e93-3df4-9588-116b8498d9b9.roa File: a4c08275-4e93-3df4-9588-116b8498d9b9.roa (raw, json) Hash identifier: egDEhDaiVcegjc6VWeDHXHbBLH1fd73Vv8NwaYJtnCY= Subject key identifier: A2:23:52:FC:85:4B:21:66:2F:27:7D:3B:AD:9E:B8:8D:14:19:EA:17 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584BB727BC1F4211BF5C49CF2280 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a4c08275-4e93-3df4-9588-116b8498d9b9.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 401838 IP address blocks: 104.164.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:bc:1f:42:11:bf:5c:49:cf:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=1d287248-3920-495f-ab8a-a1ccb70cc743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e2:7b:ff:5f:57:23:e4:aa:cc:96:17:28:7f: 96:86:b1:54:b3:c6:03:94:c6:93:db:a0:36:6b:25: 86:fc:7f:35:18:be:f4:85:c7:0b:1e:71:fa:0a:b0: 54:c4:11:bc:a2:c4:dd:a4:67:49:d9:ca:06:20:09: 39:ea:5e:93:cb:a2:86:e7:3c:21:11:d7:3d:45:aa: 3b:65:05:91:d8:a1:89:71:28:90:31:6c:7b:fe:01: 08:ee:d8:0c:ad:22:bc:6a:c7:cf:c5:77:11:4f:3f: 56:aa:c1:75:1b:18:45:d5:11:f0:80:5f:be:43:94: 88:23:ce:d3:84:84:07:26:80:0c:85:8d:34:eb:9d: 7d:6a:ea:de:08:80:ef:b4:67:35:39:9e:48:ae:bd: aa:bb:56:c2:e3:f3:20:2f:bf:99:a0:66:00:70:0d: a0:0b:41:a7:af:4c:93:f1:61:97:6a:98:a2:4b:48: b3:b3:28:f7:b1:03:c3:05:72:e2:4f:da:58:98:31: d3:15:5c:f5:7e:38:a9:37:1d:3d:0c:4a:2a:02:ff: fe:a6:fe:da:6e:e1:1f:23:79:94:4d:dc:da:ec:6d: fa:1a:fb:cc:ad:e0:b9:13:23:4f:5c:d2:09:47:04: 5a:c8:e4:b1:b0:e1:c2:0c:9a:99:f0:ee:1f:f3:9c: fb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:23:52:FC:85:4B:21:66:2F:27:7D:3B:AD:9E:B8:8D:14:19:EA:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a4c08275-4e93-3df4-9588-116b8498d9b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.164.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:c1:21:d9:2e:c0:ec:28:c9:40:6c:64:15:e5:87:a1:30:b3: 11:f0:21:fa:4c:03:8e:74:c6:4a:e3:e4:32:ac:4d:45:1a:95: 9d:da:bf:5d:ff:ea:12:ce:ad:5f:70:75:28:11:f4:04:d8:59: 66:5b:46:6e:48:4f:cd:8c:61:39:1c:13:3e:50:3d:08:07:9a: 65:77:8c:36:45:82:c4:89:f4:6c:24:3a:7a:7d:04:40:b2:67: 1d:1d:6a:a2:7b:4f:3f:a8:ef:c7:2b:1b:55:9a:db:2a:c5:bf: 7a:41:d8:14:35:c6:cb:41:b3:3d:f0:11:32:41:00:4c:43:f1: 59:c4:8d:0c:8e:90:e9:e2:e4:0d:e8:51:3c:a5:cb:ac:3c:45: 1e:c9:d0:28:1d:91:65:77:6b:51:fd:e2:ab:f8:83:70:3c:f6: ba:dd:07:50:88:db:23:1c:aa:3a:18:b1:8f:38:f3:fb:7c:79: 30:52:54:ec:92:22:1f:bc:6e:0c:fb:a8:b0:a9:33:c5:7f:12: a8:1c:82:9c:fb:de:cc:71:2d:d1:d3:f7:32:51:02:3f:ee:0d: a3:96:c2:65:5e:2c:6f:9c:67:9f:04:b5:93:ef:a1:2d:11:b2: 3c:85:1f:9a:c0:39:97:4e:ca:8b:32:63:d5:02:78:8b:6a:d4: 6a:88:54:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7wfQhG/XEnPIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk MWQyODcyNDgtMzkyMC00OTVmLWFiOGEtYTFjY2I3MGNjNzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuJ7/19XI+SqzJYXKH+WhrFUs8YDlMaT26A2 ayWG/H81GL70hccLHnH6CrBUxBG8osTdpGdJ2coGIAk56l6Ty6KG5zwhEdc9Rao7 ZQWR2KGJcSiQMWx7/gEI7tgMrSK8asfPxXcRTz9WqsF1GxhF1RHwgF++Q5SII87T hIQHJoAMhY006519aureCIDvtGc1OZ5Irr2qu1bC4/MgL7+ZoGYAcA2gC0Gnr0yT 8WGXapiiS0izsyj3sQPDBXLiT9pYmDHTFVz1fjipNx09DEoqAv/+pv7abuEfI3mU Tdza7G36GvvMreC5EyNPXNIJRwRayOSxsOHCDJqZ8O4f85z73wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIjUvyFSyFmLyd9O62euI0UGeoXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTRjMDgyNzUtNGU5My0z ZGY0LTk1ODgtMTE2Yjg0OThkOWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDBIdkuwOwoyUBsZBXlh6EwsxHwIfpMA450xkrj5DKsTUUalZ3av13/ 6hLOrV9wdSgR9ATYWWZbRm5IT82MYTkcEz5QPQgHmmV3jDZFgsSJ9GwkOnp9BECy Zx0daqJ7Tz+o78crG1Wa2yrFv3pB2BQ1xstBsz3wETJBAExD8VnEjQyOkOni5A3o UTyly6w8RR7J0CgdkWV3a1H94qv4g3A89rrdB1CI2yMcqjoYsY848/t8eTBSVOyS Ih+8bgz7qLCpM8V/Eqgcgpz73sxxLdHT9zJRAj/uDaOWwmVeLG+cZ58EtZPvoS0R sjyFH5rAOZdOyosyY9UCeItq1GqIVCo= -----END CERTIFICATE-----Generated at Tue Nov 4 18:48:40 2025 by rpki-client