$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f3c06c35-1d00-3837-829b-fa5d27be0dd2.roa File: f3c06c35-1d00-3837-829b-fa5d27be0dd2.roa (raw, json) Hash identifier: UjyTjaKpiIpqJeWABgeSlXosehvDMjdeLVJr9O2jdTQ= Subject key identifier: 35:EC:7B:D0:1B:34:6B:ED:42:D3:39:41:95:87:90:7A:DD:57:4F:1E Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584BB2F82EBF9DFEA70073E17680 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f3c06c35-1d00-3837-829b-fa5d27be0dd2.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 214238 IP address blocks: 104.252.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:2e:bf:9d:fe:a7:00:73:e1:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=9eda21a2-f0e9-4d2c-95c0-db2953f00f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cc:16:ca:87:a2:c9:69:23:ad:72:6c:24:1d: 8a:62:ca:50:a7:8f:87:6f:9c:a2:b5:cb:5f:79:c4: 59:32:ae:d3:25:d0:6b:4a:08:3b:34:4f:61:c5:c8: ec:b5:62:e1:d5:fd:42:24:a6:b8:18:2a:24:77:68: 00:2d:99:56:a4:15:43:f6:bc:93:db:08:1d:e4:40: 43:a1:4c:d9:46:c2:4f:6e:37:f3:3f:f2:17:7f:80: 1d:36:c9:14:d5:4d:5e:df:ff:59:34:d0:01:2f:99: fe:af:62:62:8c:5f:5a:0d:c7:e9:e0:f7:0b:07:27: 52:dd:e7:c2:27:a0:02:03:98:14:54:e2:bc:2e:35: a0:0c:5c:dc:8b:48:ee:7e:0c:1f:ad:2e:41:15:88: e3:9d:05:f4:9d:10:3a:6c:7d:62:a6:d6:35:31:ce: 88:8c:58:6a:52:3d:06:c0:bc:18:dd:98:68:98:53: 87:da:46:55:81:34:6f:53:08:8a:ff:d2:56:9f:08: ee:8b:9a:3a:f2:13:80:76:64:f5:83:33:e4:5a:a7: 46:0b:26:1d:b8:32:f1:07:8a:a9:be:f3:e8:5f:7d: c1:ba:68:d1:3b:f2:00:d0:4c:e0:0b:eb:99:5f:cf: 8e:c4:9d:31:88:d8:53:5e:86:c3:58:31:7a:42:12: 39:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EC:7B:D0:1B:34:6B:ED:42:D3:39:41:95:87:90:7A:DD:57:4F:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f3c06c35-1d00-3837-829b-fa5d27be0dd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.252.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:72:45:08:c1:b0:05:af:92:13:43:35:3a:78:3a:c7:6a:85: b8:63:e3:5a:13:d6:eb:e0:fd:32:fd:98:44:5e:06:61:80:03: 01:94:18:90:17:43:d5:5b:72:e8:f2:6f:49:f6:f1:3b:03:25: f1:5a:07:7a:53:50:17:75:64:2f:c1:de:7b:5b:ef:de:02:73: eb:e7:9a:80:fd:7d:09:ae:e5:10:7a:c8:1d:58:cc:21:5d:88: 2f:ca:fa:e8:8f:73:47:a2:a3:06:37:d1:25:a7:92:bf:48:ea: 16:36:54:27:37:e6:f2:6f:66:c5:f8:37:b6:a9:80:b8:b6:d5: 81:e0:f9:53:77:cf:cb:cc:2c:91:43:1b:e9:a2:44:a8:b9:83: b5:17:43:ea:54:ec:76:49:e4:f3:0d:00:6f:e9:ce:fd:b8:c2: d5:7c:ad:06:75:41:db:8c:13:59:78:1c:a8:39:b4:7d:b7:78: a2:e5:bb:27:c2:0d:c2:a3:24:2f:8d:f2:91:2b:b1:24:c7:95: 3f:e4:9d:50:f3:00:05:7c:0f:82:10:cc:dd:f1:1f:4d:bb:e5: a1:76:60:b3:b0:19:45:3d:e1:5f:ed:67:9c:08:82:09:e2:8e: 0d:ea:05:a9:94:a6:8e:5e:27:ac:67:b5:30:86:67:4f:33:93: 3c:d3:e3:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+C6/nf6nAHPhdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk OWVkYTIxYTItZjBlOS00ZDJjLTk1YzAtZGIyOTUzZjAwZjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmswWyoeiyWkjrXJsJB2KYspQp4+Hb5yitctf ecRZMq7TJdBrSgg7NE9hxcjstWLh1f1CJKa4GCokd2gALZlWpBVD9ryT2wgd5EBD oUzZRsJPbjfzP/IXf4AdNskU1U1e3/9ZNNABL5n+r2JijF9aDcfp4PcLBydS3efC J6ACA5gUVOK8LjWgDFzci0jufgwfrS5BFYjjnQX0nRA6bH1iptY1Mc6IjFhqUj0G wLwY3ZhomFOH2kZVgTRvUwiK/9JWnwjui5o68hOAdmT1gzPkWqdGCyYduDLxB4qp vvPoX33BumjRO/IA0EzgC+uZX8+OxJ0xiNhTXobDWDF6QhI5sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXse9AbNGvtQtM5QZWHkHrdV08eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZjNjMDZjMzUtMWQwMC0z ODM3LTgyOWItZmE1ZDI3YmUwZGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPxsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINyRQjBsAWvkhNDNTp4Osdqhbhj41oT1uvg/TL9mEReBmGAAwGUGJAX Q9Vbcujyb0n28TsDJfFaB3pTUBd1ZC/B3ntb794Cc+vnmoD9fQmu5RB6yB1YzCFd iC/K+uiPc0eiowY30SWnkr9I6hY2VCc35vJvZsX4N7apgLi21YHg+VN3z8vMLJFD G+miRKi5g7UXQ+pU7HZJ5PMNAG/pzv24wtV8rQZ1QduME1l4HKg5tH23eKLluyfC DcKjJC+N8pErsSTHlT/knVDzAAV8D4IQzN3xH0275aF2YLOwGUU94V/tZ5wIggni jg3qBamUpo5eJ6xntTCGZ08zkzzT454= -----END CERTIFICATE-----Generated at Tue Nov 4 23:47:17 2025 by rpki-client