$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6db66c8e-4bde-3d8f-afd2-2436c6d4cc87.roa File: 6db66c8e-4bde-3d8f-afd2-2436c6d4cc87.roa (raw, json) Hash identifier: 4X1g8ZxAmeT8I+sJO4K5YJgMOwHbjbcvWLwSk69k5ts= Subject key identifier: B0:53:AA:DA:7C:28:46:58:0A:E5:69:CB:C8:35:21:2E:D7:07:54:B1 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584BB52378CD7A66A040CD217580 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6db66c8e-4bde-3d8f-afd2-2436c6d4cc87.roa Signing time: Fri 31 Oct 2025 19:40:29 +0000 ROA not before: Fri 31 Oct 2025 19:40:29 +0000 ROA not after: Thu 29 Jan 2026 20:40:29 +0000 asID: 399195 IP address blocks: 104.233.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:23:78:cd:7a:66:a0:40:cd:21:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Oct 31 19:40:29 2025 GMT Not After : Jan 29 20:40:29 2026 GMT Subject: CN=3d61dbc9-833c-4a98-93ca-9414bb3e1b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c5:33:1a:9b:33:c7:cd:c6:48:9d:e1:ea:6e: 2d:d3:c5:af:fd:9e:66:1f:a2:e6:06:f7:8b:82:23: 81:cc:21:6b:24:f7:4f:20:0b:04:64:e8:e8:71:2e: 38:3c:12:c2:aa:fe:e0:15:46:17:84:fd:13:99:2b: 99:4b:ed:49:50:af:02:2e:be:b6:7a:3e:6b:3e:37: c0:46:e1:47:f2:f7:e5:b0:33:91:56:d0:cf:1b:25: 43:0c:e3:ed:1c:f1:9e:fb:3f:e8:7a:75:26:0b:dd: dc:53:d9:db:6b:53:36:50:34:0e:d8:9a:24:33:a9: 73:3f:83:28:39:35:56:de:40:7e:ec:c3:11:fa:ea: 7d:f1:fc:59:f4:2f:bb:c2:e5:3f:42:5c:25:dc:ad: 39:b4:7f:53:24:6e:fe:6e:69:23:70:c3:f8:32:e7: 66:64:7b:a6:e5:ce:db:9c:db:5b:e4:ec:5b:dc:5e: d6:6e:fa:d2:d9:1b:cf:df:39:af:b7:fa:0b:46:db: ba:5a:f0:3d:e8:bf:c1:72:0b:cb:bb:23:df:f2:9b: ff:2e:3e:be:fb:fd:4b:78:c9:f8:21:85:96:91:e1: 81:2d:60:11:93:99:ea:af:0c:25:61:98:7e:15:8f: 02:87:f2:40:67:27:5a:40:37:dd:60:a1:b0:31:24: 86:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:53:AA:DA:7C:28:46:58:0A:E5:69:CB:C8:35:21:2E:D7:07:54:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6db66c8e-4bde-3d8f-afd2-2436c6d4cc87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 104.233.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:63:8b:37:d1:f7:7a:b4:50:24:03:45:7f:9a:ee:9d:88:c1: eb:a4:be:cc:90:69:79:73:d5:12:e1:fe:db:a4:31:36:57:29: 12:05:1b:fa:1b:70:70:d5:e7:d4:7e:df:7b:d7:0c:63:f7:e2: 78:33:7f:0c:b2:6b:d1:f7:14:84:b0:7a:10:db:3f:99:4b:4a: 1a:c3:91:57:59:c8:ff:45:51:0c:9c:1f:46:43:24:2b:d5:61: 7a:de:41:83:5a:a6:4f:1e:25:c1:71:4d:2a:cc:09:bc:b7:ff: 9e:9e:06:1b:86:0d:fe:fb:67:f1:2c:f2:16:4a:27:dc:63:78: 79:c5:d4:8b:fe:9f:93:a4:5f:33:f0:7a:d0:52:eb:4a:06:c2: 29:2b:9f:48:09:04:3b:41:a0:58:f1:fb:5c:c5:06:d6:76:f0: 8a:81:2c:99:f0:00:de:2a:5c:6a:50:b9:35:c9:c7:9d:a5:e0: 28:ac:99:ce:62:9a:5b:07:92:6e:32:74:1b:aa:2b:04:69:aa: 2c:dc:45:10:a5:e9:64:77:cf:0f:db:6c:fa:fb:80:d6:c5:42: 0c:43:91:76:d1:77:12:55:36:86:1e:e8:2a:dd:d9:4d:85:1f: a3:62:c7:7d:dd:72:6b:fb:1b:e3:0f:ec:fb:5a:4d:fe:e2:c9: 0f:32:96:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1I3jNemagQM0hdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MTAzMTE5NDAyOVoXDTI2MDEyOTIwNDAyOVowLzEtMCsGA1UEAxMk M2Q2MWRiYzktODMzYy00YTk4LTkzY2EtOTQxNGJiM2UxYjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsUzGpszx83GSJ3h6m4t08Wv/Z5mH6LmBveL giOBzCFrJPdPIAsEZOjocS44PBLCqv7gFUYXhP0TmSuZS+1JUK8CLr62ej5rPjfA RuFH8vflsDORVtDPGyVDDOPtHPGe+z/oenUmC93cU9nba1M2UDQO2JokM6lzP4Mo OTVW3kB+7MMR+up98fxZ9C+7wuU/Qlwl3K05tH9TJG7+bmkjcMP4MudmZHum5c7b nNtb5Oxb3F7WbvrS2RvP3zmvt/oLRtu6WvA96L/BcgvLuyPf8pv/Lj6++/1LeMn4 IYWWkeGBLWARk5nqrwwlYZh+FY8Ch/JAZydaQDfdYKGwMSSGWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBTqtp8KEZYCuVpy8g1IS7XB1SxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNmRiNjZjOGUtNGJkZS0z ZDhmLWFmZDItMjQzNmM2ZDRjYzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaOmcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1jizfR93q0UCQDRX+a7p2IweukvsyQaXlz1RLh/tukMTZXKRIFG/ob cHDV59R+33vXDGP34ngzfwyya9H3FISwehDbP5lLShrDkVdZyP9FUQycH0ZDJCvV YXreQYNapk8eJcFxTSrMCby3/56eBhuGDf77Z/Es8hZKJ9xjeHnF1Iv+n5OkXzPw etBS60oGwikrn0gJBDtBoFjx+1zFBtZ28IqBLJnwAN4qXGpQuTXJx52l4Cismc5i mlsHkm4ydBuqKwRpqizcRRCl6WR3zw/bbPr7gNbFQgxDkXbRdxJVNoYe6Crd2U2F H6Nix33dcmv7G+MP7PtaTf7iyQ8yluM= -----END CERTIFICATE-----Generated at Wed Nov 5 01:07:08 2025 by rpki-client