$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/d55b35e9-c386-375b-a25f-baf47ef2f095.roa File: d55b35e9-c386-375b-a25f-baf47ef2f095.roa (raw, json) Hash identifier: W5nPcMn0O2Pe92km+AZsozMbXNTcLtyWZrBnGWM4Yiw= Subject key identifier: C2:CA:9F:E7:18:86:FE:D1:5E:FB:A5:19:63:7E:88:31:FB:2D:BC:F8 Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584B1D9C2CFB70D5FC8DC565E900 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/d55b35e9-c386-375b-a25f-baf47ef2f095.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 26548 IP address blocks: 104.218.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:2c:fb:70:d5:fc:8d:c5:65:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=0fda5673-8d05-4cb6-b61d-246457c77773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b2:3c:78:14:57:b0:4a:dc:3b:11:77:8b:02: 90:85:cf:99:19:7f:80:ff:9a:25:55:8b:a1:a0:49: d5:5f:b7:06:10:24:be:f8:5d:b5:12:3c:75:56:59: e2:f7:c0:07:5a:4c:6d:d2:ae:70:4b:c6:8d:b5:37: 28:ea:a7:10:79:24:d1:19:d3:12:1b:f8:3a:bd:3a: 7e:58:d1:67:ec:49:90:d7:be:0f:7b:6a:42:76:7e: 57:81:da:f8:5f:86:53:fa:99:77:8e:95:df:56:9f: 66:02:a5:0a:82:b5:95:b7:e7:9d:09:5d:02:c4:a4: 60:20:f8:be:1d:27:cf:b6:b1:42:d8:c5:08:c8:d8: 5e:ec:5b:a4:44:fb:a6:10:41:ac:52:ac:5d:d0:61: a4:c7:1e:4d:3c:80:6c:23:29:b0:b1:5b:49:c0:f4: 26:8a:4d:88:eb:49:4b:af:27:5a:be:ca:d2:4f:bd: 9c:16:22:e7:e5:3c:cf:ab:3d:59:d8:3e:07:7e:f5: fb:2d:cf:da:d3:f4:87:81:ae:d1:85:68:14:eb:89: 36:0f:d1:f2:3c:e1:33:aa:d1:12:04:9c:6d:66:db: 5a:67:0b:38:ad:3f:c1:08:a4:fc:86:9c:60:58:f5: d6:2a:45:f3:38:ad:a4:1e:08:2f:97:16:d8:b1:c9: dc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CA:9F:E7:18:86:FE:D1:5E:FB:A5:19:63:7E:88:31:FB:2D:BC:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/d55b35e9-c386-375b-a25f-baf47ef2f095.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 104.218.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:14:b9:01:e0:7b:a8:81:3a:df:0b:5e:76:68:39:6e:19:5b: 58:e7:ba:60:6b:09:e2:26:d0:d7:db:f1:38:74:03:02:f3:11: 29:4d:b6:24:88:0a:36:2c:b8:82:31:50:f3:3e:23:a5:29:f4: d8:a8:92:93:ad:07:11:49:ca:65:e2:aa:f2:fb:5c:28:d9:07: a3:32:48:6b:34:c6:85:74:0d:65:30:2a:cb:09:58:2c:b1:07: 8a:ac:34:01:0c:fe:3b:4c:c8:7a:28:b4:bf:eb:c0:91:69:a2: ab:9a:c1:dd:52:81:a6:28:43:b7:15:74:5d:ec:7e:e8:11:21: d0:d2:41:7e:8f:2e:30:fe:a0:0f:8f:07:16:35:9c:8c:c3:47: 32:91:d9:aa:e5:16:4e:cc:f6:ee:e5:14:cb:a1:fb:59:d7:77: b1:6c:c6:8a:6d:92:e0:8d:cb:fd:f9:e5:27:2f:64:e2:db:05: 05:2f:60:24:60:dc:46:26:b7:26:b2:88:89:22:5e:0a:53:ad: 4b:83:ba:a7:7f:30:8d:8c:d5:06:3e:1b:b2:59:5d:9f:a5:f7: 12:87:c4:17:21:f6:0e:d4:d4:8f:f9:f9:4f:4c:b6:bc:8b:26: 22:dc:ef:91:8d:57:58:1f:fa:d8:3d:9a:2c:da:b7:17:73:3c: 86:ba:ad:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnCz7cNX8jcVl6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MGZkYTU2NzMtOGQwNS00Y2I2LWI2MWQtMjQ2NDU3Yzc3NzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrI8eBRXsErcOxF3iwKQhc+ZGX+A/5olVYuh oEnVX7cGECS++F21Ejx1Vlni98AHWkxt0q5wS8aNtTco6qcQeSTRGdMSG/g6vTp+ WNFn7EmQ174Pe2pCdn5Xgdr4X4ZT+pl3jpXfVp9mAqUKgrWVt+edCV0CxKRgIPi+ HSfPtrFC2MUIyNhe7FukRPumEEGsUqxd0GGkxx5NPIBsIymwsVtJwPQmik2I60lL rydavsrST72cFiLn5TzPqz1Z2D4HfvX7Lc/a0/SHga7RhWgU64k2D9HyPOEzqtES BJxtZttaZws4rT/BCKT8hpxgWPXWKkXzOK2kHggvlxbYscncHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLKn+cYhv7RXvulGWN+iDH7Lbz4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvZDU1YjM1ZTktYzM4Ni0z NzViLWEyNWYtYmFmNDdlZjJmMDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaNpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4UuQHge6iBOt8LXnZoOW4ZW1jnumBrCeIm0Nfb8Th0AwLzESlNtiSI CjYsuIIxUPM+I6Up9NiokpOtBxFJymXiqvL7XCjZB6MySGs0xoV0DWUwKssJWCyx B4qsNAEM/jtMyHootL/rwJFpoquawd1SgaYoQ7cVdF3sfugRIdDSQX6PLjD+oA+P BxY1nIzDRzKR2arlFk7M9u7lFMuh+1nXd7FsxoptkuCNy/355ScvZOLbBQUvYCRg 3EYmtyayiIkiXgpTrUuDuqd/MI2M1QY+G7JZXZ+l9xKHxBch9g7U1I/5+U9MtryL JiLc75GNV1gf+tg9mizatxdzPIa6rfY= -----END CERTIFICATE-----Generated at Tue Nov 4 22:17:13 2025 by rpki-client