$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/cea0b90a-a2c7-3440-ba62-9f8b84fa19da.roa File: cea0b90a-a2c7-3440-ba62-9f8b84fa19da.roa (raw, json) Hash identifier: RTXdXJgzaUZd5mq/6LtAMwv3GJ3rfK9YuCIoNn2UhZ8= Subject key identifier: CC:4F:03:73:EA:B1:F9:D9:6D:DA:92:3D:ED:7C:A4:CF:66:C8:9A:F3 Certificate issuer: /CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef Certificate serial: 010D0C9F4328584B8EACF3437267DF52031A69A8 Authority key identifier: 04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/cea0b90a-a2c7-3440-ba62-9f8b84fa19da.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 20303 IP address blocks: 104.251.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:f3:43:72:67:df:52:03:1a:69:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=2ff65d8a-4745-49fc-8a2b-55b10863724e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d1:1e:bf:62:5c:13:f7:62:e9:d0:ea:1a:e8: 90:83:e2:d8:b7:c2:9d:6b:5a:47:b9:c0:9d:fd:45: 74:66:4b:a1:4c:1e:2e:1e:0d:b7:6c:7b:b6:d0:15: f2:95:71:08:04:17:9b:b1:ef:80:55:bd:87:4e:4d: d8:4e:25:80:6e:97:2c:c0:f8:0c:38:3c:ae:39:d8: 2d:0b:20:f2:fd:2d:14:e5:74:9e:66:91:63:a1:f8: 5b:f3:fb:65:d5:3f:10:76:91:0d:95:67:68:8c:3d: f8:e2:83:19:eb:32:15:0e:31:34:7b:39:87:aa:13: b1:9b:69:5e:e2:08:48:31:bb:08:f1:c3:80:95:2d: b7:0d:e3:96:5d:6c:3b:6b:1b:17:6e:c1:8a:b3:39: 8d:91:2f:66:9c:0a:a7:28:7b:cd:c2:75:9d:53:26: 0a:44:f2:8a:b7:ba:d2:84:e2:a6:c4:82:f9:93:ec: 4f:60:b6:8d:c2:96:8a:27:24:28:8d:a4:42:66:19: fd:14:72:45:20:90:9d:7c:52:fd:f0:20:c7:fb:aa: e3:2e:01:c6:7a:5a:95:c4:a7:43:b0:13:b7:6f:8c: f4:2e:bc:f0:07:42:b8:33:53:58:95:13:a8:35:14: 7b:d0:0a:a4:40:ad:ff:08:04:e7:d8:d1:24:b2:88: c1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4F:03:73:EA:B1:F9:D9:6D:DA:92:3D:ED:7C:A4:CF:66:C8:9A:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/cea0b90a-a2c7-3440-ba62-9f8b84fa19da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl X509v3 Authority Key Identifier: keyid:04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer sbgp-ipAddrBlock: critical IPv4: 104.251.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:4d:d4:aa:28:0d:0b:98:63:dc:8a:f5:af:87:76:87:27:5e: a5:f5:c6:3f:8a:4f:7c:6d:0f:28:90:01:ad:2e:e7:9d:89:10: aa:bc:b0:38:a6:ea:cc:cd:e4:a9:57:38:1c:91:17:ba:ec:c1: e0:0c:e5:df:37:d5:59:f1:c0:0c:6e:ca:63:b1:05:ec:b6:a5: 94:c2:5a:9f:26:1f:f3:68:3a:25:15:9b:99:5d:b4:a7:e4:9e: a2:42:19:47:d1:04:d1:99:1f:6d:87:b3:07:67:bf:51:a0:5f: 7b:55:7d:ff:91:70:0a:1b:2b:0a:9f:fb:d2:b4:b9:87:50:14: c4:60:9a:c5:01:04:f5:48:71:5d:18:5d:6f:e7:00:7f:a9:5f: 22:9d:e6:d1:a9:43:c1:b0:30:4e:e5:7d:19:c5:45:9e:75:f8: 80:da:38:06:12:35:b0:72:ab:fc:eb:bc:78:3d:8f:f6:cc:10: b8:14:db:ee:b0:9e:83:d2:01:12:b4:dd:23:90:9b:1f:9f:9c: 3d:39:a6:61:39:3c:9f:1f:ce:e0:26:14:eb:06:14:38:04:b0: 4e:26:98:bf:ad:2f:20:f5:c7:71:a7:4f:10:a2:44:29:3c:8e: 5c:67:64:d4:3a:9e:79:55:00:64:b8:b1:d2:01:25:5c:af:0a: fb:97:b9:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrPNDcmffUgMaaagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNkMmRiYWUtM2YxYS00ZDllLTllMDEtZjdlZjI1MGY1 NWVmMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MmZmNjVkOGEtNDc0NS00OWZjLThhMmItNTViMTA4NjM3MjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntEev2JcE/di6dDqGuiQg+LYt8Kda1pHucCd /UV0ZkuhTB4uHg23bHu20BXylXEIBBebse+AVb2HTk3YTiWAbpcswPgMODyuOdgt CyDy/S0U5XSeZpFjofhb8/tl1T8QdpENlWdojD344oMZ6zIVDjE0ezmHqhOxm2le 4ghIMbsI8cOAlS23DeOWXWw7axsXbsGKszmNkS9mnAqnKHvNwnWdUyYKRPKKt7rS hOKmxIL5k+xPYLaNwpaKJyQojaRCZhn9FHJFIJCdfFL98CDH+6rjLgHGelqVxKdD sBO3b4z0LrzwB0K4M1NYlROoNRR70AqkQK3/CATn2NEksojB8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxPA3PqsfnZbdqSPe18pM9myJrzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83M2Qy ZGJhZS0zZjFhLTRkOWUtOWUwMS1mN2VmMjUwZjU1ZWYvY2VhMGI5MGEtYTJjNy0z NDQwLWJhNjItOWY4Yjg0ZmExOWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzNkMmRiYWUtM2YxYS00ZDllLTll MDEtZjdlZjI1MGY1NWVmLzczZDJkYmFlLTNmMWEtNGQ5ZS05ZTAxLWY3ZWYyNTBm NTVlZi5jcmwwHwYDVR0jBBgwFoAUBPEO3GDPAH5AMl53FZnXvgXyBg4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83M2QyZGJhZS0zZjFhLTRkOWUtOWUwMS1mN2Vm MjUwZjU1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPtyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRN1KooDQuYY9yK9a+HdocnXqX1xj+KT3xtDyiQAa0u552JEKq8sDim 6szN5KlXOByRF7rsweAM5d831VnxwAxuymOxBey2pZTCWp8mH/NoOiUVm5ldtKfk nqJCGUfRBNGZH22Hswdnv1GgX3tVff+RcAobKwqf+9K0uYdQFMRgmsUBBPVIcV0Y XW/nAH+pXyKd5tGpQ8GwME7lfRnFRZ51+IDaOAYSNbByq/zrvHg9j/bMELgU2+6w noPSARK03SOQmx+fnD05pmE5PJ8fzuAmFOsGFDgEsE4mmL+tLyD1x3GnTxCiRCk8 jlxnZNQ6nnlVAGS4sdIBJVyvCvuXucU= -----END CERTIFICATE-----Generated at Wed Nov 5 10:34:22 2025 by rpki-client