$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/7505e4e7-9852-3c71-a7e1-ae52fe0c3ab1.roa File: 7505e4e7-9852-3c71-a7e1-ae52fe0c3ab1.roa (raw, json) Hash identifier: d5TbI9sAXAtoacd6UuoZNG/aElYAIIgYqVFL9vBeINg= Subject key identifier: 3B:1C:D0:E2:F5:F4:CE:44:5E:87:74:92:AE:4B:F7:31:5C:D6:37:E2 Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F4328584BA0D25BB22E13111422D1DB00 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/7505e4e7-9852-3c71-a7e1-ae52fe0c3ab1.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 26512 IP address blocks: 104.244.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5b:b2:2e:13:11:14:22:d1:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=74ab0a99-abc6-44f2-8986-3ded98c66e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a3:cb:18:e8:db:e8:9c:42:72:b7:10:ea:86: 0b:f8:a9:6e:11:34:76:36:c9:1f:6d:b3:7c:38:25: 57:46:11:67:e3:ba:0e:f2:47:f8:62:0a:20:47:d3: 6a:27:93:eb:dd:2f:72:74:97:1c:9e:8d:28:71:c7: 25:5d:f8:a0:c2:d8:5e:a2:f6:7e:f1:b6:8b:f7:10: f3:a6:d5:45:86:35:1a:60:86:e9:35:82:f6:ed:6a: 1f:d6:d5:20:be:ae:4b:50:c7:34:a6:99:c4:81:50: 2c:5e:1f:d5:6a:5b:fc:d8:bb:a5:76:f3:1b:7d:40: 6a:48:28:fe:bd:a7:04:7a:82:cc:bd:c8:38:49:51: 86:b7:e5:8b:1a:3e:0e:d5:85:f6:da:65:27:18:1c: 7c:a8:6c:eb:9c:93:f3:bd:bf:c0:08:b3:7d:0e:b4: 7b:f5:d6:1d:86:43:6d:8e:af:6d:37:36:6c:f6:37: 52:9b:d6:aa:3a:23:9d:2f:7f:ed:07:05:5f:45:35: 42:7a:66:78:e9:43:80:14:05:54:a8:91:45:c7:8e: 2a:64:a1:cc:51:b0:30:74:32:2d:68:8a:8a:f1:5f: 2e:94:50:74:f9:1e:47:29:bf:7b:06:7c:ff:c9:56: 6c:07:3c:d0:88:45:5a:3e:58:80:65:17:ee:f7:82: 50:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1C:D0:E2:F5:F4:CE:44:5E:87:74:92:AE:4B:F7:31:5C:D6:37:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/7505e4e7-9852-3c71-a7e1-ae52fe0c3ab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.244.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:9c:c2:81:80:b5:5d:6a:b9:e7:58:d3:a1:97:5f:11:fa:95: 61:74:cd:33:f1:46:06:32:95:65:39:c2:36:e4:38:ed:cb:2e: aa:08:c8:b7:63:5b:5a:df:41:42:8b:69:17:4e:f7:33:8d:ed: b3:42:88:08:69:fc:5c:22:5b:9b:b1:5a:5b:ca:55:9f:6a:70: f3:3e:9d:55:88:34:e7:ea:2f:0c:23:6f:39:04:37:db:c1:88: bb:c0:b1:1c:f8:a0:7b:4e:a5:39:df:c6:d2:7b:c4:e9:48:8b: c8:2a:ea:e7:92:97:03:b6:2b:32:68:ef:17:70:10:6e:90:f9: 38:56:ec:d8:19:28:a7:42:48:94:38:4f:6d:2d:c8:49:f0:8c: e0:a9:1f:25:bd:d1:0b:8d:53:24:ce:06:c8:c3:42:49:eb:90: 48:98:83:f4:c4:17:e1:22:dd:3f:f2:74:da:4c:02:3d:0a:34: a2:0f:fa:75:ce:30:5c:e3:27:12:44:b2:45:75:4b:eb:dd:bf: 60:c1:f2:73:8d:fc:cd:5f:51:db:b3:fe:d5:7c:e3:de:7c:67: 15:73:9e:54:e9:99:7a:60:b3:5b:4c:cf:7f:9f:01:94:0e:2d: 07:de:ca:0b:cf:36:da:a1:a9:17:23:fc:27:14:e2:0f:90:70: f7:8e:81:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0luyLhMRFCLR2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NzRhYjBhOTktYWJjNi00NGYyLTg5ODYtM2RlZDk4YzY2ZTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKPLGOjb6JxCcrcQ6oYL+KluETR2NskfbbN8 OCVXRhFn47oO8kf4YgogR9NqJ5Pr3S9ydJccno0occclXfigwtheovZ+8baL9xDz ptVFhjUaYIbpNYL27Wof1tUgvq5LUMc0ppnEgVAsXh/Valv82LuldvMbfUBqSCj+ vacEeoLMvcg4SVGGt+WLGj4O1YX22mUnGBx8qGzrnJPzvb/ACLN9DrR79dYdhkNt jq9tNzZs9jdSm9aqOiOdL3/tBwVfRTVCemZ46UOAFAVUqJFFx44qZKHMUbAwdDIt aIqK8V8ulFB0+R5HKb97Bnz/yVZsBzzQiEVaPliAZRfu94JQBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsc0OL19M5EXod0kq5L9zFc1jfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvNzUwNWU0ZTctOTg1Mi0z YzcxLWE3ZTEtYWU1MmZlMGMzYWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPQSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6cwoGAtV1quedY06GXXxH6lWF0zTPxRgYylWU5wjbkOO3LLqoIyLdj W1rfQUKLaRdO9zON7bNCiAhp/FwiW5uxWlvKVZ9qcPM+nVWINOfqLwwjbzkEN9vB iLvAsRz4oHtOpTnfxtJ7xOlIi8gq6ueSlwO2KzJo7xdwEG6Q+ThW7NgZKKdCSJQ4 T20tyEnwjOCpHyW90QuNUyTOBsjDQknrkEiYg/TEF+Ei3T/ydNpMAj0KNKIP+nXO MFzjJxJEskV1S+vdv2DB8nON/M1fUduz/tV84958ZxVznlTpmXpgs1tMz3+fAZQO LQfeygvPNtqhqRcj/CcU4g+QcPeOgSg= -----END CERTIFICATE-----Generated at Wed Nov 5 09:50:45 2025 by rpki-client