$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1cd03f73-c2eb-3271-91b1-9de65564f3a8.roa File: 1cd03f73-c2eb-3271-91b1-9de65564f3a8.roa (raw, json) Hash identifier: n+moz/O+TZ6V40jXU3OFl1yeV43I4KTP+GmZ5ClqbIg= Subject key identifier: 5C:FF:17:A7:37:18:BA:44:97:6E:59:19:9B:89:7E:81:A5:96:09:24 Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Certificate serial: 010D0C9F4328584B1AD1881B38BD36F357CD6700 Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1cd03f73-c2eb-3271-91b1-9de65564f3a8.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 40788 IP address blocks: 104.193.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:88:1b:38:bd:36:f3:57:cd:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=41398b9c-9707-4144-999e-8ac69ab10004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cf:00:73:c8:01:10:e7:ad:50:76:64:d2:f1: 17:c2:4f:9c:01:72:ba:2e:bc:ba:cc:21:3b:a5:1e: d2:de:55:5c:2a:81:f6:26:39:e0:80:49:fa:bc:d3: 41:2b:b2:37:de:e7:cb:29:8b:99:16:04:ca:8f:5b: 03:c9:fe:56:27:9c:7f:e0:65:91:b1:c9:97:b9:b4: 45:7d:4e:a6:9e:1e:2a:88:c8:a8:93:3f:b0:f7:73: f3:17:03:81:49:13:79:d2:f4:e1:3a:52:4e:4b:ed: bf:c5:67:ff:48:34:0c:68:93:d9:cc:45:69:59:f2: 23:1f:c7:8c:4c:8a:12:bb:75:3c:70:58:21:bf:ce: e5:8c:53:76:c3:d8:8a:5f:69:44:17:d2:d5:47:40: 86:e1:96:47:a1:5c:6a:94:ae:1f:93:dc:21:f8:20: ac:ae:b7:72:99:3b:d1:f8:05:22:38:e9:32:40:26: 22:59:77:85:b6:ea:ea:5d:49:69:32:d7:d3:20:9d: 04:1a:56:58:a6:a1:43:1d:8e:f4:6e:b6:f0:0d:f7: b8:d1:f4:3d:24:76:33:ca:59:d1:69:35:32:fd:d8: 97:9c:4e:3a:de:f3:10:bb:50:bb:1f:05:27:90:53: 34:d0:33:48:84:56:06:d2:f0:33:56:00:cb:e2:c3: 6e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FF:17:A7:37:18:BA:44:97:6E:59:19:9B:89:7E:81:A5:96:09:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1cd03f73-c2eb-3271-91b1-9de65564f3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl X509v3 Authority Key Identifier: keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer sbgp-ipAddrBlock: critical IPv4: 104.193.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:a7:19:1d:4a:99:da:31:d8:ad:80:06:6f:69:ef:94:ee:68: 79:f7:f6:36:d2:e4:5e:83:ed:da:d2:20:12:02:a2:55:b3:b0: a9:2b:2e:d8:7c:24:05:3a:2f:a6:58:d3:e2:29:cb:ee:52:47: f8:78:c7:b5:df:d2:c6:e6:ee:8f:26:92:c4:72:ac:cc:de:76: 28:f5:09:ec:4b:2c:c4:85:c7:d5:aa:7d:9a:dd:a7:4f:c2:7c: 98:be:7e:f9:43:38:69:46:df:73:f6:7a:cf:a7:8e:1b:52:f2: 81:bb:13:b4:75:c0:2e:63:2c:ab:55:20:aa:d4:b9:93:ce:08: 36:3a:84:6d:8d:5d:33:0b:f0:59:77:ff:42:ae:b3:5e:df:cd: 2d:3e:c9:ac:39:84:1a:dc:00:a7:d2:3e:f2:05:d0:1b:14:ee: f3:8c:c1:48:3a:b3:01:61:aa:b5:38:a8:45:b3:c8:ab:ef:50: 74:3e:d2:74:72:07:e2:b1:e1:d9:6a:0a:1f:d9:e4:c5:31:ac: fb:ef:0b:3c:7f:e8:27:fe:04:bc:48:7b:d9:22:61:00:cc:84: 33:66:25:88:a6:d8:21:f6:5d:3c:6e:e4:48:b5:89:e7:b0:52: 7a:5d:b2:94:f3:a0:11:a5:00:10:c1:7f:4f:dd:9d:d7:ea:e4: f7:0e:2f:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0YgbOL0281fNZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl MDU5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NDEzOThiOWMtOTcwNy00MTQ0LTk5OWUtOGFjNjlhYjEwMDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M8Ac8gBEOetUHZk0vEXwk+cAXK6Lry6zCE7 pR7S3lVcKoH2JjnggEn6vNNBK7I33ufLKYuZFgTKj1sDyf5WJ5x/4GWRscmXubRF fU6mnh4qiMiokz+w93PzFwOBSRN50vThOlJOS+2/xWf/SDQMaJPZzEVpWfIjH8eM TIoSu3U8cFghv87ljFN2w9iKX2lEF9LVR0CG4ZZHoVxqlK4fk9wh+CCsrrdymTvR +AUiOOkyQCYiWXeFturqXUlpMtfTIJ0EGlZYpqFDHY70brbwDfe40fQ9JHYzylnR aTUy/diXnE463vMQu1C7HwUnkFM00DNIhFYG0vAzVgDL4sNuywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFz/F6c3GLpEl25ZGZuJfoGllgkkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5 YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvMWNkMDNmNzMtYzJlYi0z MjcxLTkxYjEtOWRlNjU1NjRmM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaME4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGunGR1Kmdox2K2ABm9p75TuaHn39jbS5F6D7drSIBIColWzsKkrLth8 JAU6L6ZY0+Ipy+5SR/h4x7Xf0sbm7o8mksRyrMzedij1CexLLMSFx9WqfZrdp0/C fJi+fvlDOGlG33P2es+njhtS8oG7E7R1wC5jLKtVIKrUuZPOCDY6hG2NXTML8Fl3 /0Kus17fzS0+yaw5hBrcAKfSPvIF0BsU7vOMwUg6swFhqrU4qEWzyKvvUHQ+0nRy B+Kx4dlqCh/Z5MUxrPvvCzx/6Cf+BLxIe9kiYQDMhDNmJYim2CH2XTxu5Ei1ieew UnpdspTzoBGlABDBf0/dndfq5PcOLwI= -----END CERTIFICATE-----Generated at Wed Nov 5 08:52:37 2025 by rpki-client