$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4b918882-82ee-3011-bb5b-cced3e5fe991.roa File: 4b918882-82ee-3011-bb5b-cced3e5fe991.roa (raw, json) Hash identifier: R+fj9mzKWgccklaQBISTjzKhu726GXhM47R+35KE7Kg= Subject key identifier: F8:48:D5:9C:E0:EB:85:55:D2:94:DB:46:7B:AE:65:F6:AA:3E:86:9D Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584B5C6CB6A6961ECBC25CCCB900 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4b918882-82ee-3011-bb5b-cced3e5fe991.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 25198 IP address blocks: 104.241.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:b6:a6:96:1e:cb:c2:5c:cc:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=f9e95d2a-7b30-42b3-9c5d-fca593059aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:20:b9:34:9a:2a:e8:1b:b4:ee:65:2c:d7:d5: 33:03:fc:cf:2d:20:3f:db:a0:52:ed:9b:44:64:e3: ea:cc:2b:84:98:c8:9f:26:21:96:d0:a0:19:7f:da: 25:b7:7e:db:4f:c5:de:6e:f4:4b:bc:c7:f3:43:5f: 8b:8e:7c:a5:89:5a:54:89:f3:fc:cd:81:ce:db:3a: 82:1c:66:bb:d9:60:6c:fb:55:4a:7f:2a:80:85:b6: f3:b7:0e:c7:fd:c7:d4:d9:c2:ed:9c:2c:e8:5e:dd: 68:46:a9:ca:4e:34:00:26:2d:56:e3:6e:3d:6f:be: a2:ca:87:e7:cd:7e:0a:95:66:11:73:3f:49:29:21: 05:30:a5:cd:b8:41:c0:05:ac:82:bd:d0:7b:31:c8: bf:59:68:0c:2c:2e:69:ab:70:fd:b5:92:ab:01:11: ce:67:43:be:c7:09:55:af:9b:17:52:dc:3c:f2:3c: cf:85:e4:c1:94:68:75:aa:1b:fc:28:a5:6e:bb:fc: 9e:67:a9:e0:a4:f9:5b:58:46:d6:34:d4:30:0e:a0: 78:bc:5d:ef:1f:50:33:3e:52:75:5b:a0:1a:12:66: c7:3c:ca:b4:29:14:70:83:33:89:48:be:0d:5f:4f: 8d:3a:42:5a:9b:58:07:2e:11:d1:5b:99:9b:75:d0: 1b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:48:D5:9C:E0:EB:85:55:D2:94:DB:46:7B:AE:65:F6:AA:3E:86:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4b918882-82ee-3011-bb5b-cced3e5fe991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 104.241.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b7:62:7a:d3:4f:32:68:4a:2c:2f:8e:10:99:a3:37:0c:7b: 8f:93:73:62:98:10:08:d9:b9:5a:57:5a:93:5e:5d:40:8b:28: fc:c9:41:09:21:97:81:b8:6f:68:a1:db:fe:7a:67:b9:b0:47: 09:26:0c:91:5f:e7:8d:bb:9e:2b:2c:83:0e:c0:c3:17:b5:44: 05:46:d3:80:1f:3a:1c:c9:85:aa:99:51:aa:31:2d:74:d6:01: 3f:8e:45:07:c7:06:b7:e6:06:c1:5a:46:29:4e:36:28:59:88: 52:b3:4c:64:4d:85:1c:4f:37:14:9c:c7:8b:3a:d2:f8:ac:59: 04:26:05:f6:bc:b9:60:dc:a9:a0:0a:41:fc:f0:4a:a4:e5:98: a8:0e:4b:4f:4c:24:c9:d4:32:ac:8f:aa:c9:51:1e:88:a1:99: 1c:d2:c3:d7:c2:f8:f4:46:7d:e1:2a:eb:25:a2:ae:fe:3e:d4: 47:c2:f7:40:c9:fb:95:21:ee:c2:1a:b1:34:99:3e:5b:cf:df: 90:76:29:19:a4:24:9c:be:da:78:bf:f3:31:de:40:03:1d:4b: 60:d1:14:c0:b9:21:5f:fc:a2:fa:8b:78:7d:62:c9:ce:47:f8: 74:69:20:06:28:d0:92:92:3a:df:88:b4:fd:05:ed:dd:c2:35: 7f:eb:dd:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbLamlh7LwlzMuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk ZjllOTVkMmEtN2IzMC00MmIzLTljNWQtZmNhNTkzMDU5YWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCC5NJoq6Bu07mUs19UzA/zPLSA/26BS7ZtE ZOPqzCuEmMifJiGW0KAZf9olt37bT8XebvRLvMfzQ1+LjnyliVpUifP8zYHO2zqC HGa72WBs+1VKfyqAhbbztw7H/cfU2cLtnCzoXt1oRqnKTjQAJi1W4249b76iyofn zX4KlWYRcz9JKSEFMKXNuEHABayCvdB7Mci/WWgMLC5pq3D9tZKrARHOZ0O+xwlV r5sXUtw88jzPheTBlGh1qhv8KKVuu/yeZ6ngpPlbWEbWNNQwDqB4vF3vH1AzPlJ1 W6AaEmbHPMq0KRRwgzOJSL4NX0+NOkJam1gHLhHRW5mbddAbaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhI1Zzg64VV0pTbRnuuZfaqPoadMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvNGI5MTg4ODItODJlZS0z MDExLWJiNWItY2NlZDNlNWZlOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPGFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABG3YnrTTzJoSiwvjhCZozcMe4+Tc2KYEAjZuVpXWpNeXUCLKPzJQQkh l4G4b2ih2/56Z7mwRwkmDJFf5427nissgw7Awxe1RAVG04AfOhzJhaqZUaoxLXTW AT+ORQfHBrfmBsFaRilONihZiFKzTGRNhRxPNxScx4s60visWQQmBfa8uWDcqaAK QfzwSqTlmKgOS09MJMnUMqyPqslRHoihmRzSw9fC+PRGfeEq6yWirv4+1EfC90DJ +5Uh7sIasTSZPlvP35B2KRmkJJy+2ni/8zHeQAMdS2DRFMC5IV/8ovqLeH1iyc5H +HRpIAYo0JKSOt+ItP0F7d3CNX/r3RE= -----END CERTIFICATE-----Generated at Tue Nov 4 23:42:54 2025 by rpki-client