$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/f1356e3c-4d8a-38e1-90b1-be1d7c79a808.roa File: f1356e3c-4d8a-38e1-90b1-be1d7c79a808.roa (raw, json) Hash identifier: mA1SlVrmrMy+LuM37ygIhqe/xrl1rjigj7bMveZT7uQ= Subject key identifier: A9:A9:86:F4:21:B0:B3:AE:ED:0A:EC:2C:C9:C0:FF:F1:CF:7A:06:BA Certificate issuer: /CN=4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d Certificate serial: 010D0C9F4328584B3126F0DD6DE5B2CDC6E2EC20 Authority key identifier: 77:05:42:3A:27:84:58:52:46:16:9F:93:86:71:AF:A7:C1:01:F6:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/f1356e3c-4d8a-38e1-90b1-be1d7c79a808.roa Signing time: Sun 14 Sep 2025 13:00:42 +0000 ROA not before: Sun 14 Sep 2025 13:00:42 +0000 ROA not after: Sat 13 Dec 2025 14:00:42 +0000 asID: 36008 IP address blocks: 104.192.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:31:26:f0:dd:6d:e5:b2:cd:c6:e2:ec:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d Validity Not Before: Sep 14 13:00:42 2025 GMT Not After : Dec 13 14:00:42 2025 GMT Subject: CN=108a9ccb-28ea-4596-9bad-8b0d13520252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:51:9a:f4:c4:30:24:87:98:1c:e2:64:bf:b6: 7f:45:11:77:e6:46:8b:05:5e:17:31:84:f7:e5:81: 55:09:85:00:4f:ad:8e:0e:8c:e8:fd:50:de:3a:e6: e8:2f:6f:28:6b:19:59:2c:99:d7:02:c9:28:ef:be: 59:08:9e:2a:a2:4b:a1:50:2c:67:04:1c:99:ef:04: af:80:8b:ec:10:9f:38:24:c1:6b:9f:b9:0c:b4:7e: 70:44:60:df:70:38:ff:bb:c0:da:c9:75:4e:f7:c0: 89:73:a1:27:85:2b:7b:c9:af:f5:35:10:9d:e7:42: d9:0e:6f:79:b4:7a:2d:e7:e4:1f:56:d5:8a:5e:af: 0b:04:b6:91:11:c4:3a:5f:d1:4c:c9:4b:a3:f5:04: f7:4b:8f:6a:2f:fc:b7:0a:ed:13:a2:47:be:36:ca: b1:c0:b4:24:c2:33:75:8a:c3:4f:a3:78:f0:07:d4: ec:d7:d9:76:50:cd:00:cc:98:cc:99:ea:aa:be:31: cc:33:c7:22:9f:c3:8f:ad:81:40:12:b4:1a:98:69: 80:1c:84:a8:07:a4:62:e7:cb:74:d4:be:5f:9a:63: 58:76:4a:fe:3c:9e:e5:79:74:ab:bd:81:b9:51:91: ed:7f:24:e7:9e:41:51:61:d5:93:12:41:7f:25:7a: 45:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A9:86:F4:21:B0:B3:AE:ED:0A:EC:2C:C9:C0:FF:F1:CF:7A:06:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/f1356e3c-4d8a-38e1-90b1-be1d7c79a808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.crl X509v3 Authority Key Identifier: keyid:77:05:42:3A:27:84:58:52:46:16:9F:93:86:71:AF:A7:C1:01:F6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer sbgp-ipAddrBlock: critical IPv4: 104.192.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:63:1b:3d:b9:b8:46:13:da:5d:53:09:82:88:0d:f6:20:a2: 7d:b3:e2:88:e7:28:c8:67:a1:bb:c9:45:71:df:5c:90:f4:cf: 08:aa:e0:35:16:d8:2b:42:5c:94:ef:89:6c:83:49:bb:eb:86: ef:8e:0a:c9:1f:e3:00:4a:f9:c9:5a:cf:f7:3f:53:6b:1a:e6: dd:14:5d:41:e2:b1:4f:1d:e1:7e:c0:bd:b3:6f:a3:80:6e:d5: 94:bf:c2:43:36:b3:32:59:9e:98:ac:dd:c3:02:49:66:7a:d5: c6:39:26:aa:05:4b:4f:ab:de:cd:a4:be:e2:a1:bd:5e:a3:ea: 06:af:45:ca:f9:34:d1:0a:3b:c5:6b:c0:f5:bf:92:e9:0b:bb: 18:ff:6f:f2:09:f2:6c:60:07:5e:33:72:4b:7b:ce:03:d0:2f: 91:9c:4d:2e:10:73:00:30:94:b0:a6:dc:54:2f:0b:d9:12:f8: 8f:d3:bf:f9:60:a6:44:57:16:23:c9:f0:59:ef:4b:f1:ba:42: 6e:54:de:cc:58:50:23:0a:14:ac:a5:e1:8a:dd:f0:f0:ca:f3: f4:34:88:8b:f6:2d:ab:ad:3c:ca:2b:09:ce:5f:48:66:27:7b: f2:57:8a:98:82:8f:cd:8a:cf:2d:21:91:36:9e:15:43:e9:96: f8:df:65:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsxJvDdbeWyzcbi7CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRjYzZhM2EtMGU0Zi00OGMxLTkxMTQtNWRkZGYyZDdk YjlkMB4XDTI1MDkxNDEzMDA0MloXDTI1MTIxMzE0MDA0MlowLzEtMCsGA1UEAxMk MTA4YTljY2ItMjhlYS00NTk2LTliYWQtOGIwZDEzNTIwMjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1Ga9MQwJIeYHOJkv7Z/RRF35kaLBV4XMYT3 5YFVCYUAT62ODozo/VDeOuboL28oaxlZLJnXAsko775ZCJ4qokuhUCxnBByZ7wSv gIvsEJ84JMFrn7kMtH5wRGDfcDj/u8DayXVO98CJc6EnhSt7ya/1NRCd50LZDm95 tHot5+QfVtWKXq8LBLaREcQ6X9FMyUuj9QT3S49qL/y3Cu0Toke+NsqxwLQkwjN1 isNPo3jwB9Ts19l2UM0AzJjMmeqqvjHMM8cin8OPrYFAErQamGmAHISoB6Ri58t0 1L5fmmNYdkr+PJ7leXSrvYG5UZHtfyTnnkFRYdWTEkF/JXpFAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmphvQhsLOu7QrsLMnA//HPega6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZGNj NmEzYS0wZTRmLTQ4YzEtOTExNC01ZGRkZjJkN2RiOWQvZjEzNTZlM2MtNGQ4YS0z OGUxLTkwYjEtYmUxZDdjNzlhODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGRjYzZhM2EtMGU0Zi00OGMxLTkx MTQtNWRkZGYyZDdkYjlkLzRkY2M2YTNhLTBlNGYtNDhjMS05MTE0LTVkZGRmMmQ3 ZGI5ZC5jcmwwHwYDVR0jBBgwFoAUdwVCOieEWFJGFp+ThnGvp8EB9m4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZGNjNmEzYS0wZTRmLTQ4YzEtOTExNC01ZGRk ZjJkN2RiOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9jGz25uEYT2l1TCYKIDfYgon2z4ojnKMhnobvJRXHfXJD0zwiq4DUW 2CtCXJTviWyDSbvrhu+OCskf4wBK+claz/c/U2sa5t0UXUHisU8d4X7AvbNvo4Bu 1ZS/wkM2szJZnpis3cMCSWZ61cY5JqoFS0+r3s2kvuKhvV6j6gavRcr5NNEKO8Vr wPW/kukLuxj/b/IJ8mxgB14zckt7zgPQL5GcTS4QcwAwlLCm3FQvC9kS+I/Tv/lg pkRXFiPJ8FnvS/G6Qm5U3sxYUCMKFKyl4Yrd8PDK8/Q0iIv2LautPMorCc5fSGYn e/JXipiCj82Kzy0hkTaeFUPplvjfZTo= -----END CERTIFICATE-----Generated at Wed Sep 17 09:02:05 2025 by rpki-client