$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/f10fac4d-edef-379c-9cc7-37cf908054d5.roa File: f10fac4d-edef-379c-9cc7-37cf908054d5.roa (raw, json) Hash identifier: Oi9IyFP5XtTmcLdBYiiSJoD/8wdh01ymZiZEZm3w68g= Subject key identifier: 92:AF:C2:78:6F:36:5E:B1:38:53:2F:F6:A6:D9:95:DC:4D:EF:DB:C8 Certificate issuer: /CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Certificate serial: 010D0C9F4328584B38218FEDB8897F95CDF38600 Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/f10fac4d-edef-379c-9cc7-37cf908054d5.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 396982 IP address blocks: 104.254.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:8f:ed:b8:89:7f:95:cd:f3:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=b6846433-37bf-4228-a477-416f5dcd229c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:87:0f:91:09:00:78:f6:80:97:c5:8f:b9:c9: 43:65:1a:6c:c7:0a:28:cd:04:ef:88:28:ef:e8:7c: ac:83:2b:e6:b6:4d:01:81:4b:74:73:2f:57:38:d6: 13:b0:e0:31:d1:f4:e3:0d:b6:5f:a1:e7:41:7b:3a: 33:56:3d:23:74:14:ef:93:72:0d:d8:9b:14:2c:df: 8a:bc:b7:56:f5:23:2f:b7:6e:4f:b0:91:63:91:12: b4:f0:d1:be:7b:44:28:29:39:fe:fc:41:f8:54:12: da:4c:ba:bd:ca:5e:57:e6:85:94:bf:82:d5:7d:53: 58:c6:3e:f1:02:63:41:1b:d4:11:4f:96:a0:ba:32: db:d2:60:47:1d:7f:59:f7:14:58:68:60:ca:02:d7: e9:97:5f:bf:a9:e3:fe:6f:b4:d9:e0:a6:2c:48:4a: 0f:b7:c9:7e:4e:0b:c8:e5:94:87:12:95:ea:1f:24: 20:e9:25:90:83:23:63:87:e0:91:58:aa:31:33:c4: aa:ac:5b:e5:95:fd:79:a9:90:a5:ed:45:5f:4d:16: 4c:39:be:ca:b7:d8:59:00:4d:d6:af:50:6e:f5:22: 5b:89:1d:1a:0c:f3:a4:e8:a9:e9:03:73:fa:a3:99: c1:0c:9d:6d:f1:11:d3:85:ff:6e:22:ab:e4:91:7c: d2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AF:C2:78:6F:36:5E:B1:38:53:2F:F6:A6:D9:95:DC:4D:EF:DB:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/f10fac4d-edef-379c-9cc7-37cf908054d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl X509v3 Authority Key Identifier: keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer sbgp-ipAddrBlock: critical IPv4: 104.254.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:eb:c4:e1:04:f7:a9:ab:3f:02:56:eb:eb:bc:50:ae:7c:2d: b4:50:9c:f2:4c:b2:ef:4d:a7:19:00:08:0b:4e:83:27:67:e0: 8f:7b:47:a6:e2:c9:ea:22:2b:24:3e:a1:95:cc:6a:82:92:27: c4:d9:2f:0a:c5:20:4b:0a:05:8a:54:c1:bf:f9:62:81:8e:52: 98:1f:8a:4e:84:cd:dc:7b:cc:f8:b3:b4:6d:89:09:f5:66:1e: 86:07:ab:4d:17:bb:9f:55:2c:7b:c8:32:f7:90:b4:a8:df:ef: 55:cd:3a:bb:f7:01:9a:bb:43:8c:24:58:67:7f:75:ca:0d:2e: c5:24:d0:f2:e2:78:60:09:e4:31:de:32:a6:3b:02:d1:29:48: 4a:44:5a:d7:af:3f:2c:46:56:1a:c5:1f:87:57:ac:83:a0:4c: f6:ae:57:14:5d:f8:b7:c3:7c:34:29:98:7a:d8:df:c5:17:b9: f8:7c:bc:f7:a3:27:82:3a:85:8d:93:02:b0:c1:95:b8:81:44: d3:b2:eb:9f:94:0e:07:f7:6a:c0:7a:18:95:4b:d5:3f:98:62: 8a:c5:cc:29:a5:41:98:10:c6:16:72:a8:16:b3:6f:13:f0:1e: d1:16:bb:ec:0b:bc:06:ef:51:ed:28:5d:c4:e0:b9:26:6c:80: 8b:28:4b:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IY/tuIl/lc3zhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzODViMGItNWFkYS00OGZmLTljMzQtMzQ0MGE2NTUw NTM1MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk YjY4NDY0MzMtMzdiZi00MjI4LWE0NzctNDE2ZjVkY2QyMjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4cPkQkAePaAl8WPuclDZRpsxwoozQTviCjv 6Hysgyvmtk0BgUt0cy9XONYTsOAx0fTjDbZfoedBezozVj0jdBTvk3IN2JsULN+K vLdW9SMvt25PsJFjkRK08NG+e0QoKTn+/EH4VBLaTLq9yl5X5oWUv4LVfVNYxj7x AmNBG9QRT5agujLb0mBHHX9Z9xRYaGDKAtfpl1+/qeP+b7TZ4KYsSEoPt8l+TgvI 5ZSHEpXqHyQg6SWQgyNjh+CRWKoxM8SqrFvllf15qZCl7UVfTRZMOb7Kt9hZAE3W r1Bu9SJbiR0aDPOk6KnpA3P6o5nBDJ1t8RHThf9uIqvkkXzSIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKvwnhvNl6xOFMv9qbZldxN79vIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4 NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQwYTY1NTA1MzUvZjEwZmFjNGQtZWRlZi0z NzljLTljYzctMzdjZjkwODA1NGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmIzODViMGItNWFkYS00OGZmLTlj MzQtMzQ0MGE2NTUwNTM1L2JiMzg1YjBiLTVhZGEtNDhmZi05YzM0LTM0NDBhNjU1 MDUzNS5jcmwwHwYDVR0jBBgwFoAUIEZ0Hf14nRkw1LiROzoqkAUZOVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQw YTY1NTA1MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP5jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3rxOEE96mrPwJW6+u8UK58LbRQnPJMsu9NpxkACAtOgydn4I97R6bi yeoiKyQ+oZXMaoKSJ8TZLwrFIEsKBYpUwb/5YoGOUpgfik6Ezdx7zPiztG2JCfVm HoYHq00Xu59VLHvIMveQtKjf71XNOrv3AZq7Q4wkWGd/dcoNLsUk0PLieGAJ5DHe MqY7AtEpSEpEWtevPyxGVhrFH4dXrIOgTPauVxRd+LfDfDQpmHrY38UXufh8vPej J4I6hY2TArDBlbiBRNOy65+UDgf3asB6GJVL1T+YYorFzCmlQZgQxhZyqBazbxPw HtEWu+wLvAbvUe0oXcTguSZsgIsoS58= -----END CERTIFICATE-----Generated at Sat Oct 11 00:22:04 2025 by rpki-client