$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/3d0a8021-0c17-3a9e-9ead-e114e11f7512.roa File: 3d0a8021-0c17-3a9e-9ead-e114e11f7512.roa (raw, json) Hash identifier: 2d0hpzk7IqvdMH5cekIdCuerexVeCMj3wsXgheCZFc4= Subject key identifier: B1:A5:B7:D4:01:68:E4:07:76:2D:68:3F:D1:4B:C9:47:97:24:E9:AA Certificate issuer: /CN=61078829-6930-46b0-9ac8-91898d36b056 Certificate serial: 010D0C9F4328584B434C6A307D32C1652165AE80 Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/3d0a8021-0c17-3a9e-9ead-e114e11f7512.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 33548 IP address blocks: 104.254.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:6a:30:7d:32:c1:65:21:65:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=c49ca6ea-c303-42ef-84f4-7c30da8866d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:66:7b:5e:96:1f:f1:93:a4:25:4a:4a:6f:13: cc:aa:bf:82:47:a2:7a:71:46:b2:78:77:d2:b7:79: e4:ac:1b:87:f8:b2:e5:61:2d:4b:82:5d:10:02:24: 8b:22:4e:c1:3d:d1:bd:c4:d2:61:f7:15:30:04:5d: d2:da:33:39:50:97:02:54:86:75:30:5a:b6:e3:e1: 81:28:9d:18:e5:b4:85:14:c0:ce:4c:49:0e:65:54: e5:2d:51:67:26:a5:a9:5d:63:f9:65:62:e5:8e:7c: 35:cf:79:7e:fc:0d:a9:9e:09:d9:57:13:12:a7:a8: fe:26:a3:50:8c:51:be:45:6a:54:84:a4:a4:ac:c7: 1a:9d:45:f2:d8:c3:7b:0b:b8:d8:b7:4b:dc:ba:db: 1f:dc:06:83:dd:c7:cd:04:cf:d7:86:33:08:89:3c: c0:2b:c5:99:60:c0:44:60:3f:13:70:42:8f:32:66: 67:b3:40:bf:d4:66:82:45:8d:27:a9:ff:af:96:e0: a2:90:a0:f9:b2:ad:f4:4b:be:c3:19:cc:9b:22:e6: c0:0d:c6:fe:72:9c:88:e6:5a:46:6f:aa:12:00:bb: be:a7:8f:cb:ee:b5:37:aa:35:25:ab:a6:ab:fa:d7: ab:ab:61:e7:56:28:8f:5a:be:23:a5:0e:02:ac:d8: 33:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A5:B7:D4:01:68:E4:07:76:2D:68:3F:D1:4B:C9:47:97:24:E9:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/3d0a8021-0c17-3a9e-9ead-e114e11f7512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl X509v3 Authority Key Identifier: keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer sbgp-ipAddrBlock: critical IPv4: 104.254.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:08:11:eb:f1:64:f5:f0:68:c4:9f:e1:ea:33:c7:c9:6e:5c: 48:46:39:7a:b5:d3:0b:06:30:e2:66:07:04:26:1b:4b:81:17: 21:29:77:f4:e6:41:18:cc:4a:ba:24:21:46:af:f4:13:d2:d7: ba:2a:ce:14:b4:83:c6:ef:97:8c:47:18:ef:11:07:11:2e:87: af:28:81:48:6d:1c:f2:e2:a5:0a:8f:14:64:1f:12:95:0e:00: b0:07:53:a7:fe:30:f2:aa:8d:d9:01:52:59:4e:f1:cb:e5:ab: fa:93:68:26:4b:02:e0:e1:05:12:63:fa:62:13:b5:34:57:90: e0:f5:79:12:90:41:24:80:57:5f:a8:eb:f6:b8:f4:fb:6b:d4: d8:a0:bc:df:7a:f0:7a:4e:19:4b:0d:7a:b7:57:1d:eb:8c:b2: f6:2d:a6:8d:27:a8:fd:ae:2e:41:9c:9b:02:eb:6d:1f:fd:33: cd:96:00:f1:b6:9e:a4:4d:67:97:88:9c:f5:21:64:af:de:64: a5:2e:18:a1:21:86:a2:0f:c4:56:e3:98:38:74:ed:55:f8:c4: fe:e4:4f:a9:96:de:dc:e4:5d:72:a6:de:01:70:e3:d8:80:d4: 09:be:eb:77:bd:07:cc:7a:d4:de:a3:2b:55:b4:09:e3:2f:28: a6:1d:6e:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGowfTLBZSFlroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjEwNzg4MjktNjkzMC00NmIwLTlhYzgtOTE4OThkMzZi MDU2MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YzQ5Y2E2ZWEtYzMwMy00MmVmLTg0ZjQtN2MzMGRhODg2NmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGZ7XpYf8ZOkJUpKbxPMqr+CR6J6cUayeHfS t3nkrBuH+LLlYS1Lgl0QAiSLIk7BPdG9xNJh9xUwBF3S2jM5UJcCVIZ1MFq24+GB KJ0Y5bSFFMDOTEkOZVTlLVFnJqWpXWP5ZWLljnw1z3l+/A2pngnZVxMSp6j+JqNQ jFG+RWpUhKSkrMcanUXy2MN7C7jYt0vcutsf3AaD3cfNBM/XhjMIiTzAK8WZYMBE YD8TcEKPMmZns0C/1GaCRY0nqf+vluCikKD5sq30S77DGcybIubADcb+cpyI5lpG b6oSALu+p4/L7rU3qjUlq6ar+terq2HnViiPWr4jpQ4CrNgz2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGlt9QBaOQHdi1oP9FLyUeXJOmqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MTA3 ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5OGQzNmIwNTYvM2QwYTgwMjEtMGMxNy0z YTllLTllYWQtZTExNGUxMWY3NTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjEwNzg4MjktNjkzMC00NmIwLTlh YzgtOTE4OThkMzZiMDU2LzYxMDc4ODI5LTY5MzAtNDZiMC05YWM4LTkxODk4ZDM2 YjA1Ni5jcmwwHwYDVR0jBBgwFoAUIEXV2ie7S4lN1IK5ZqALwLa2VKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82MTA3ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5 OGQzNmIwNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP5kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8IEevxZPXwaMSf4eozx8luXEhGOXq10wsGMOJmBwQmG0uBFyEpd/Tm QRjMSrokIUav9BPS17oqzhS0g8bvl4xHGO8RBxEuh68ogUhtHPLipQqPFGQfEpUO ALAHU6f+MPKqjdkBUllO8cvlq/qTaCZLAuDhBRJj+mITtTRXkOD1eRKQQSSAV1+o 6/a49Ptr1NigvN968HpOGUsNerdXHeuMsvYtpo0nqP2uLkGcmwLrbR/9M82WAPG2 nqRNZ5eInPUhZK/eZKUuGKEhhqIPxFbjmDh07VX4xP7kT6mW3tzkXXKm3gFw49iA 1Am+63e9B8x61N6jK1W0CeMvKKYdbpc= -----END CERTIFICATE-----Generated at Sat Oct 11 03:43:58 2025 by rpki-client