$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/86756e6f-0a59-3c74-a250-154778ff9f9e.roa File: 86756e6f-0a59-3c74-a250-154778ff9f9e.roa (raw, json) Hash identifier: JycouuRZnZlocXKn1hw75VMIhC2UdOPjKKEnQe2yUwM= Subject key identifier: 60:F1:06:23:C5:AF:F7:C8:20:36:B4:BC:FD:86:10:8A:D5:E3:53:7F Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B0FA6BAABEC0BDDAF5D6C16C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/86756e6f-0a59-3c74-a250-154778ff9f9e.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 44477 IP address blocks: 104.164.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:ba:ab:ec:0b:dd:af:5d:6c:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=1d5ac95e-7de5-4abd-be24-cba2a2bc6589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:88:25:78:b3:6a:ac:6a:8e:4b:58:a1:8a:27: ae:36:03:8e:0c:87:de:07:4f:29:51:e8:48:39:c2: 84:b0:f2:23:f6:d6:7e:a9:1c:ad:41:c4:8c:e0:d9: 87:0f:1b:b3:1d:27:a9:ce:bb:34:7a:50:9b:59:5c: 14:43:cb:42:45:8b:76:b1:5b:1e:bf:62:d3:66:ed: 78:23:a3:54:88:68:ca:f3:14:ef:34:54:d8:ed:c3: 69:aa:f4:de:99:a0:35:a4:bf:9d:74:9a:62:ac:33: 84:6c:e4:a1:2d:46:c0:cc:24:6b:57:e7:75:8d:9f: 73:d5:71:02:20:57:ac:32:6e:95:07:7f:99:59:90: f8:0d:89:89:5e:80:73:b0:25:b8:df:ad:45:bd:8f: 9a:90:22:15:39:05:23:56:90:f8:28:25:87:86:c1: c2:4d:db:d2:12:eb:d8:a3:60:1c:d9:7a:a3:f4:bb: 08:6d:1f:3e:31:f1:f5:86:5d:43:3a:45:f3:66:f5: da:3e:d5:77:09:58:28:dc:f7:8c:b3:df:3c:6f:87: 64:e4:bd:ea:02:18:3c:28:3b:4f:31:63:fb:65:2c: b0:d8:06:09:d4:61:03:b7:09:dc:12:0b:df:79:2c: cd:46:9f:01:60:2c:2d:27:0a:0f:93:e8:aa:75:8b: a2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F1:06:23:C5:AF:F7:C8:20:36:B4:BC:FD:86:10:8A:D5:E3:53:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/86756e6f-0a59-3c74-a250-154778ff9f9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.164.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:8e:01:2f:3a:46:12:83:29:a8:87:a4:dd:0c:0e:8d:e9:34: 3d:d5:ba:10:47:7c:22:a4:8b:ed:f6:46:97:cc:16:c5:8f:fc: 85:25:ef:6a:de:88:b4:bd:bc:7f:9d:12:b3:01:99:11:87:68: cc:db:cb:e3:79:fe:1c:b9:76:dd:7e:cf:c4:1e:36:63:fd:d3: fa:37:87:27:4b:2c:b3:a6:29:3d:cb:81:76:fd:c6:8d:61:8f: 53:0f:04:68:62:2a:2b:5e:3c:b1:70:b0:f5:50:48:54:5e:fa: 62:23:d5:a2:97:d9:78:ff:99:64:0d:19:03:cf:8e:20:28:4b: ab:ce:97:5c:b4:85:c1:2b:4b:98:f2:73:7a:5a:16:fa:9b:44: f6:c8:3c:db:54:5c:69:6e:d1:c7:a3:3c:6f:fe:43:c7:e0:bd: 0f:62:33:a3:7c:f7:3e:89:34:2a:28:7a:33:fe:70:39:1d:99: 1a:93:0c:53:95:e6:64:27:16:c1:c9:e7:1f:ce:a6:b6:19:6e: 29:67:2d:c8:49:92:16:04:3f:54:01:9a:1a:28:0e:2c:0b:15: 86:ff:6c:ee:2d:f7:f6:0f:eb:ee:0c:25:18:cc:d7:21:82:d8: 72:6c:c8:69:ae:8e:f2:84:7e:31:a4:64:f0:0a:37:7a:17:f8: bb:bd:82:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPprqr7Avdr11sFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk MWQ1YWM5NWUtN2RlNS00YWJkLWJlMjQtY2JhMmEyYmM2NTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYgleLNqrGqOS1ihiieuNgOODIfeB08pUehI OcKEsPIj9tZ+qRytQcSM4NmHDxuzHSepzrs0elCbWVwUQ8tCRYt2sVsev2LTZu14 I6NUiGjK8xTvNFTY7cNpqvTemaA1pL+ddJpirDOEbOShLUbAzCRrV+d1jZ9z1XEC IFesMm6VB3+ZWZD4DYmJXoBzsCW4361FvY+akCIVOQUjVpD4KCWHhsHCTdvSEuvY o2Ac2Xqj9LsIbR8+MfH1hl1DOkXzZvXaPtV3CVgo3PeMs988b4dk5L3qAhg8KDtP MWP7ZSyw2AYJ1GEDtwncEgvfeSzNRp8BYCwtJwoPk+iqdYui9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDxBiPFr/fIIDa0vP2GEIrV41N/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvODY3NTZlNmYtMGE1OS0z Yzc0LWEyNTAtMTU0Nzc4ZmY5ZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiOAS86RhKDKaiHpN0MDo3pND3VuhBHfCKki+32RpfMFsWP/IUl72re iLS9vH+dErMBmRGHaMzby+N5/hy5dt1+z8QeNmP90/o3hydLLLOmKT3LgXb9xo1h j1MPBGhiKitePLFwsPVQSFRe+mIj1aKX2Xj/mWQNGQPPjiAoS6vOl1y0hcErS5jy c3paFvqbRPbIPNtUXGlu0cejPG/+Q8fgvQ9iM6N89z6JNCooejP+cDkdmRqTDFOV 5mQnFsHJ5x/OprYZbilnLchJkhYEP1QBmhooDiwLFYb/bO4t9/YP6+4MJRjM1yGC 2HJsyGmujvKEfjGkZPAKN3oX+Lu9grA= -----END CERTIFICATE-----Generated at Sat Oct 11 11:13:40 2025 by rpki-client