$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/89596398-88eb-3658-b299-3c47d341c722.roa File: 89596398-88eb-3658-b299-3c47d341c722.roa (raw, json) Hash identifier: Zmll4CnimnZmrI8NXJ3MlpP3j38R9tNPiTn5ftwyE3s= Subject key identifier: CD:0E:F4:12:85:5D:0E:A3:36:4A:54:90:D2:8A:BE:50:40:A2:31:B2 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B36BC5742691BFAB1FBFF0700 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/89596398-88eb-3658-b299-3c47d341c722.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 59711 IP address blocks: 104.253.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:57:42:69:1b:fa:b1:fb:ff:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=3df8897e-60fe-49aa-9ddb-8b86481f5ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:80:bb:57:e9:7e:e6:85:3f:2e:09:28:af:f0: 6b:f4:0c:cf:9c:b3:63:16:58:37:b7:1d:4b:03:4d: e4:f8:c2:b9:ce:5b:d3:f9:28:a3:5e:c7:31:2e:64: cd:e8:41:fe:f8:3b:8f:6c:41:a2:81:34:90:36:4b: 8b:2e:67:33:07:f0:53:62:89:88:0c:6c:8a:81:e6: 75:98:07:db:cd:c9:38:f6:ee:0c:81:dd:b4:4a:3a: f7:e8:da:46:0e:b1:29:3b:d7:7c:f1:35:e1:5e:b9: 30:4b:7c:34:c3:4d:bc:12:da:1c:c3:53:f4:9a:4d: 77:c8:ce:49:75:ab:22:2d:d9:d3:ee:f9:37:2d:d3: dd:f0:4d:c1:7a:f1:26:55:39:46:47:46:fe:30:ec: 9b:35:b9:e5:b5:e9:ee:cf:df:ed:24:b7:55:55:74: 23:e2:3a:fa:2c:02:f0:98:ec:45:a1:09:e3:8b:41: 41:88:7a:11:2e:4c:74:6b:00:70:68:63:2c:fc:d8: 25:37:f9:92:05:c4:6d:dd:50:b8:1f:ef:e5:11:0e: 5d:32:d4:5c:40:a9:4e:d2:e5:fa:19:df:d2:f5:06: 15:6e:19:23:08:55:dc:c7:5c:cb:3c:80:bc:ba:a6: ca:01:e6:91:5c:e8:57:a3:cf:12:3c:9a:3b:38:02: ba:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0E:F4:12:85:5D:0E:A3:36:4A:54:90:D2:8A:BE:50:40:A2:31:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/89596398-88eb-3658-b299-3c47d341c722.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:ba:12:a7:01:e3:b3:f3:c7:85:8a:23:11:a9:56:17:ac:70: 83:b4:f1:8c:3c:17:79:ec:38:25:4a:75:93:ad:b8:1c:33:ff: a2:20:24:47:bc:cd:75:1c:8f:43:d4:cb:58:05:8c:a9:e1:4a: 94:94:cf:d5:ed:16:6c:35:0f:01:19:3d:30:96:98:36:82:24: a0:52:59:03:6c:78:9b:37:a7:86:9a:62:52:36:5a:d9:02:dd: 13:cf:a2:36:d3:af:87:7b:0d:99:78:89:63:56:4e:2c:e5:6f: 5c:e6:67:22:e5:8d:ea:26:00:ed:3c:12:f5:e1:98:05:85:fa: fe:84:38:dc:c3:d8:97:92:69:28:51:d6:a2:29:0a:50:cb:36: 33:6b:b2:73:8b:d1:2a:5c:45:65:95:22:3c:02:0a:ae:8a:ec: 8a:ce:39:be:e8:66:82:7b:ce:c9:41:55:5d:59:55:3d:01:a3: f9:b1:f2:0c:87:1a:fb:3d:62:3b:89:34:7c:10:c6:35:54:34: 53:88:7c:3e:53:40:3a:8a:ba:13:57:93:ba:8f:97:35:16:a2: 56:58:e7:2b:f8:7d:f7:43:bf:20:52:3e:77:96:99:8e:fa:82: 6b:f0:12:0f:dc:18:56:8a:e4:85:5d:a0:82:a3:0a:db:0d:26: 8c:e4:5f:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs2vFdCaRv6sfv/BwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk M2RmODg5N2UtNjBmZS00OWFhLTlkZGItOGI4NjQ4MWY1ZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4C7V+l+5oU/Lgkor/Br9AzPnLNjFlg3tx1L A03k+MK5zlvT+SijXscxLmTN6EH++DuPbEGigTSQNkuLLmczB/BTYomIDGyKgeZ1 mAfbzck49u4Mgd20Sjr36NpGDrEpO9d88TXhXrkwS3w0w028Etocw1P0mk13yM5J dasiLdnT7vk3LdPd8E3BevEmVTlGR0b+MOybNbnltenuz9/tJLdVVXQj4jr6LALw mOxFoQnji0FBiHoRLkx0awBwaGMs/NglN/mSBcRt3VC4H+/lEQ5dMtRcQKlO0uX6 Gd/S9QYVbhkjCFXcx1zLPIC8uqbKAeaRXOhXo88SPJo7OAK6SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0O9BKFXQ6jNkpUkNKKvlBAojGyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvODk1OTYzOTgtODhlYi0z NjU4LWIyOTktM2M0N2QzNDFjNzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAW6EqcB47Pzx4WKIxGpVhescIO08Yw8F3nsOCVKdZOtuBwz/6IgJEe8 zXUcj0PUy1gFjKnhSpSUz9XtFmw1DwEZPTCWmDaCJKBSWQNseJs3p4aaYlI2WtkC 3RPPojbTr4d7DZl4iWNWTizlb1zmZyLljeomAO08EvXhmAWF+v6EONzD2JeSaShR 1qIpClDLNjNrsnOL0SpcRWWVIjwCCq6K7IrOOb7oZoJ7zslBVV1ZVT0Bo/mx8gyH Gvs9YjuJNHwQxjVUNFOIfD5TQDqKuhNXk7qPlzUWolZY5yv4ffdDvyBSPneWmY76 gmvwEg/cGFaK5IVdoIKjCtsNJozkXyc= -----END CERTIFICATE-----Generated at Sat Oct 11 11:16:12 2025 by rpki-client