$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/994c2675-ced4-3a17-9ddb-1485e590c577.roa File: 994c2675-ced4-3a17-9ddb-1485e590c577.roa (raw, json) Hash identifier: iqy04PSRvRFhceOvqTOUYZoe4xUGt4xbKE9Nq1moMzY= Subject key identifier: EA:15:AE:41:7F:BE:DF:C3:E0:80:3E:16:5E:6E:26:82:57:13:AD:92 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B620213BA48D732F4BE16DB00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/994c2675-ced4-3a17-9ddb-1485e590c577.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 5650 IP address blocks: 104.253.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:13:ba:48:d7:32:f4:be:16:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=4978ebb1-f5f0-4722-b1ff-255d48be7340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e4:dc:05:1a:a6:d9:0a:a3:a5:ea:7d:c3:51: 6f:ba:25:b8:b1:dc:a5:31:da:ed:a4:b8:92:91:af: 73:2f:88:2c:6c:f1:06:5a:98:79:36:ac:bf:0f:fd: 6d:76:db:91:ef:72:81:0f:39:e3:22:28:46:b1:7c: 39:8d:68:62:59:ac:d5:7f:6d:b8:68:7a:20:35:c1: 23:b4:1f:11:59:73:48:10:96:11:1b:04:ad:b5:c7: b2:64:89:a8:a3:8d:57:e4:6f:ca:7c:21:bd:ce:96: 60:0a:7f:77:9c:ff:ae:5c:73:f9:85:af:52:74:cc: 76:53:68:06:a5:ad:43:01:3c:88:4b:a1:22:a9:2a: 02:ca:52:bb:a3:e3:a9:98:7a:1e:d9:27:38:1f:07: bd:00:cc:87:f1:76:95:21:bf:fc:5b:96:5e:0d:b2: 05:cb:83:a4:6e:af:7b:22:e1:ac:0d:01:45:74:76: 34:8d:25:dd:3a:bc:8e:00:2e:da:cc:31:6a:a8:26: 13:0e:c2:64:a9:5c:ce:42:a0:e2:c2:d3:c7:f0:a7: 09:42:b9:0a:8c:f4:31:64:75:e5:e2:a6:cd:17:c8: 3c:94:7f:da:0c:f6:22:c3:ee:a8:9e:82:f7:43:e9: c7:f1:1e:fa:98:bb:ac:b4:c5:86:fa:ad:43:5a:cb: 49:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:15:AE:41:7F:BE:DF:C3:E0:80:3E:16:5E:6E:26:82:57:13:AD:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/994c2675-ced4-3a17-9ddb-1485e590c577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:52:7f:23:70:48:bc:8b:f0:a1:36:9a:ae:20:e1:fc:7c:23: f8:90:94:f1:63:1b:56:f2:31:2a:19:e2:93:db:c8:bc:4c:fc: 7b:f4:fc:85:03:27:90:ed:93:1e:d6:c0:95:3b:1e:76:bc:c2: 79:b4:1e:23:9d:5f:45:ca:7c:25:10:4b:7d:1b:d5:81:40:63: 00:72:cf:4a:64:e7:93:8b:de:f4:e7:b1:bf:69:41:d8:5e:d0: e8:80:43:84:0c:ab:81:7a:76:63:ec:3e:3d:9f:c4:e2:dc:07: 20:f7:31:d6:4a:ea:b8:9e:b3:4e:cb:bf:5c:5f:23:2c:46:93: 42:62:a7:14:6a:8d:68:86:ae:e3:05:b6:16:fb:f9:c0:42:88: 9d:00:31:b0:b1:7b:22:76:c2:a7:1c:58:27:f6:65:18:6f:04: eb:75:d4:49:68:32:61:0b:ad:df:ae:60:81:71:06:dd:35:2e: 6e:d5:f4:23:ab:15:40:c2:58:2f:27:b9:91:93:b2:52:46:aa: 45:a9:46:23:a7:29:63:c2:6d:1d:52:a3:b6:7f:fc:db:35:42: 54:60:45:b2:03:8e:2a:48:41:17:0a:19:ed:67:2f:d5:ca:f6: a7:d3:d8:dc:09:a6:72:69:ca:a3:25:8f:87:ec:fa:cd:71:e9: 2b:53:a5:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAhO6SNcy9L4W2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NDk3OGViYjEtZjVmMC00NzIyLWIxZmYtMjU1ZDQ4YmU3MzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeTcBRqm2Qqjpep9w1FvuiW4sdylMdrtpLiS ka9zL4gsbPEGWph5Nqy/D/1tdtuR73KBDznjIihGsXw5jWhiWazVf224aHogNcEj tB8RWXNIEJYRGwSttceyZImoo41X5G/KfCG9zpZgCn93nP+uXHP5ha9SdMx2U2gG pa1DATyIS6EiqSoCylK7o+OpmHoe2Sc4Hwe9AMyH8XaVIb/8W5ZeDbIFy4Okbq97 IuGsDQFFdHY0jSXdOryOAC7azDFqqCYTDsJkqVzOQqDiwtPH8KcJQrkKjPQxZHXl 4qbNF8g8lH/aDPYiw+6onoL3Q+nH8R76mLustMWG+q1DWstJtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoVrkF/vt/D4IA+Fl5uJoJXE62SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOTk0YzI2NzUtY2VkNC0z YTE3LTlkZGItMTQ4NWU1OTBjNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxSfyNwSLyL8KE2mq4g4fx8I/iQlPFjG1byMSoZ4pPbyLxM/Hv0/IUD J5Dtkx7WwJU7Hna8wnm0HiOdX0XKfCUQS30b1YFAYwByz0pk55OL3vTnsb9pQdhe 0OiAQ4QMq4F6dmPsPj2fxOLcByD3MdZK6ries07Lv1xfIyxGk0JipxRqjWiGruMF thb7+cBCiJ0AMbCxeyJ2wqccWCf2ZRhvBOt11EloMmELrd+uYIFxBt01Lm7V9COr FUDCWC8nuZGTslJGqkWpRiOnKWPCbR1So7Z//Ns1QlRgRbIDjipIQRcKGe1nL9XK 9qfT2NwJpnJpyqMlj4fs+s1x6StTpYQ= -----END CERTIFICATE-----Generated at Sat Oct 11 11:11:32 2025 by rpki-client