$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a6cb36fc-8f89-3602-b602-26c862ea85c5.roa File: a6cb36fc-8f89-3602-b602-26c862ea85c5.roa (raw, json) Hash identifier: 26DJU9y4GRYoH/VlCVwKp3o+tALu1MpG08XytA32qwk= Subject key identifier: AC:70:77:0C:34:6E:12:3A:6C:01:0A:E9:D2:68:74:51:C9:ED:F9:8E Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B2A2C4F4191B23103C2755E60 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a6cb36fc-8f89-3602-b602-26c862ea85c5.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 8881 IP address blocks: 104.253.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:4f:41:91:b2:31:03:c2:75:5e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=850121f7-c2c2-436b-a49d-626cbf2e1599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9f:1d:46:55:a7:15:ae:19:da:1a:47:e3:a6: 86:66:c5:f8:f9:0e:55:bc:47:82:94:e1:88:11:c1: 3d:4d:b1:70:e5:18:f6:a6:e2:5d:a7:91:e0:bb:83: 98:1b:49:fc:49:d3:b7:79:b1:63:a4:37:b8:4a:2b: fb:67:d5:53:13:75:d6:c0:81:18:60:f1:3b:4a:1a: 48:68:7d:d0:96:28:2a:a9:8d:71:ba:88:fb:3b:34: d8:e4:9b:c3:8f:4e:6e:84:fd:97:b4:a6:c2:5a:55: 67:11:62:25:f3:8b:5e:4b:89:90:f3:8b:56:7f:57: ae:ea:83:aa:27:32:20:9d:48:0d:eb:77:e6:4e:c7: 17:67:7c:d6:e2:23:fb:85:99:00:ac:0c:19:01:dc: 92:35:65:df:9e:71:42:e6:d8:7a:58:a8:27:e6:ed: 3b:d0:c8:75:1e:49:8c:03:71:72:dd:d9:b8:ec:3f: 3c:51:e5:01:9c:ec:66:c6:ea:22:cd:48:a8:7f:c3: 85:79:b2:ad:22:53:09:26:fc:80:56:1d:bb:ab:5a: 1e:fd:c3:28:66:02:20:02:61:a3:d8:85:c4:d0:9b: 89:88:4c:7c:78:2e:60:50:57:39:6e:9f:ce:c8:29: c7:0f:95:67:38:ab:57:87:a9:62:fc:8d:7f:e2:3a: fc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:70:77:0C:34:6E:12:3A:6C:01:0A:E9:D2:68:74:51:C9:ED:F9:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a6cb36fc-8f89-3602-b602-26c862ea85c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:92:c8:2d:93:53:c0:d1:d0:d2:3b:b8:82:a7:07:30:2d:5e: 23:f7:b2:80:9c:cd:25:9b:16:66:3c:16:23:87:96:ae:21:af: 62:5a:03:0a:26:c4:29:98:b3:e7:9e:a2:e9:21:df:13:51:e2: 93:c9:83:28:02:0d:79:25:59:16:09:95:5d:e5:b2:f1:08:0e: 82:c7:12:02:2d:2d:db:b2:97:71:6d:95:e0:d5:95:22:41:b2: 6a:4a:87:1b:66:2f:47:00:fb:6a:48:f1:05:b9:a1:fc:31:f6: fc:60:e9:dc:35:62:6d:d9:1e:ae:c0:93:b1:67:59:f7:09:53: 2d:44:90:5d:6e:06:f8:f1:fd:0d:77:1c:1e:90:ff:d7:15:56: 50:dc:33:79:12:40:5c:94:82:a1:eb:0a:0e:4d:98:6a:ca:15: ae:f9:00:33:24:c6:6c:96:bb:fe:1b:0a:61:d9:2d:5a:2c:ec: df:4d:9b:2b:7c:d2:07:56:6f:4d:4d:2f:94:ce:0e:8a:07:ea: a6:76:b3:f5:52:35:1c:49:6e:06:51:ba:5b:ef:59:fe:9d:55: c6:ef:8a:12:c7:13:c8:85:1f:bb:1a:36:81:94:d7:05:99:2a: a5:63:3f:c7:e6:cd:d6:da:90:2d:6d:33:3e:76:b6:84:f4:7c: 29:5f:05:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLE9BkbIxA8J1XmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ODUwMTIxZjctYzJjMi00MzZiLWE0OWQtNjI2Y2JmMmUxNTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp8dRlWnFa4Z2hpH46aGZsX4+Q5VvEeClOGI EcE9TbFw5Rj2puJdp5Hgu4OYG0n8SdO3ebFjpDe4Siv7Z9VTE3XWwIEYYPE7ShpI aH3QligqqY1xuoj7OzTY5JvDj05uhP2XtKbCWlVnEWIl84teS4mQ84tWf1eu6oOq JzIgnUgN63fmTscXZ3zW4iP7hZkArAwZAdySNWXfnnFC5th6WKgn5u070Mh1HkmM A3Fy3dm47D88UeUBnOxmxuoizUiof8OFebKtIlMJJvyAVh27q1oe/cMoZgIgAmGj 2IXE0JuJiEx8eC5gUFc5bp/OyCnHD5VnOKtXh6li/I1/4jr8oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxwdww0bhI6bAEK6dJodFHJ7fmOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTZjYjM2ZmMtOGY4OS0z NjAyLWI2MDItMjZjODYyZWE4NWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP1tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADySyC2TU8DR0NI7uIKnBzAtXiP3soCczSWbFmY8FiOHlq4hr2JaAwom xCmYs+eeoukh3xNR4pPJgygCDXklWRYJlV3lsvEIDoLHEgItLduyl3FtleDVlSJB smpKhxtmL0cA+2pI8QW5ofwx9vxg6dw1Ym3ZHq7Ak7FnWfcJUy1EkF1uBvjx/Q13 HB6Q/9cVVlDcM3kSQFyUgqHrCg5NmGrKFa75ADMkxmyWu/4bCmHZLVos7N9Nmyt8 0gdWb01NL5TODooH6qZ2s/VSNRxJbgZRulvvWf6dVcbvihLHE8iFH7saNoGU1wWZ KqVjP8fmzdbakC1tMz52toT0fClfBUE= -----END CERTIFICATE-----Generated at Sat Oct 11 11:08:45 2025 by rpki-client