$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/abc88413-0069-3f55-ad4d-bead33a8be7a.roa File: abc88413-0069-3f55-ad4d-bead33a8be7a.roa (raw, json) Hash identifier: 23Lpbr9C2t3jN/qT5w/N269C6APtdZVlZi0rJmw3R54= Subject key identifier: B9:3B:B1:24:34:45:D4:EB:90:CA:FF:BB:C0:F8:45:2F:28:D8:10:0D Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B1A40C1656CCCE29855376300 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/abc88413-0069-3f55-ad4d-bead33a8be7a.roa Signing time: Sat 06 Sep 2025 08:09:11 +0000 ROA not before: Sat 06 Sep 2025 08:09:11 +0000 ROA not after: Fri 05 Dec 2025 09:09:11 +0000 asID: 18779 IP address blocks: 104.164.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:40:c1:65:6c:cc:e2:98:55:37:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 6 08:09:11 2025 GMT Not After : Dec 5 09:09:11 2025 GMT Subject: CN=1ea77087-fffd-4bbe-bf1b-07631d89d437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9d:86:42:d3:8b:97:a7:96:7e:5e:31:33:d2: 19:33:9f:23:62:07:bb:4b:ca:b3:04:66:17:ef:48: dd:6c:48:be:67:4c:f2:de:2a:16:b0:62:b7:37:04: 6b:e0:ee:d3:4b:62:75:d2:43:84:cd:74:9b:86:25: 8f:cb:88:ab:c0:da:a4:60:e1:83:07:ea:e9:0e:38: 23:6d:38:98:de:48:7c:65:77:83:c2:83:53:33:b8: f7:6e:67:39:8c:9f:b0:bc:98:70:e2:77:20:7c:15: 2e:f7:11:6c:36:ca:ca:00:ab:bb:0a:48:38:7b:69: 16:1c:13:a7:df:e6:aa:48:7a:b7:d6:01:2f:c5:1f: d5:03:57:c2:4a:66:67:3a:8c:27:be:bd:76:15:0c: 0b:01:d1:71:99:45:46:57:7c:2b:e3:25:fd:9e:af: 24:e6:7b:b4:91:fb:d8:86:a2:5a:48:ec:f3:e5:a8: 44:ac:e2:0e:60:94:85:bc:3c:67:0e:6d:0c:dd:3b: de:00:3a:52:d5:5e:18:e2:4c:bc:e8:ee:42:16:8f: 3e:4c:25:07:89:05:84:9a:15:9a:56:26:7d:3f:bd: 5f:fd:f6:08:4f:65:6f:73:52:e7:7a:d0:d8:45:eb: 82:d1:9a:6a:14:3d:4c:a7:65:74:23:21:1f:4b:d6: 5c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3B:B1:24:34:45:D4:EB:90:CA:FF:BB:C0:F8:45:2F:28:D8:10:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/abc88413-0069-3f55-ad4d-bead33a8be7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.164.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:70:82:28:43:f9:10:e5:e3:42:f5:6f:d9:e7:b7:5e:0d:0f: fb:ce:ae:e6:de:ac:1b:00:af:0a:4c:a6:1f:88:72:96:0f:37: c8:d2:8a:9e:62:7f:93:9a:ae:2f:27:c5:5d:32:b5:18:ed:3b: 83:b4:32:a3:10:84:e0:c0:f3:0b:7a:88:76:99:85:d2:32:1b: 82:df:9a:76:45:d7:43:39:51:35:e5:8d:62:22:15:ed:fa:40: 65:5d:cd:00:7c:32:59:65:12:14:eb:06:8b:78:57:60:ab:a9: f6:d9:ab:6c:e0:ad:9d:74:7b:f1:b9:19:ec:93:e1:cd:46:e8: 10:5c:60:b2:05:4d:c8:02:e2:36:ff:5a:10:1b:73:3b:9d:40: 95:85:a3:51:8d:0b:c0:6e:9b:19:46:01:01:be:ee:3e:df:26: 78:fe:97:ce:b3:45:8b:9c:af:02:c3:0c:80:bf:ba:b3:6b:ff: 01:36:09:f1:1d:41:f2:98:8e:7d:11:33:67:46:64:f2:21:99: 5e:c3:26:dc:2c:87:36:f0:07:61:8a:18:c5:30:19:a6:96:c6: 8c:e8:01:8a:92:74:d5:77:98:ec:2d:ac:77:9d:e9:be:d1:c0: da:80:b2:7f:61:fb:9a:5c:cc:18:db:3e:ac:cf:d2:7c:b1:93: 50:62:be:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsaQMFlbMzimFU3YwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkwNjA4MDkxMVoXDTI1MTIwNTA5MDkxMVowLzEtMCsGA1UEAxMk MWVhNzcwODctZmZmZC00YmJlLWJmMWItMDc2MzFkODlkNDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7J2GQtOLl6eWfl4xM9IZM58jYge7S8qzBGYX 70jdbEi+Z0zy3ioWsGK3NwRr4O7TS2J10kOEzXSbhiWPy4irwNqkYOGDB+rpDjgj bTiY3kh8ZXeDwoNTM7j3bmc5jJ+wvJhw4ncgfBUu9xFsNsrKAKu7Ckg4e2kWHBOn 3+aqSHq31gEvxR/VA1fCSmZnOownvr12FQwLAdFxmUVGV3wr4yX9nq8k5nu0kfvY hqJaSOzz5ahErOIOYJSFvDxnDm0M3TveADpS1V4Y4ky86O5CFo8+TCUHiQWEmhWa ViZ9P71f/fYIT2Vvc1LnetDYReuC0ZpqFD1Mp2V0IyEfS9ZcCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLk7sSQ0RdTrkMr/u8D4RS8o2BANMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYWJjODg0MTMtMDA2OS0z ZjU1LWFkNGQtYmVhZDMzYThiZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKQDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVwgihD+RDl40L1b9nnt14ND/vOruberBsArwpMph+IcpYPN8jSip5i f5Oari8nxV0ytRjtO4O0MqMQhODA8wt6iHaZhdIyG4LfmnZF10M5UTXljWIiFe36 QGVdzQB8MlllEhTrBot4V2CrqfbZq2zgrZ10e/G5GeyT4c1G6BBcYLIFTcgC4jb/ WhAbczudQJWFo1GNC8BumxlGAQG+7j7fJnj+l86zRYucrwLDDIC/urNr/wE2CfEd QfKYjn0RM2dGZPIhmV7DJtwshzbwB2GKGMUwGaaWxozoAYqSdNV3mOwtrHed6b7R wNqAsn9h+5pczBjbPqzP0nyxk1Bivt4= -----END CERTIFICATE-----Generated at Sat Oct 11 11:08:01 2025 by rpki-client