$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b8da705a-5ddb-3f02-9da1-f521b654a46a.roa File: b8da705a-5ddb-3f02-9da1-f521b654a46a.roa (raw, json) Hash identifier: CgmyIlUbc/bk5/Y4JSEek8TdkVC5a6YioxPVqbNa9xs= Subject key identifier: 79:6D:FD:FF:E9:B2:09:1B:86:87:87:22:B6:D4:0B:B4:5D:8E:8F:CE Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B758CB06FEA41A278386C0E80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b8da705a-5ddb-3f02-9da1-f521b654a46a.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 212238 IP address blocks: 104.164.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:b0:6f:ea:41:a2:78:38:6c:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=d2c3e345-4261-4f57-8b99-a5e16e644ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:10:aa:0b:83:72:5f:94:1a:d2:10:4c:0e:38: b1:98:f8:ef:f3:a2:40:49:86:8e:3b:69:62:e6:e9: 28:21:03:2c:3b:c4:3d:e8:10:22:d3:3b:31:25:a0: bd:34:45:5c:f4:6a:ff:c8:9f:89:f4:2c:77:4b:da: 2c:d7:ad:a5:32:6d:ee:a4:7b:19:e2:2e:77:8c:5b: c2:90:b5:c0:de:07:3a:88:3e:fe:ff:68:f7:1f:12: 89:ce:8c:27:e6:19:e7:97:b1:1c:b9:60:69:37:2a: 69:21:8b:a4:99:12:05:fb:8f:c2:40:1f:4e:f5:3f: 51:31:69:1b:0f:da:fa:f4:cb:dd:8c:86:f3:1c:5e: ec:95:d0:ca:ea:be:cd:87:02:da:3d:bd:52:79:2c: 65:5a:58:b7:87:c6:8e:5a:9e:40:81:14:a1:2d:e5: 63:30:a7:94:3d:23:30:31:76:91:b9:35:5b:df:19: 63:4e:66:9f:76:ab:be:1a:ca:41:19:f0:d2:97:22: 53:a2:d1:2b:c7:53:90:e8:59:e2:c0:a3:19:05:33: 11:57:3d:ec:4d:27:2e:e1:ab:0a:db:b9:34:89:00: ba:f3:86:0c:24:60:cd:b6:18:08:26:b0:a0:52:2a: d2:8b:49:37:12:c6:51:4b:81:e1:a0:18:b3:3b:b5: eb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6D:FD:FF:E9:B2:09:1B:86:87:87:22:B6:D4:0B:B4:5D:8E:8F:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b8da705a-5ddb-3f02-9da1-f521b654a46a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.164.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:5d:a4:37:8d:89:e8:1c:93:99:9a:1b:c9:ff:8a:99:9a:53: f3:2c:87:fc:9d:1c:cc:a9:c1:2d:16:8c:a6:c1:05:95:d9:c0: eb:79:0c:9d:ad:21:e3:a0:95:20:17:a9:1a:59:5e:a3:6d:27: 35:8d:11:2d:b2:a0:fd:31:7f:85:c6:4f:01:7d:32:a3:4e:cc: 6b:22:79:9d:4a:2b:3e:18:3e:d5:05:03:26:cb:45:1b:e1:7d: f2:02:10:93:a4:5c:24:d4:8b:0a:46:32:d4:1c:58:b7:cd:cf: 61:82:bb:8e:67:f6:d6:40:f6:2b:52:c0:c6:95:87:25:4f:17: 82:f5:88:75:50:3e:37:97:f1:33:0f:5f:ad:e9:09:83:48:80: 31:98:6b:48:59:ac:64:44:d4:81:d1:a2:80:db:32:1e:44:4d: a0:00:f0:62:74:df:52:8b:a2:ef:4c:0b:4a:4b:4e:23:b7:75: 35:23:c6:2f:5d:e7:22:d1:db:16:2b:d1:73:3c:20:ea:6d:17: e3:35:70:73:73:3f:b5:fc:1f:7d:79:35:18:90:27:83:d9:ba: 70:b7:ad:aa:31:4d:20:f3:7b:ab:62:93:5e:69:41:40:10:6d: f8:c0:03:e0:f7:50:9d:45:dd:e6:90:1d:a1:41:35:95:b7:bb: a5:2f:7c:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jLBv6kGieDhsDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk ZDJjM2UzNDUtNDI2MS00ZjU3LThiOTktYTVlMTZlNjQ0YWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhCqC4NyX5Qa0hBMDjixmPjv86JASYaOO2li 5ukoIQMsO8Q96BAi0zsxJaC9NEVc9Gr/yJ+J9Cx3S9os162lMm3upHsZ4i53jFvC kLXA3gc6iD7+/2j3HxKJzown5hnnl7EcuWBpNyppIYukmRIF+4/CQB9O9T9RMWkb D9r69MvdjIbzHF7sldDK6r7NhwLaPb1SeSxlWli3h8aOWp5AgRShLeVjMKeUPSMw MXaRuTVb3xljTmafdqu+GspBGfDSlyJTotErx1OQ6FniwKMZBTMRVz3sTScu4asK 27k0iQC684YMJGDNthgIJrCgUirSi0k3EsZRS4HhoBizO7XrzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlt/f/psgkbhoeHIrbUC7Rdjo/OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjhkYTcwNWEtNWRkYi0z ZjAyLTlkYTEtZjUyMWI2NTRhNDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVdpDeNiegck5maG8n/ipmaU/Msh/ydHMypwS0WjKbBBZXZwOt5DJ2t IeOglSAXqRpZXqNtJzWNES2yoP0xf4XGTwF9MqNOzGsieZ1KKz4YPtUFAybLRRvh ffICEJOkXCTUiwpGMtQcWLfNz2GCu45n9tZA9itSwMaVhyVPF4L1iHVQPjeX8TMP X63pCYNIgDGYa0hZrGRE1IHRooDbMh5ETaAA8GJ031KLou9MC0pLTiO3dTUjxi9d 5yLR2xYr0XM8IOptF+M1cHNzP7X8H315NRiQJ4PZunC3raoxTSDze6tik15pQUAQ bfjAA+D3UJ1F3eaQHaFBNZW3u6UvfNk= -----END CERTIFICATE-----Generated at Sat Oct 11 13:04:51 2025 by rpki-client