$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d22e4e1b-c757-34c2-8ba0-c05d45b1bc47.roa File: d22e4e1b-c757-34c2-8ba0-c05d45b1bc47.roa (raw, json) Hash identifier: XQvNm+SIW5Z89DUDMr1IzMpn/W21yDEovN/lU20K1r8= Subject key identifier: 90:BE:5B:2E:89:E2:52:98:74:69:35:16:2F:5C:96:26:B1:43:0C:9B Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B2A2C2180679CA401C6B2E040 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d22e4e1b-c757-34c2-8ba0-c05d45b1bc47.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 8881 IP address blocks: 104.253.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:21:80:67:9c:a4:01:c6:b2:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=22ec2fa1-18cc-4e0d-ab36-6e4fc54e1e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e8:03:55:e5:2c:c0:6d:fa:13:42:02:76:88: 00:15:11:1e:de:8d:88:6b:ef:5e:9a:4a:4d:d2:58: 11:7f:f7:39:7b:d8:e0:25:3a:f7:28:6a:d0:1b:22: c3:84:fa:bc:34:94:80:0d:76:30:b3:f2:09:3b:c0: f4:37:38:e0:ab:65:a5:0f:af:5c:6a:83:d0:99:74: f2:bc:eb:aa:03:d3:72:f2:e5:ac:bf:9f:0a:e3:b2: 35:68:f2:04:de:f4:e8:f0:41:0c:b9:16:cf:eb:db: b8:e9:d1:39:cd:d1:9e:f8:eb:9d:3d:c2:f7:c5:85: e5:91:6a:05:96:91:d9:29:1a:a7:14:1e:71:82:25: c7:d5:91:2f:48:31:31:dd:16:e6:31:03:3c:ab:6d: 34:f1:c8:27:2f:04:ea:fd:e2:d1:d6:e3:b9:8d:ff: 73:1d:cc:81:6a:12:65:c1:f2:67:48:32:de:e6:f4: cd:7d:cc:90:f0:e4:fe:13:3e:64:66:a7:68:02:71: fc:98:ab:7f:d6:92:37:e1:e4:3f:ca:fb:a8:68:b7: 2e:7f:54:51:f7:36:e9:58:71:d0:c7:0a:82:ef:b5: a9:95:54:f7:be:4f:62:fe:74:4e:97:27:bd:14:07: c8:61:b0:92:7f:08:d8:ce:aa:f8:e8:28:64:39:c5: 38:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:BE:5B:2E:89:E2:52:98:74:69:35:16:2F:5C:96:26:B1:43:0C:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d22e4e1b-c757-34c2-8ba0-c05d45b1bc47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:53:cd:dc:75:be:6b:f7:a5:13:a9:13:5c:6f:69:17:25:25: eb:85:a8:14:1d:55:bb:7f:b8:77:f4:6c:f5:31:73:c3:83:f8: 29:81:e6:82:dc:e0:96:8d:08:4f:27:b0:68:5e:a8:2d:01:72: c9:3c:af:97:8d:e8:71:90:df:03:8a:f3:ec:d4:a6:b1:21:c7: 06:76:3e:05:64:79:64:20:9b:f1:0d:14:6a:1f:2d:eb:e6:f4: 2c:38:26:1a:4f:5b:26:0f:b0:9a:39:b3:46:34:04:97:2f:a2: 3c:a1:8a:3e:28:ec:71:49:7f:a7:1b:12:b3:87:ab:bb:03:6b: 76:1e:aa:63:f1:5e:bc:60:b5:54:0e:ab:9e:f2:b1:dd:72:de: 69:96:9c:f7:90:f1:08:fe:e4:09:a0:fc:69:9c:8b:cf:ae:bf: 2a:2a:08:f0:f6:2d:ff:78:8f:36:06:7d:f8:17:9c:b2:df:c2: 76:59:71:ff:05:da:96:00:ba:6d:12:3e:30:c1:e2:55:70:b5: c6:71:2b:bb:b5:a5:0a:0c:c3:a3:e2:e8:ce:ee:6a:1a:fe:95: f1:d3:4f:02:b2:a5:19:95:02:89:6e:a5:ce:56:48:44:e4:39: 7f:6c:45:1a:e8:2b:94:82:87:55:7a:26:9c:3c:d8:46:45:8f: 9c:27:31:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLCGAZ5ykAcay4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk MjJlYzJmYTEtMThjYy00ZTBkLWFiMzYtNmU0ZmM1NGUxZTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAougDVeUswG36E0ICdogAFREe3o2Ia+9emkpN 0lgRf/c5e9jgJTr3KGrQGyLDhPq8NJSADXYws/IJO8D0Nzjgq2WlD69caoPQmXTy vOuqA9Ny8uWsv58K47I1aPIE3vTo8EEMuRbP69u46dE5zdGe+OudPcL3xYXlkWoF lpHZKRqnFB5xgiXH1ZEvSDEx3RbmMQM8q2008cgnLwTq/eLR1uO5jf9zHcyBahJl wfJnSDLe5vTNfcyQ8OT+Ez5kZqdoAnH8mKt/1pI34eQ/yvuoaLcuf1RR9zbpWHHQ xwqC77WplVT3vk9i/nROlye9FAfIYbCSfwjYzqr46ChkOcU4IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJC+Wy6J4lKYdGk1Fi9cliaxQwybMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDIyZTRlMWItYzc1Ny0z NGMyLThiYTAtYzA1ZDQ1YjFiYzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP34MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpTzdx1vmv3pROpE1xvaRclJeuFqBQdVbt/uHf0bPUxc8OD+CmB5oLc 4JaNCE8nsGheqC0Bcsk8r5eN6HGQ3wOK8+zUprEhxwZ2PgVkeWQgm/ENFGofLevm 9Cw4JhpPWyYPsJo5s0Y0BJcvojyhij4o7HFJf6cbErOHq7sDa3YeqmPxXrxgtVQO q57ysd1y3mmWnPeQ8Qj+5Amg/Gmci8+uvyoqCPD2Lf94jzYGffgXnLLfwnZZcf8F 2pYAum0SPjDB4lVwtcZxK7u1pQoMw6Pi6M7uahr+lfHTTwKypRmVAolupc5WSETk OX9sRRroK5SCh1V6Jpw82EZFj5wnMcA= -----END CERTIFICATE-----Generated at Sat Oct 11 11:12:48 2025 by rpki-client