$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/bef8e0a6-d538-3d7c-81b3-a8db221d35db.roa File: bef8e0a6-d538-3d7c-81b3-a8db221d35db.roa (raw, json) Hash identifier: Py3CjscueTrg85Wl9IEono4B7lm+qoR35wP8/99FK/E= Subject key identifier: 91:3A:45:F6:34:D5:96:A9:C7:A4:28:F6:10:3B:22:48:28:DC:10:2B Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Certificate serial: 010D0C9F4328584B13D6C5CBB28E01AFA03AD200 Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/bef8e0a6-d538-3d7c-81b3-a8db221d35db.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 23470 IP address blocks: 104.238.220.0/24 maxlen: 24 104.238.221.0/24 maxlen: 24 104.238.222.0/24 maxlen: 24 104.238.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c5:cb:b2:8e:01:af:a0:3a:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=ff89d03b-bebb-4af2-9cec-b7457a2e40de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:11:59:6c:23:ce:c0:fc:e6:a0:5a:8a:06:15: f4:bc:bb:04:e6:af:86:cf:a3:30:4f:da:7f:4e:f7: a1:ca:aa:3f:c7:ac:ce:76:57:3b:30:07:4b:10:a2: 84:94:a0:2d:b7:6a:32:4e:05:54:0c:d2:10:73:6c: e4:87:e8:49:64:c4:c5:c6:e6:0a:ce:92:2b:61:f2: 5d:a2:e5:f8:5a:07:cc:19:2b:bc:3e:bf:66:f7:f9: aa:3a:62:90:d6:7b:59:b7:b0:2c:9a:af:69:7a:0c: 3a:34:e5:85:b1:ee:e4:2f:17:9d:38:f2:2d:ad:96: 39:40:f3:7a:84:34:94:d3:4f:37:0c:c8:af:2e:01: 96:05:b4:e4:c8:68:b2:1f:15:2e:5e:7b:11:92:29: 19:05:fa:83:17:86:3d:e6:eb:90:2e:54:63:e8:c2: 45:53:48:51:6b:35:f4:a0:0e:07:6b:15:40:60:7f: e3:10:28:fe:a4:4f:39:60:f0:82:84:1a:61:a3:d0: 9e:5b:09:cc:7c:1d:dc:dd:6f:54:8b:54:62:4a:83: d5:72:98:58:c4:b7:44:73:e2:d7:b0:1b:f8:89:99: 43:3a:e3:61:fc:33:46:9c:38:d6:2b:6f:2d:67:0e: e6:66:44:f1:df:f0:6f:9b:32:02:18:21:90:ec:8d: 7d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3A:45:F6:34:D5:96:A9:C7:A4:28:F6:10:3B:22:48:28:DC:10:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/bef8e0a6-d538-3d7c-81b3-a8db221d35db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl X509v3 Authority Key Identifier: keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer sbgp-ipAddrBlock: critical IPv4: 104.238.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:0d:77:dc:e0:fe:17:4c:c2:d8:51:07:d8:7b:09:42:84:b2: 89:7a:d2:cc:99:77:04:27:e6:9e:d4:b7:74:1e:94:68:89:9a: 14:14:be:17:1d:d4:ef:97:43:5d:2b:22:d9:29:5a:b2:e7:dc: 2b:50:63:0a:d5:5e:fd:39:d4:b7:6a:b5:ea:b6:a9:d1:fb:16: fd:d9:3b:5d:2c:52:1a:f4:a7:fe:ec:58:50:3c:d2:36:42:f5: 9e:47:3c:aa:ee:8e:7f:78:70:01:a0:33:10:c3:22:85:a8:7e: 86:bd:ba:d2:e6:e8:40:e9:0d:42:80:97:6d:ad:2a:d6:63:0e: d9:c4:38:1e:52:99:40:1a:16:76:68:7f:31:f0:3e:1c:c9:de: 26:fe:0b:ef:7e:1b:76:87:33:f1:c8:9c:92:dd:2e:f4:3b:46: 3e:b5:f7:5b:41:50:b7:e7:7c:05:2b:f4:43:e6:08:75:3c:d9: f7:75:2f:7d:5d:9b:97:81:3e:a3:07:11:e1:fd:39:07:10:6c: 08:d8:92:35:0d:ed:c0:ca:e0:8e:fe:d7:16:21:a6:0c:fc:52: 54:6b:6f:b3:6c:de:f9:ee:7f:e5:20:25:78:ac:c6:35:5a:77: 06:f1:83:ed:b3:1f:28:04:fa:bc:73:b5:a6:a6:b1:bb:36:56: b9:e3:f0:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sXLso4Br6A60gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy NTQ0MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk ZmY4OWQwM2ItYmViYi00YWYyLTljZWMtYjc0NTdhMmU0MGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxFZbCPOwPzmoFqKBhX0vLsE5q+Gz6MwT9p/ Tvehyqo/x6zOdlc7MAdLEKKElKAtt2oyTgVUDNIQc2zkh+hJZMTFxuYKzpIrYfJd ouX4WgfMGSu8Pr9m9/mqOmKQ1ntZt7Asmq9pegw6NOWFse7kLxedOPItrZY5QPN6 hDSU0083DMivLgGWBbTkyGiyHxUuXnsRkikZBfqDF4Y95uuQLlRj6MJFU0hRazX0 oA4HaxVAYH/jECj+pE85YPCChBpho9CeWwnMfB3c3W9Ui1RiSoPVcphYxLdEc+LX sBv4iZlDOuNh/DNGnDjWK28tZw7mZkTx3/BvmzICGCGQ7I19IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJE6RfY01Zapx6Qo9hA7Ikgo3BArMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5 YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvYmVmOGUwYTYtZDUzOC0z ZDdjLTgxYjMtYThkYjIyMWQzNWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2 ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx ZGJmYzI1NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaO7cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgNd9zg/hdMwthRB9h7CUKEsol60syZdwQn5p7Ut3QelGiJmhQUvhcd 1O+XQ10rItkpWrLn3CtQYwrVXv051Ldqteq2qdH7Fv3ZO10sUhr0p/7sWFA80jZC 9Z5HPKrujn94cAGgMxDDIoWofoa9utLm6EDpDUKAl22tKtZjDtnEOB5SmUAaFnZo fzHwPhzJ3ib+C+9+G3aHM/HInJLdLvQ7Rj6191tBULfnfAUr9EPmCHU82fd1L31d m5eBPqMHEeH9OQcQbAjYkjUN7cDK4I7+1xYhpgz8UlRrb7Ns3vnuf+UgJXisxjVa dwbxg+2zHygE+rxztaamsbs2Vrnj8Jg= -----END CERTIFICATE-----Generated at Thu Oct 9 01:19:52 2025 by rpki-client