$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b4642f35-203c-3d60-866e-f81bb2b35e78.roa File: b4642f35-203c-3d60-866e-f81bb2b35e78.roa (raw, json) Hash identifier: fBIw0ClyXQop+jxVplET5uzyK3cMhE3kyqHQFtHUboE= Subject key identifier: 2E:DD:90:61:92:E8:DE:A3:59:62:64:0D:78:3B:96:8B:8B:BA:4F:25 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584B41E71D88D4E4203E2E995280 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b4642f35-203c-3d60-866e-f81bb2b35e78.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 398478 IP address blocks: 104.233.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:1d:88:d4:e4:20:3e:2e:99:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=d93d1bc8-00f3-4672-8e7a-2df083e541d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3e:2b:89:7d:e0:88:a4:3e:a7:6b:80:81:f6: bc:5e:2d:59:83:b4:f7:7c:25:6a:b7:1f:18:b8:2a: a6:f8:f4:05:71:76:b3:98:1c:e3:27:c1:20:d9:17: df:b3:1b:f2:17:0b:67:8a:e0:ef:c0:e3:46:50:68: 61:49:c3:8c:aa:55:94:c9:08:7d:74:6f:f9:9a:bf: aa:25:e0:99:12:b4:62:5a:ad:de:b4:90:de:f1:87: 91:ff:81:24:72:e5:de:82:7d:bc:a2:f5:a2:d3:a3: f4:19:2e:c7:ac:c6:8d:90:57:b8:29:00:45:ee:fd: f4:59:38:7e:60:89:6d:08:c0:6f:73:4d:0a:55:3c: 9d:47:a2:fb:02:8a:83:1f:5f:e3:1c:97:00:f0:02: 5b:5c:27:02:01:80:b0:40:e9:a7:e4:fe:38:3e:33: 01:b6:a4:86:6b:3a:f6:27:4d:56:7f:11:9c:1e:2a: 28:73:a8:fc:6c:f6:36:db:9a:a2:c8:44:86:bf:32: 12:93:fd:a7:85:d8:4f:96:28:e5:7a:da:c3:0a:3e: ac:14:1d:1f:86:ad:84:e1:4e:3e:0a:05:37:32:2f: e0:3e:d7:43:6a:d1:e1:d1:8d:6e:30:bd:e2:96:5e: c2:d6:2d:3a:ad:7d:30:ea:07:95:14:92:1d:6b:6c: 49:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DD:90:61:92:E8:DE:A3:59:62:64:0D:78:3B:96:8B:8B:BA:4F:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b4642f35-203c-3d60-866e-f81bb2b35e78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 104.233.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f4:90:9a:49:ec:62:61:a7:93:ea:03:0d:f0:a5:52:8f:00: de:06:14:35:3f:79:60:1d:7a:d1:24:82:1f:41:0c:1c:b9:7d: a0:0a:45:1b:78:95:ef:ee:24:e2:bb:98:b7:b6:22:91:f1:b1: 32:94:55:a3:03:9b:49:aa:74:db:cb:4a:ef:d2:dc:ec:d9:8b: 69:15:22:a4:13:4d:d1:89:1e:3b:7c:6d:13:e4:57:5d:82:b0: ed:aa:43:f4:a2:78:3b:1f:23:f9:e9:ad:15:0e:b6:d4:2a:ec: 97:5f:8d:35:fa:d1:1d:a7:8d:63:8b:ef:44:e8:dc:f7:c5:99: 42:f8:a8:a6:b1:40:64:15:76:7a:e1:5f:bb:13:93:d5:66:ba: c9:3d:3b:1e:3e:70:99:43:19:01:d7:37:50:21:e0:f8:0a:d1: 05:1f:ca:6e:ff:55:df:a2:39:c0:81:2c:e9:82:27:02:f6:80: 35:e2:6d:d3:18:c4:6b:15:64:7f:6a:5c:01:c1:96:8c:70:4c: 86:45:ad:6f:4c:45:5d:a3:08:ec:7e:c6:02:5d:3b:37:56:1b: a3:0c:98:a6:67:02:03:14:d4:57:d2:82:04:3d:72:4c:5b:a0: 2d:00:e2:83:2d:fa:cd:36:3a:2a:63:d6:d4:a7:1b:06:4b:94: 0a:96:22:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5x2I1OQgPi6ZUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZDkzZDFiYzgtMDBmMy00NjcyLThlN2EtMmRmMDgzZTU0MWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT4riX3giKQ+p2uAgfa8Xi1Zg7T3fCVqtx8Y uCqm+PQFcXazmBzjJ8Eg2RffsxvyFwtniuDvwONGUGhhScOMqlWUyQh9dG/5mr+q JeCZErRiWq3etJDe8YeR/4EkcuXegn28ovWi06P0GS7HrMaNkFe4KQBF7v30WTh+ YIltCMBvc00KVTydR6L7AoqDH1/jHJcA8AJbXCcCAYCwQOmn5P44PjMBtqSGazr2 J01WfxGcHiooc6j8bPY225qiyESGvzISk/2nhdhPlijletrDCj6sFB0fhq2E4U4+ CgU3Mi/gPtdDatHh0Y1uML3ill7C1i06rX0w6geVFJIda2xJvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7dkGGS6N6jWWJkDXg7louLuk8lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYjQ2NDJmMzUtMjAzYy0z ZDYwLTg2NmUtZjgxYmIyYjM1ZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaOncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACD0kJpJ7GJhp5PqAw3wpVKPAN4GFDU/eWAdetEkgh9BDBy5faAKRRt4 le/uJOK7mLe2IpHxsTKUVaMDm0mqdNvLSu/S3OzZi2kVIqQTTdGJHjt8bRPkV12C sO2qQ/SieDsfI/nprRUOttQq7JdfjTX60R2njWOL70To3PfFmUL4qKaxQGQVdnrh X7sTk9Vmusk9Ox4+cJlDGQHXN1Ah4PgK0QUfym7/Vd+iOcCBLOmCJwL2gDXibdMY xGsVZH9qXAHBloxwTIZFrW9MRV2jCOx+xgJdOzdWG6MMmKZnAgMU1FfSggQ9ckxb oC0A4oMt+s02Oipj1tSnGwZLlAqWIrk= -----END CERTIFICATE-----Generated at Sat Oct 25 04:48:08 2025 by rpki-client