$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/29ee82f2-26f5-3427-b2a3-e130b3600811.roa File: 29ee82f2-26f5-3427-b2a3-e130b3600811.roa (raw, json) Hash identifier: TbOBBgavnS7vsvWebpVnYGju2n+dvzROC/m/NiR6G68= Subject key identifier: 56:8F:3C:DE:45:F3:A2:9F:E3:F2:56:29:48:A4:D8:86:0B:F5:8C:AD Certificate issuer: /CN=b433860d-ab5d-45f4-a11e-f313b584710a Certificate serial: 010D0C9F4328584B583C80AB426E8ED22B3F0780 Authority key identifier: CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/29ee82f2-26f5-3427-b2a3-e130b3600811.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 14445 IP address blocks: 104.249.137.0/24 maxlen: 24 104.249.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:80:ab:42:6e:8e:d2:2b:3f:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433860d-ab5d-45f4-a11e-f313b584710a Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=05d44eee-119b-4ef2-95d2-0142df34faf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9b:dc:e5:d4:6e:6d:f4:37:b5:53:43:3b:7d: 15:af:5a:84:81:16:6d:63:cd:87:a9:ee:64:d8:bc: 90:32:fe:a0:2b:db:79:56:1f:5a:f7:6f:be:f5:03: 76:fc:c4:d4:44:13:63:9e:d7:62:ef:11:ba:2d:72: 6b:40:46:92:14:e8:89:38:0d:a8:e7:d7:73:23:c1: 99:27:ef:22:6a:fa:8a:6e:d6:27:0d:80:5a:fc:1d: fd:9c:1a:58:46:51:be:b7:d0:13:d5:b3:29:25:46: 6a:c4:65:c6:a4:11:01:f0:bd:bc:56:43:4e:a8:9a: 3f:d4:7f:6e:80:25:fc:08:53:4e:1a:b1:ac:54:75: 44:61:f6:8c:c5:e5:23:c6:3e:39:f0:1c:4b:a5:0a: 50:13:73:8c:93:5d:0c:07:39:64:5d:f9:22:1d:56: 92:25:d5:a6:ca:60:3c:93:35:98:04:c7:5d:22:af: cc:e5:c1:9d:e0:93:b2:75:6b:5d:c0:c8:55:28:aa: 12:83:51:3a:d6:9c:3b:6c:1e:fd:7b:cf:8e:b4:0e: 3e:75:4c:a5:9f:e6:f6:3e:6e:60:b9:16:fa:f5:ed: a6:69:91:82:02:b1:26:16:e2:8e:41:7a:b2:0f:6b: ae:ff:22:5a:50:18:f4:00:70:67:47:2c:ee:08:24: 4a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8F:3C:DE:45:F3:A2:9F:E3:F2:56:29:48:A4:D8:86:0B:F5:8C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/29ee82f2-26f5-3427-b2a3-e130b3600811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl X509v3 Authority Key Identifier: keyid:CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer sbgp-ipAddrBlock: critical IPv4: 104.249.137.0-104.249.138.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:ca:03:b4:f7:2e:78:ea:77:70:97:fe:1f:d6:62:30:ff:e0: bf:a6:1e:bd:03:44:1f:a8:b6:09:3d:ab:ff:9a:03:c1:a8:e5: ec:b5:5c:43:19:44:3f:a4:c5:e1:61:f6:17:88:4b:3c:c4:c7: da:db:ce:64:98:6c:02:0d:31:3e:00:44:69:13:bf:55:d4:b6: 93:37:8b:74:7b:81:0d:f6:34:87:1d:53:1b:59:72:1e:11:bf: ad:67:82:7f:1f:de:af:50:81:99:5e:b8:09:83:c0:f7:fb:87: 35:a9:b5:89:af:4f:9c:c4:95:67:b9:7f:78:bc:ab:16:60:b6: 83:11:a9:ec:4b:23:f3:ae:5c:73:da:da:fe:07:9b:45:67:67: a8:53:86:0b:9a:ef:e1:2f:7e:61:f3:82:b5:48:ff:e3:b2:df: ac:a0:e3:84:58:17:70:86:d5:12:4a:fa:16:0c:51:85:c8:fb: 3b:93:76:9c:46:e2:6f:10:3a:6c:04:2b:97:11:7f:aa:ed:00: 99:d8:57:b8:2d:bf:d8:0e:af:3d:b4:13:00:34:21:fb:18:3e: b6:1a:0e:a1:ca:16:48:0d:f9:40:82:1b:2f:5e:92:c5:f2:ca: 82:26:4b:06:9d:52:e3:ad:dc:e3:d9:15:71:cc:7f:9d:69:c7: 06:a4:2a:59 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEtYPICrQm6O0is/B4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzMzg2MGQtYWI1ZC00NWY0LWExMWUtZjMxM2I1ODQ3 MTBhMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MDVkNDRlZWUtMTE5Yi00ZWYyLTk1ZDItMDE0MmRmMzRmYWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZvc5dRubfQ3tVNDO30Vr1qEgRZtY82Hqe5k 2LyQMv6gK9t5Vh9a92++9QN2/MTURBNjntdi7xG6LXJrQEaSFOiJOA2o59dzI8GZ J+8iavqKbtYnDYBa/B39nBpYRlG+t9AT1bMpJUZqxGXGpBEB8L28VkNOqJo/1H9u gCX8CFNOGrGsVHVEYfaMxeUjxj458BxLpQpQE3OMk10MBzlkXfkiHVaSJdWmymA8 kzWYBMddIq/M5cGd4JOydWtdwMhVKKoSg1E61pw7bB79e8+OtA4+dUyln+b2Pm5g uRb69e2maZGCArEmFuKOQXqyD2uu/yJaUBj0AHBnRyzuCCRKHQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFFaPPN5F86Kf4/JWKUik2IYL9YytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMz ODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEzYjU4NDcxMGEvMjllZTgyZjItMjZmNS0z NDI3LWIyYTMtZTEzMGIzNjAwODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjQzMzg2MGQtYWI1ZC00NWY0LWEx MWUtZjMxM2I1ODQ3MTBhL2I0MzM4NjBkLWFiNWQtNDVmNC1hMTFlLWYzMTNiNTg0 NzEwYS5jcmwwHwYDVR0jBBgwFoAUz9UTZdOGkQNiuVzEe6KxGXpl5VUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMzODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEz YjU4NDcxMGEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABo+YkD BABo+YowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAtcoDtPcueOp3cJf+H9ZiMP/gv6YevQNEH6i2CT2r/5oD wajl7LVcQxlEP6TF4WH2F4hLPMTH2tvOZJhsAg0xPgBEaRO/VdS2kzeLdHuBDfY0 hx1TG1lyHhG/rWeCfx/er1CBmV64CYPA9/uHNam1ia9PnMSVZ7l/eLyrFmC2gxGp 7Esj865cc9ra/gebRWdnqFOGC5rv4S9+YfOCtUj/47LfrKDjhFgXcIbVEkr6FgxR hcj7O5N2nEbibxA6bAQrlxF/qu0AmdhXuC2/2A6vPbQTADQh+xg+thoOocoWSA35 QIIbL16SxfLKgiZLBp1S463c49kVccx/nWnHBqQqWQ== -----END CERTIFICATE-----Generated at Tue Oct 14 17:50:21 2025 by rpki-client