$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/3f2b9678-6820-3b5b-b536-bc6677e9c5aa.roa File: 3f2b9678-6820-3b5b-b536-bc6677e9c5aa.roa (raw, json) Hash identifier: k23J1v0j84fJBdg8/Jw7BO38qEaxrO3LeRb6FaI8STs= Subject key identifier: CF:94:78:A5:E9:0B:7A:37:C9:6E:16:C8:BA:0F:EA:DE:57:1E:89:A9 Certificate issuer: /CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca Certificate serial: 010D0C9F4328584AF521438E33D6897A5EB28C00 Authority key identifier: 53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/3f2b9678-6820-3b5b-b536-bc6677e9c5aa.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 215016 IP address blocks: 104.193.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 31 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:43:8e:33:d6:89:7a:5e:b2:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=69d7e994-3dfd-4d7e-ba70-7b18f3d1201a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9b:47:c1:91:34:88:43:80:b7:99:51:eb:32: 98:8a:36:49:ad:33:56:11:1f:b2:3d:d6:37:33:23: 42:b3:94:7a:c6:e8:c8:33:04:48:5a:82:85:6e:6f: 35:5b:eb:0f:c7:83:9a:b8:60:f6:be:a6:84:71:f7: 72:87:67:2e:fe:72:49:37:c7:b0:c0:11:3c:4a:f7: 1e:cd:13:1f:b5:10:e4:5d:cd:fb:f3:3d:1a:5e:c9: 8e:a3:06:f2:4b:58:f5:85:83:53:5e:82:77:a0:3a: ff:bd:aa:c3:9e:92:60:99:a6:df:25:9c:33:34:51: 1f:26:5d:0b:90:7e:db:0d:a7:ce:f5:78:d7:4d:f3: a6:cd:bf:00:a6:30:7c:12:f4:d6:ec:fa:c4:9b:72: fd:f9:3c:e1:09:2d:b0:1a:2f:f1:57:30:a7:ea:f7: 67:cd:1a:86:5d:78:9e:e9:98:2b:ab:3b:52:c8:da: bb:40:c0:60:10:6c:da:78:7f:c4:ef:ed:c6:62:1a: b9:23:8a:b1:60:41:c5:ea:6f:72:24:bf:be:a2:27: a6:e9:47:b3:d9:aa:e2:2b:1a:bc:62:fd:75:aa:56: 1f:ad:4e:42:a1:5d:6a:54:34:b0:0f:06:73:fc:d6: ee:2f:8c:39:e7:2b:60:c7:29:19:9b:81:25:47:da: 2b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:94:78:A5:E9:0B:7A:37:C9:6E:16:C8:BA:0F:EA:DE:57:1E:89:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/3f2b9678-6820-3b5b-b536-bc6677e9c5aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.crl X509v3 Authority Key Identifier: keyid:53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer sbgp-ipAddrBlock: critical IPv4: 104.193.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:ae:5a:42:87:cb:8b:b0:93:fe:a8:4a:9a:20:61:66:71:4f: 2b:93:6c:9a:da:88:b0:2d:a4:da:c8:b3:87:e0:be:f7:83:f9: 1f:25:7a:10:44:1e:9b:57:af:ce:ba:57:65:64:80:2b:3b:8b: 7b:17:5c:55:6c:3b:e6:49:74:12:5b:96:55:f5:48:ee:d5:77: 08:b0:55:13:30:6e:f3:03:0b:7d:7b:e9:20:ae:83:3d:1c:86: 31:5e:e9:ca:74:3c:f5:5b:9c:9a:26:cd:95:76:6f:f1:7a:ee: f2:82:a9:76:ae:57:9e:b4:52:07:24:c2:e3:68:07:37:a6:c4: 9a:72:1f:75:d7:23:ac:28:f3:68:28:5a:8e:04:9a:ee:8b:fc: ec:1c:bd:42:b2:5f:ad:e0:aa:18:d4:e4:7f:b3:f0:8f:f1:ae: dc:11:df:4b:b7:0f:19:a5:85:14:08:58:81:a0:49:84:d3:b1: ee:12:f6:e5:19:1c:9a:90:c3:5b:75:e5:c0:04:10:d7:3b:91: 74:e9:2e:bf:67:ba:5b:4e:8c:aa:4d:79:2b:cd:98:ad:53:5e: be:e3:11:89:0d:e3:e1:ca:b6:97:2d:84:47:0a:7d:5e:a9:56: f4:45:30:13:3c:fd:9c:61:fc:78:14:eb:08:31:76:87:8b:2a: fb:06:53:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IUOOM9aJel6yjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlYTEyZmYtZjk1NC00MjI5LTg4YTItZDJjNjY1NmEw ZWNhMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk NjlkN2U5OTQtM2RmZC00ZDdlLWJhNzAtN2IxOGYzZDEyMDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiptHwZE0iEOAt5lR6zKYijZJrTNWER+yPdY3 MyNCs5R6xujIMwRIWoKFbm81W+sPx4OauGD2vqaEcfdyh2cu/nJJN8ewwBE8Svce zRMftRDkXc378z0aXsmOowbyS1j1hYNTXoJ3oDr/varDnpJgmabfJZwzNFEfJl0L kH7bDafO9XjXTfOmzb8ApjB8EvTW7PrEm3L9+TzhCS2wGi/xVzCn6vdnzRqGXXie 6ZgrqztSyNq7QMBgEGzaeH/E7+3GYhq5I4qxYEHF6m9yJL++oiem6Uez2ariKxq8 Yv11qlYfrU5CoV1qVDSwDwZz/NbuL4w55ytgxykZm4ElR9ornwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+UeKXpC3o3yW4WyLoP6t5XHompMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMGVh MTJmZi1mOTU0LTQyMjktODhhMi1kMmM2NjU2YTBlY2EvM2YyYjk2NzgtNjgyMC0z YjViLWI1MzYtYmM2Njc3ZTljNWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDBlYTEyZmYtZjk1NC00MjI5LTg4 YTItZDJjNjY1NmEwZWNhL2QwZWExMmZmLWY5NTQtNDIyOS04OGEyLWQyYzY2NTZh MGVjYS5jcmwwHwYDVR0jBBgwFoAUU0R/CWOSUHfPZabuD30f5r3OpLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMGVhMTJmZi1mOTU0LTQyMjktODhhMi1kMmM2 NjU2YTBlY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMHBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeuWkKHy4uwk/6oSpogYWZxTyuTbJraiLAtpNrIs4fgvveD+R8lehBE HptXr866V2VkgCs7i3sXXFVsO+ZJdBJbllX1SO7VdwiwVRMwbvMDC3176SCugz0c hjFe6cp0PPVbnJomzZV2b/F67vKCqXauV560UgckwuNoBzemxJpyH3XXI6wo82go Wo4Emu6L/OwcvUKyX63gqhjU5H+z8I/xrtwR30u3DxmlhRQIWIGgSYTTse4S9uUZ HJqQw1t15cAEENc7kXTpLr9nultOjKpNeSvNmK1TXr7jEYkN4+HKtpcthEcKfV6p VvRFMBM8/Zxh/HgU6wgxdoeLKvsGUyE= -----END CERTIFICATE-----Generated at Sat Aug 30 05:08:09 2025 by rpki-client