$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/5225e9df-ff27-341c-bb4c-a55d2b37245e.roa File: 5225e9df-ff27-341c-bb4c-a55d2b37245e.roa (raw, json) Hash identifier: grZzEBPlmOa3ZW08ytc478mlF4xjNdSWfnBSAoKbH2s= Subject key identifier: A0:C7:93:F7:14:6E:53:F0:6F:D3:E3:21:0C:5F:2F:56:F7:F3:94:94 Certificate issuer: /CN=a1b7e801-0cb9-4602-b697-f6df0c2beb40 Certificate serial: 010D0C9F4328584BAA97A1FA385D1BCF2D51C6C0 Authority key identifier: 98:6A:28:EE:B7:EC:65:16:13:49:EA:17:75:6F:A5:D3:07:5C:3B:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/5225e9df-ff27-341c-bb4c-a55d2b37245e.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 19257 IP address blocks: 104.255.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/a1b7e801-0cb9-4602-b697-f6df0c2beb40.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/a1b7e801-0cb9-4602-b697-f6df0c2beb40.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a1:fa:38:5d:1b:cf:2d:51:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b7e801-0cb9-4602-b697-f6df0c2beb40 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=dbed3dd8-ad7d-4a23-8762-95d39f6a4a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:23:0e:85:93:47:88:d6:5a:56:13:9c:65:83: 47:0b:4d:26:e7:b4:45:da:7f:09:47:ef:6e:2a:44: 14:f0:d4:e5:d6:18:8d:98:37:08:3c:9d:2f:d4:20: 0a:6e:c4:04:43:63:6c:c7:9c:cf:b9:a5:bc:b3:5d: ec:f6:8d:e2:19:26:44:41:c3:bd:52:62:68:d4:16: b6:08:35:62:b0:03:af:73:64:76:41:70:f1:d6:b3: 88:e2:f3:ce:8b:ab:fd:32:41:64:86:cc:b7:76:c6: f1:9d:b5:95:84:75:c7:76:1c:37:8a:5d:80:ba:e0: 1d:85:89:15:87:03:3e:f0:8f:61:18:39:2e:b4:1b: 9e:0e:7e:a7:17:82:71:58:cb:e4:d7:50:90:11:de: d0:37:f9:ec:6a:07:19:c0:96:26:74:99:9d:4c:96: 89:2c:bc:f5:1c:ac:e6:d1:c4:65:c9:cd:1b:55:0b: 37:4c:04:f8:a9:ab:62:03:9c:68:6d:16:9f:f2:fe: 7b:3e:af:bc:f7:38:c9:ca:c6:b4:bb:7b:0b:dc:b9: 09:8d:e0:b8:dd:e9:e3:41:d4:0e:13:9d:7f:9d:a1: 49:29:0b:42:7e:17:9b:ba:e8:cc:e4:2f:97:3e:b9: 83:e7:ad:d2:a7:cc:58:64:d5:49:66:44:44:a0:1d: 26:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C7:93:F7:14:6E:53:F0:6F:D3:E3:21:0C:5F:2F:56:F7:F3:94:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/5225e9df-ff27-341c-bb4c-a55d2b37245e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/a1b7e801-0cb9-4602-b697-f6df0c2beb40.crl X509v3 Authority Key Identifier: keyid:98:6A:28:EE:B7:EC:65:16:13:49:EA:17:75:6F:A5:D3:07:5C:3B:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40.cer sbgp-ipAddrBlock: critical IPv4: 104.255.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:e8:94:53:73:b5:7b:75:ca:cf:dd:b1:a5:b5:b9:20:5c:48: 2d:5e:1c:0b:2b:6a:a7:9e:7e:68:7f:de:85:94:66:36:75:3d: 6b:fc:0f:8a:62:8b:8f:08:a1:68:a4:d1:e3:cf:2e:17:db:33: f4:ee:c2:8c:6d:ce:a5:d8:7f:32:6d:bd:8a:ea:69:c6:72:8b: bf:7e:67:16:dc:f2:8a:b5:15:68:3d:3c:a3:b3:5b:e5:25:77: cb:3f:2a:8a:f7:29:0e:66:8f:52:e2:79:06:31:65:f7:36:b5: b2:96:82:61:12:56:ec:7c:73:74:ad:34:e7:1d:bd:80:7d:b5: ce:07:a6:9e:a5:29:d4:0f:f0:cc:58:11:cb:a2:3e:a0:a8:70: a8:bc:fe:72:21:28:2e:22:ef:69:25:13:98:12:f1:2e:cb:3a: 40:df:14:f5:54:bd:6e:d4:d3:64:dd:d7:22:50:90:29:83:1b: 0f:12:2f:ef:39:ff:ca:b8:b5:24:2b:2c:d2:28:ab:a2:dc:43: 88:ee:3b:dc:3e:22:8f:15:19:0a:46:b9:e4:a0:8e:46:f3:42: 7c:d8:77:41:e7:e3:33:5b:8b:7b:58:c7:10:01:4e:bb:3b:25: 2f:ad:5d:c3:f3:3c:91:2b:d0:74:ad:ba:db:ed:a1:0e:c2:b0: 58:af:3d:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6H6OF0bzy1RxsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiN2U4MDEtMGNiOS00NjAyLWI2OTctZjZkZjBjMmJl YjQwMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk ZGJlZDNkZDgtYWQ3ZC00YTIzLTg3NjItOTVkMzlmNmE0YThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSMOhZNHiNZaVhOcZYNHC00m57RF2n8JR+9u KkQU8NTl1hiNmDcIPJ0v1CAKbsQEQ2Nsx5zPuaW8s13s9o3iGSZEQcO9UmJo1Ba2 CDVisAOvc2R2QXDx1rOI4vPOi6v9MkFkhsy3dsbxnbWVhHXHdhw3il2AuuAdhYkV hwM+8I9hGDkutBueDn6nF4JxWMvk11CQEd7QN/nsagcZwJYmdJmdTJaJLLz1HKzm 0cRlyc0bVQs3TAT4qatiA5xobRaf8v57Pq+89zjJysa0u3sL3LkJjeC43enjQdQO E51/naFJKQtCfhebuujM5C+XPrmD563Sp8xYZNVJZkREoB0mmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDHk/cUblPwb9PjIQxfL1b385SUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMWI3 ZTgwMS0wY2I5LTQ2MDItYjY5Ny1mNmRmMGMyYmViNDAvNTIyNWU5ZGYtZmYyNy0z NDFjLWJiNGMtYTU1ZDJiMzcyNDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTFiN2U4MDEtMGNiOS00NjAyLWI2 OTctZjZkZjBjMmJlYjQwL2ExYjdlODAxLTBjYjktNDYwMi1iNjk3LWY2ZGYwYzJi ZWI0MC5jcmwwHwYDVR0jBBgwFoAUmGoo7rfsZRYTSeoXdW+l0wdcOzYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMWI3ZTgwMS0wY2I5LTQ2MDItYjY5Ny1mNmRm MGMyYmViNDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP+UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnolFNztXt1ys/dsaW1uSBcSC1eHAsraqeefmh/3oWUZjZ1PWv8D4pi i48IoWik0ePPLhfbM/TuwoxtzqXYfzJtvYrqacZyi79+Zxbc8oq1FWg9PKOzW+Ul d8s/Kor3KQ5mj1LieQYxZfc2tbKWgmESVux8c3StNOcdvYB9tc4Hpp6lKdQP8MxY EcuiPqCocKi8/nIhKC4i72klE5gS8S7LOkDfFPVUvW7U02Td1yJQkCmDGw8SL+85 /8q4tSQrLNIoq6LcQ4juO9w+Io8VGQpGueSgjkbzQnzYd0Hn4zNbi3tYxxABTrs7 JS+tXcPzPJEr0HStutvtoQ7CsFivPUc= -----END CERTIFICATE-----Generated at Sun Nov 2 13:15:38 2025 by rpki-client