$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/feb035d0-a74a-3791-8fee-e996319d6a19.roa File: feb035d0-a74a-3791-8fee-e996319d6a19.roa (raw, json) Hash identifier: 7CCkzMCjVqaZvF5ZYGJAvfwc1QHMLtHIOPEschibmU0= Subject key identifier: 54:58:A5:C2:DA:13:A8:2C:81:AF:CC:64:77:34:58:DC:CA:FA:C2:02 Certificate issuer: /CN=a1b7e801-0cb9-4602-b697-f6df0c2beb40 Certificate serial: 010D0C9F4328584BAA97A4E992F5A1C11162DE00 Authority key identifier: 98:6A:28:EE:B7:EC:65:16:13:49:EA:17:75:6F:A5:D3:07:5C:3B:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/feb035d0-a74a-3791-8fee-e996319d6a19.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 139341 IP address blocks: 104.255.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/a1b7e801-0cb9-4602-b697-f6df0c2beb40.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/a1b7e801-0cb9-4602-b697-f6df0c2beb40.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a4:e9:92:f5:a1:c1:11:62:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b7e801-0cb9-4602-b697-f6df0c2beb40 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=1952bb7c-d17e-4c5e-ae05-eecdc569bdbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:56:82:be:40:1e:7c:9e:55:78:b7:60:48:9f: 74:6d:17:3c:32:91:21:6b:92:18:97:a9:93:8b:c5: 42:90:fc:ce:b4:ba:6c:58:23:55:47:9c:64:1d:2b: 96:35:6b:a9:b5:b6:b1:fa:da:a0:21:de:9f:cb:4e: 17:43:df:0f:f4:ff:b5:ab:c6:22:8f:1e:82:c0:7d: e9:7e:3b:c3:a9:d3:7b:94:bf:08:de:e2:af:d9:25: 73:7e:a7:16:cd:90:58:db:38:0e:dc:26:7e:e7:33: 4b:58:42:94:c6:fc:c9:62:d7:1c:9f:ed:fd:72:06: 12:ff:4b:24:eb:5a:66:56:56:cc:d5:8f:b6:3b:e7: 74:02:10:7b:f4:cd:d0:05:13:32:6a:9d:9e:fe:89: cb:51:85:1f:5c:5e:82:d1:74:28:86:40:83:57:09: 08:ec:13:f6:7f:c7:1a:ad:81:97:d4:4e:27:b8:eb: 74:78:26:39:46:98:47:48:23:44:d1:b0:69:4c:56: e1:b5:83:df:28:44:d9:b4:e4:64:75:74:f2:cc:6d: 51:71:c0:73:ab:45:a7:b3:3b:ce:a9:f2:43:2b:b8: 65:5c:b7:ef:b9:6d:24:f2:b5:38:31:90:37:26:c9: a3:35:c8:a5:af:45:f1:46:22:4f:c6:6c:6a:2b:10: a3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:58:A5:C2:DA:13:A8:2C:81:AF:CC:64:77:34:58:DC:CA:FA:C2:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/feb035d0-a74a-3791-8fee-e996319d6a19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/a1b7e801-0cb9-4602-b697-f6df0c2beb40.crl X509v3 Authority Key Identifier: keyid:98:6A:28:EE:B7:EC:65:16:13:49:EA:17:75:6F:A5:D3:07:5C:3B:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40.cer sbgp-ipAddrBlock: critical IPv4: 104.255.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:b9:15:46:70:ab:2e:f6:1b:55:57:df:ec:a1:e0:07:aa:db: 7b:48:91:f1:31:66:75:2e:77:7b:3a:05:04:55:8d:d1:ed:7f: 66:e4:49:b4:50:21:a7:eb:0c:b5:3f:2f:48:91:ea:0f:34:1c: 56:78:62:f3:26:ae:d9:e6:b3:a7:db:3a:d7:2a:ec:ca:e2:2a: 68:01:0a:fa:4c:e0:aa:db:fb:2b:b2:7e:74:f5:c3:38:e1:0f: 54:ff:73:b7:d8:40:22:64:55:be:54:10:ee:24:16:a8:5f:dc: a1:ec:ee:20:ff:d9:6b:03:bb:ec:8c:f1:98:88:0a:58:32:cd: ac:95:f4:03:0f:34:74:a0:75:1d:a1:c1:24:93:d9:fc:d6:93: f1:a8:ca:c8:0d:6f:7d:82:f8:20:d6:f9:a1:71:ef:09:d1:0e: 95:59:40:b4:44:e5:48:ec:a0:f6:8a:85:73:37:29:c9:f9:50: eb:f2:dd:d3:eb:48:0d:87:f5:52:57:29:3e:48:f3:3d:9f:ae: b0:df:3a:a5:81:98:3c:d7:63:c2:da:80:4f:80:32:10:78:92: 30:80:44:c4:e9:c5:6c:64:2f:5b:f5:a2:fb:e0:ee:67:9d:b9: 84:9f:bc:5b:1c:6f:2d:54:41:15:13:17:02:9e:45:7a:a9:13: f0:31:92:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6TpkvWhwRFi3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiN2U4MDEtMGNiOS00NjAyLWI2OTctZjZkZjBjMmJl YjQwMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk MTk1MmJiN2MtZDE3ZS00YzVlLWFlMDUtZWVjZGM1NjliZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1aCvkAefJ5VeLdgSJ90bRc8MpEha5IYl6mT i8VCkPzOtLpsWCNVR5xkHSuWNWuptbax+tqgId6fy04XQ98P9P+1q8Yijx6CwH3p fjvDqdN7lL8I3uKv2SVzfqcWzZBY2zgO3CZ+5zNLWEKUxvzJYtccn+39cgYS/0sk 61pmVlbM1Y+2O+d0AhB79M3QBRMyap2e/onLUYUfXF6C0XQohkCDVwkI7BP2f8ca rYGX1E4nuOt0eCY5RphHSCNE0bBpTFbhtYPfKETZtORkdXTyzG1RccBzq0WnszvO qfJDK7hlXLfvuW0k8rU4MZA3JsmjNcilr0XxRiJPxmxqKxCjgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRYpcLaE6gsga/MZHc0WNzK+sICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMWI3 ZTgwMS0wY2I5LTQ2MDItYjY5Ny1mNmRmMGMyYmViNDAvZmViMDM1ZDAtYTc0YS0z NzkxLThmZWUtZTk5NjMxOWQ2YTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTFiN2U4MDEtMGNiOS00NjAyLWI2 OTctZjZkZjBjMmJlYjQwL2ExYjdlODAxLTBjYjktNDYwMi1iNjk3LWY2ZGYwYzJi ZWI0MC5jcmwwHwYDVR0jBBgwFoAUmGoo7rfsZRYTSeoXdW+l0wdcOzYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMWI3ZTgwMS0wY2I5LTQ2MDItYjY5Ny1mNmRm MGMyYmViNDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP+UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHy5FUZwqy72G1VX3+yh4Aeq23tIkfExZnUud3s6BQRVjdHtf2bkSbRQ IafrDLU/L0iR6g80HFZ4YvMmrtnms6fbOtcq7MriKmgBCvpM4Krb+yuyfnT1wzjh D1T/c7fYQCJkVb5UEO4kFqhf3KHs7iD/2WsDu+yM8ZiIClgyzayV9AMPNHSgdR2h wSST2fzWk/GoysgNb32C+CDW+aFx7wnRDpVZQLRE5UjsoPaKhXM3Kcn5UOvy3dPr SA2H9VJXKT5I8z2frrDfOqWBmDzXY8LagE+AMhB4kjCARMTpxWxkL1v1ovvg7med uYSfvFscby1UQRUTFwKeRXqpE/Axkp4= -----END CERTIFICATE-----Generated at Sat Nov 1 07:19:03 2025 by rpki-client