$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/4da8ae0a-9cd3-393c-8e4d-a951f4ad360c.roa File: 4da8ae0a-9cd3-393c-8e4d-a951f4ad360c.roa (raw, json) Hash identifier: KdKR5edN/IBTks5zhuG0T8EQ/qpuI3JJhvYNk2Ka/CM= Subject key identifier: 89:E9:B3:75:A4:8F:29:08:7F:5C:4E:CC:2B:1A:60:81:2E:82:05:6E Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F4328584B8BE2271910B0B779AA1B3720 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/4da8ae0a-9cd3-393c-8e4d-a951f4ad360c.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 26512 IP address blocks: 104.244.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:27:19:10:b0:b7:79:aa:1b:37:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=7a9d5f76-c4e7-40d5-b6fe-a1b11fc413b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c6:f2:b3:0a:e9:e3:20:29:45:ed:b8:39:22: fe:b6:f1:1c:94:16:a3:7e:23:ed:da:3b:87:b7:9f: 4f:85:3f:38:05:78:8f:87:85:24:5b:98:05:66:71: 73:ad:4c:39:39:ca:e6:4f:5a:01:fe:74:25:3c:fb: f9:d2:58:56:8e:a1:d7:13:3c:22:b3:a5:12:65:4f: 45:45:cf:a2:0f:28:b3:76:28:0d:b9:ca:3e:b5:c1: a1:0a:22:97:46:b1:59:aa:c3:47:58:18:aa:fc:66: 28:0a:95:78:74:c8:c2:35:fa:9f:23:b7:3e:ec:cf: 76:32:89:0e:3c:e0:c5:0c:9d:2d:09:27:31:71:27: 65:4b:07:83:81:52:61:99:4b:e6:c8:36:43:ff:26: d4:99:a6:bb:63:f5:39:8e:e8:f0:32:24:ed:a4:4a: 03:33:73:e2:8c:40:39:cf:3f:99:9a:c6:c0:35:70: a1:09:7e:54:bd:0d:2b:7d:c5:77:6d:32:b3:f8:f0: 2c:5a:2f:22:99:ad:7a:9f:eb:af:51:30:8f:b2:58: 77:af:08:de:94:92:6b:93:18:9e:45:fc:c8:97:16: e3:d0:f9:56:0d:ed:d4:54:99:34:4a:69:51:a0:2c: 7b:c5:e6:f4:22:b9:f9:eb:d0:35:66:67:d7:b9:75: 9b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E9:B3:75:A4:8F:29:08:7F:5C:4E:CC:2B:1A:60:81:2E:82:05:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/4da8ae0a-9cd3-393c-8e4d-a951f4ad360c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.244.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:f6:23:6f:3f:c2:d6:61:21:e1:b0:3a:19:85:2e:ca:ed:f3: 6b:b1:ea:ec:98:7d:16:0c:67:08:d1:68:d3:d5:58:36:6c:66: 4e:78:5d:29:43:50:46:7d:30:b1:a6:e5:bb:e2:e6:58:ce:51: 75:98:94:ca:34:91:6d:70:5b:49:55:99:b6:ff:ba:19:a4:b5: cf:16:de:75:74:15:eb:0d:c7:52:cb:05:ba:88:44:04:e7:6b: 09:57:01:fd:ea:af:59:b6:37:61:bf:d3:43:db:ab:5d:19:42: de:02:6a:c1:54:b8:69:31:69:ea:7e:75:1e:27:21:8e:84:2e: 50:fe:ec:42:d4:37:ed:31:72:82:e3:4b:ec:2f:b7:db:fd:8e: 3e:bc:0a:d0:39:ed:31:75:69:af:2d:07:78:8c:90:49:8d:1d: 97:f8:26:c3:1f:14:37:2a:80:03:d4:23:55:56:02:06:8e:54: c9:6e:74:50:ff:43:fe:78:0b:7e:ce:5b:7f:d4:df:1e:21:d0: c6:0b:fe:e5:36:96:29:e2:49:73:b3:d6:ca:cf:b2:e7:de:8e: 75:e1:f3:22:25:02:0c:d8:60:1c:cf:47:7d:9e:c6:ff:3b:a4: d1:07:cd:5a:da:cf:c9:40:3e:8b:6e:63:9b:d5:cf:0b:9f:76: 82:12:dd:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4icZELC3eaobNyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk N2E5ZDVmNzYtYzRlNy00MGQ1LWI2ZmUtYTFiMTFmYzQxM2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosbyswrp4yApRe24OSL+tvEclBajfiPt2juH t59PhT84BXiPh4UkW5gFZnFzrUw5OcrmT1oB/nQlPPv50lhWjqHXEzwis6USZU9F Rc+iDyizdigNuco+tcGhCiKXRrFZqsNHWBiq/GYoCpV4dMjCNfqfI7c+7M92MokO PODFDJ0tCScxcSdlSweDgVJhmUvmyDZD/ybUmaa7Y/U5jujwMiTtpEoDM3PijEA5 zz+ZmsbANXChCX5UvQ0rfcV3bTKz+PAsWi8ima16n+uvUTCPslh3rwjelJJrkxie RfzIlxbj0PlWDe3UVJk0SmlRoCx7xeb0Irn569A1ZmfXuXWbLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInps3WkjykIf1xOzCsaYIEuggVuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvNGRhOGFlMGEtOWNkMy0z OTNjLThlNGQtYTk1MWY0YWQzNjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADb2I28/wtZhIeGwOhmFLsrt82ux6uyYfRYMZwjRaNPVWDZsZk54XSlD UEZ9MLGm5bvi5ljOUXWYlMo0kW1wW0lVmbb/uhmktc8W3nV0FesNx1LLBbqIRATn awlXAf3qr1m2N2G/00Pbq10ZQt4CasFUuGkxaep+dR4nIY6ELlD+7ELUN+0xcoLj S+wvt9v9jj68CtA57TF1aa8tB3iMkEmNHZf4JsMfFDcqgAPUI1VWAgaOVMludFD/ Q/54C37OW3/U3x4h0MYL/uU2liniSXOz1srPsufejnXh8yIlAgzYYBzPR32exv87 pNEHzVraz8lAPotuY5vVzwufdoIS3UY= -----END CERTIFICATE-----Generated at Sun Oct 19 08:58:46 2025 by rpki-client