$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/cb0085db-84a3-3eed-9a41-b2fb4a2b89f5.roa File: cb0085db-84a3-3eed-9a41-b2fb4a2b89f5.roa (raw, json) Hash identifier: OvAaETQiCqFsCh2YfpMas5T9Wy6JP3j4dyqnJrnX1UI= Subject key identifier: 41:44:B9:F5:48:5C:22:87:F0:3A:E4:EC:45:29:D9:89:6B:46:92:DB Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F4328584B583C8A9CEFDF1647AD6A7AA0 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/cb0085db-84a3-3eed-9a41-b2fb4a2b89f5.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 26512 IP address blocks: 104.244.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:8a:9c:ef:df:16:47:ad:6a:7a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=04001b69-9562-4569-8702-48a1486e7d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:55:1b:a1:84:bf:d9:1e:84:8b:44:06:9b:77: 3f:a3:01:8a:37:13:48:25:ad:ab:7f:f4:69:f7:20: 28:f7:d6:a7:31:1a:1e:24:0d:e2:e8:f1:c1:5b:af: e6:5b:7c:a1:3d:78:f9:c1:82:fb:d4:c4:a0:57:2b: ee:bb:42:8a:59:9b:db:95:54:b2:fe:a0:7c:a5:b3: 1f:b7:46:0c:04:fb:a1:09:65:65:d4:44:15:d5:bd: 46:ca:a7:01:a7:03:11:cd:2d:b5:7a:57:49:6a:4a: 4f:ea:18:bb:2f:01:eb:04:4e:fc:25:f5:e3:0a:52: 75:ad:9f:43:95:b0:81:e2:a1:20:07:1d:39:e0:6c: fa:83:77:a7:4a:72:10:83:74:58:52:5e:9c:67:c1: 72:02:29:85:43:e3:24:bb:90:d7:65:1c:7b:30:c1: a8:00:14:38:c7:dc:14:4f:e2:5a:12:c0:1e:82:c6: 9f:51:5d:65:85:20:d1:47:ff:4b:89:f9:ed:f5:1f: de:c2:81:78:46:e1:58:7a:76:7e:61:9e:a2:c6:54: c2:d6:b2:8a:d6:e2:0a:8e:f0:36:6e:8a:48:48:c8: 10:f8:35:d2:f0:fc:c6:2d:c4:4b:0c:4c:f2:60:61: 90:1f:84:df:20:cf:9e:d7:16:c3:0f:0d:48:c5:26: db:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:44:B9:F5:48:5C:22:87:F0:3A:E4:EC:45:29:D9:89:6B:46:92:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/cb0085db-84a3-3eed-9a41-b2fb4a2b89f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.244.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:d2:96:2c:94:cd:fa:52:bf:ba:26:31:dd:75:66:85:20:67: a5:c2:76:e5:df:2c:29:b8:c8:84:fc:3e:9d:c0:ad:08:06:c6: 36:c5:31:05:ec:a3:d3:d1:c3:5c:44:bd:3b:4c:5b:43:f6:11: a1:e2:75:84:0c:12:54:3e:86:6e:a8:fb:e4:0a:e9:07:83:65: b9:00:fd:10:a8:f1:33:0a:b7:9f:49:3a:38:93:6e:25:80:94: a2:30:d7:fd:8e:27:fe:6a:cb:f0:25:7d:f7:0d:93:7b:d6:51: 3a:96:13:9f:8d:87:7a:47:cd:2e:94:2e:d4:77:00:a0:80:0f: c3:ef:72:1c:f0:b2:ae:44:16:13:ae:38:28:d4:71:00:6e:76: 98:78:2c:40:8d:0a:ce:d1:fd:34:0b:d8:2b:75:8b:aa:97:97: e6:0c:75:4f:36:9b:5d:e6:1e:e5:d3:3a:5a:19:5e:23:6e:31: a1:09:43:82:7b:5f:41:b9:dc:ec:b3:2a:27:fb:7a:f8:82:e4: d7:bc:2c:72:12:2e:6e:38:9f:22:4f:f8:05:9a:02:7a:29:9c: 43:6c:ef:04:51:ac:c5:10:48:7c:dd:a8:27:d2:b9:18:8b:bd: f0:3d:a2:c7:0f:e3:bf:a4:24:15:bc:ea:52:e7:11:7b:0d:38: 2f:8a:f7:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPIqc798WR61qeqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MDQwMDFiNjktOTU2Mi00NTY5LTg3MDItNDhhMTQ4NmU3ZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lUboYS/2R6Ei0QGm3c/owGKNxNIJa2rf/Rp 9yAo99anMRoeJA3i6PHBW6/mW3yhPXj5wYL71MSgVyvuu0KKWZvblVSy/qB8pbMf t0YMBPuhCWVl1EQV1b1GyqcBpwMRzS21eldJakpP6hi7LwHrBE78JfXjClJ1rZ9D lbCB4qEgBx054Gz6g3enSnIQg3RYUl6cZ8FyAimFQ+Mku5DXZRx7MMGoABQ4x9wU T+JaEsAegsafUV1lhSDRR/9Lifnt9R/ewoF4RuFYenZ+YZ6ixlTC1rKK1uIKjvA2 bopISMgQ+DXS8PzGLcRLDEzyYGGQH4TfIM+e1xbDDw1IxSbbyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFEufVIXCKH8Drk7EUp2YlrRpLbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvY2IwMDg1ZGItODRhMy0z ZWVkLTlhNDEtYjJmYjRhMmI4OWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPQTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjSliyUzfpSv7omMd11ZoUgZ6XCduXfLCm4yIT8Pp3ArQgGxjbFMQXs o9PRw1xEvTtMW0P2EaHidYQMElQ+hm6o++QK6QeDZbkA/RCo8TMKt59JOjiTbiWA lKIw1/2OJ/5qy/AlffcNk3vWUTqWE5+Nh3pHzS6ULtR3AKCAD8Pvchzwsq5EFhOu OCjUcQBudph4LECNCs7R/TQL2Ct1i6qXl+YMdU82m13mHuXTOloZXiNuMaEJQ4J7 X0G53OyzKif7eviC5Ne8LHISLm44nyJP+AWaAnopnENs7wRRrMUQSHzdqCfSuRiL vfA9oscP47+kJBW86lLnEXsNOC+K99o= -----END CERTIFICATE-----Generated at Sun Oct 19 08:59:03 2025 by rpki-client