$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/d237ff63-e29a-334e-8728-d9c0b2284c14.roa File: d237ff63-e29a-334e-8728-d9c0b2284c14.roa (raw, json) Hash identifier: JamyF0PEimlbKpJuJugy7AMCe7WnTDFI9em2t0TKYs8= Subject key identifier: 12:D3:B3:B1:5D:1F:6E:F9:DE:18:63:10:C2:B8:1D:6A:1A:4D:0D:6E Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F4328584B25FC3CC09E671537B8428C40 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/d237ff63-e29a-334e-8728-d9c0b2284c14.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 26512 IP address blocks: 104.244.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:3c:c0:9e:67:15:37:b8:42:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=d100447f-05c1-42eb-b1ff-9e634d486a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:06:61:3f:7e:14:06:48:ee:03:b6:dd:cd:4b: 2e:26:ac:da:a4:1f:65:e2:b5:0a:78:2d:2b:94:d1: af:af:fe:86:33:b8:bf:c3:0f:94:ae:a0:f5:6a:4e: 74:fc:32:02:d9:a0:d8:8e:78:0c:11:5f:b6:6c:f7: 24:1e:3b:49:f1:be:ba:d6:d8:10:5b:7f:cd:c5:8d: 23:14:2e:87:a1:66:08:68:ee:ce:78:8d:76:98:f1: e2:fc:52:42:67:56:4d:38:66:29:40:d9:4f:05:01: b7:7f:d9:9b:06:3f:3a:aa:8d:55:dc:b9:0a:d7:93: b8:28:12:0a:bb:38:34:58:40:10:84:60:7f:f5:85: 37:b0:f2:c0:47:7e:e4:62:86:95:46:d4:b7:4c:bd: 1b:c1:ae:8c:e4:66:2b:20:19:11:92:e1:03:9e:82: aa:53:65:96:f7:35:fb:8f:47:88:a4:62:9d:19:e8: 34:77:4b:9b:57:f5:5d:0d:07:a9:57:09:4b:b2:24: 6c:4f:be:05:20:74:f5:81:24:14:70:fc:28:42:3f: 8d:02:31:f9:8c:11:5b:72:41:e5:52:8d:fc:12:13: c6:8e:3d:1c:0b:99:05:5f:49:2f:60:f3:5e:2b:02: f7:d5:a6:78:c9:d4:10:25:ba:bc:d1:4a:a8:96:2a: 62:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D3:B3:B1:5D:1F:6E:F9:DE:18:63:10:C2:B8:1D:6A:1A:4D:0D:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/d237ff63-e29a-334e-8728-d9c0b2284c14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.244.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:43:6d:02:ac:a1:b1:e2:86:b3:f9:29:2a:5d:b1:36:a4:5d: bf:6b:b1:fb:46:7a:99:f5:5c:08:b0:8a:38:7c:c6:f2:59:d2: 21:7f:cf:30:62:99:b0:65:ed:1f:93:70:db:c2:da:d0:81:38: 1f:ef:7d:94:f7:c1:d3:1d:0f:97:48:d7:da:fe:d4:a8:8f:a6: a5:8b:da:fe:f8:c8:1f:db:64:44:5d:32:67:4e:bd:5c:06:cc: 16:b7:4c:94:48:58:96:77:1f:e4:ce:ab:c8:69:15:da:a5:ca: 5e:d1:88:c8:7a:e7:6c:2f:39:78:7e:4a:da:85:69:68:96:ab: ea:46:cf:d8:1d:91:38:71:46:d3:70:72:e6:62:bd:06:f2:cb: a4:0a:70:f4:1c:a2:80:39:ed:d8:b4:54:a3:d9:c9:10:f6:c9: f7:82:a1:42:00:83:2e:96:71:3f:06:81:67:80:78:b1:42:b8: 62:32:05:87:c5:0b:d2:c3:4c:ea:26:d2:1f:0b:2e:c4:27:8b: f9:7a:ec:92:d6:f6:53:a9:de:7e:50:8b:2f:e0:7a:ae:b6:37: 02:9a:77:f2:d5:ed:fa:50:b1:48:63:a9:d1:70:23:7c:70:3a: fc:e0:9d:74:8a:8b:82:89:40:a0:77:a9:69:31:4a:7a:73:04: 2b:a9:b9:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/DzAnmcVN7hCjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk ZDEwMDQ0N2YtMDVjMS00MmViLWIxZmYtOWU2MzRkNDg2YTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QZhP34UBkjuA7bdzUsuJqzapB9l4rUKeC0r lNGvr/6GM7i/ww+UrqD1ak50/DIC2aDYjngMEV+2bPckHjtJ8b661tgQW3/NxY0j FC6HoWYIaO7OeI12mPHi/FJCZ1ZNOGYpQNlPBQG3f9mbBj86qo1V3LkK15O4KBIK uzg0WEAQhGB/9YU3sPLAR37kYoaVRtS3TL0bwa6M5GYrIBkRkuEDnoKqU2WW9zX7 j0eIpGKdGeg0d0ubV/VdDQepVwlLsiRsT74FIHT1gSQUcPwoQj+NAjH5jBFbckHl Uo38EhPGjj0cC5kFX0kvYPNeKwL31aZ4ydQQJbq80UqolipieQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLTs7FdH2753hhjEMK4HWoaTQ1uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvZDIzN2ZmNjMtZTI5YS0z MzRlLTg3MjgtZDljMGIyMjg0YzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPQRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlDbQKsobHihrP5KSpdsTakXb9rsftGepn1XAiwijh8xvJZ0iF/zzBi mbBl7R+TcNvC2tCBOB/vfZT3wdMdD5dI19r+1KiPpqWL2v74yB/bZERdMmdOvVwG zBa3TJRIWJZ3H+TOq8hpFdqlyl7RiMh652wvOXh+StqFaWiWq+pGz9gdkThxRtNw cuZivQbyy6QKcPQcooA57di0VKPZyRD2yfeCoUIAgy6WcT8GgWeAeLFCuGIyBYfF C9LDTOom0h8LLsQni/l67JLW9lOp3n5Qiy/geq62NwKad/LV7fpQsUhjqdFwI3xw OvzgnXSKi4KJQKB3qWkxSnpzBCupufE= -----END CERTIFICATE-----Generated at Sun Oct 19 09:00:31 2025 by rpki-client