$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f4a678fd-ed16-368c-9b2f-0942aeefaad2.roa File: f4a678fd-ed16-368c-9b2f-0942aeefaad2.roa (raw, json) Hash identifier: NDa+oVE+H0o3ct2K47knsps1xeAT/HMmQLxAWDsi3dI= Subject key identifier: 62:D5:15:A7:5A:94:EC:01:DF:E8:54:63:CF:13:48:51:BD:EA:87:49 Certificate issuer: /CN=f9b1a11d-20ed-494f-a473-5ebece521a34 Certificate serial: 010D0C9F4328584B1D9C2C4322AF5D20FA23B7C0 Authority key identifier: 33:70:29:EA:A3:F0:44:D7:D8:E5:CB:AC:9F:DC:34:E4:50:24:B5:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f4a678fd-ed16-368c-9b2f-0942aeefaad2.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 394690 IP address blocks: 104.247.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:2c:43:22:af:5d:20:fa:23:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9b1a11d-20ed-494f-a473-5ebece521a34 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=b28845c2-5502-4bc6-8a7d-fa06b01ebe50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7d:53:3b:45:04:c7:62:da:e0:0b:9a:ee:c3: 64:de:43:a0:33:40:08:b1:36:2d:32:36:97:34:79: bf:a2:05:93:4d:35:3e:97:43:bf:c6:d7:a9:f4:a9: e3:81:bb:db:db:d4:ab:37:17:f4:a5:b3:c6:bc:62: d8:23:47:5d:79:c0:23:57:47:3b:ad:02:9e:aa:f5: 3f:55:d3:a7:06:56:91:80:22:b2:18:3a:5e:63:01: 0d:de:61:32:7e:c4:a2:fb:2d:5a:0f:3c:20:29:4a: 25:49:10:1d:68:30:8f:c3:a3:ee:fa:02:46:21:7f: a7:8d:8b:08:f9:31:2e:0b:3e:88:f7:cd:e4:aa:41: 9b:3f:b5:ff:28:17:d7:29:d7:7e:80:7a:d2:4d:68: 44:ed:4a:5a:bb:07:ec:46:1b:28:39:0f:45:d1:1a: 8a:ac:ca:35:5c:a0:fe:fc:68:c0:ad:46:a3:e7:2b: 51:d2:9c:17:7d:2e:51:f4:7f:ee:3b:02:1d:12:bf: 04:8d:b6:0a:9b:af:b8:14:56:b6:af:43:fd:54:1c: d3:84:b5:0f:db:c2:3f:2f:ff:68:18:03:9c:46:62: 7b:b9:11:a5:3d:39:9c:c1:ee:e9:88:a7:95:2d:90: 89:72:70:92:b2:ed:df:ac:b6:7c:07:a3:2a:24:f6: 56:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D5:15:A7:5A:94:EC:01:DF:E8:54:63:CF:13:48:51:BD:EA:87:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f4a678fd-ed16-368c-9b2f-0942aeefaad2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.crl X509v3 Authority Key Identifier: keyid:33:70:29:EA:A3:F0:44:D7:D8:E5:CB:AC:9F:DC:34:E4:50:24:B5:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34.cer sbgp-ipAddrBlock: critical IPv4: 104.247.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:61:78:4e:52:11:39:0b:e6:c3:3a:11:0e:37:10:47:44:16: db:c0:8d:1a:3f:f2:bf:87:b7:ef:80:a1:c7:c5:04:b5:43:9b: e9:93:1d:eb:b8:3e:46:82:8a:a5:ff:41:18:d4:1b:3a:95:d7: 27:c6:d4:74:35:7e:7b:e9:f3:2f:92:a1:d9:bd:4a:e8:63:31: 08:6b:d4:8c:49:91:9f:37:3c:32:11:2f:39:20:e6:2d:29:bc: 4b:dc:b7:94:de:46:60:7f:af:4c:b1:6d:6d:e6:d2:bb:08:7c: cd:26:3b:27:60:2b:58:07:5b:10:38:7d:3b:84:43:1c:0a:46: 2f:a7:bd:99:87:97:b1:d1:f7:7c:cc:9a:48:37:74:41:84:ef: 4f:05:d0:75:5e:cd:ea:c9:81:f2:e0:4c:cd:a9:c6:c9:dc:6b: d7:d8:07:95:f0:77:ea:ac:f6:b1:8a:5b:c1:a3:b9:80:8b:c8: aa:a5:87:cb:45:4f:7f:df:a4:96:cc:bb:40:5a:bc:b9:3b:b5: 9b:5d:33:1d:77:f8:b1:98:a8:15:0b:f4:75:b5:05:97:65:a5: f9:b2:2f:02:75:b4:2e:d6:f2:18:cb:d7:16:48:99:93:b1:3b: 04:eb:83:34:42:db:94:27:ab:36:9e:69:bf:ed:68:ea:e5:10: 18:18:51:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnCxDIq9dIPojt8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjliMWExMWQtMjBlZC00OTRmLWE0NzMtNWViZWNlNTIx YTM0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk YjI4ODQ1YzItNTUwMi00YmM2LThhN2QtZmEwNmIwMWViZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH1TO0UEx2La4Aua7sNk3kOgM0AIsTYtMjaX NHm/ogWTTTU+l0O/xtep9Knjgbvb29SrNxf0pbPGvGLYI0ddecAjV0c7rQKeqvU/ VdOnBlaRgCKyGDpeYwEN3mEyfsSi+y1aDzwgKUolSRAdaDCPw6Pu+gJGIX+njYsI +TEuCz6I983kqkGbP7X/KBfXKdd+gHrSTWhE7UpauwfsRhsoOQ9F0RqKrMo1XKD+ /GjArUaj5ytR0pwXfS5R9H/uOwIdEr8EjbYKm6+4FFa2r0P9VBzThLUP28I/L/9o GAOcRmJ7uRGlPTmcwe7piKeVLZCJcnCSsu3frLZ8B6MqJPZWvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLVFadalOwB3+hUY88TSFG96odJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mOWIx YTExZC0yMGVkLTQ5NGYtYTQ3My01ZWJlY2U1MjFhMzQvZjRhNjc4ZmQtZWQxNi0z NjhjLTliMmYtMDk0MmFlZWZhYWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjliMWExMWQtMjBlZC00OTRmLWE0 NzMtNWViZWNlNTIxYTM0L2Y5YjFhMTFkLTIwZWQtNDk0Zi1hNDczLTVlYmVjZTUy MWEzNC5jcmwwHwYDVR0jBBgwFoAUM3Ap6qPwRNfY5cusn9w05FAktSkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mOWIxYTExZC0yMGVkLTQ5NGYtYTQ3My01ZWJl Y2U1MjFhMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPd9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1heE5SETkL5sM6EQ43EEdEFtvAjRo/8r+Ht++AocfFBLVDm+mTHeu4 PkaCiqX/QRjUGzqV1yfG1HQ1fnvp8y+Sodm9SuhjMQhr1IxJkZ83PDIRLzkg5i0p vEvct5TeRmB/r0yxbW3m0rsIfM0mOydgK1gHWxA4fTuEQxwKRi+nvZmHl7HR93zM mkg3dEGE708F0HVezerJgfLgTM2pxsnca9fYB5Xwd+qs9rGKW8GjuYCLyKqlh8tF T3/fpJbMu0BavLk7tZtdMx13+LGYqBUL9HW1BZdlpfmyLwJ1tC7W8hjL1xZImZOx OwTrgzRC25Qnqzaeab/taOrlEBgYUYE= -----END CERTIFICATE-----Generated at Wed Sep 17 00:23:08 2025 by rpki-client