$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/453ca86f-265f-305d-a6a1-203e03a97f05.roa File: 453ca86f-265f-305d-a6a1-203e03a97f05.roa (raw, json) Hash identifier: ZeqqHqNEDPKiZWegLqlz7gLATUthBj1PdNbzpKTnnpE= Subject key identifier: B0:A1:16:80:C1:71:01:57:9C:71:4A:63:01:B1:3E:86:7B:20:20:30 Certificate issuer: /CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Certificate serial: 010D0C9F4328584AF0F13F62B1B347891F4C85E0 Authority key identifier: C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/453ca86f-265f-305d-a6a1-203e03a97f05.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 64236 IP address blocks: 104.254.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:3f:62:b1:b3:47:89:1f:4c:85:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=339993f4-c572-402f-b2a5-cb3605aba96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fb:09:97:34:8b:c5:d0:a1:2c:cc:de:c5:0f: 8a:ff:90:a3:27:c3:c4:b6:8e:96:ec:d0:02:9c:5f: 7d:ec:ef:38:d0:50:b8:f6:85:8c:de:3e:42:35:08: 0d:b8:e5:7c:41:cc:03:58:04:2b:5e:8f:eb:00:83: ac:ee:fd:53:0c:43:86:a6:45:e7:b3:73:fb:88:73: b9:fa:a0:66:40:58:52:a4:8e:bf:56:e0:19:3b:86: 5d:86:f9:36:61:c9:83:8e:9b:a4:fb:2b:37:af:8b: 73:54:06:e6:02:58:f7:d7:9c:df:60:75:60:62:39: 60:39:d2:49:dd:13:e4:5b:b3:b0:dc:03:2f:2c:87: 82:42:82:2f:99:70:30:44:18:c9:a8:d7:5d:3d:97: f2:04:a7:25:b9:f2:0b:67:c0:0a:96:0a:6f:60:18: 81:6f:46:64:36:f1:6e:55:11:4e:a6:6b:95:2c:c4: a1:90:23:f0:da:74:a1:c4:7d:a5:aa:30:a9:fd:33: 46:4b:ad:e7:14:43:d6:5f:62:56:de:c4:be:1b:d0: e1:6e:e1:bf:25:62:9e:d9:ef:d5:e8:b7:a9:1d:7e: 29:38:2a:cc:b4:80:e2:a9:54:45:88:c3:8c:9e:28: ba:98:9b:c9:28:65:17:80:ba:ad:e3:93:8d:94:2f: 26:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A1:16:80:C1:71:01:57:9C:71:4A:63:01:B1:3E:86:7B:20:20:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/453ca86f-265f-305d-a6a1-203e03a97f05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl X509v3 Authority Key Identifier: keyid:C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer sbgp-ipAddrBlock: critical IPv4: 104.254.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:bc:41:2b:21:14:11:55:2a:68:02:53:ad:eb:3b:59:06:c2: ae:c3:00:b7:b1:73:08:49:97:79:6a:02:d8:8b:24:ce:ad:71: 54:5e:b3:e7:69:b0:af:46:7a:a4:d9:99:0c:53:ea:56:39:06: 47:ac:03:75:d5:98:8c:dc:bc:fe:00:70:e7:3b:ad:e2:51:3e: f7:2b:4b:37:53:50:b8:0d:1d:03:61:71:76:57:61:2e:8f:43: b3:2b:a4:f8:4f:4d:8b:77:0a:46:1a:b6:f3:39:04:5a:08:56: 61:eb:9f:62:76:f4:89:16:7b:63:84:81:79:18:b2:54:e8:27: 6a:0f:11:64:bb:8e:e2:6a:6c:46:63:2e:52:b1:67:fc:cf:2c: b2:7a:0f:4b:9a:74:56:ed:ec:f4:d8:16:b5:a0:e6:22:1f:c6: 23:30:5d:bf:89:34:eb:ed:ed:83:02:c5:7b:04:d3:9b:98:0b: 9d:82:d0:7f:35:f0:c9:a0:25:58:1c:2d:88:bf:6a:33:77:f7: 81:41:2e:7f:e9:3f:23:3c:1d:f9:e5:41:70:c8:13:e2:d8:d6: a6:17:e2:b8:a1:8e:40:09:23:24:56:3f:0f:0f:f7:a7:b1:f9: 3b:c8:93:c8:99:c6:57:9d:a8:de:77:9b:f6:19:b7:40:ad:5c: 81:f6:92:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8T9isbNHiR9MheAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZTQwNjgtZjdlNS00MDRiLTk2OTMtZGNmZjRiMmU4 Zjk1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MzM5OTkzZjQtYzU3Mi00MDJmLWIyYTUtY2IzNjA1YWJhOTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPsJlzSLxdChLMzexQ+K/5CjJ8PEto6W7NAC nF997O840FC49oWM3j5CNQgNuOV8QcwDWAQrXo/rAIOs7v1TDEOGpkXns3P7iHO5 +qBmQFhSpI6/VuAZO4Zdhvk2YcmDjpuk+ys3r4tzVAbmAlj315zfYHVgYjlgOdJJ 3RPkW7Ow3AMvLIeCQoIvmXAwRBjJqNddPZfyBKclufILZ8AKlgpvYBiBb0ZkNvFu VRFOpmuVLMShkCPw2nShxH2lqjCp/TNGS63nFEPWX2JW3sS+G9DhbuG/JWKe2e/V 6LepHX4pOCrMtIDiqVRFiMOMnii6mJvJKGUXgLqt45ONlC8myQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLChFoDBcQFXnHFKYwGxPoZ7ICAwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJl NDA2OC1mN2U1LTQwNGItOTY5My1kY2ZmNGIyZThmOTUvNDUzY2E4NmYtMjY1Zi0z MDVkLWE2YTEtMjAzZTAzYTk3ZjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzViZTQwNjgtZjdlNS00MDRiLTk2 OTMtZGNmZjRiMmU4Zjk1LzM1YmU0MDY4LWY3ZTUtNDA0Yi05NjkzLWRjZmY0YjJl OGY5NS5jcmwwHwYDVR0jBBgwFoAUx5tNJUqL+1JPO26W0tgCYtGpB88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJlNDA2OC1mN2U1LTQwNGItOTY5My1kY2Zm NGIyZThmOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP4YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+8QSshFBFVKmgCU63rO1kGwq7DALexcwhJl3lqAtiLJM6tcVRes+dp sK9GeqTZmQxT6lY5BkesA3XVmIzcvP4AcOc7reJRPvcrSzdTULgNHQNhcXZXYS6P Q7MrpPhPTYt3CkYatvM5BFoIVmHrn2J29IkWe2OEgXkYslToJ2oPEWS7juJqbEZj LlKxZ/zPLLJ6D0uadFbt7PTYFrWg5iIfxiMwXb+JNOvt7YMCxXsE05uYC52C0H81 8MmgJVgcLYi/ajN394FBLn/pPyM8HfnlQXDIE+LY1qYX4rihjkAJIyRWPw8P96ex +TvIk8iZxledqN53m/YZt0CtXIH2ks4= -----END CERTIFICATE-----Generated at Sun Oct 26 01:51:30 2025 by rpki-client