$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/731e66c1-a71e-3d9f-a838-e78228e9ff90.roa File: 731e66c1-a71e-3d9f-a838-e78228e9ff90.roa (raw, json) Hash identifier: 5TPyfrOYnPl/NoERG8pHjDBCzRy6GDv+4MdL95s2jbk= Subject key identifier: 6C:BF:67:69:A4:B9:D6:60:4E:C7:0F:A4:F6:73:1B:C3:63:4F:A8:9B Certificate issuer: /CN=43ac5ede-1d27-41a5-932c-21832f3ef95c Certificate serial: 010D0C9F4328584BA9325BAA299F79049ED49980 Authority key identifier: 09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/731e66c1-a71e-3d9f-a838-e78228e9ff90.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 11734 IP address blocks: 104.151.136.0/21 maxlen: 24 104.153.192.0/22 maxlen: 24 199.19.208.0/22 maxlen: 24 199.189.64.0/22 maxlen: 24 208.74.28.0/22 maxlen: 24 208.74.48.0/22 maxlen: 24 208.82.204.0/22 maxlen: 24 208.91.48.0/22 maxlen: 24 209.134.48.0/20 maxlen: 24 2607:f148::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:5b:aa:29:9f:79:04:9e:d4:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43ac5ede-1d27-41a5-932c-21832f3ef95c Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=59833e47-3061-4292-97c0-85e3843bd498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b1:ce:a3:a1:b1:64:3e:02:d3:25:ad:a9:bf: 8f:60:28:57:cd:37:6a:ce:28:2e:3e:81:e5:99:d1: e3:6d:41:78:66:d5:06:b9:11:84:ac:71:aa:cb:42: be:39:23:1b:47:65:91:a6:a7:b9:9c:20:55:c3:a9: 38:80:46:9b:bc:6a:91:04:98:c0:57:c0:5a:88:99: 76:ca:aa:a2:a6:34:59:7d:44:51:32:22:d9:18:0d: 9f:8a:ad:73:d0:5a:cf:7c:82:d2:fb:b0:a8:fa:43: 95:98:f8:76:ee:63:1b:95:2e:09:37:f2:3d:4a:e5: d8:2e:3a:47:51:bb:53:ab:05:58:58:1c:de:f1:4d: c6:44:4a:2b:f4:14:1b:63:6f:e4:07:39:9d:81:ec: e8:42:f8:ef:16:ab:63:7d:4e:aa:dd:b6:e7:60:1d: c4:33:08:18:d9:be:fb:a4:5e:65:00:15:98:e9:c5: a1:96:78:ff:f0:0f:fb:bc:66:a0:89:12:8c:b0:29: 8d:8e:8a:ec:3c:63:1c:0f:48:7c:a8:11:5e:9a:9a: 01:a5:19:1f:2b:9d:c1:a0:b2:b4:e5:0e:d5:c2:c7: bf:90:2e:9b:87:6e:57:46:cc:b2:d2:6a:39:fc:18: 9e:5c:89:d1:43:ee:77:f2:7a:3c:41:0f:94:34:59: 84:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BF:67:69:A4:B9:D6:60:4E:C7:0F:A4:F6:73:1B:C3:63:4F:A8:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/731e66c1-a71e-3d9f-a838-e78228e9ff90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl X509v3 Authority Key Identifier: keyid:09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer sbgp-ipAddrBlock: critical IPv4: 104.151.136.0/21 104.153.192.0/22 199.19.208.0/22 199.189.64.0/22 208.74.28.0/22 208.74.48.0/22 208.82.204.0/22 208.91.48.0/22 209.134.48.0/20 IPv6: 2607:f148::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:3f:f6:fa:36:0d:9c:4c:d8:81:cc:a1:13:7a:27:c6:b6:5a: 3c:db:3e:dc:29:c9:ae:be:44:89:b8:7e:04:59:10:0f:37:d6: 01:c0:4a:a6:d5:69:bb:78:0f:bc:29:2b:f9:4d:ff:20:84:c7: b4:31:f0:30:92:67:51:7f:f0:c0:10:ec:b2:44:a6:19:ca:a9: dd:d4:21:d3:89:72:59:88:9d:ed:77:3a:70:14:07:ea:67:bb: 1c:1e:42:ef:92:c1:00:dd:ce:09:b5:0c:e7:d3:96:e1:92:89: f5:33:d1:1d:73:42:08:1a:ef:c4:ad:3e:fc:00:c3:28:bb:e3: 80:01:e3:22:b7:58:99:15:28:3e:d4:71:90:00:9a:c2:cf:c9: 07:b8:8a:af:bc:6e:5b:83:8e:05:14:a7:e9:07:f6:b8:ec:ab: 15:27:72:93:b9:5f:32:e1:24:2a:ec:01:f5:06:1d:d6:ea:32: 2a:a7:2a:db:04:6a:6a:9c:17:dd:40:ed:09:a3:d3:9f:74:4f: 5a:43:a4:17:da:f8:d0:f0:f1:95:83:79:37:39:c5:43:ed:6d: 96:69:db:b2:54:f6:bd:d0:cb:36:25:96:7c:f2:fd:68:26:05: 34:4d:fa:c8:fd:c7:c4:a0:5a:01:29:de:cf:2d:ab:b4:93:4c: 95:e0:f0:7f -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWEupMluqKZ95BJ7UmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNhYzVlZGUtMWQyNy00MWE1LTkzMmMtMjE4MzJmM2Vm OTVjMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NTk4MzNlNDctMzA2MS00MjkyLTk3YzAtODVlMzg0M2JkNDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrHOo6GxZD4C0yWtqb+PYChXzTdqziguPoHl mdHjbUF4ZtUGuRGErHGqy0K+OSMbR2WRpqe5nCBVw6k4gEabvGqRBJjAV8BaiJl2 yqqipjRZfURRMiLZGA2fiq1z0FrPfILS+7Co+kOVmPh27mMblS4JN/I9SuXYLjpH UbtTqwVYWBze8U3GREor9BQbY2/kBzmdgezoQvjvFqtjfU6q3bbnYB3EMwgY2b77 pF5lABWY6cWhlnj/8A/7vGagiRKMsCmNjorsPGMcD0h8qBFempoBpRkfK53BoLK0 5Q7Vwse/kC6bh25XRsyy0mo5/BieXInRQ+538no8QQ+UNFmECwIDAQABo4IDlDCC A5AwHQYDVR0OBBYEFGy/Z2mkudZgTscPpPZzG8NjT6ibMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80M2Fj NWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgzMmYzZWY5NWMvNzMxZTY2YzEtYTcxZS0z ZDlmLWE4MzgtZTc4MjI4ZTlmZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDNhYzVlZGUtMWQyNy00MWE1LTkz MmMtMjE4MzJmM2VmOTVjLzQzYWM1ZWRlLTFkMjctNDFhNS05MzJjLTIxODMyZjNl Zjk1Yy5jcmwwHwYDVR0jBBgwFoAUCT5IKHeuyWZd5/E/OeO3foSfms0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80M2FjNWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgz MmYzZWY5NWMuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDaJeIAwQC aJnAAwQCxxPQAwQCx71AAwQC0EocAwQC0EowAwQC0FLMAwQC0FswAwQE0YYwMA0E AgACMAcDBQAmB/FIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBACM/9vo2DZxM2IHMoRN6J8a2WjzbPtwpya6+ RIm4fgRZEA831gHASqbVabt4D7wpK/lN/yCEx7Qx8DCSZ1F/8MAQ7LJEphnKqd3U IdOJclmIne13OnAUB+pnuxweQu+SwQDdzgm1DOfTluGSifUz0R1zQgga78StPvwA wyi744AB4yK3WJkVKD7UcZAAmsLPyQe4iq+8bluDjgUUp+kH9rjsqxUncpO5XzLh JCrsAfUGHdbqMiqnKtsEamqcF91A7Qmj0590T1pDpBfa+NDw8ZWDeTc5xUPtbZZp 27JU9r3QyzYllnzy/WgmBTRN+sj9x8SgWgEp3s8tq7STTJXg8H8= -----END CERTIFICATE-----Generated at Tue Nov 4 09:25:19 2025 by rpki-client