$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/11f297f1-e2e1-3d90-99a4-085567eae50e.roa File: 11f297f1-e2e1-3d90-99a4-085567eae50e.roa (raw, json) Hash identifier: 4Jhxw+ZVBM3OVvLXlZgb7BEZsliL1YwByiDrPxmFWjM= Subject key identifier: B1:40:31:A3:30:7F:80:7C:CA:F2:29:B1:21:E9:DE:EF:21:5E:C6:4F Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F4328584B95A79CABDED741D4C15C3C10 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/11f297f1-e2e1-3d90-99a4-085567eae50e.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 201814 IP address blocks: 104.245.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:9c:ab:de:d7:41:d4:c1:5c:3c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=fa292fa0-ca3d-410d-916b-8ccc9b2ff890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8c:a8:91:18:ac:2e:b0:62:b8:f1:10:84:93: 30:41:12:8d:68:3e:62:5d:18:b6:b9:e0:8f:a9:b7: c1:84:fc:c3:93:28:c1:29:45:91:1e:d3:1f:99:dc: 5c:82:95:66:1b:d2:82:83:ae:e2:9f:46:e0:e3:fc: e0:eb:8f:69:4f:b2:b9:ed:70:b5:3c:35:53:aa:d2: 09:76:e9:bb:b4:96:c4:5a:8f:04:e7:94:87:d5:b3: a3:0c:18:0b:78:1f:4d:f1:f5:7b:63:6b:c1:d8:04: 36:03:bb:e4:23:ac:d5:5b:f7:ad:cb:11:79:c6:e0: d5:2a:89:d7:90:35:34:50:cb:1a:4f:4a:f6:c8:08: 0b:0f:0a:e4:22:24:d0:18:b4:ee:49:a2:b2:fc:9d: b0:3b:35:94:f2:d1:0d:d6:bb:36:b2:b5:4a:2e:2b: ea:29:38:c8:60:91:f5:03:1e:c4:44:e1:97:a2:db: 81:da:40:9a:36:62:e6:c6:c8:1a:f7:dd:5f:db:b4: 84:48:a1:c5:7a:cf:15:56:20:30:48:4e:61:00:93: 7d:35:10:54:21:70:61:da:96:db:b4:5f:0a:d5:0f: 88:63:42:d9:d4:c9:68:b9:a3:71:4d:77:20:83:33: 98:fc:44:4e:fd:7e:d7:fe:0c:a2:a8:c9:04:77:86: 13:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:40:31:A3:30:7F:80:7C:CA:F2:29:B1:21:E9:DE:EF:21:5E:C6:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/11f297f1-e2e1-3d90-99a4-085567eae50e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 104.245.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:d6:38:92:f4:bb:5b:e2:ca:84:59:95:89:10:a7:ba:87:98: f3:87:1a:72:36:58:bb:1d:9a:13:73:00:2e:0c:64:8e:e8:a7: 17:bf:fe:63:49:6a:92:fc:95:69:34:64:d6:ff:e0:a7:d0:89: d7:2f:97:e6:1a:cf:27:e6:db:87:ab:cd:93:a0:40:72:6c:dc: 2b:7a:15:ba:a5:d8:d4:85:26:65:6e:0f:88:8f:bd:75:52:11: 49:f5:58:d1:55:d3:34:d9:ba:21:fc:61:7a:9a:7c:26:cf:a4: 82:55:1a:62:2d:fa:af:7d:7c:63:c9:13:c3:fb:a9:07:d4:9f: 64:65:70:b1:6e:3a:fe:e0:4c:ec:c9:11:1e:31:d7:d1:11:33: 29:70:e4:36:3d:f3:95:49:f9:a2:7a:fc:8f:8f:0a:ce:89:dc: 57:43:46:25:64:c1:c1:a6:fd:e4:bf:50:d9:60:f4:f1:8c:92: fc:61:a2:3c:bb:59:c7:4f:d0:b7:fb:be:09:34:87:2d:75:2a: c7:5f:25:a6:a9:bd:dd:f7:d2:fd:06:6a:e9:b2:08:6f:34:25: b0:81:11:0c:7e:86:92:70:5e:a0:9f:f5:85:a3:67:fa:0a:8d: 6d:da:af:84:ef:53:58:aa:29:19:b5:f0:8e:aa:0b:ed:17:2e: 1e:ce:0d:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5yr3tdB1MFcPBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZmEyOTJmYTAtY2EzZC00MTBkLTkxNmItOGNjYzliMmZmODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYyokRisLrBiuPEQhJMwQRKNaD5iXRi2ueCP qbfBhPzDkyjBKUWRHtMfmdxcgpVmG9KCg67in0bg4/zg649pT7K57XC1PDVTqtIJ dum7tJbEWo8E55SH1bOjDBgLeB9N8fV7Y2vB2AQ2A7vkI6zVW/etyxF5xuDVKonX kDU0UMsaT0r2yAgLDwrkIiTQGLTuSaKy/J2wOzWU8tEN1rs2srVKLivqKTjIYJH1 Ax7EROGXotuB2kCaNmLmxsga991f27SESKHFes8VViAwSE5hAJN9NRBUIXBh2pbb tF8K1Q+IY0LZ1MlouaNxTXcggzOY/ERO/X7X/gyiqMkEd4YT9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFAMaMwf4B8yvIpsSHp3u8hXsZPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvMTFmMjk3ZjEtZTJlMS0z ZDkwLTk5YTQtMDg1NTY3ZWFlNTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPX1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjWOJL0u1viyoRZlYkQp7qHmPOHGnI2WLsdmhNzAC4MZI7opxe//mNJ apL8lWk0ZNb/4KfQidcvl+Yazyfm24erzZOgQHJs3Ct6Fbql2NSFJmVuD4iPvXVS EUn1WNFV0zTZuiH8YXqafCbPpIJVGmIt+q99fGPJE8P7qQfUn2RlcLFuOv7gTOzJ ER4x19ERMylw5DY985VJ+aJ6/I+PCs6J3FdDRiVkwcGm/eS/UNlg9PGMkvxhojy7 WcdP0Lf7vgk0hy11KsdfJaapvd330v0GaumyCG80JbCBEQx+hpJwXqCf9YWjZ/oK jW3ar4TvU1iqKRm18I6qC+0XLh7ODXg= -----END CERTIFICATE-----Generated at Fri Oct 24 09:46:53 2025 by rpki-client