$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/643b1254-d7f1-376e-9ab7-2d0174638962.roa File: 643b1254-d7f1-376e-9ab7-2d0174638962.roa (raw, json) Hash identifier: OrIll1J8z5xosanxkG2peazzV1zPbDnn0TvGNAQf5rc= Subject key identifier: CA:96:C6:17:6C:B7:30:74:64:61:54:82:0E:B5:11:D4:C3:DA:6F:55 Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F4328584B41E71495E45D53619D4E4CA0 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/643b1254-d7f1-376e-9ab7-2d0174638962.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 397423 IP address blocks: 104.245.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:14:95:e4:5d:53:61:9d:4e:4c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=640635ed-08d9-4a38-9ac0-7f1c2be3cf4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6d:45:2b:cb:45:12:11:99:53:19:71:c9:2c: c4:7c:f2:4e:83:cb:f0:b6:9e:7c:7b:3b:a8:d1:36: 63:cb:8e:7f:d5:ae:de:79:cb:93:c2:6e:f8:bc:0f: 89:5b:28:bb:76:45:f1:0e:17:b6:11:0d:e8:5f:3c: 85:22:1d:9e:eb:c6:28:85:16:b8:8f:69:1a:10:3e: 0e:1a:70:1c:18:f3:6d:92:f8:c7:14:ec:ab:f8:52: c5:be:82:f0:90:6b:c6:e4:3c:b5:36:9a:f5:44:08: 3a:bb:fc:88:e3:37:46:8c:b8:5d:d1:97:ed:aa:1b: 0d:98:fd:48:48:9c:f0:a3:dd:3b:d4:bc:6d:4b:d2: 73:de:4f:e7:b9:d1:2e:8d:59:49:b6:b8:08:40:60: d3:db:1b:13:7a:d9:1b:19:d3:1f:8e:5d:e3:3c:c7: 11:58:8e:97:ee:47:4b:09:17:bd:16:67:1b:9b:89: fe:5f:f8:ac:46:6d:4d:f1:e0:20:47:ef:21:9d:af: 2b:16:df:c7:d6:49:0f:4d:c3:6b:c6:87:06:38:33: 40:97:58:8e:42:c7:be:f8:34:a4:ba:4a:49:11:e8: 89:53:0f:0e:a1:fc:4d:f8:d4:08:ef:b2:ef:1e:4d: 48:70:23:c4:51:cf:6d:87:d5:7d:90:ec:5f:0e:55: 0e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:96:C6:17:6C:B7:30:74:64:61:54:82:0E:B5:11:D4:C3:DA:6F:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/643b1254-d7f1-376e-9ab7-2d0174638962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 104.245.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:a0:57:c1:66:85:df:b2:c3:38:59:65:70:f8:95:85:4f:14: 72:0f:6a:3a:ae:c7:75:88:04:03:27:6a:b5:57:ac:1d:e4:3e: 70:ec:3e:8b:0a:8c:26:06:21:20:f6:f4:07:da:63:40:21:05: 66:3f:b8:11:ac:1f:c6:d3:1e:3c:1b:8f:87:51:01:ac:4c:73: d2:85:da:e6:05:75:c2:b7:be:40:94:65:35:3b:32:8f:56:a3: b0:95:59:1a:35:3b:eb:de:75:73:8e:fd:75:ec:d2:7e:46:1d: 34:f6:7a:c4:59:12:b8:f3:85:27:49:1e:33:34:4c:20:0f:66: 62:04:28:f7:b2:48:63:75:da:2d:da:4c:c5:7c:f4:78:54:2c: e0:cc:6d:a0:d7:fb:ed:d8:c0:b1:91:83:33:22:71:76:e7:42: 1c:70:6a:df:df:b4:78:f6:1a:21:f0:bf:8d:11:72:9d:84:c9: 6c:a8:4b:ca:2d:89:ba:47:1c:4f:01:71:8c:6b:ea:8b:b2:21: 6f:f4:ea:0f:40:09:ee:58:b4:36:bf:af:b4:82:84:52:c2:1b: e8:03:a3:03:83:bd:7e:a9:e1:75:24:51:16:a2:33:8e:65:84: 3a:d3:f7:d7:95:ae:a1:99:0b:de:7c:81:5b:b4:06:12:77:9f: cb:15:8b:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xSV5F1TYZ1OTKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NjQwNjM1ZWQtMDhkOS00YTM4LTlhYzAtN2YxYzJiZTNjZjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA421FK8tFEhGZUxlxySzEfPJOg8vwtp58ezuo 0TZjy45/1a7eecuTwm74vA+JWyi7dkXxDhe2EQ3oXzyFIh2e68YohRa4j2kaED4O GnAcGPNtkvjHFOyr+FLFvoLwkGvG5Dy1Npr1RAg6u/yI4zdGjLhd0ZftqhsNmP1I SJzwo9071LxtS9Jz3k/nudEujVlJtrgIQGDT2xsTetkbGdMfjl3jPMcRWI6X7kdL CRe9Fmcbm4n+X/isRm1N8eAgR+8hna8rFt/H1kkPTcNrxocGODNAl1iOQse++DSk ukpJEeiJUw8OofxN+NQI77LvHk1IcCPEUc9th9V9kOxfDlUO0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqWxhdstzB0ZGFUgg61EdTD2m9VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvNjQzYjEyNTQtZDdmMS0z NzZlLTlhYjctMmQwMTc0NjM4OTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6gV8Fmhd+ywzhZZXD4lYVPFHIPajqux3WIBAMnarVXrB3kPnDsPosK jCYGISD29AfaY0AhBWY/uBGsH8bTHjwbj4dRAaxMc9KF2uYFdcK3vkCUZTU7Mo9W o7CVWRo1O+vedXOO/XXs0n5GHTT2esRZErjzhSdJHjM0TCAPZmIEKPeySGN12i3a TMV89HhULODMbaDX++3YwLGRgzMicXbnQhxwat/ftHj2GiHwv40Rcp2EyWyoS8ot ibpHHE8BcYxr6ouyIW/06g9ACe5YtDa/r7SChFLCG+gDowODvX6p4XUkURaiM45l hDrT99eVrqGZC958gVu0BhJ3n8sVi8c= -----END CERTIFICATE-----Generated at Sat Oct 25 09:41:40 2025 by rpki-client