$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/74c6c214-6aee-3ff1-9584-bfea1eba2eac.roa File: 74c6c214-6aee-3ff1-9584-bfea1eba2eac.roa (raw, json) Hash identifier: EeEzJPeBlk3Ug8OZa7cjmNk0MCCT+8q1+Je3HGzEq3I= Subject key identifier: 4E:30:CA:86:BA:17:97:1C:7C:A4:1D:B9:63:24:4C:A4:59:81:49:BE Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584B891777C616A4DEDAF11AA700 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/74c6c214-6aee-3ff1-9584-bfea1eba2eac.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 5645 IP address blocks: 104.246.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:77:c6:16:a4:de:da:f1:1a:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=91b2ed97-5019-4955-a7f7-2de80d390799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:03:e3:a8:02:43:86:43:f4:dc:8a:77:fc: bb:ea:9b:74:b5:90:be:bc:65:42:1d:b1:48:89:ca: 71:09:4a:af:cd:38:21:44:d4:60:43:ae:ec:dc:4a: df:66:f9:7a:af:e4:6c:3a:45:63:04:8b:df:f0:3b: cb:79:f9:7f:f2:97:ec:c2:da:23:eb:81:2d:f4:3f: 09:aa:4b:ee:12:8c:c7:ca:2f:f6:f1:9a:09:0c:d7: b9:53:06:75:f1:4b:a5:91:72:ae:55:04:7d:4b:d4: 68:d6:d6:32:50:c2:a9:ec:c5:56:ec:2d:34:ba:d5: 8d:10:45:47:05:b0:73:ab:bc:81:88:3a:c5:74:5a: 7d:94:22:6a:28:5a:44:09:ed:0e:0b:03:5d:9e:28: 26:32:68:2b:ae:ea:a3:54:ad:82:b8:78:04:83:d9: bb:02:c5:88:1a:e8:a5:5d:0b:43:a4:99:e3:9f:75: e0:0c:cf:e1:13:1d:2f:02:1d:e2:e1:76:85:13:0f: 38:07:8b:9e:c3:78:5f:3e:e0:ee:64:8a:7f:df:6b: b0:49:2a:4a:90:ee:05:bd:76:d2:be:3f:eb:5e:80: 49:dc:17:c2:7d:71:12:79:69:b0:4a:c7:6c:9c:cf: 68:31:49:e8:eb:a1:4b:2e:aa:cd:6c:b3:8c:ef:39: 17:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:30:CA:86:BA:17:97:1C:7C:A4:1D:B9:63:24:4C:A4:59:81:49:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/74c6c214-6aee-3ff1-9584-bfea1eba2eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 104.246.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:00:70:cb:fe:dd:e1:bb:05:71:4b:cb:80:99:d8:ea:f1:18: 77:9c:83:db:8e:5c:c8:fe:49:8c:62:cf:c8:d3:eb:9b:50:2b: 61:52:2c:38:2a:eb:02:1b:ce:3d:a4:9e:10:cb:64:e3:9c:b3: 4a:35:4f:a3:1b:48:2b:51:42:12:c7:57:a6:a8:14:5a:0e:01: 92:e9:69:d1:bd:12:f2:85:c3:8c:28:7b:dc:80:1b:02:c5:4d: d4:34:d9:00:cc:71:6c:3f:00:71:01:90:85:10:1b:da:6a:d2: 6f:2f:e4:40:6b:76:81:64:47:00:98:ce:5f:6a:40:fe:24:2e: a0:ea:d3:d4:8d:21:48:61:79:05:6f:f6:5e:1d:61:47:ed:a9: f9:21:a7:ad:ee:d1:57:0f:d9:44:bd:39:8d:a2:89:60:bd:4b: e6:57:2d:47:25:e6:80:8e:19:b0:55:7e:8d:8d:a5:dd:1c:e1: b2:5e:10:51:90:04:eb:b2:c8:bd:19:51:c3:91:59:99:73:ff: 77:b9:cc:98:a1:d2:1c:7c:4e:6a:5b:27:a1:53:3e:f0:e2:ec: fd:b2:68:fe:e6:53:39:d3:95:da:8a:92:ca:c5:79:ca:28:47: 6f:1b:a9:2c:70:e1:75:a0:c6:39:45:6e:77:45:ae:c3:90:a7: 31:84:ac:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3fGFqTe2vEapwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk OTFiMmVkOTctNTAxOS00OTU1LWE3ZjctMmRlODBkMzkwNzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqED46gCQ4ZD9NyKd/y76pt0tZC+vGVCHbFI icpxCUqvzTghRNRgQ67s3ErfZvl6r+RsOkVjBIvf8DvLefl/8pfswtoj64Et9D8J qkvuEozHyi/28ZoJDNe5UwZ18UulkXKuVQR9S9Ro1tYyUMKp7MVW7C00utWNEEVH BbBzq7yBiDrFdFp9lCJqKFpECe0OCwNdnigmMmgrruqjVK2CuHgEg9m7AsWIGuil XQtDpJnjn3XgDM/hEx0vAh3i4XaFEw84B4uew3hfPuDuZIp/32uwSSpKkO4FvXbS vj/rXoBJ3BfCfXESeWmwSsdsnM9oMUno66FLLqrNbLOM7zkXmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4wyoa6F5ccfKQduWMkTKRZgUm+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvNzRjNmMyMTQtNmFlZS0z ZmYxLTk1ODQtYmZlYTFlYmEyZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPatMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8AcMv+3eG7BXFLy4CZ2OrxGHecg9uOXMj+SYxiz8jT65tQK2FSLDgq 6wIbzj2knhDLZOOcs0o1T6MbSCtRQhLHV6aoFFoOAZLpadG9EvKFw4woe9yAGwLF TdQ02QDMcWw/AHEBkIUQG9pq0m8v5EBrdoFkRwCYzl9qQP4kLqDq09SNIUhheQVv 9l4dYUftqfkhp63u0VcP2US9OY2iiWC9S+ZXLUcl5oCOGbBVfo2Npd0c4bJeEFGQ BOuyyL0ZUcORWZlz/3e5zJih0hx8TmpbJ6FTPvDi7P2yaP7mUznTldqKksrFecoo R28bqSxw4XWgxjlFbndFrsOQpzGErFU= -----END CERTIFICATE-----Generated at Thu Oct 30 03:18:59 2025 by rpki-client