$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/c2bf34f6-c7b4-370f-a50b-79802b09ef3b.roa File: c2bf34f6-c7b4-370f-a50b-79802b09ef3b.roa (raw, json) Hash identifier: dovNF+UBgVSIkJFh3Dr/ZBamgunzPrk2z9+0Ytjt6KE= Subject key identifier: 9F:D9:F7:EE:1A:23:D0:18:05:B4:25:99:8C:CD:27:26:18:8C:1E:E0 Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Certificate serial: 010D0C9F4328584B3986FFE9C7A7E2E7BE729380 Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/c2bf34f6-c7b4-370f-a50b-79802b09ef3b.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 54913 IP address blocks: 78.138.17.0/24 maxlen: 24 103.54.59.0/24 maxlen: 24 104.129.128.0/24 maxlen: 24 104.129.129.0/24 maxlen: 24 104.225.142.0/24 maxlen: 24 104.225.143.0/24 maxlen: 24 213.255.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:86:ff:e9:c7:a7:e2:e7:be:72:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=08f34254-b0d6-440a-8af3-acb07a559c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:91:99:54:bc:04:80:75:83:37:87:74:64:fe: df:01:17:63:bf:d6:cf:93:37:81:76:8c:6a:af:8c: 22:c5:12:ea:c5:85:da:8b:af:09:09:d6:39:56:7a: 6f:2f:89:92:20:dc:57:a3:d0:14:1e:17:60:c3:4d: e7:b3:3e:9b:99:74:13:7d:81:b2:d8:6f:aa:7e:47: 4d:ba:fb:cc:64:74:fd:cd:ae:eb:3e:b9:f5:e9:00: a2:bf:e4:d5:57:be:7d:51:93:92:67:1a:4d:84:6a: a5:ba:c9:6b:9a:af:0f:28:fb:7c:93:56:11:c2:04: 79:72:47:92:9f:e1:3c:e4:5c:43:4d:5b:b9:c6:0d: 5f:81:29:c9:af:32:1c:69:74:6e:4d:38:86:10:12: c0:ac:05:c5:51:a0:30:bb:0e:96:7f:53:6b:4a:17: 46:7b:4a:11:ba:d3:e4:59:79:65:5b:f2:bc:4c:ad: f2:47:7a:66:af:b5:b0:29:40:9d:d3:6f:f5:c9:3d: a1:fd:48:58:98:28:a8:3e:84:83:3c:0b:9d:34:29: 78:5e:7c:4d:f4:67:d4:8f:a4:bd:8e:c9:3c:89:40: 40:00:3f:50:6c:d8:4b:2a:94:cf:af:f1:9d:b6:20: f1:22:bd:d2:85:b0:6f:8c:ba:ac:45:07:53:85:35: 5f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D9:F7:EE:1A:23:D0:18:05:B4:25:99:8C:CD:27:26:18:8C:1E:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/c2bf34f6-c7b4-370f-a50b-79802b09ef3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl X509v3 Authority Key Identifier: keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer sbgp-ipAddrBlock: critical IPv4: 78.138.17.0/24 103.54.59.0/24 104.129.128.0/23 104.225.142.0/23 213.255.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:54:a6:82:59:c0:50:b0:7f:ed:96:64:39:83:6b:d9:62:37: b7:84:c9:23:8d:e4:d6:7b:9f:9b:d0:ab:c1:ff:58:f4:da:a9: e4:6b:08:62:4c:99:6f:e0:cc:34:e7:be:cc:56:7c:b3:2e:bc: 2e:8f:99:b9:c7:62:93:3b:e5:32:1c:ae:d0:ef:c5:e0:b1:d1: 52:ec:31:f9:11:f2:3b:27:56:91:2b:65:95:91:dc:ea:3b:3d: 66:88:9f:16:f0:66:d2:5e:57:75:f7:ee:63:af:1a:77:e0:5a: 69:43:a0:3e:9b:5a:fb:29:51:76:c8:00:8d:86:dd:3d:da:75: 01:7f:59:2d:d5:e4:0c:fb:26:ea:38:15:6d:f6:bc:99:f1:ba: 8c:ba:9c:96:fc:e3:50:b1:8f:73:1c:d1:ef:a2:59:82:03:c3: 3e:27:fe:2a:3b:21:77:d8:01:70:c7:a4:f4:70:0d:f4:ea:07: 7e:75:ef:d5:d3:d2:a7:e2:9a:ad:1f:d6:7b:04:fa:4a:35:93: 6d:9f:c0:af:0d:0e:4c:e6:84:fa:1d:54:4f:16:f7:8f:97:e0: c6:73:fa:18:ca:6e:ab:3f:7c:90:6a:3c:ee:73:83:55:b0:6a: 1c:02:19:32:30:30:7a:52:06:61:da:b5:a5:53:cb:35:a0:87: 01:8b:8e:46 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEs5hv/px6fi575yk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVkYzk3NDEtNTU5ZC00ZDliLTlmOGQtYmUzNTYwNzU0 ZmZkMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk MDhmMzQyNTQtYjBkNi00NDBhLThhZjMtYWNiMDdhNTU5YzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpGZVLwEgHWDN4d0ZP7fARdjv9bPkzeBdoxq r4wixRLqxYXai68JCdY5VnpvL4mSINxXo9AUHhdgw03nsz6bmXQTfYGy2G+qfkdN uvvMZHT9za7rPrn16QCiv+TVV759UZOSZxpNhGqluslrmq8PKPt8k1YRwgR5ckeS n+E85FxDTVu5xg1fgSnJrzIcaXRuTTiGEBLArAXFUaAwuw6Wf1NrShdGe0oRutPk WXllW/K8TK3yR3pmr7WwKUCd02/1yT2h/UhYmCioPoSDPAudNCl4XnxN9GfUj6S9 jsk8iUBAAD9QbNhLKpTPr/GdtiDxIr3ShbBvjLqsRQdThTVfmwIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFJ/Z9+4aI9AYBbQlmYzNJyYYjB7gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NWRj OTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1NjA3NTRmZmQvYzJiZjM0ZjYtYzdiNC0z NzBmLWE1MGItNzk4MDJiMDllZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTVkYzk3NDEtNTU5ZC00ZDliLTlm OGQtYmUzNTYwNzU0ZmZkLzk1ZGM5NzQxLTU1OWQtNGQ5Yi05ZjhkLWJlMzU2MDc1 NGZmZC5jcmwwHwYDVR0jBBgwFoAU6PV/ieoECgMeYW7fmRTMWxY4sJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NWRjOTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1 NjA3NTRmZmQuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATooRAwQA ZzY7AwQBaIGAAwQBaOGOAwQA1f/RMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA9UpoJZwFCwf+2WZDmDa9li N7eEySON5NZ7n5vQq8H/WPTaqeRrCGJMmW/gzDTnvsxWfLMuvC6PmbnHYpM75TIc rtDvxeCx0VLsMfkR8jsnVpErZZWR3Oo7PWaInxbwZtJeV3X37mOvGnfgWmlDoD6b WvspUXbIAI2G3T3adQF/WS3V5Az7Juo4FW32vJnxuoy6nJb841Cxj3Mc0e+iWYID wz4n/io7IXfYAXDHpPRwDfTqB35179XT0qfimq0f1nsE+ko1k22fwK8NDkzmhPod VE8W94+X4MZz+hjKbqs/fJBqPO5zg1WwahwCGTIwMHpSBmHataVTyzWghwGLjkY= -----END CERTIFICATE-----Generated at Mon Oct 20 07:35:59 2025 by rpki-client