$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/14c6bd91-791c-37e8-bb9c-d847c0d361c2.roa File: 14c6bd91-791c-37e8-bb9c-d847c0d361c2.roa (raw, json) Hash identifier: Ej/+2GqSm3Y9hAwntTX1gGGz7kWaNkoXXOJ1DbfnYME= Subject key identifier: 8F:76:EC:F7:72:54:81:84:64:12:70:99:B1:74:B8:0C:35:0B:F2:FC Certificate issuer: /CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8 Certificate serial: 010D0C9F4328584B2496C6B2E509E08559C8D280 Authority key identifier: D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/14c6bd91-791c-37e8-bb9c-d847c0d361c2.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 63267 IP address blocks: 104.171.208.0/20 maxlen: 20 2602:fd43::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:c6:b2:e5:09:e0:85:59:c8:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=a67979f5-49d8-491e-bb4f-30db5b192372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:92:ed:05:ba:91:65:0e:42:ed:b8:49:07:7c: cf:8e:8a:41:0c:b1:b0:15:01:7b:62:4b:9a:f5:c7: 55:3d:e7:49:e3:32:fd:93:0c:69:76:61:e8:fa:0e: 0f:a2:1c:f1:6e:06:6c:88:cf:8a:db:3b:b7:1c:1c: 24:56:97:4f:28:43:51:61:58:ff:0b:8f:65:fc:d5: 26:e4:f8:5f:58:2b:98:d4:fd:9f:d6:37:2d:f5:6b: 17:d6:39:d9:0e:d6:78:60:28:1d:4a:fd:3e:4f:5b: 50:08:36:bf:09:90:eb:c3:f8:9d:53:6b:0f:a0:44: 83:5b:ef:d5:42:c8:01:4e:ce:59:0d:11:ba:e3:cc: bc:68:97:e1:32:7c:7d:58:d8:3f:66:dc:db:41:07: ff:7d:13:62:e3:14:66:36:92:5d:c5:78:01:c6:fe: 43:04:a1:39:0e:d0:a7:bb:91:03:c4:6c:e0:43:ac: fd:94:37:b0:1e:38:78:0a:05:31:12:3d:6f:38:34: 3c:69:51:e0:27:ad:18:1f:7c:dc:c5:09:75:bc:a5: 95:16:0c:7f:c8:81:5e:8b:25:f6:a5:a0:5f:b2:58: 28:a0:48:7e:48:6d:18:1d:a0:7d:4d:c1:88:1f:84: c1:41:bf:19:3d:12:4a:1d:ac:13:ad:fa:75:76:3b: 0d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:76:EC:F7:72:54:81:84:64:12:70:99:B1:74:B8:0C:35:0B:F2:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/14c6bd91-791c-37e8-bb9c-d847c0d361c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl X509v3 Authority Key Identifier: keyid:D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer sbgp-ipAddrBlock: critical IPv4: 104.171.208.0/20 IPv6: 2602:fd43::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:ea:b8:14:48:d3:5a:e9:36:7d:3e:d3:ce:35:ad:7e:e1:b6: fa:7c:c1:78:79:89:a3:0c:6a:cc:91:e5:a3:b1:47:35:81:58: 73:22:c8:8f:8a:40:e6:4d:06:9f:0b:7d:f2:07:0e:81:f2:ee: a0:f7:6a:9d:35:3f:27:22:5f:d2:12:12:67:4f:17:c3:a6:9e: 7e:8b:63:0b:aa:9a:e9:93:ba:02:65:d8:e9:cc:91:9b:e6:2a: 01:bf:f5:86:79:2f:5b:48:2a:19:17:25:f9:d7:f9:c7:78:c5: fc:e4:c5:0e:8b:52:6f:b1:53:07:fa:38:32:2a:47:77:9a:c4: b6:11:fc:ab:65:21:20:3c:44:69:a1:2d:15:84:dd:e3:33:e7: 05:61:3f:26:48:1f:a1:fb:56:1f:4c:76:70:06:b2:63:55:db: 03:14:db:93:38:16:18:8f:a5:5f:d6:e2:bc:6c:1a:2c:e4:96: d6:5a:b6:55:b6:d7:46:c9:8c:07:bd:de:e8:ba:2e:08:6b:06: 0f:5c:4c:19:ec:bb:56:03:2c:a7:4c:08:6e:de:b0:f8:51:f4: 61:ad:68:e5:bd:90:13:d3:37:a1:ae:00:03:2b:4e:f2:6d:23: 70:7f:52:9d:8c:9d:48:56:27:b8:3c:31:3f:85:87:ef:1a:4e: da:94:8f:85 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsklsay5QnghVnI0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjdjN2EzNDQtNGJjNy00NjhiLWFkMzAtM2I5YzAwNmNk MGM4MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk YTY3OTc5ZjUtNDlkOC00OTFlLWJiNGYtMzBkYjViMTkyMzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZLtBbqRZQ5C7bhJB3zPjopBDLGwFQF7Ykua 9cdVPedJ4zL9kwxpdmHo+g4PohzxbgZsiM+K2zu3HBwkVpdPKENRYVj/C49l/NUm 5PhfWCuY1P2f1jct9WsX1jnZDtZ4YCgdSv0+T1tQCDa/CZDrw/idU2sPoESDW+/V QsgBTs5ZDRG648y8aJfhMnx9WNg/ZtzbQQf/fRNi4xRmNpJdxXgBxv5DBKE5DtCn u5EDxGzgQ6z9lDewHjh4CgUxEj1vODQ8aVHgJ60YH3zcxQl1vKWVFgx/yIFeiyX2 paBfslgooEh+SG0YHaB9TcGIH4TBQb8ZPRJKHawTrfp1djsNfwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFI927PdyVIGEZBJwmbF0uAw1C/L8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yN2M3 YTM0NC00YmM3LTQ2OGItYWQzMC0zYjljMDA2Y2QwYzgvMTRjNmJkOTEtNzkxYy0z N2U4LWJiOWMtZDg0N2MwZDM2MWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjdjN2EzNDQtNGJjNy00NjhiLWFk MzAtM2I5YzAwNmNkMGM4LzI3YzdhMzQ0LTRiYzctNDY4Yi1hZDMwLTNiOWMwMDZj ZDBjOC5jcmwwHwYDVR0jBBgwFoAU2UqH6Z9k85IcgEkD0OABbmMYM90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yN2M3YTM0NC00YmM3LTQ2OGItYWQzMC0zYjlj MDA2Y2QwYzguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQEaKvQMA4E AgACMAgDBgQmAv1DADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAP6rgUSNNa6TZ9PtPONa1+4bb6fMF4eYmj DGrMkeWjsUc1gVhzIsiPikDmTQafC33yBw6B8u6g92qdNT8nIl/SEhJnTxfDpp5+ i2MLqprpk7oCZdjpzJGb5ioBv/WGeS9bSCoZFyX51/nHeMX85MUOi1JvsVMH+jgy Kkd3msS2EfyrZSEgPERpoS0VhN3jM+cFYT8mSB+h+1YfTHZwBrJjVdsDFNuTOBYY j6Vf1uK8bBos5JbWWrZVttdGyYwHvd7oui4IawYPXEwZ7LtWAyynTAhu3rD4UfRh rWjlvZAT0zehrgADK07ybSNwf1KdjJ1IVie4PDE/hYfvGk7alI+F -----END CERTIFICATE-----Generated at Tue Oct 21 00:14:20 2025 by rpki-client