$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa File: a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa (raw, json) Hash identifier: L+ZzSFTOO/Bb4Su9sat8ASBGg5VuTRP5EH16D8di6MM= Subject key identifier: 27:0D:9D:91:B2:AA:5F:B6:8A:4E:79:5E:CA:C9:2D:06:3C:EE:06:3C Certificate issuer: /CN=900920d7-dc26-412d-b92a-7af35af2cc24 Certificate serial: 010D0C9F4328584A9D30E506D7512BDAE706DE80 Authority key identifier: D7:72:A6:9A:5A:9A:5E:31:05:1B:21:51:B8:3B:C7:48:89:48:D3:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 36694 IP address blocks: 104.219.228.0/22 maxlen: 24 2620:11d:1000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:e5:06:d7:51:2b:da:e7:06:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900920d7-dc26-412d-b92a-7af35af2cc24 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=7460f574-92e0-43ab-a397-601f040384a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2e:5c:11:b5:32:10:34:95:44:1c:d8:02:f6: f3:89:63:f1:69:2b:18:a2:f1:ba:94:b3:5d:6d:ad: 1e:56:6d:9a:97:10:2b:6c:46:59:f7:a3:d2:ab:cb: 24:d1:96:3e:e2:fe:43:3a:ad:e1:20:7b:81:92:bc: 9a:35:e7:74:6a:ab:bf:e0:c6:77:b7:60:f6:42:30: 5a:60:ef:ac:dd:3b:4d:24:f9:cb:74:04:5f:4b:c4: 94:a2:1c:67:03:85:3f:2b:22:15:81:41:4f:72:d4: ce:b8:06:44:6f:bb:10:67:a9:6b:b7:ac:88:52:a8: a8:81:b7:20:11:9f:4e:4b:0b:38:33:69:23:fa:a3: 74:63:46:60:7e:7b:28:84:0f:1d:84:af:bf:51:82: 96:fe:07:0b:dc:5d:75:fd:e4:26:44:a7:aa:64:1f: f3:13:a7:13:7c:37:fe:86:98:ee:b0:33:be:b5:cb: db:4b:a5:e8:42:b0:1c:3b:fe:c2:ac:de:0e:42:6b: 33:10:15:7b:7c:7c:d3:a2:6f:65:2f:9c:e1:fd:0a: 4b:f1:78:8c:e0:fd:d2:b4:64:0a:8e:a1:b9:93:a8: 4e:84:cc:b6:5d:71:17:83:ae:2e:57:b5:4f:54:4c: 37:12:9e:75:a6:13:e7:51:73:6d:d1:af:e2:4a:57: 2f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0D:9D:91:B2:AA:5F:B6:8A:4E:79:5E:CA:C9:2D:06:3C:EE:06:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.crl X509v3 Authority Key Identifier: keyid:D7:72:A6:9A:5A:9A:5E:31:05:1B:21:51:B8:3B:C7:48:89:48:D3:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer sbgp-ipAddrBlock: critical IPv4: 104.219.228.0/22 IPv6: 2620:11d:1000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:ff:4f:9d:1f:b0:1a:49:fe:14:8d:11:89:59:8e:8b:0d:27: 9b:23:1c:45:60:9c:25:a7:0b:5b:02:41:49:c4:2e:0f:f8:61: 92:5c:39:3e:ca:d1:90:a0:99:b6:3a:65:47:c8:4b:6d:d5:e7: 3d:26:5c:2e:6c:75:ab:35:65:c9:80:49:79:eb:c5:a6:2e:38: 6e:a9:2a:eb:61:35:81:75:34:69:de:72:0b:85:76:69:f8:16: 10:ae:71:9f:38:32:ee:ea:5c:31:81:f7:7b:40:83:32:a4:48: 48:a8:2b:a5:63:9b:fe:86:c9:fc:c9:52:4f:2d:8a:5d:00:77: 43:c2:2a:85:0e:1b:8c:83:51:86:3f:64:95:5e:a3:00:64:59: 32:78:95:3d:b8:b8:6c:a0:0f:57:c6:12:64:eb:4f:a7:4d:c3: a3:08:c5:2f:ee:66:7c:1c:58:c1:c2:40:68:31:9f:e3:3a:b4: 6c:86:31:ce:55:a4:c0:5e:71:70:6b:c4:b4:4d:71:4f:58:36: ad:8e:68:de:9f:a9:6d:59:09:b3:ea:fc:e0:d1:78:00:8e:69: 5f:12:06:e5:3c:2f:54:d9:f7:fe:06:01:de:ea:70:f0:35:d5: 7f:05:b7:07:01:b5:b4:ba:0e:88:4d:e4:66:99:8e:47:f5:96: bd:f2:bf:b3 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEqdMOUG11Er2ucG3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwOTIwZDctZGMyNi00MTJkLWI5MmEtN2FmMzVhZjJj YzI0MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk NzQ2MGY1NzQtOTJlMC00M2FiLWEzOTctNjAxZjA0MDM4NGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS5cEbUyEDSVRBzYAvbziWPxaSsYovG6lLNd ba0eVm2alxArbEZZ96PSq8sk0ZY+4v5DOq3hIHuBkryaNed0aqu/4MZ3t2D2QjBa YO+s3TtNJPnLdARfS8SUohxnA4U/KyIVgUFPctTOuAZEb7sQZ6lrt6yIUqiogbcg EZ9OSws4M2kj+qN0Y0ZgfnsohA8dhK+/UYKW/gcL3F11/eQmRKeqZB/zE6cTfDf+ hpjusDO+tcvbS6XoQrAcO/7CrN4OQmszEBV7fHzTom9lL5zh/QpL8XiM4P3StGQK jqG5k6hOhMy2XXEXg64uV7VPVEw3Ep51phPnUXNt0a/iSlcvBQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFCcNnZGyql+2ik55XsrJLQY87gY8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDA5 MjBkNy1kYzI2LTQxMmQtYjkyYS03YWYzNWFmMmNjMjQvYTg2ZGVhNGYtNWY2Zi0z MmFlLThhMjUtZWFkNGE0ZGJhMmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTAwOTIwZDctZGMyNi00MTJkLWI5 MmEtN2FmMzVhZjJjYzI0LzkwMDkyMGQ3LWRjMjYtNDEyZC1iOTJhLTdhZjM1YWYy Y2MyNC5jcmwwHwYDVR0jBBgwFoAU13KmmlqaXjEFGyFRuDvHSIlI0+AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDA5MjBkNy1kYzI2LTQxMmQtYjkyYS03YWYz NWFmMmNjMjQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCaNvkMA8E AgACMAkDBwQmIAEdEAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAef9PnR+wGkn+FI0RiVmOiw0nmyMcRWCc JacLWwJBScQuD/hhklw5PsrRkKCZtjplR8hLbdXnPSZcLmx1qzVlyYBJeevFpi44 bqkq62E1gXU0ad5yC4V2afgWEK5xnzgy7upcMYH3e0CDMqRISKgrpWOb/obJ/MlS Ty2KXQB3Q8IqhQ4bjINRhj9klV6jAGRZMniVPbi4bKAPV8YSZOtPp03DowjFL+5m fBxYwcJAaDGf4zq0bIYxzlWkwF5xcGvEtE1xT1g2rY5o3p+pbVkJs+r84NF4AI5p XxIG5TwvVNn3/gYB3upw8DXVfwW3BwG1tLoOiE3kZpmOR/WWvfK/sw== -----END CERTIFICATE-----Generated at Sun Aug 24 09:34:56 2025 by rpki-client