$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/034976f2-b73d-31c2-a41d-907be371012c.roa File: 034976f2-b73d-31c2-a41d-907be371012c.roa (raw, json) Hash identifier: g5fpPkeQxPIz92xDx2diLx1Ri2HHivBOLUKFpSuaBKU= Subject key identifier: 8F:A2:CB:1D:8A:4A:F5:5B:78:AE:82:E3:89:E9:FA:59:39:98:B6:B8 Certificate issuer: /CN=0c3cf342-4337-44bf-ac45-d0772ad75854 Certificate serial: 010D0C9F4328584B62020D1275163A0CA9798B80 Authority key identifier: 33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/034976f2-b73d-31c2-a41d-907be371012c.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 49791 IP address blocks: 104.167.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:0d:12:75:16:3a:0c:a9:79:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c3cf342-4337-44bf-ac45-d0772ad75854 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=08c93e8e-c4c3-4c53-bbe4-c8197e72bb3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:51:8d:59:c6:9c:91:51:d6:9d:80:a6:6c:32: 8a:14:cd:fe:17:ab:2d:f7:71:73:53:77:ce:e4:09: 97:51:6b:82:9f:c6:dd:63:5a:f7:07:ab:13:99:c3: 8c:5c:14:0b:54:fb:39:31:d3:fa:dc:ba:07:17:28: 3b:fb:0f:5e:74:ab:52:a1:1b:5d:ee:f9:ae:66:14: ba:61:13:25:bc:5e:8d:71:25:80:bb:e9:10:85:24: 80:84:0c:48:78:55:30:27:57:e7:30:33:59:f9:4c: b5:24:77:7e:e4:24:8a:60:8f:9f:95:d7:6e:fd:d1: e5:7e:2c:9b:7c:77:ac:2b:41:fd:fc:d5:87:e6:4d: 54:a5:56:95:7f:a0:65:7c:8a:a1:56:51:ba:2b:ef: c3:ed:70:b2:69:75:99:26:b0:ab:1c:11:90:08:e3: 5c:79:12:f7:7c:ca:10:b0:ae:c0:d7:47:fe:28:7a: 67:85:0b:2f:88:ed:cc:f5:49:49:c8:e0:e8:cc:36: ea:30:06:29:b7:ba:59:76:ff:73:85:7f:96:e9:4e: 13:b9:d8:c5:e3:9e:bc:de:e0:a5:65:74:f5:82:ef: c1:79:ff:87:7b:dc:e3:e1:ce:a2:68:68:b3:c2:fe: d4:ce:30:8f:80:29:38:4a:dc:86:32:81:ce:7c:6c: ba:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A2:CB:1D:8A:4A:F5:5B:78:AE:82:E3:89:E9:FA:59:39:98:B6:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/034976f2-b73d-31c2-a41d-907be371012c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl X509v3 Authority Key Identifier: keyid:33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer sbgp-ipAddrBlock: critical IPv4: 104.167.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:72:3b:ad:eb:8e:e5:3f:aa:ca:e6:dc:63:bd:19:cf:6c:c5: b8:9f:d9:dc:18:01:22:89:b2:8b:86:c1:59:c7:ba:51:c0:7c: 74:fc:42:45:f8:9a:49:ba:53:a3:e6:d0:1b:3e:7d:d5:17:ec: 0f:c5:61:3b:5c:26:97:f1:e7:c6:96:03:78:de:b8:72:d2:f5: 83:ad:9b:76:fa:46:b9:0c:21:c0:e3:25:c3:9d:6c:48:17:25: 41:1f:5b:24:9b:db:0c:28:b4:c6:07:03:81:85:1b:26:80:9a: 9c:56:d3:80:93:2d:49:f2:83:19:02:28:b3:97:09:d7:25:00: 3a:9e:20:bf:74:50:a8:09:57:b9:3e:a8:69:a1:9d:e1:36:a3: 92:bb:34:72:21:24:47:3b:d5:0d:3b:2c:5c:88:f8:4f:08:62: 3c:e2:dd:61:7a:09:e6:bd:ec:ab:52:70:48:6c:e8:84:b0:71: 2b:6e:6f:11:35:a5:3c:dd:8f:8a:5d:3a:e1:fd:03:1f:d2:34: 94:66:0e:54:76:71:47:f2:6a:b8:36:0d:9b:df:14:47:26:a6: 7e:c6:0b:0a:aa:5e:31:a1:51:00:94:bb:ad:b6:cc:2c:2a:51: ae:8c:7b:70:44:eb:85:6e:13:95:a2:20:e6:8c:37:12:f3:89: d1:88:ff:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAg0SdRY6DKl5i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzY2YzNDItNDMzNy00NGJmLWFjNDUtZDA3NzJhZDc1 ODU0MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MDhjOTNlOGUtYzRjMy00YzUzLWJiZTQtYzgxOTdlNzJiYjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlGNWcackVHWnYCmbDKKFM3+F6st93FzU3fO 5AmXUWuCn8bdY1r3B6sTmcOMXBQLVPs5MdP63LoHFyg7+w9edKtSoRtd7vmuZhS6 YRMlvF6NcSWAu+kQhSSAhAxIeFUwJ1fnMDNZ+Uy1JHd+5CSKYI+flddu/dHlfiyb fHesK0H9/NWH5k1UpVaVf6BlfIqhVlG6K+/D7XCyaXWZJrCrHBGQCONceRL3fMoQ sK7A10f+KHpnhQsviO3M9UlJyODozDbqMAYpt7pZdv9zhX+W6U4TudjF45683uCl ZXT1gu/Bef+He9zj4c6iaGizwv7UzjCPgCk4StyGMoHOfGy6NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+iyx2KSvVbeK6C44np+lk5mLa4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNj ZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3MmFkNzU4NTQvMDM0OTc2ZjItYjczZC0z MWMyLWE0MWQtOTA3YmUzNzEwMTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGMzY2YzNDItNDMzNy00NGJmLWFj NDUtZDA3NzJhZDc1ODU0LzBjM2NmMzQyLTQzMzctNDRiZi1hYzQ1LWQwNzcyYWQ3 NTg1NC5jcmwwHwYDVR0jBBgwFoAUM+Vte7hq+1lyLTX3lZ0qh5UflWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNjZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3 MmFkNzU4NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaKfEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClyO63rjuU/qsrm3GO9Gc9sxbif2dwYASKJsouGwVnHulHAfHT8QkX4 mkm6U6Pm0Bs+fdUX7A/FYTtcJpfx58aWA3jeuHLS9YOtm3b6RrkMIcDjJcOdbEgX JUEfWySb2wwotMYHA4GFGyaAmpxW04CTLUnygxkCKLOXCdclADqeIL90UKgJV7k+ qGmhneE2o5K7NHIhJEc71Q07LFyI+E8IYjzi3WF6Cea97KtScEhs6ISwcStubxE1 pTzdj4pdOuH9Ax/SNJRmDlR2cUfyarg2DZvfFEcmpn7GCwqqXjGhUQCUu622zCwq Ua6Me3BE64VuE5WiIOaMNxLzidGI/58= -----END CERTIFICATE-----Generated at Mon Oct 20 10:47:53 2025 by rpki-client