$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9b494297-3222-3843-851d-68c7c1744624.roa File: 9b494297-3222-3843-851d-68c7c1744624.roa (raw, json) Hash identifier: jNGA+MQVDF1HegDCsesn+tGY/UzUAPjksRNDs96/Jq4= Subject key identifier: 3F:11:BE:E1:57:7A:61:BF:61:5E:F0:32:B2:1E:A0:3D:C1:17:95:AA Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584B21CC1F5386BB2A607905F880 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9b494297-3222-3843-851d-68c7c1744624.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 21743 IP address blocks: 104.247.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:1f:53:86:bb:2a:60:79:05:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=f3999a22-d12c-4fa4-920d-c6c9f6dd5b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:94:6b:9b:4d:df:a3:8c:8b:5e:33:8f:44:aa: 7e:b8:a7:e0:7c:03:7e:fe:a6:98:02:6d:ae:04:24: 3e:67:7f:b1:53:b7:c9:0c:0b:4a:1e:e3:5c:a8:f9: 61:fa:65:9c:a6:22:fb:64:7f:1f:d6:62:e1:e7:c6: 7c:c7:33:db:94:b4:6b:18:d6:56:af:51:f7:5c:e5: 28:be:42:67:8a:68:22:e6:44:19:84:fb:95:1d:74: 87:31:72:dc:6c:bf:bc:f5:bd:d5:9c:17:b4:64:4f: f9:cc:eb:88:fb:26:e2:e5:9b:2e:60:6c:f3:fa:eb: 11:db:64:b8:5c:21:17:61:ac:35:95:33:2a:c9:bf: 7c:7b:fe:50:d0:08:6c:b9:64:5b:0e:c9:b2:6b:58: bb:b0:a0:8e:9f:07:35:84:7b:6b:34:56:63:bf:0c: 4e:33:1f:44:ca:21:8a:88:36:af:83:ef:40:4a:15: 1d:b9:7c:09:f3:90:9a:ed:fc:e8:74:4c:4b:bc:2e: f9:a1:79:83:e2:a0:4c:9e:22:d3:d0:12:d6:ea:ae: ef:a5:6e:7c:4a:86:eb:82:b2:4b:da:7d:24:3a:3d: 33:31:d9:87:bc:d5:09:1e:3e:e5:30:0a:94:3c:17: e6:ef:2d:76:f5:93:d0:cc:5c:f7:a8:b8:a2:99:bd: fe:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:11:BE:E1:57:7A:61:BF:61:5E:F0:32:B2:1E:A0:3D:C1:17:95:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9b494297-3222-3843-851d-68c7c1744624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 104.247.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:f5:b0:88:cd:51:4c:5d:a5:08:92:bc:54:f4:6e:87:0a:00: 6f:99:31:fe:32:24:d4:cd:45:62:8b:c5:21:f0:6b:69:82:50: 44:5b:e6:9e:3d:0b:68:db:2c:a6:f3:3e:23:a7:fe:4b:ef:e6: 6a:10:da:26:d0:53:03:34:bc:e7:73:d1:8e:c9:b8:ba:a5:b0: 09:71:0e:0e:35:8e:52:4f:8b:84:5e:53:67:62:dd:06:58:76: 75:b3:ca:6e:14:ff:70:03:6a:bf:54:ed:d3:b6:25:07:aa:8b: d6:5e:73:b0:54:99:c4:00:72:b8:de:c6:16:5f:35:13:85:6d: 23:8f:f3:77:1d:84:30:94:1d:9e:65:0a:9b:19:6b:99:be:a0: 71:85:e3:39:ec:80:1d:2b:d0:72:41:46:cd:67:19:65:7c:e8: aa:25:19:8b:b2:1d:53:1b:bf:ec:0a:a0:43:e5:40:d3:e9:8e: 5b:f2:03:a7:86:aa:30:8f:8d:c5:37:85:d5:2e:63:f6:f6:76: 9b:45:05:b7:39:1d:65:e8:b6:45:4e:7e:0e:a8:1f:70:84:84: 7d:b8:cf:d8:42:13:b1:c6:ae:b8:1d:f5:1a:15:0e:a2:67:b0: 74:f1:4e:16:31:36:aa:f4:09:16:11:41:62:1e:44:f4:ba:e9: 79:7b:f9:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzB9ThrsqYHkF+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk ZjM5OTlhMjItZDEyYy00ZmE0LTkyMGQtYzZjOWY2ZGQ1YjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5Rrm03fo4yLXjOPRKp+uKfgfAN+/qaYAm2u BCQ+Z3+xU7fJDAtKHuNcqPlh+mWcpiL7ZH8f1mLh58Z8xzPblLRrGNZWr1H3XOUo vkJnimgi5kQZhPuVHXSHMXLcbL+89b3VnBe0ZE/5zOuI+ybi5ZsuYGzz+usR22S4 XCEXYaw1lTMqyb98e/5Q0AhsuWRbDsmya1i7sKCOnwc1hHtrNFZjvwxOMx9EyiGK iDavg+9AShUduXwJ85Ca7fzodExLvC75oXmD4qBMniLT0BLW6q7vpW58SobrgrJL 2n0kOj0zMdmHvNUJHj7lMAqUPBfm7y129ZPQzFz3qLiimb3+ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8RvuFXemG/YV7wMrIeoD3BF5WqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvOWI0OTQyOTctMzIyMi0z ODQzLTg1MWQtNjhjN2MxNzQ0NjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACH1sIjNUUxdpQiSvFT0bocKAG+ZMf4yJNTNRWKLxSHwa2mCUERb5p49 C2jbLKbzPiOn/kvv5moQ2ibQUwM0vOdz0Y7JuLqlsAlxDg41jlJPi4ReU2di3QZY dnWzym4U/3ADar9U7dO2JQeqi9Zec7BUmcQAcrjexhZfNROFbSOP83cdhDCUHZ5l CpsZa5m+oHGF4znsgB0r0HJBRs1nGWV86KolGYuyHVMbv+wKoEPlQNPpjlvyA6eG qjCPjcU3hdUuY/b2dptFBbc5HWXotkVOfg6oH3CEhH24z9hCE7HGrrgd9RoVDqJn sHTxThYxNqr0CRYRQWIeRPS66Xl7+cM= -----END CERTIFICATE-----Generated at Mon Oct 20 04:49:19 2025 by rpki-client