$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/eaf7e485-7ab8-383a-af6e-1d1d48e46da5.roa File: eaf7e485-7ab8-383a-af6e-1d1d48e46da5.roa (raw, json) Hash identifier: XWAQ4MvYm8veItwlqRfhTbFps/zZ4x6leAQHHeJsFn4= Subject key identifier: D4:65:8D:66:70:CC:39:55:93:D4:6A:C5:AF:43:3D:4F:46:93:B5:48 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584B6631F6B1969F78D8C832D1A0 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/eaf7e485-7ab8-383a-af6e-1d1d48e46da5.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 21743 IP address blocks: 104.247.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:f6:b1:96:9f:78:d8:c8:32:d1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=13156b28-2084-4938-af9a-62c14941db0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a6:79:b0:ea:91:3b:d8:29:58:9c:76:4e:26: 4e:25:ac:11:2c:36:6b:5e:60:b9:ad:21:2c:38:3f: 5b:cf:66:81:49:f0:05:a7:ab:bc:c0:2c:4a:6a:cd: 2a:e0:39:f6:b6:e3:01:ed:7b:3d:f9:49:c8:44:d6: 26:88:46:ee:25:50:e9:15:73:32:3b:79:6c:67:ce: 25:24:c1:cc:ae:58:4a:42:20:9d:4c:38:c0:81:00: 0d:3d:e2:5e:b2:17:d2:9b:f5:2f:c4:ed:94:98:0e: 9c:e0:58:cb:5a:ad:c0:6c:8d:88:b4:ce:96:92:02: c3:a5:aa:75:49:ed:b9:a0:4e:0f:f4:d0:a7:ef:99: 28:68:f0:f7:c4:1d:2d:de:7d:8c:06:7d:89:00:0e: 1d:72:5c:b7:c2:cd:60:44:e4:de:3d:85:61:a3:2e: 8b:f0:95:02:81:36:fc:52:a1:02:23:6d:06:23:bb: 9c:3a:f5:c1:1b:ff:ab:9f:6a:26:36:ee:81:3d:85: c4:38:87:da:b6:f5:b7:10:a6:d2:dc:0f:3e:d1:d7: b5:79:28:3a:ca:41:99:46:bc:26:f4:70:97:51:8e: 88:94:53:22:a6:38:4e:4e:53:74:75:a3:a7:f5:c3: db:30:c6:fc:79:b3:28:d9:74:ae:83:f2:7b:8e:79: ac:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:65:8D:66:70:CC:39:55:93:D4:6A:C5:AF:43:3D:4F:46:93:B5:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/eaf7e485-7ab8-383a-af6e-1d1d48e46da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 104.247.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:0b:c9:33:74:3e:82:37:fc:9b:7a:e5:96:76:3d:94:e2:78: 8a:15:19:42:57:6b:97:be:2f:6b:24:e3:fc:d4:e8:20:61:38: 26:5e:00:97:37:69:76:ad:74:54:9f:3e:c0:27:95:36:47:21: 43:34:7d:8d:51:49:39:dc:fd:70:05:aa:1e:e4:c7:4f:32:a9: 7d:eb:ec:80:4d:db:d0:a7:dd:8a:8b:38:26:04:bb:15:a1:64: be:19:52:4f:91:5a:34:67:d2:32:36:0b:9d:13:56:68:83:77: 2a:2e:e1:7e:06:06:e8:b4:96:96:71:59:5c:2d:f1:d6:06:6a: 14:be:00:51:4a:ff:87:f6:65:d4:63:db:82:57:ed:1f:3e:1e: e5:04:9a:34:1d:43:d4:22:49:a1:ee:cb:7a:e2:e0:c8:c1:d0: 60:b4:25:63:7d:d7:2f:25:44:e2:4a:df:e0:03:74:8e:d3:71: b4:ed:21:4a:9c:3f:a7:92:23:69:87:66:73:93:17:8f:11:49: 35:86:5b:4b:5f:86:ce:a4:97:59:72:05:35:f6:1f:65:4b:b8: 87:61:fa:08:ed:32:6e:14:98:8a:b8:a4:21:18:d2:a2:09:ef: fb:ee:ab:e3:6a:cd:b0:02:2c:f4:ff:ae:68:8f:7e:a8:98:2f: d6:54:2d:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMfaxlp942Mgy0aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk MTMxNTZiMjgtMjA4NC00OTM4LWFmOWEtNjJjMTQ5NDFkYjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKZ5sOqRO9gpWJx2TiZOJawRLDZrXmC5rSEs OD9bz2aBSfAFp6u8wCxKas0q4Dn2tuMB7Xs9+UnIRNYmiEbuJVDpFXMyO3lsZ84l JMHMrlhKQiCdTDjAgQANPeJeshfSm/UvxO2UmA6c4FjLWq3AbI2ItM6WkgLDpap1 Se25oE4P9NCn75koaPD3xB0t3n2MBn2JAA4dcly3ws1gROTePYVhoy6L8JUCgTb8 UqECI20GI7ucOvXBG/+rn2omNu6BPYXEOIfatvW3EKbS3A8+0de1eSg6ykGZRrwm 9HCXUY6IlFMipjhOTlN0daOn9cPbMMb8ebMo2XSug/J7jnmshQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRljWZwzDlVk9Rqxa9DPU9Gk7VIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvZWFmN2U0ODUtN2FiOC0z ODNhLWFmNmUtMWQxZDQ4ZTQ2ZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPd5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwLyTN0PoI3/Jt65ZZ2PZTieIoVGUJXa5e+L2sk4/zU6CBhOCZeAJc3 aXatdFSfPsAnlTZHIUM0fY1RSTnc/XAFqh7kx08yqX3r7IBN29Cn3YqLOCYEuxWh ZL4ZUk+RWjRn0jI2C50TVmiDdyou4X4GBui0lpZxWVwt8dYGahS+AFFK/4f2ZdRj 24JX7R8+HuUEmjQdQ9QiSaHuy3ri4MjB0GC0JWN91y8lROJK3+ADdI7TcbTtIUqc P6eSI2mHZnOTF48RSTWGW0tfhs6kl1lyBTX2H2VLuIdh+gjtMm4UmIq4pCEY0qIJ 7/vuq+NqzbACLPT/rmiPfqiYL9ZULeo= -----END CERTIFICATE-----Generated at Mon Oct 20 04:58:16 2025 by rpki-client