$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/6e752049-ddcf-3f4f-9dc2-d5be418bcdd3.roa File: 6e752049-ddcf-3f4f-9dc2-d5be418bcdd3.roa (raw, json) Hash identifier: Qo1o8tEJTMkFdhAQNVDijEdKOVGlRP959UU5TIrdFEU= Subject key identifier: 44:0C:26:A2:BA:3C:90:F2:1B:22:CE:33:A9:86:9D:0B:06:71:93:CE Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584B72C1ED9A9BA7D608A3997180 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/6e752049-ddcf-3f4f-9dc2-d5be418bcdd3.roa Signing time: Wed 08 Oct 2025 01:00:29 +0000 ROA not before: Wed 08 Oct 2025 01:00:29 +0000 ROA not after: Tue 06 Jan 2026 02:00:29 +0000 asID: 9886 IP address blocks: 104.251.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:c1:ed:9a:9b:a7:d6:08:a3:99:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Oct 8 01:00:29 2025 GMT Not After : Jan 6 02:00:29 2026 GMT Subject: CN=0cba93cf-30ba-44a1-9fb9-f5039165ebc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d8:37:1f:7b:f4:aa:79:9e:b9:ba:b3:80:a9: ae:e9:b7:05:2a:64:c8:3d:b6:71:cc:75:a7:ea:2b: 65:0a:72:b1:5a:c3:ff:43:14:88:70:c1:9a:fb:01: 14:ee:23:f6:12:41:fc:2e:e0:28:65:01:10:bd:e9: 71:c1:99:06:09:b4:aa:86:93:08:9c:cf:76:cd:08: 43:68:a0:b7:33:45:25:9e:15:a2:ba:3b:ad:f0:51: 38:fd:3b:6b:a1:93:19:62:4d:d0:75:10:b5:0c:d8: 2a:60:bb:fc:94:2b:95:22:4d:b7:72:db:2f:40:41: a8:60:8c:3f:cb:96:d0:8b:5a:b6:44:f1:59:4e:f1: 2a:45:7a:d7:73:1e:19:90:83:90:2a:06:72:10:96: c6:b3:60:42:ba:3a:39:d3:ae:1d:33:a1:7c:1c:a9: 72:c9:17:16:5e:42:e2:38:ad:33:f8:17:e2:58:59: 4c:14:3b:ec:9e:f6:1e:00:6f:07:39:19:4c:bb:c8: 05:02:c0:04:74:45:20:d5:c9:30:09:9a:b9:e4:a3: fc:49:f8:61:21:37:f2:a2:2b:3a:bb:e6:1c:f8:56: 95:67:a4:9c:a7:f2:fe:6a:b4:72:a0:9d:77:ee:da: ac:44:79:23:6f:46:43:f8:08:53:67:3d:38:0f:32: 5a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0C:26:A2:BA:3C:90:F2:1B:22:CE:33:A9:86:9D:0B:06:71:93:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/6e752049-ddcf-3f4f-9dc2-d5be418bcdd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 104.251.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:94:36:48:bf:39:20:f2:40:08:12:8e:24:88:a8:1b:75:19: 47:f4:11:73:a6:4e:dc:cf:c4:53:e3:cc:3b:e1:41:67:99:09: 8d:d7:f5:8b:e3:f3:12:67:b1:89:46:e5:85:73:6a:72:6c:b8: 4c:fc:95:81:ba:a0:36:8a:b0:d4:4d:2d:70:f9:17:24:91:f7: 65:0a:b2:4d:04:27:cb:77:c3:71:89:06:88:de:50:27:b3:bf: e0:f3:24:e0:d6:f1:d2:f9:30:bd:b9:90:32:7a:bf:23:78:63: f1:aa:3e:b9:90:e2:0f:d9:5a:15:67:12:e1:57:c8:a8:6c:f5: e8:ff:0a:e4:db:7e:9e:61:4c:53:87:0f:38:aa:e0:b1:12:ed: cf:98:5e:03:26:2b:2d:e5:51:d6:35:84:d9:12:ae:33:fb:83: 00:6b:75:ac:70:d9:5c:51:3b:3f:66:56:81:18:30:13:dd:d7: 28:32:67:db:fd:4e:7a:76:f3:07:cf:a7:a3:d9:92:ba:ef:a5: 73:4d:6f:d6:0e:f1:2b:cf:42:ed:54:1f:75:85:30:e9:13:e2: a4:c0:58:c9:7c:af:22:d9:47:08:06:aa:b0:41:81:8c:72:ac: c4:d8:57:79:8b:b1:28:3e:d8:1a:16:9c:76:62:2b:bd:08:c2: 86:ba:02:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtywe2am6fWCKOZcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI1MTAwODAxMDAyOVoXDTI2MDEwNjAyMDAyOVowLzEtMCsGA1UEAxMk MGNiYTkzY2YtMzBiYS00NGExLTlmYjktZjUwMzkxNjVlYmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdg3H3v0qnmeubqzgKmu6bcFKmTIPbZxzHWn 6itlCnKxWsP/QxSIcMGa+wEU7iP2EkH8LuAoZQEQvelxwZkGCbSqhpMInM92zQhD aKC3M0UlnhWiujut8FE4/TtroZMZYk3QdRC1DNgqYLv8lCuVIk23ctsvQEGoYIw/ y5bQi1q2RPFZTvEqRXrXcx4ZkIOQKgZyEJbGs2BCujo5064dM6F8HKlyyRcWXkLi OK0z+BfiWFlMFDvsnvYeAG8HORlMu8gFAsAEdEUg1ckwCZq55KP8SfhhITfyois6 u+Yc+FaVZ6Scp/L+arRyoJ137tqsRHkjb0ZD+AhTZz04DzJacwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQMJqK6PJDyGyLOM6mGnQsGcZPOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvNmU3NTIwNDktZGRjZi0z ZjRmLTlkYzItZDViZTQxOGJjZGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaPvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqUNki/OSDyQAgSjiSIqBt1GUf0EXOmTtzPxFPjzDvhQWeZCY3X9Yvj 8xJnsYlG5YVzanJsuEz8lYG6oDaKsNRNLXD5FySR92UKsk0EJ8t3w3GJBojeUCez v+DzJODW8dL5ML25kDJ6vyN4Y/GqPrmQ4g/ZWhVnEuFXyKhs9ej/CuTbfp5hTFOH Dziq4LES7c+YXgMmKy3lUdY1hNkSrjP7gwBrdaxw2VxROz9mVoEYMBPd1ygyZ9v9 Tnp28wfPp6PZkrrvpXNNb9YO8SvPQu1UH3WFMOkT4qTAWMl8ryLZRwgGqrBBgYxy rMTYV3mLsSg+2BoWnHZiK70Iwoa6AsA= -----END CERTIFICATE-----Generated at Mon Oct 20 10:18:18 2025 by rpki-client