$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a7def5dc-826c-3418-acab-b934b73d5685.roa File: a7def5dc-826c-3418-acab-b934b73d5685.roa (raw, json) Hash identifier: maYXyuL6MiXk6HT63UqLl9n24L0CgnR8pHIWjf813FU= Subject key identifier: EC:43:CC:FB:6E:BB:96:8F:FF:72:B1:3E:E2:DC:99:7A:0A:32:8A:8A Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584B13D6A68BDC6917AA12D12778 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a7def5dc-826c-3418-acab-b934b73d5685.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 401585 IP address blocks: 104.143.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:a6:8b:dc:69:17:aa:12:d1:27:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=8b444b5b-c345-403e-b566-48d353e15c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:79:09:1b:ee:76:5d:d7:17:b7:fe:12:31:3a: 36:1b:85:15:a8:56:1f:28:03:f5:3c:49:2b:b0:a7: e2:ba:3e:f9:ce:de:27:f3:41:54:22:97:dc:b0:de: 54:1c:1d:d5:d6:e9:dc:92:aa:0a:7a:f4:6a:4e:93: c6:df:42:b4:87:b7:67:7b:c4:0e:8d:8f:05:c6:fb: 22:f9:b1:9b:62:4c:42:67:63:03:b5:86:4f:9f:c1: 1c:27:9f:30:ad:18:12:37:4b:57:18:72:ea:be:6c: f7:d1:f7:55:13:2d:22:c6:0d:88:5d:2b:83:59:e7: 24:76:9e:c5:45:5d:f3:21:ea:20:6b:52:30:b3:0c: 7a:0d:b1:e0:4c:02:e2:a8:4b:0b:d8:15:14:60:bf: 74:25:b7:60:0c:dc:5a:ea:a5:1c:ca:57:fc:fe:a8: 5c:af:4a:7f:f9:44:4f:76:c2:5e:c6:57:c3:56:2d: d0:9d:51:56:c0:2b:cd:49:78:fd:30:9c:da:d6:aa: 92:58:82:ec:c6:3c:60:2d:b2:aa:54:73:64:c6:14: 0e:50:ac:bc:f8:db:c2:b8:69:53:f3:27:0e:0e:54: 0b:21:5b:84:d3:02:b5:46:92:d8:65:33:65:f2:21: 79:86:9a:4b:d5:08:e8:3e:56:a1:3a:fb:66:8e:49: 4e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:43:CC:FB:6E:BB:96:8F:FF:72:B1:3E:E2:DC:99:7A:0A:32:8A:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a7def5dc-826c-3418-acab-b934b73d5685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 104.143.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:8a:ec:d6:e0:bd:77:74:fd:41:4e:e4:9d:f8:7a:88:7b:ff: 3b:3f:0b:85:55:7f:06:e2:bd:f9:8c:9c:b8:ec:62:c6:6e:00: ad:f4:56:fd:7f:49:af:dd:46:0b:eb:d9:38:78:75:41:f0:87: 97:ae:3e:06:8d:8b:8d:77:df:c0:0e:00:d2:57:f8:32:2e:98: 4b:79:a8:79:78:b4:58:b4:9c:05:c5:ad:18:70:3e:dc:39:95: b8:e3:32:c7:fc:48:45:1c:04:f4:b7:9e:2d:41:a5:02:b6:b4: cd:ec:bd:7c:c0:db:6f:8c:d3:0b:47:26:2f:f0:ff:8b:99:e1: 7b:6e:9b:d5:3f:e1:3c:68:bd:38:57:f5:65:ad:86:88:ae:5d: 2c:de:c9:eb:b9:07:5f:85:00:d0:61:08:54:8d:f0:54:8f:73: 22:42:66:ae:8a:35:ac:a7:c0:ec:af:2a:42:8e:51:a8:50:09: 41:f5:b9:c0:55:78:21:06:da:40:58:82:4c:c8:f5:e8:91:c4: 5a:3a:34:70:4f:a0:eb:73:61:47:ff:43:47:4f:e5:39:6b:77: a9:39:c2:cb:4a:06:89:e1:b4:14:c4:0a:d4:f7:68:27:00:27: 8f:0e:c5:f0:09:27:f6:e6:09:ff:5c:6a:76:07:bc:56:30:fe: 75:61:1a:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1qaL3GkXqhLRJ3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk OGI0NDRiNWItYzM0NS00MDNlLWI1NjYtNDhkMzUzZTE1YzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HkJG+52XdcXt/4SMTo2G4UVqFYfKAP1PEkr sKfiuj75zt4n80FUIpfcsN5UHB3V1unckqoKevRqTpPG30K0h7dne8QOjY8Fxvsi +bGbYkxCZ2MDtYZPn8EcJ58wrRgSN0tXGHLqvmz30fdVEy0ixg2IXSuDWeckdp7F RV3zIeoga1Iwswx6DbHgTALiqEsL2BUUYL90JbdgDNxa6qUcylf8/qhcr0p/+URP dsJexlfDVi3QnVFWwCvNSXj9MJza1qqSWILsxjxgLbKqVHNkxhQOUKy8+NvCuGlT 8ycODlQLIVuE0wK1RpLYZTNl8iF5hppL1QjoPlahOvtmjklODQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxDzPtuu5aP/3KxPuLcmXoKMoqKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvYTdkZWY1ZGMtODI2Yy0z NDE4LWFjYWItYjkzNGI3M2Q1Njg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaI8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImK7NbgvXd0/UFO5J34eoh7/zs/C4VVfwbivfmMnLjsYsZuAK30Vv1/ Sa/dRgvr2Th4dUHwh5euPgaNi41338AOANJX+DIumEt5qHl4tFi0nAXFrRhwPtw5 lbjjMsf8SEUcBPS3ni1BpQK2tM3svXzA22+M0wtHJi/w/4uZ4Xtum9U/4TxovThX 9WWthoiuXSzeyeu5B1+FANBhCFSN8FSPcyJCZq6KNaynwOyvKkKOUahQCUH1ucBV eCEG2kBYgkzI9eiRxFo6NHBPoOtzYUf/Q0dP5Tlrd6k5wstKBonhtBTECtT3aCcA J48OxfAJJ/bmCf9canYHvFYw/nVhGp0= -----END CERTIFICATE-----Generated at Mon Oct 20 20:43:20 2025 by rpki-client