$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375/eac8ced9-c9ac-33c1-95a1-20347cd8090b.roa File: eac8ced9-c9ac-33c1-95a1-20347cd8090b.roa (raw, json) Hash identifier: Npi/ysPTJyjibSZPE7tXrfnRZsEMcecrWbwLqrz1yRY= Subject key identifier: C0:4B:B3:8A:4B:DE:2B:42:7C:49:13:5C:7C:0B:06:A3:E3:F9:F5:F8 Certificate issuer: /CN=07f6990d-62ce-456e-a266-cab190ec7375 Certificate serial: 010D0C9F4328584B004BF64BBD3C1A968CBB5400 Authority key identifier: B3:9D:14:14:C4:C8:35:B1:A3:8E:58:24:B3:1B:E6:7D:89:21:A3:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375/eac8ced9-c9ac-33c1-95a1-20347cd8090b.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 62913 IP address blocks: 104.219.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375/07f6990d-62ce-456e-a266-cab190ec7375.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375/07f6990d-62ce-456e-a266-cab190ec7375.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:f6:4b:bd:3c:1a:96:8c:bb:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07f6990d-62ce-456e-a266-cab190ec7375 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=36899a18-f8ef-4957-af05-048ca1ced549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:64:b1:94:d7:48:b7:b9:dc:a0:bd:6d:15:30: 62:d0:cc:85:32:34:85:83:c3:22:c4:63:8a:95:db: 6e:7d:05:26:63:dd:60:f5:85:8c:0b:d7:b3:c5:99: f1:2d:76:dd:4c:36:4e:cf:59:7e:82:b8:98:07:f1: c9:a4:67:21:ca:68:ae:66:3a:20:ac:c6:ec:df:43: 3f:cf:28:eb:c2:06:c8:69:0a:ae:00:88:3e:bc:ca: bb:15:1f:68:5a:c5:bd:52:91:0f:f3:e5:23:1c:27: 94:4f:b7:62:6c:65:2e:e5:9c:e9:81:93:e8:57:f5: ee:47:1c:0c:7e:d8:43:75:c5:d5:1e:5c:1d:7b:d1: 8a:43:9a:bb:39:6b:f4:24:56:df:45:0e:33:79:33: 69:e7:29:54:cc:96:e3:54:ad:48:c6:70:f3:89:d1: 7a:0c:f6:3a:6b:65:34:44:c1:73:09:fb:dc:02:75: 2f:ad:c0:be:de:c3:91:95:40:1d:14:be:0f:f1:91: 93:53:7d:bf:88:54:8f:70:c1:7d:e0:3f:8c:06:73: 21:d2:1b:16:08:99:8e:f2:11:c2:ea:71:30:21:6f: a1:c8:cd:01:15:fd:fb:1a:90:22:1b:24:da:2a:c4: 5a:4b:85:0d:3c:3a:2a:ab:b6:b8:14:6a:85:03:37: 4e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4B:B3:8A:4B:DE:2B:42:7C:49:13:5C:7C:0B:06:A3:E3:F9:F5:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375/eac8ced9-c9ac-33c1-95a1-20347cd8090b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375/07f6990d-62ce-456e-a266-cab190ec7375.crl X509v3 Authority Key Identifier: keyid:B3:9D:14:14:C4:C8:35:B1:A3:8E:58:24:B3:1B:E6:7D:89:21:A3:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375.cer sbgp-ipAddrBlock: critical IPv4: 104.219.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:69:3e:89:cc:dc:46:60:07:2c:77:97:5c:15:59:ec:90:10: 61:c1:0c:7a:50:6c:31:9c:9a:cd:69:ac:6c:6a:89:35:2f:fd: 18:78:5e:d9:5c:a8:fd:14:87:05:ac:e5:f5:b6:b0:61:8e:16: 5f:5a:83:96:38:0f:f6:91:c7:86:19:47:b3:76:6f:39:1c:9e: 78:b5:6b:25:5d:eb:3a:e0:5d:eb:f2:ea:09:d4:e9:5f:e9:a3: 2c:75:b9:3d:f4:79:ab:c7:07:ab:0f:65:00:ca:45:da:81:d2: 9c:d6:65:bc:e7:78:d7:36:14:92:e6:08:58:81:f1:1a:e8:0a: e7:18:11:37:80:35:5f:da:1f:92:93:e6:95:7e:b7:b7:1a:bd: e2:f8:87:32:cd:ba:cc:22:c3:56:14:cc:f4:78:ad:47:76:1e: 91:00:74:92:a3:29:39:93:f5:ee:2e:22:6a:37:d9:cb:38:3a: 85:da:fc:b7:8a:b1:dd:ab:c3:41:83:42:7f:11:3a:46:cb:2a: f8:ac:23:d8:e7:f3:d0:da:f2:98:b6:34:0d:1a:8b:26:40:a7: 46:ef:15:8b:f3:0a:39:67:8d:23:61:6d:60:63:db:4e:7c:9e: a6:e8:78:56:90:a1:89:3e:d5:38:fa:b9:39:f1:e6:3c:83:fc: 9a:40:90:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS/ZLvTwaloy7VAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDdmNjk5MGQtNjJjZS00NTZlLWEyNjYtY2FiMTkwZWM3 Mzc1MB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk MzY4OTlhMTgtZjhlZi00OTU3LWFmMDUtMDQ4Y2ExY2VkNTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA82SxlNdIt7ncoL1tFTBi0MyFMjSFg8MixGOK ldtufQUmY91g9YWMC9ezxZnxLXbdTDZOz1l+griYB/HJpGchymiuZjogrMbs30M/ zyjrwgbIaQquAIg+vMq7FR9oWsW9UpEP8+UjHCeUT7dibGUu5ZzpgZPoV/XuRxwM fthDdcXVHlwde9GKQ5q7OWv0JFbfRQ4zeTNp5ylUzJbjVK1IxnDzidF6DPY6a2U0 RMFzCfvcAnUvrcC+3sORlUAdFL4P8ZGTU32/iFSPcMF94D+MBnMh0hsWCJmO8hHC 6nEwIW+hyM0BFf37GpAiGyTaKsRaS4UNPDoqq7a4FGqFAzdOpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBLs4pL3itCfEkTXHwLBqPj+fX4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wN2Y2 OTkwZC02MmNlLTQ1NmUtYTI2Ni1jYWIxOTBlYzczNzUvZWFjOGNlZDktYzlhYy0z M2MxLTk1YTEtMjAzNDdjZDgwOTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDdmNjk5MGQtNjJjZS00NTZlLWEy NjYtY2FiMTkwZWM3Mzc1LzA3ZjY5OTBkLTYyY2UtNDU2ZS1hMjY2LWNhYjE5MGVj NzM3NS5jcmwwHwYDVR0jBBgwFoAUs50UFMTINbGjjlgksxvmfYkho/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wN2Y2OTkwZC02MmNlLTQ1NmUtYTI2Ni1jYWIx OTBlYzczNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaNseMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJpPonM3EZgByx3l1wVWeyQEGHBDHpQbDGcms1prGxqiTUv/Rh4Xtlc qP0UhwWs5fW2sGGOFl9ag5Y4D/aRx4YZR7N2bzkcnni1ayVd6zrgXevy6gnU6V/p oyx1uT30eavHB6sPZQDKRdqB0pzWZbzneNc2FJLmCFiB8RroCucYETeANV/aH5KT 5pV+t7caveL4hzLNuswiw1YUzPR4rUd2HpEAdJKjKTmT9e4uImo32cs4OoXa/LeK sd2rw0GDQn8ROkbLKvisI9jn89Da8pi2NA0aiyZAp0bvFYvzCjlnjSNhbWBj2058 nqboeFaQoYk+1Tj6uTnx5jyD/JpAkIE= -----END CERTIFICATE-----Generated at Mon Oct 20 08:26:47 2025 by rpki-client