$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/0a195f08-4197-3058-bb05-b1878af3700a.roa File: 0a195f08-4197-3058-bb05-b1878af3700a.roa (raw, json) Hash identifier: 4cU15pB8mK59CE0O+uA8pZrRyDdcrPZScb/ZZ1xNiaY= Subject key identifier: 0F:68:D8:37:63:BE:92:93:80:6A:61:F2:51:A5:8B:A6:1A:BF:20:97 Certificate issuer: /CN=647216b7-a938-45d2-8264-7d448a4eaad9 Certificate serial: 010D0C9F4328584B41E72975F4DE0DF790EE3980 Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/0a195f08-4197-3058-bb05-b1878af3700a.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 398143 IP address blocks: 104.204.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:29:75:f4:de:0d:f7:90:ee:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=3087f8ed-74ab-4eea-9e56-95e06b5b9e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b3:38:d2:15:b6:e0:e1:06:52:ca:d4:84:81: 07:b9:85:41:e1:dd:d0:31:ac:f2:39:e4:71:94:1b: 91:b4:c4:0c:5d:f1:86:bb:cf:73:21:ef:91:b6:51: 8b:d2:40:fc:b6:f8:a6:48:9f:4c:1f:b3:3a:37:3a: b9:bd:01:35:6f:dd:a0:7a:9f:63:ac:65:ef:1c:28: 57:4c:d0:02:e5:84:6c:dd:e4:a6:24:41:d8:a2:23: 56:8e:8d:aa:ec:c0:ab:24:b9:68:35:ba:09:21:0b: ed:c7:3f:05:1d:31:4f:e7:e5:16:d6:ef:a2:3e:91: 65:37:83:08:89:2b:c8:17:96:eb:d0:c1:96:26:12: fe:72:1f:73:b1:da:8f:7d:35:1c:04:65:d7:9f:1a: 2c:3a:cb:7a:75:94:61:0e:b7:f0:ff:9f:b0:05:09: 36:74:4e:d7:60:2b:3c:a3:34:a9:38:37:81:26:4e: 41:1a:1f:d9:f4:61:32:d5:f2:1c:66:57:17:55:b4: 22:0b:9e:63:19:47:a5:89:94:bc:fb:ff:1d:55:8a: 5e:30:45:d5:7d:df:0f:84:ba:89:77:e5:5c:d7:d8: 60:c8:2e:79:b6:45:26:29:69:7a:e3:a6:b5:df:9b: bc:7a:c7:5f:e8:8a:73:3e:29:05:e2:c1:ed:e7:1a: 4f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:68:D8:37:63:BE:92:93:80:6A:61:F2:51:A5:8B:A6:1A:BF:20:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/0a195f08-4197-3058-bb05-b1878af3700a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl X509v3 Authority Key Identifier: keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer sbgp-ipAddrBlock: critical IPv4: 104.204.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:4a:d5:c6:47:1b:bb:0a:9b:cd:41:3b:0f:fc:0a:be:b8:a6: 57:05:3a:b6:2b:88:95:8b:1d:0b:3e:d2:a1:81:88:ec:c6:f3: 6a:76:ba:e1:92:e0:2f:af:33:45:48:bb:6f:39:dc:2e:65:d7: 2f:97:88:88:29:83:fd:6a:0d:44:d3:41:02:90:c9:8d:0a:0d: 98:68:11:1e:58:b3:b8:ed:27:2e:a5:34:5c:34:7e:c6:97:4a: 2a:b4:75:0b:bb:e3:1f:e2:24:aa:04:4e:7a:fe:8e:86:90:08: 49:38:1d:71:be:9c:cb:34:77:5d:d6:76:3a:7f:98:88:9c:77: d4:4e:42:7c:fa:7f:69:24:83:b1:4f:10:d8:90:95:3e:55:3b: 30:6c:e5:b4:9d:79:89:78:7b:2e:ac:b8:af:83:52:b2:2c:8c: c9:33:73:e8:d5:74:63:c6:c8:0a:4c:dd:1c:89:a7:ab:a4:62: 7f:5c:4d:1d:ff:3c:bc:52:ad:fb:a2:7d:30:5d:cd:6d:a7:02: 94:d1:47:f1:b6:cb:ef:30:f2:23:cd:65:ba:69:cd:3a:05:33: 14:d2:c1:f0:be:fc:02:5e:09:e7:53:01:ee:88:8a:52:f3:76: 1a:a3:47:6a:03:cf:73:7e:aa:19:45:d6:b7:ec:46:e9:63:6a: 73:4e:14:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5yl19N4N95DuOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ3MjE2YjctYTkzOC00NWQyLTgyNjQtN2Q0NDhhNGVh YWQ5MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MzA4N2Y4ZWQtNzRhYi00ZWVhLTllNTYtOTVlMDZiNWI5ZTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7M40hW24OEGUsrUhIEHuYVB4d3QMazyOeRx lBuRtMQMXfGGu89zIe+RtlGL0kD8tvimSJ9MH7M6Nzq5vQE1b92gep9jrGXvHChX TNAC5YRs3eSmJEHYoiNWjo2q7MCrJLloNboJIQvtxz8FHTFP5+UW1u+iPpFlN4MI iSvIF5br0MGWJhL+ch9zsdqPfTUcBGXXnxosOst6dZRhDrfw/5+wBQk2dE7XYCs8 ozSpODeBJk5BGh/Z9GEy1fIcZlcXVbQiC55jGUeliZS8+/8dVYpeMEXVfd8PhLqJ d+Vc19hgyC55tkUmKWl646a135u8esdf6IpzPikF4sHt5xpPtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9o2DdjvpKTgGph8lGli6YavyCXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDcy MTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0OGE0ZWFhZDkvMGExOTVmMDgtNDE5Ny0z MDU4LWJiMDUtYjE4NzhhZjM3MDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQ3MjE2YjctYTkzOC00NWQyLTgy NjQtN2Q0NDhhNGVhYWQ5LzY0NzIxNmI3LWE5MzgtNDVkMi04MjY0LTdkNDQ4YTRl YWFkOS5jcmwwHwYDVR0jBBgwFoAUIvIMhMMKGr3ejeHfHF8TeMPZRF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDcyMTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0 OGE0ZWFhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaMzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJK1cZHG7sKm81BOw/8Cr64plcFOrYriJWLHQs+0qGBiOzG82p2uuGS 4C+vM0VIu2853C5l1y+XiIgpg/1qDUTTQQKQyY0KDZhoER5Ys7jtJy6lNFw0fsaX Siq0dQu74x/iJKoETnr+joaQCEk4HXG+nMs0d13Wdjp/mIicd9ROQnz6f2kkg7FP ENiQlT5VOzBs5bSdeYl4ey6suK+DUrIsjMkzc+jVdGPGyApM3RyJp6ukYn9cTR3/ PLxSrfuifTBdzW2nApTRR/G2y+8w8iPNZbppzToFMxTSwfC+/AJeCedTAe6IilLz dhqjR2oDz3N+qhlF1rfsRuljanNOFKQ= -----END CERTIFICATE-----Generated at Wed Oct 22 04:58:22 2025 by rpki-client