$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/0b95849b-a821-3b29-86e2-82b650dfd913.roa File: 0b95849b-a821-3b29-86e2-82b650dfd913.roa (raw, json) Hash identifier: xrkbExG73zPS1C4csvel1CsB5um1yX1nBGPiCFko7Fk= Subject key identifier: 2C:32:D9:93:7F:85:A2:07:3E:32:B8:4A:5C:44:36:95:F3:0F:10:F4 Certificate issuer: /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Certificate serial: 010D0C9F4328584B5F3725DCE10228350BCD8700 Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/0b95849b-a821-3b29-86e2-82b650dfd913.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 59920 IP address blocks: 104.167.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:25:dc:e1:02:28:35:0b:cd:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=da6161ad-a606-4471-bb1e-efe36326c3d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:12:30:64:5e:a8:38:c3:7a:b1:fd:77:8c:bd: 74:36:a4:5f:d6:af:37:b9:14:6a:3a:46:6f:0f:47: b8:82:d4:b3:90:9c:89:17:02:09:2d:79:f3:09:e7: dc:9f:1e:47:7f:df:10:68:df:62:62:99:b0:b3:d3: e5:3a:d8:1d:3d:db:c1:1f:53:33:e1:da:82:86:90: 0c:b3:3e:ce:4c:7c:1f:56:42:90:2a:8d:1f:04:94: 70:60:2c:a5:40:05:7c:98:a9:7e:95:52:1f:ed:dd: b1:84:35:ae:e1:72:57:3e:2e:df:37:89:9b:b5:ba: d7:c7:c5:75:e6:72:0f:be:c4:40:43:0c:78:fa:e6: 04:81:6a:2c:d3:03:c5:b5:f0:85:76:76:ed:84:a3: 3a:1f:81:c9:d2:51:f9:d0:4d:01:f0:13:74:82:b8: 96:23:00:08:27:b8:7b:2f:1e:32:bc:08:5c:ee:e5: f0:73:dd:28:7b:6c:e7:7d:78:fa:8d:25:6e:ed:fd: ef:0b:dd:39:3f:47:1c:32:b7:7d:a9:8d:a8:c8:88: f6:a5:6e:7b:43:ea:c7:6c:60:5d:ad:35:1c:61:eb: 97:b2:f0:0d:37:9b:90:15:23:e6:95:38:df:3c:ca: c0:ae:a6:da:d5:d9:32:fb:97:58:c9:47:77:0e:5b: ae:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:32:D9:93:7F:85:A2:07:3E:32:B8:4A:5C:44:36:95:F3:0F:10:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/0b95849b-a821-3b29-86e2-82b650dfd913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl X509v3 Authority Key Identifier: keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer sbgp-ipAddrBlock: critical IPv4: 104.167.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:08:cd:2a:84:57:67:62:c0:69:89:95:ce:e4:e0:ad:9d:0c: 37:c8:c6:b8:33:49:28:44:df:6c:24:3f:08:bb:02:98:85:d7: 4f:35:4b:21:8b:51:63:8b:a9:8b:5b:96:d1:71:7f:f5:ac:c1: 63:19:3e:fc:ff:07:f8:49:fc:20:0e:6b:a7:e5:a8:0b:8e:d5: d4:f0:f9:c8:73:e5:f2:d9:ee:3d:6a:31:ef:75:f2:08:46:8b: 76:34:8c:e1:75:0a:bd:4c:af:bd:9e:7c:06:df:a2:4f:0f:5a: 7e:ec:82:88:a3:70:53:cc:ed:11:63:f4:51:0e:48:4d:37:34: 1d:ea:9f:b0:38:a8:9d:0e:0b:5b:dd:ab:73:79:7f:c8:12:fe: a4:9a:85:e6:5c:bd:33:70:64:d0:ad:e9:9c:96:98:76:fc:7c: 60:72:06:cb:0b:fa:3c:0f:85:78:f8:6d:62:e0:b2:cf:97:c5: b0:1d:d3:82:5f:52:52:a4:a4:08:05:2f:c1:17:86:67:df:6d: c9:e7:2a:23:75:7e:e9:b0:17:34:82:18:4e:5a:d7:32:44:2c: 76:6c:6a:58:c7:16:4d:bb:a9:de:0d:b6:ba:b8:1b:8b:d9:4a: d1:55:59:37:fe:c8:f3:d7:1b:db:56:44:a9:6c:09:db:a9:90: 8a:3e:19:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNyXc4QIoNQvNhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4 ZjcyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZGE2MTYxYWQtYTYwNi00NDcxLWJiMWUtZWZlMzYzMjZjM2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRIwZF6oOMN6sf13jL10NqRf1q83uRRqOkZv D0e4gtSzkJyJFwIJLXnzCefcnx5Hf98QaN9iYpmws9PlOtgdPdvBH1Mz4dqChpAM sz7OTHwfVkKQKo0fBJRwYCylQAV8mKl+lVIf7d2xhDWu4XJXPi7fN4mbtbrXx8V1 5nIPvsRAQwx4+uYEgWos0wPFtfCFdnbthKM6H4HJ0lH50E0B8BN0griWIwAIJ7h7 Lx4yvAhc7uXwc90oe2znfXj6jSVu7f3vC905P0ccMrd9qY2oyIj2pW57Q+rHbGBd rTUcYeuXsvANN5uQFSPmlTjfPMrArqba1dky+5dYyUd3DluuGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwy2ZN/haIHPjK4SlxENpXzDxD0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvMGI5NTg0OWItYTgyMS0z YjI5LTg2ZTItODJiNjUwZGZkOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4 NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2 N2JmMDhmNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKfWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoIzSqEV2diwGmJlc7k4K2dDDfIxrgzSShE32wkPwi7ApiF1081SyGL UWOLqYtbltFxf/WswWMZPvz/B/hJ/CAOa6flqAuO1dTw+chz5fLZ7j1qMe918ghG i3Y0jOF1Cr1Mr72efAbfok8PWn7sgoijcFPM7RFj9FEOSE03NB3qn7A4qJ0OC1vd q3N5f8gS/qSaheZcvTNwZNCt6ZyWmHb8fGByBssL+jwPhXj4bWLgss+XxbAd04Jf UlKkpAgFL8EXhmffbcnnKiN1fumwFzSCGE5a1zJELHZsaljHFk27qd4Ntrq4G4vZ StFVWTf+yPPXG9tWRKlsCdupkIo+GfI= -----END CERTIFICATE-----Generated at Mon Oct 20 09:38:38 2025 by rpki-client