$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4af2d60d-7d3a-30e8-a88e-9268b7441016.roa File: 4af2d60d-7d3a-30e8-a88e-9268b7441016.roa (raw, json) Hash identifier: sCYxGjWEW88+3fkxMkG2fL3ggFVTWLiTyXwvdZvpdFw= Subject key identifier: ED:F1:C3:7F:0D:F4:5F:D6:A2:13:90:82:D5:A6:6B:0A:D3:CA:49:76 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F52458306DA0B8B3EF89008 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4af2d60d-7d3a-30e8-a88e-9268b7441016.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 104.137.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:45:83:06:da:0b:8b:3e:f8:90:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=67ac0bf4-db62-408e-ba0e-a083a28ab6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c3:69:fa:c8:72:d2:d8:a0:d9:22:b0:b7:09: d5:2c:2e:1e:70:aa:c6:e5:ae:7d:58:f6:f6:87:db: 82:7e:91:cc:70:0c:9f:e4:ef:de:17:e0:08:fc:54: 99:ba:d8:29:cf:82:1c:13:1d:d4:4c:70:79:e5:73: 7c:2f:60:bb:ea:4c:6b:61:2c:13:a2:8e:b2:47:46: f2:a3:87:cd:2e:1a:4d:bc:fe:57:4b:8a:2c:2a:6d: 42:8f:18:af:b0:31:21:93:0b:f9:38:f0:15:1d:53: fd:26:f4:38:9f:b5:30:77:74:b9:1f:e8:2c:32:8f: 16:07:b2:3a:56:d0:bc:da:ce:9b:76:97:68:00:b8: 83:54:d0:cb:7c:2e:e8:eb:7d:fd:1b:60:d1:46:1c: 99:a5:bf:c1:40:1a:1f:26:4d:53:98:3a:33:ef:55: 52:9f:db:de:94:05:f1:ca:0f:07:2a:47:6e:2f:78: dc:17:cc:f9:05:56:11:35:55:2b:b8:04:bb:22:99: 04:52:38:24:9c:ea:cb:2b:4c:4c:eb:66:6e:33:22: 50:b9:98:94:45:1f:09:b8:68:12:d2:21:36:86:a6: 02:c2:0b:69:41:f5:99:7d:55:2a:58:de:92:47:5a: 85:74:81:66:d4:9e:44:9e:50:7c:77:19:b8:70:71: 8c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F1:C3:7F:0D:F4:5F:D6:A2:13:90:82:D5:A6:6B:0A:D3:CA:49:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4af2d60d-7d3a-30e8-a88e-9268b7441016.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 104.137.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:75:b7:72:5e:0d:f5:ae:5c:bc:45:26:9c:06:ae:b0:bd:2f: fb:ea:df:c0:7d:a5:c3:2a:28:13:e5:5e:e8:7f:9d:3d:95:7c: e0:c4:49:4d:0c:74:b1:a2:11:9e:5a:6c:28:3d:cd:cf:6b:58: 89:1d:d4:cb:cc:a1:5c:b9:3e:1c:3b:ee:04:2f:3e:48:30:61: 2b:bf:5d:54:41:3c:b4:c1:91:b8:e5:fc:50:34:6b:a3:7c:19: eb:cc:d5:b0:a0:44:d2:04:3c:ca:a5:70:94:65:14:40:49:34: ce:e3:6a:65:bd:02:2b:e7:73:a3:c8:14:2a:45:77:40:ed:42: b5:61:50:9c:40:71:82:0e:60:b1:e2:1e:a4:50:1e:2f:f7:72: 6a:90:03:27:c1:09:ec:ef:15:5e:2f:c9:a3:bd:1b:39:1d:b2: 4f:94:84:86:e2:34:17:ca:ad:21:a6:0c:5a:32:1c:bb:a6:07: 67:40:f1:f0:81:9f:71:62:19:5f:c3:e9:88:d5:fb:dd:5d:57: fd:b9:6e:2f:c1:cb:70:ce:7e:17:30:b1:bb:49:9a:c9:ac:96: d2:d7:a0:c5:94:5f:07:87:85:68:3d:49:26:d8:8d:cb:e1:ac: 15:d7:b6:bd:04:b0:6d:25:35:8f:d4:2c:e3:ea:68:8d:e5:f8: 10:b1:8a:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UkWDBtoLiz74kAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NjdhYzBiZjQtZGI2Mi00MDhlLWJhMGUtYTA4M2EyOGFiNmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycNp+shy0tig2SKwtwnVLC4ecKrG5a59WPb2 h9uCfpHMcAyf5O/eF+AI/FSZutgpz4IcEx3UTHB55XN8L2C76kxrYSwToo6yR0by o4fNLhpNvP5XS4osKm1CjxivsDEhkwv5OPAVHVP9JvQ4n7Uwd3S5H+gsMo8WB7I6 VtC82s6bdpdoALiDVNDLfC7o6339G2DRRhyZpb/BQBofJk1TmDoz71VSn9velAXx yg8HKkduL3jcF8z5BVYRNVUruAS7IpkEUjgknOrLK0xM62ZuMyJQuZiURR8JuGgS 0iE2hqYCwgtpQfWZfVUqWN6SR1qFdIFm1J5EnlB8dxm4cHGMZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3xw38N9F/WohOQgtWmawrTykl2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNGFmMmQ2MGQtN2QzYS0z MGU4LWE4OGUtOTI2OGI3NDQxMDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaIlQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA91t3JeDfWuXLxFJpwGrrC9L/vq38B9pcMqKBPlXuh/nT2VfODESU0M dLGiEZ5abCg9zc9rWIkd1MvMoVy5Phw77gQvPkgwYSu/XVRBPLTBkbjl/FA0a6N8 GevM1bCgRNIEPMqlcJRlFEBJNM7jamW9Aivnc6PIFCpFd0DtQrVhUJxAcYIOYLHi HqRQHi/3cmqQAyfBCezvFV4vyaO9Gzkdsk+UhIbiNBfKrSGmDFoyHLumB2dA8fCB n3FiGV/D6YjV+91dV/25bi/By3DOfhcwsbtJmsmsltLXoMWUXweHhWg9SSbYjcvh rBXXtr0EsG0lNY/ULOPqaI3l+BCximM= -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:41 2025 by rpki-client