$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/d70db827-d3b9-335e-8e6d-a58ab3d87a3c.roa File: d70db827-d3b9-335e-8e6d-a58ab3d87a3c.roa (raw, json) Hash identifier: zKzkEPG4AVxpQdXFSdzdbsmSm5KwSlF1MJZWGJPN7Xg= Subject key identifier: C3:EB:B6:71:EF:92:27:5D:8E:09:AD:6F:0C:96:D7:B3:8E:FA:F0:64 Certificate issuer: /CN=7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb Certificate serial: 010D0C9F4328584B715CB022E6DB21383D442B80 Authority key identifier: A2:F1:70:8A:B0:6A:28:01:E2:A1:0A:67:F9:6C:43:0E:5E:C1:C8:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/d70db827-d3b9-335e-8e6d-a58ab3d87a3c.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 104.219.162.0/24 maxlen: 24 104.219.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:b0:22:e6:db:21:38:3d:44:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=5c14fb7f-184a-46b5-a5fd-c690d5b28eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:97:5c:11:a7:fc:76:e0:eb:d2:2c:7e:39:1d: 0b:d9:89:2e:5a:c3:8f:af:5e:12:cb:dc:4b:22:87: ad:ba:76:60:06:43:d9:96:58:d1:ca:b5:68:d1:13: 0d:ba:33:46:90:e3:f8:5a:f6:49:1a:3c:ae:d2:f4: 20:c9:40:cf:14:60:32:cb:df:ea:64:8b:8c:61:f2: b5:90:47:41:67:bf:40:9c:81:6a:4c:2a:8d:3f:f2: c1:2c:1c:f8:18:ca:bf:5b:db:39:d7:fb:4b:0d:ec: c5:4b:0e:52:fe:ad:0c:4f:f9:5e:f0:00:3b:db:2f: 89:7c:eb:78:c5:b0:c9:3d:a7:58:19:18:6f:ac:7a: 9d:a6:d2:1b:d2:1d:51:bf:85:f1:ea:3d:1e:c8:cc: 49:88:5c:65:99:43:9f:34:3a:d7:7c:43:b6:59:9a: 39:82:78:62:a2:1a:51:78:ae:36:8a:aa:dd:4e:0a: 06:df:9f:54:22:0e:47:8e:0b:4d:e9:80:e2:67:b0: 3b:87:64:e4:bd:aa:45:5c:3d:17:86:0f:85:f9:85: e7:22:e8:06:29:65:5b:43:a1:66:06:24:fd:f8:3b: 13:78:56:63:d8:29:34:b5:28:ce:26:4b:d2:52:86: c5:f5:96:14:ee:30:12:14:c4:8f:5a:06:df:b7:63: db:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EB:B6:71:EF:92:27:5D:8E:09:AD:6F:0C:96:D7:B3:8E:FA:F0:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/d70db827-d3b9-335e-8e6d-a58ab3d87a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.crl X509v3 Authority Key Identifier: keyid:A2:F1:70:8A:B0:6A:28:01:E2:A1:0A:67:F9:6C:43:0E:5E:C1:C8:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.cer sbgp-ipAddrBlock: critical IPv4: 104.219.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:0b:b2:58:1f:85:e2:7d:b4:6e:ca:87:8b:85:28:9b:dc:31: 1f:c5:d3:ff:64:3c:35:b7:bc:2f:8e:91:38:ec:17:f9:4c:8e: cd:37:db:9e:7a:db:24:d5:fd:31:8d:7a:85:44:80:ea:7d:a0: 27:d0:6f:b1:0c:d4:d5:d6:f3:5b:10:a0:c8:be:3e:c5:02:9d: f5:02:4e:98:15:95:8c:2c:2e:c5:28:78:6e:c4:4d:0f:ec:4f: ab:55:29:03:9d:6d:00:57:7a:01:cc:80:8b:02:c5:06:ac:a0: 81:71:f3:b1:9a:e3:c3:58:99:2a:5c:35:23:ce:39:88:40:1d: bc:ca:70:45:10:9e:c6:a2:1e:7f:3a:8b:ee:de:06:ae:97:02: 52:8e:6f:f6:4a:88:49:58:02:7d:bd:47:c2:e3:de:cc:5d:98: 0a:c0:17:e9:11:f9:7e:bf:7d:2e:ed:b3:8a:7f:0a:e4:3e:38: c9:73:13:ce:6e:72:e8:e1:1a:3c:d8:f8:14:96:cf:2f:73:70: 73:49:82:6c:6a:5a:e4:6b:7e:78:6f:43:60:22:1d:6d:4f:df: 64:35:92:d3:4c:00:95:a4:db:ef:42:f6:de:66:f1:a5:85:8e: 31:5d:c3:b7:c3:ea:85:5d:88:ef:9b:c6:e9:49:21:32:f2:a5: ec:2b:2b:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXLAi5tshOD1EK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2I2NjA3MjMtNWE1Zi00ZTdlLThmNGQtOTljMjhkNWI4 Y2JiMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NWMxNGZiN2YtMTg0YS00NmI1LWE1ZmQtYzY5MGQ1YjI4ZWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5dcEaf8duDr0ix+OR0L2YkuWsOPr14Sy9xL IoetunZgBkPZlljRyrVo0RMNujNGkOP4WvZJGjyu0vQgyUDPFGAyy9/qZIuMYfK1 kEdBZ79AnIFqTCqNP/LBLBz4GMq/W9s51/tLDezFSw5S/q0MT/le8AA72y+JfOt4 xbDJPadYGRhvrHqdptIb0h1Rv4Xx6j0eyMxJiFxlmUOfNDrXfEO2WZo5gnhiohpR eK42iqrdTgoG359UIg5HjgtN6YDiZ7A7h2TkvapFXD0Xhg+F+YXnIugGKWVbQ6Fm BiT9+DsTeFZj2Ck0tSjOJkvSUobF9ZYU7jASFMSPWgbft2PbHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPrtnHvkiddjgmtbwyW17OO+vBkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YjY2 MDcyMy01YTVmLTRlN2UtOGY0ZC05OWMyOGQ1YjhjYmIvZDcwZGI4MjctZDNiOS0z MzVlLThlNmQtYTU4YWIzZDg3YTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2I2NjA3MjMtNWE1Zi00ZTdlLThm NGQtOTljMjhkNWI4Y2JiLzdiNjYwNzIzLTVhNWYtNGU3ZS04ZjRkLTk5YzI4ZDVi OGNiYi5jcmwwHwYDVR0jBBgwFoAUovFwirBqKAHioQpn+WxDDl7ByB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83YjY2MDcyMy01YTVmLTRlN2UtOGY0ZC05OWMy OGQ1YjhjYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaNuiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4LslgfheJ9tG7Kh4uFKJvcMR/F0/9kPDW3vC+OkTjsF/lMjs032556 2yTV/TGNeoVEgOp9oCfQb7EM1NXW81sQoMi+PsUCnfUCTpgVlYwsLsUoeG7ETQ/s T6tVKQOdbQBXegHMgIsCxQasoIFx87Ga48NYmSpcNSPOOYhAHbzKcEUQnsaiHn86 i+7eBq6XAlKOb/ZKiElYAn29R8Lj3sxdmArAF+kR+X6/fS7ts4p/CuQ+OMlzE85u cujhGjzY+BSWzy9zcHNJgmxqWuRrfnhvQ2AiHW1P32Q1ktNMAJWk2+9C9t5m8aWF jjFdw7fD6oVdiO+bxulJITLypewrK0k= -----END CERTIFICATE-----Generated at Mon Oct 20 18:08:27 2025 by rpki-client