$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/40a6a3f6-cb42-350e-a524-145c482caa7e.roa File: 40a6a3f6-cb42-350e-a524-145c482caa7e.roa (raw, json) Hash identifier: h7k5PP+zVtA52DKLbmBTVMfLBdH+xNT5UMWqHGP6K98= Subject key identifier: 33:2F:F9:A0:35:D4:A6:65:84:75:C7:BB:D4:78:01:BA:2E:BF:47:10 Certificate issuer: /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f Certificate serial: 010D0C9F4328584B78574E2F7EA429DBBF6B9300 Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/40a6a3f6-cb42-350e-a524-145c482caa7e.roa Signing time: Fri 10 Oct 2025 01:00:30 +0000 ROA not before: Fri 10 Oct 2025 01:00:30 +0000 ROA not after: Thu 08 Jan 2026 02:00:30 +0000 asID: 63086 IP address blocks: 104.36.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:57:4e:2f:7e:a4:29:db:bf:6b:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f Validity Not Before: Oct 10 01:00:30 2025 GMT Not After : Jan 8 02:00:30 2026 GMT Subject: CN=a132b4d1-6647-48f7-aaf2-ce2a76175ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d8:05:89:d5:cf:6c:2d:ca:be:64:9a:93:a9: 0a:ca:19:df:55:90:eb:e9:a5:b4:df:29:bd:fb:ca: 86:78:7f:65:92:e1:93:6a:2d:52:7b:f4:e8:d1:09: be:79:e4:e2:25:9f:e8:d9:27:a0:63:ee:53:3b:e0: 86:b0:3e:1a:c6:55:1d:e7:c2:2c:cf:33:22:ce:de: 8e:ec:d7:59:90:b8:77:ae:5e:99:85:19:bb:c8:68: 01:c6:47:7b:52:7f:44:17:67:a3:86:fd:a4:cb:14: 79:f4:60:44:15:d1:38:24:2f:e2:5e:f0:c1:ed:5c: 2b:19:ff:06:9b:a3:59:2c:ee:4b:25:5e:f9:64:54: da:98:77:4e:d0:78:cb:47:2a:58:2a:40:ee:05:99: 40:5c:0e:93:44:fa:d8:b4:59:f2:66:c7:09:0f:24: c0:e3:8b:83:e4:3d:58:c8:8f:66:ae:48:a4:4d:1d: b1:7c:e8:7b:70:f9:b1:8c:31:94:db:93:01:5b:75: 19:e8:15:7c:39:8a:a6:52:29:23:1f:b0:1e:73:68: a2:4d:44:94:73:57:e0:3e:43:af:5a:ef:33:30:72: 0d:c8:17:2d:2a:8b:2e:2a:d5:56:ae:6e:c2:7d:b9: 9d:2d:e2:58:52:32:d9:1c:87:3c:49:3c:77:d5:6a: 67:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2F:F9:A0:35:D4:A6:65:84:75:C7:BB:D4:78:01:BA:2E:BF:47:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/40a6a3f6-cb42-350e-a524-145c482caa7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl X509v3 Authority Key Identifier: keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer sbgp-ipAddrBlock: critical IPv4: 104.36.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:e3:23:70:55:e8:00:40:d4:d3:81:b4:b0:2d:59:8e:10:fc: f0:80:f8:ca:4f:c6:80:27:d6:38:bb:12:6a:74:b4:bc:8f:9f: a6:2e:1a:f2:58:53:57:3a:bc:60:6a:e1:fa:67:31:47:6b:20: 68:f0:f7:0c:84:7e:e0:39:a0:b7:fa:ad:05:e6:05:10:ea:b4: fe:b5:c9:01:d9:25:41:0e:65:f7:a1:81:5a:b7:86:f0:8f:cf: 69:bd:8b:a1:a3:ad:4b:f4:3e:79:d6:52:b8:65:0b:37:f2:2f: c7:4f:3f:f8:a5:6b:a3:5f:f8:e7:a3:23:c8:9d:dd:dd:46:ca: f3:14:a9:3c:a5:63:d6:97:36:e2:49:85:b3:c3:ff:91:78:c2: 34:e8:75:04:8c:0a:31:9c:1f:81:8f:5a:ec:dd:2c:d8:fa:83: 48:ff:c4:38:a3:ce:7f:4b:4e:63:b6:3a:60:fb:58:9c:a7:8c: e3:0a:8e:e3:d4:4a:f2:38:59:2c:57:96:6d:f4:de:45:60:09: 07:fc:bb:9b:07:54:4c:b0:0c:33:b4:d2:85:97:69:95:93:56: 89:e2:8f:46:19:02:c8:e6:8e:d6:68:4f:4d:6c:e3:fa:35:e8: 60:48:c4:05:b1:49:d7:27:33:8d:ac:bb:e9:84:91:66:89:b2: 18:2e:40:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt4V04vfqQp279rkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmRkMDgyOTItOGRmZC00M2I4LWEwOGMtMjJjYjMxZWQy MDBmMB4XDTI1MTAxMDAxMDAzMFoXDTI2MDEwODAyMDAzMFowLzEtMCsGA1UEAxMk YTEzMmI0ZDEtNjY0Ny00OGY3LWFhZjItY2UyYTc2MTc1ZWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitgFidXPbC3KvmSak6kKyhnfVZDr6aW03ym9 +8qGeH9lkuGTai1Se/To0Qm+eeTiJZ/o2SegY+5TO+CGsD4axlUd58IszzMizt6O 7NdZkLh3rl6ZhRm7yGgBxkd7Un9EF2ejhv2kyxR59GBEFdE4JC/iXvDB7VwrGf8G m6NZLO5LJV75ZFTamHdO0HjLRypYKkDuBZlAXA6TRPrYtFnyZscJDyTA44uD5D1Y yI9mrkikTR2xfOh7cPmxjDGU25MBW3UZ6BV8OYqmUikjH7Aec2iiTUSUc1fgPkOv Wu8zMHINyBctKosuKtVWrm7CfbmdLeJYUjLZHIc8STx31WpnEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMv+aA11KZlhHXHu9R4Abouv0cQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82ZGQw ODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNiMzFlZDIwMGYvNDBhNmEzZjYtY2I0Mi0z NTBlLWE1MjQtMTQ1YzQ4MmNhYTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmRkMDgyOTItOGRmZC00M2I4LWEw OGMtMjJjYjMxZWQyMDBmLzZkZDA4MjkyLThkZmQtNDNiOC1hMDhjLTIyY2IzMWVk MjAwZi5jcmwwHwYDVR0jBBgwFoAUsDu+INGuzPtX0T1i6kyZ2kHR6zwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82ZGQwODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNi MzFlZDIwMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaCTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALfjI3BV6ABA1NOBtLAtWY4Q/PCA+MpPxoAn1ji7Emp0tLyPn6YuGvJY U1c6vGBq4fpnMUdrIGjw9wyEfuA5oLf6rQXmBRDqtP61yQHZJUEOZfehgVq3hvCP z2m9i6GjrUv0PnnWUrhlCzfyL8dPP/ila6Nf+OejI8id3d1GyvMUqTylY9aXNuJJ hbPD/5F4wjTodQSMCjGcH4GPWuzdLNj6g0j/xDijzn9LTmO2OmD7WJynjOMKjuPU SvI4WSxXlm303kVgCQf8u5sHVEywDDO00oWXaZWTVonij0YZAsjmjtZoT01s4/o1 6GBIxAWxSdcnM42su+mEkWaJshguQKU= -----END CERTIFICATE-----Generated at Mon Oct 20 19:06:50 2025 by rpki-client