$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/d459f45e-a006-338c-9b08-b1327ea9704d.roa File: d459f45e-a006-338c-9b08-b1327ea9704d.roa (raw, json) Hash identifier: W0CfSey+l7jXKFIOlElpDxcX9yOfOBbtceIj0BVPU5s= Subject key identifier: 71:D1:16:32:F2:06:71:8F:5D:9A:20:7A:98:40:47:B6:86:C5:CF:2B Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584B477C6CCACA7E753889F3DB00 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/d459f45e-a006-338c-9b08-b1327ea9704d.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 22773 IP address blocks: 104.200.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:6c:ca:ca:7e:75:38:89:f3:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=2614e2c1-73df-4483-81fd-b9dd675f8690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c5:3d:e6:fe:5d:e1:82:6e:12:fc:c9:ba:cd: 0e:7f:43:d7:12:78:25:3c:24:64:70:c5:99:53:e4: 5e:78:7e:87:7a:e7:aa:d8:b5:08:29:1f:34:5f:95: 3a:29:a3:9c:44:a0:88:12:74:a3:47:a8:88:cb:65: 06:d9:02:bc:63:06:71:3f:11:74:61:f6:33:0a:fb: 74:77:cc:4a:fa:43:85:61:35:46:0c:55:e0:71:e7: 04:c6:83:ca:a6:18:cd:0a:f1:a3:cd:cb:1a:ed:c0: 8e:ff:1a:30:4e:77:83:69:cb:6b:f9:3f:e9:89:c9: 0a:cd:be:7f:87:66:a5:1d:76:16:7a:d9:ec:aa:3b: e8:f1:ea:95:38:cb:07:54:ba:b9:22:d5:89:e8:74: 2a:00:54:53:1e:6e:2d:21:48:5a:7e:a6:10:20:6d: 64:04:14:00:56:f6:df:13:1b:84:7d:9a:80:91:77: 5f:11:66:70:6b:0f:46:d4:bf:3d:9c:e1:44:73:b6: 78:fb:5d:e2:de:01:96:52:7d:bb:b6:0e:9b:53:13: fc:a7:c9:bb:62:9c:d0:73:af:f7:78:47:21:a8:d9: c6:50:5b:48:e1:56:08:f2:34:ef:4e:94:b3:d5:ba: 25:be:0c:20:56:a6:ee:9a:7f:27:30:c1:d0:42:0e: ae:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D1:16:32:F2:06:71:8F:5D:9A:20:7A:98:40:47:B6:86:C5:CF:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/d459f45e-a006-338c-9b08-b1327ea9704d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 104.200.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:84:4a:04:ec:95:b8:db:ad:c1:ab:b2:2e:4f:dd:85:73:69: 0f:d5:44:1d:0e:0f:3f:b3:d2:81:67:5a:4c:bc:e6:c6:26:f8: 5a:9c:eb:9e:7f:0b:e6:d2:96:4f:ff:3c:b9:db:8a:4f:80:59: ad:99:12:fb:40:62:0d:da:cf:86:da:8c:26:9f:ef:28:17:56: d0:b9:08:ae:4c:34:7f:71:97:05:6b:d3:d0:3a:53:8a:8f:e1: e4:46:29:d1:7a:66:a2:a8:cc:4f:91:2d:6c:9b:ea:51:3d:98: 9c:b3:d2:bd:a2:02:43:89:3c:ba:39:29:52:fb:07:95:3e:f5: 60:14:1b:7f:67:19:0b:a3:6d:c3:a1:64:06:f6:a4:2d:37:a6: 82:ec:c2:c9:ac:b6:bb:d4:f9:0d:9f:06:31:12:f4:ab:87:4b: 28:ea:1d:0c:25:60:84:23:e6:e1:ad:42:d9:c1:07:be:b9:bb: 99:56:2e:2a:8b:9d:2c:76:a3:3c:ad:fc:e0:a4:31:94:7e:20: be:1c:69:26:01:76:4e:7c:82:59:c9:ab:91:d0:25:c8:02:fd: 1a:9f:f0:4b:b7:05:2f:44:06:92:54:d0:09:90:bc:6f:4e:1b: 09:f1:02:04:54:15:ea:04:10:b9:b0:d2:29:ca:8d:f1:34:b5: 40:63:e2:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfGzKyn51OInz2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk MjYxNGUyYzEtNzNkZi00NDgzLTgxZmQtYjlkZDY3NWY4NjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusU95v5d4YJuEvzJus0Of0PXEnglPCRkcMWZ U+ReeH6Heueq2LUIKR80X5U6KaOcRKCIEnSjR6iIy2UG2QK8YwZxPxF0YfYzCvt0 d8xK+kOFYTVGDFXgcecExoPKphjNCvGjzcsa7cCO/xowTneDactr+T/pickKzb5/ h2alHXYWetnsqjvo8eqVOMsHVLq5ItWJ6HQqAFRTHm4tIUhafqYQIG1kBBQAVvbf ExuEfZqAkXdfEWZwaw9G1L89nOFEc7Z4+13i3gGWUn27tg6bUxP8p8m7YpzQc6/3 eEchqNnGUFtI4VYI8jTvTpSz1bolvgwgVqbumn8nMMHQQg6ucQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHRFjLyBnGPXZogephAR7aGxc8rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvZDQ1OWY0NWUtYTAwNi0z MzhjLTliMDgtYjEzMjdlYTk3MDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaMjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+ESgTslbjbrcGrsi5P3YVzaQ/VRB0ODz+z0oFnWky85sYm+Fqc655/ C+bSlk//PLnbik+AWa2ZEvtAYg3az4bajCaf7ygXVtC5CK5MNH9xlwVr09A6U4qP 4eRGKdF6ZqKozE+RLWyb6lE9mJyz0r2iAkOJPLo5KVL7B5U+9WAUG39nGQujbcOh ZAb2pC03poLswsmstrvU+Q2fBjES9KuHSyjqHQwlYIQj5uGtQtnBB765u5lWLiqL nSx2ozyt/OCkMZR+IL4caSYBdk58glnJq5HQJcgC/Rqf8Eu3BS9EBpJU0AmQvG9O GwnxAgRUFeoEELmw0inKjfE0tUBj4kk= -----END CERTIFICATE-----Generated at Mon Oct 20 07:23:13 2025 by rpki-client