$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa File: 8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa (raw, json) Hash identifier: 2S8Q2ryTuIijVtftlVCM0+TwBpb+ZbCXoZjfDFmdFqE= Subject key identifier: 01:1B:39:1F:9D:72:B7:A7:4B:A9:99:9A:DF:52:5A:9F:41:83:96:42 Certificate issuer: /CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Certificate serial: 010D0C9F4328584B6D2C8F149F73717674F44500 Authority key identifier: C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 21748 IP address blocks: 104.37.232.0/21 maxlen: 24 2606:8b40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:8f:14:9f:73:71:76:74:f4:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=fcbd601b-4e81-4766-bcc9-b66d05b23912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f4:b3:a4:1f:aa:d9:88:5d:04:84:3a:bd:65: d4:bf:9b:ee:1d:27:55:7b:9c:99:98:e8:c9:f1:b1: d1:9a:77:9a:6f:55:d5:14:d5:c2:78:b3:e2:6f:a3: 2a:4b:91:f4:e1:72:6b:66:85:05:05:4c:d8:d0:62: 42:9b:fc:31:4e:74:18:a5:0a:ca:97:a5:33:3c:60: 77:1e:8f:6f:d1:f9:e1:9d:2e:25:7c:94:66:7d:ef: 4c:9a:ea:f3:b8:e8:e8:3c:54:70:62:b1:d9:cc:6c: 8b:74:3e:9e:e7:99:88:d6:bb:b8:71:7f:49:91:9a: 5d:bc:dd:34:e2:69:86:31:61:ef:37:62:e7:29:c0: b3:58:53:b0:10:38:ef:db:03:01:58:be:78:1b:0b: 58:98:c7:8e:aa:62:e7:ee:c3:0e:4a:86:22:16:72: 1e:75:68:47:b1:80:26:bc:3a:c8:a2:c4:28:a7:e1: 4b:8d:4c:c1:2b:93:51:69:24:b0:43:98:7a:72:70: eb:4e:68:97:af:8c:d7:60:39:6c:88:7f:75:8d:21: 67:9c:87:f8:72:89:31:e9:3b:95:fd:34:52:eb:65: f9:43:8b:a3:ad:1c:ec:85:f3:c2:d2:f2:19:df:08: a5:d0:b1:b8:3e:ca:28:5f:c4:fe:70:21:ec:86:c6: fa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1B:39:1F:9D:72:B7:A7:4B:A9:99:9A:DF:52:5A:9F:41:83:96:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl X509v3 Authority Key Identifier: keyid:C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer sbgp-ipAddrBlock: critical IPv4: 104.37.232.0/21 IPv6: 2606:8b40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:59:92:81:e9:ad:08:ff:58:c9:f7:60:97:29:71:e6:ba:3a: 0f:e5:59:15:fb:87:85:16:b3:c2:90:14:cf:b9:72:21:d4:4d: 1b:d5:b8:2f:27:29:5c:a1:dd:f5:a8:06:64:c3:c2:c9:52:94: ed:f4:bb:fc:b2:8a:0a:72:88:3f:2a:c9:cb:5c:e2:db:03:89: 33:9b:07:0d:fd:6b:4f:09:41:29:cf:a8:34:ff:d9:83:4d:f9: 3b:95:88:d9:f2:20:54:a9:c6:b2:96:18:89:aa:14:8d:5a:f4: 35:0e:c2:fc:01:d6:6d:b4:02:1b:dd:d5:9b:32:aa:d6:06:85: 98:9e:b1:6a:77:d6:1e:95:a7:10:cf:9f:56:3a:29:5b:2b:15: 71:64:7e:f9:4e:ca:da:6c:3e:c1:78:00:44:95:5c:9c:10:d7: 12:4c:13:04:95:c5:80:91:f3:ed:66:d3:b3:a1:74:de:18:6e: 2b:ff:38:ca:1e:9b:92:2f:50:f3:e4:f9:7a:f2:97:9e:25:68: 52:2a:bd:26:8d:07:10:7a:55:69:1e:66:e9:20:2c:ab:29:21: 68:c3:ad:41:7e:1d:0d:6b:52:2b:10:5c:94:8d:10:35:c3:da: 45:5a:58:ab:f1:6a:e0:d5:e3:a8:34:6e:d2:64:f6:bf:42:fc: e7:3c:ee:a7 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEttLI8Un3NxdnT0RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5NWE2OTUtZTkxYS00YzVhLThhMzEtYTkyMGE0MmVh NDRkMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZmNiZDYwMWItNGU4MS00NzY2LWJjYzktYjY2ZDA1YjIzOTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPSzpB+q2YhdBIQ6vWXUv5vuHSdVe5yZmOjJ 8bHRmneab1XVFNXCeLPib6MqS5H04XJrZoUFBUzY0GJCm/wxTnQYpQrKl6UzPGB3 Ho9v0fnhnS4lfJRmfe9MmurzuOjoPFRwYrHZzGyLdD6e55mI1ru4cX9JkZpdvN00 4mmGMWHvN2LnKcCzWFOwEDjv2wMBWL54GwtYmMeOqmLn7sMOSoYiFnIedWhHsYAm vDrIosQop+FLjUzBK5NRaSSwQ5h6cnDrTmiXr4zXYDlsiH91jSFnnIf4cokx6TuV /TRS62X5Q4ujrRzshfPC0vIZ3wil0LG4PsooX8T+cCHshsb6SQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFAEbOR+dcrenS6mZmt9SWp9Bg5ZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1 YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIwYTQyZWE0NGQvOGYyYzUwN2YtOTg4MC0z YTBhLThlNmEtMmQ5Y2M1ZDFlOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTI5NWE2OTUtZTkxYS00YzVhLThh MzEtYTkyMGE0MmVhNDRkL2EyOTVhNjk1LWU5MWEtNGM1YS04YTMxLWE5MjBhNDJl YTQ0ZC5jcmwwHwYDVR0jBBgwFoAUxrdjkJ2ZQm4W9Z6SLSD1iDDBqmwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIw YTQyZWE0NGQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDaCXoMA0E AgACMAcDBQAmBotAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAFlZkoHprQj/WMn3YJcpcea6Og/lWRX7h4UW s8KQFM+5ciHUTRvVuC8nKVyh3fWoBmTDwslSlO30u/yyigpyiD8qyctc4tsDiTOb Bw39a08JQSnPqDT/2YNN+TuViNnyIFSpxrKWGImqFI1a9DUOwvwB1m20Ahvd1Zsy qtYGhZiesWp31h6VpxDPn1Y6KVsrFXFkfvlOytpsPsF4AESVXJwQ1xJMEwSVxYCR 8+1m07OhdN4Ybiv/OMoem5IvUPPk+Xryl54laFIqvSaNBxB6VWkeZukgLKspIWjD rUF+HQ1rUisQXJSNEDXD2kVaWKvxauDV46g0btJk9r9C/Oc87qc= -----END CERTIFICATE-----Generated at Mon Oct 20 10:17:40 2025 by rpki-client