$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa File: 8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa (raw, json) Hash identifier: o/zsrgQMOL8apSymPcJaCao6/Xt3NZ6kKle2a33FQaA= Subject key identifier: 7D:89:89:C7:FB:00:BD:58:C1:3A:B9:78:A3:B1:8D:5E:FE:A5:C0:34 Certificate issuer: /CN=25422be5-720b-40bc-8a4d-02579ec1bead Certificate serial: 010D0C9F4328584B84E776E852AD6A4FF5A40480 Authority key identifier: CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 63447 IP address blocks: 104.245.200.0/22 maxlen: 22 204.107.204.0/24 maxlen: 24 2602:ff98::/36 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:76:e8:52:ad:6a:4f:f5:a4:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25422be5-720b-40bc-8a4d-02579ec1bead Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=c9aed5ec-7a21-4c36-b840-f9a020b56137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:52:2f:47:03:af:69:c2:8b:a6:40:b1:90:c5: a2:55:0b:23:c5:34:99:e8:3a:a4:d5:00:e5:d0:21: 6c:43:af:61:8a:ae:6a:39:7d:46:20:7b:17:44:d6: a4:32:26:93:89:20:d1:a6:1e:e0:ed:64:36:2e:f5: c0:3f:fb:86:ec:f6:7e:f8:8c:8c:b7:e5:1c:1d:c1: 40:62:ee:f3:6d:13:80:6e:f4:93:3c:f0:4e:5f:9a: f1:0d:21:5f:4a:d2:00:5e:2e:59:66:a8:66:f8:a9: e4:e4:8f:76:18:6f:7a:e7:5d:2f:46:19:f8:16:98: d2:fa:f4:71:2d:9d:24:b4:82:9d:8b:61:d1:40:7d: 2f:77:26:f4:67:e1:f8:71:8c:ca:d7:20:da:20:b3: 45:b5:bb:a3:c6:5c:ce:d0:18:7b:b4:cd:cd:b9:ea: 81:a1:d5:b4:b9:23:2b:6f:ad:cf:ce:a9:45:0d:78: a9:2d:b5:2d:90:66:e3:0c:27:15:3f:a6:21:e9:ff: 9a:56:92:6b:e3:bd:3b:37:b4:5d:df:fc:02:8a:99: de:a2:e0:84:e1:db:d7:ce:d2:b7:2c:a5:f7:75:fd: 49:cf:16:d8:81:39:aa:ac:26:0f:99:82:30:15:81: e2:14:f6:0a:f6:6c:c5:c8:39:22:f4:44:e2:8f:b6: 62:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:89:89:C7:FB:00:BD:58:C1:3A:B9:78:A3:B1:8D:5E:FE:A5:C0:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.crl X509v3 Authority Key Identifier: keyid:CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer sbgp-ipAddrBlock: critical IPv4: 104.245.200.0/22 204.107.204.0/24 IPv6: 2602:ff98::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:99:94:20:e1:d5:37:99:54:5c:0e:25:34:57:5c:14:9c:1d: f4:b7:0f:b9:4e:32:73:dc:d2:cf:b9:65:62:b2:b1:03:11:57: 70:cd:13:b0:bb:ac:09:59:28:61:ad:e2:10:46:df:52:94:9f: 07:a9:66:df:06:72:6d:1c:3c:9c:d3:fe:00:af:da:32:13:4b: 6f:51:06:82:e4:79:3a:b6:7d:50:f8:98:62:df:1e:0d:33:22: 23:c0:40:5b:c4:d5:d9:fe:c6:49:1d:03:8b:6b:39:55:ce:35: 67:0c:c2:e6:f4:91:62:06:ac:4f:3c:13:e2:95:54:c8:3e:3d: 6d:52:c7:04:2a:83:01:19:05:e4:77:a1:e8:c4:05:80:8f:fc: 8b:80:7a:ef:a0:76:df:92:82:ff:6b:e3:de:93:87:12:1c:c9: 62:c8:ab:8f:25:37:a0:d6:ad:30:3d:f0:69:a0:00:25:e4:81: 56:29:17:96:ca:cd:a9:74:7b:13:4b:6e:91:69:43:e1:28:37: f3:04:10:da:bf:26:75:5c:08:d6:aa:08:7c:65:1d:db:25:0c: e5:e4:bd:46:50:1e:ac:52:4e:df:9b:98:0a:e9:80:46:4f:9d: 4b:75:19:ef:1a:0a:3b:8e:b5:41:f7:87:eb:33:32:8d:fa:fb: 2a:66:05:e1 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEuE53boUq1qT/WkBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU0MjJiZTUtNzIwYi00MGJjLThhNGQtMDI1NzllYzFi ZWFkMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YzlhZWQ1ZWMtN2EyMS00YzM2LWI4NDAtZjlhMDIwYjU2MTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21IvRwOvacKLpkCxkMWiVQsjxTSZ6Dqk1QDl 0CFsQ69hiq5qOX1GIHsXRNakMiaTiSDRph7g7WQ2LvXAP/uG7PZ++IyMt+UcHcFA Yu7zbROAbvSTPPBOX5rxDSFfStIAXi5ZZqhm+Knk5I92GG96510vRhn4FpjS+vRx LZ0ktIKdi2HRQH0vdyb0Z+H4cYzK1yDaILNFtbujxlzO0Bh7tM3NueqBodW0uSMr b63PzqlFDXipLbUtkGbjDCcVP6Yh6f+aVpJr4707N7Rd3/wCipneouCE4dvXztK3 LKX3df1JzxbYgTmqrCYPmYIwFYHiFPYK9mzFyDki9ETij7ZiwQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFH2Jicf7AL1YwTq5eKOxjV7+pcA0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yNTQy MmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3OWVjMWJlYWQvOGE1YzBlOTAtZWM2Yi0z YWM4LTg1ZDctOTA4Zjg4MGU3MDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjU0MjJiZTUtNzIwYi00MGJjLThh NGQtMDI1NzllYzFiZWFkLzI1NDIyYmU1LTcyMGItNDBiYy04YTRkLTAyNTc5ZWMx YmVhZC5jcmwwHwYDVR0jBBgwFoAUztKXLUcr1PnAkCBw26y6O9ViY2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yNTQyMmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3 OWVjMWJlYWQuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQCaPXIAwQA zGvMMA4EAgACMAgDBgQmAv+YADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC0mZQg4dU3mVRcDiU0V1wUnB30 tw+5TjJz3NLPuWVisrEDEVdwzROwu6wJWShhreIQRt9SlJ8HqWbfBnJtHDyc0/4A r9oyE0tvUQaC5Hk6tn1Q+Jhi3x4NMyIjwEBbxNXZ/sZJHQOLazlVzjVnDMLm9JFi BqxPPBPilVTIPj1tUscEKoMBGQXkd6HoxAWAj/yLgHrvoHbfkoL/a+Pek4cSHMli yKuPJTeg1q0wPfBpoAAl5IFWKReWys2pdHsTS26RaUPhKDfzBBDavyZ1XAjWqgh8 ZR3bJQzl5L1GUB6sUk7fm5gK6YBGT51LdRnvGgo7jrVB94frMzKN+vsqZgXh -----END CERTIFICATE-----Generated at Tue Oct 21 06:27:06 2025 by rpki-client