$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/94da6f54-9255-374b-a408-2e35886a522d.roa File: 94da6f54-9255-374b-a408-2e35886a522d.roa (raw, json) Hash identifier: WaN3MGaxG8HnvNioHBAeMDQ6TA4sf+ZNJQUUNue8eiU= Subject key identifier: 6A:54:CC:2E:FD:5C:27:AA:4B:9B:46:14:E1:0F:25:81:88:BF:8E:6A Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584B8BE217D96C4F733AFF0D3100 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/94da6f54-9255-374b-a408-2e35886a522d.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 40948 IP address blocks: 104.152.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:17:d9:6c:4f:73:3a:ff:0d:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=0b2f64de-e521-4625-bc70-c5e69b311a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:58:8e:95:05:69:90:7e:38:59:f0:43:22:d0: 74:bd:88:a6:16:0e:56:9a:0b:1d:40:ff:3c:88:79: 4a:44:d8:fe:b9:a6:d7:25:72:ba:ae:8d:cc:2c:90: cd:2b:e4:4d:cd:7f:99:3b:b6:78:b5:7e:9a:e4:0e: 36:58:5b:f7:c0:46:f2:e2:8d:62:27:e0:32:ff:45: e5:03:3f:d2:3a:c3:3d:fe:66:51:b3:44:c7:27:fd: 15:61:d9:70:eb:d8:d9:53:12:16:89:29:64:22:5e: 1d:7f:08:95:83:4c:2f:7c:0d:65:ec:3c:2c:ad:91: 4f:5e:d1:f6:5c:50:30:dd:53:9e:05:3f:a6:3a:1d: 49:82:01:e2:6e:c0:19:0b:77:06:f0:9d:48:10:3e: 79:53:d4:90:b3:76:13:3e:53:15:2d:e9:9a:ec:da: 4f:d9:2b:f9:0a:63:84:64:d5:22:59:be:f1:fd:7a: 9e:b6:4b:4d:41:b7:7f:93:44:a7:4e:ba:bc:57:34: cf:d8:85:fc:bb:bb:b6:83:9a:92:3a:1f:b5:b0:66: e5:3d:47:c3:7d:55:2d:8b:99:1e:64:26:09:e6:a2: 7a:97:32:cf:45:bb:09:6a:8b:79:ad:e4:c1:7b:db: aa:f6:ef:7e:fa:50:0a:ed:a7:47:75:64:e2:d1:d5: 81:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:54:CC:2E:FD:5C:27:AA:4B:9B:46:14:E1:0F:25:81:88:BF:8E:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/94da6f54-9255-374b-a408-2e35886a522d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 104.152.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:4c:aa:e9:13:5a:ee:a6:23:e6:17:b6:b9:a3:c1:00:37:86: 06:f9:9c:45:3c:6a:15:7a:81:99:65:4a:34:aa:55:14:7b:ee: d5:10:79:c9:b9:21:c4:00:7e:b9:40:33:24:e3:c6:08:0b:1c: 6b:72:d8:b4:f8:34:a6:56:dc:cf:14:86:13:fc:ff:44:6a:7d: 0e:95:b0:a9:25:c1:8b:15:38:d0:63:1b:3a:c4:54:76:0c:c8: ef:69:1a:9b:c4:21:66:36:96:10:b0:1c:ad:b3:b4:8d:71:df: cd:d5:9e:d1:5e:3a:49:c5:ec:3f:6b:52:f3:72:7f:a7:85:54: 06:2a:6c:62:9a:03:65:89:80:5f:0f:55:84:f8:ff:de:47:2c: 02:a2:d5:38:ce:12:c2:e4:90:3f:dd:8f:1c:9b:1f:95:a4:81: 08:c5:14:32:24:bb:b5:77:70:09:43:89:50:97:05:62:a6:3b: 1f:7f:53:ac:c2:89:16:f9:6d:1b:29:10:22:7c:41:b4:07:27: f4:4a:4d:30:34:c9:fa:7d:ca:8a:40:9a:a1:40:2b:23:8a:f8: bf:3e:be:d7:8c:60:a3:50:ca:62:44:fb:84:c6:38:93:d8:b9: 13:c5:e9:76:c1:ac:ce:29:2b:44:28:16:1f:0d:03:09:82:ae: 3b:3e:6e:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4hfZbE9zOv8NMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk MGIyZjY0ZGUtZTUyMS00NjI1LWJjNzAtYzVlNjliMzExYTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFiOlQVpkH44WfBDItB0vYimFg5WmgsdQP88 iHlKRNj+uabXJXK6ro3MLJDNK+RNzX+ZO7Z4tX6a5A42WFv3wEby4o1iJ+Ay/0Xl Az/SOsM9/mZRs0THJ/0VYdlw69jZUxIWiSlkIl4dfwiVg0wvfA1l7DwsrZFPXtH2 XFAw3VOeBT+mOh1JggHibsAZC3cG8J1IED55U9SQs3YTPlMVLema7NpP2Sv5CmOE ZNUiWb7x/XqetktNQbd/k0SnTrq8VzTP2IX8u7u2g5qSOh+1sGblPUfDfVUti5ke ZCYJ5qJ6lzLPRbsJaot5reTBe9uq9u9++lAK7adHdWTi0dWBkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpUzC79XCeqS5tGFOEPJYGIv45qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvOTRkYTZmNTQtOTI1NS0z NzRiLWE0MDgtMmUzNTg4NmE1MjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJjEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9MqukTWu6mI+YXtrmjwQA3hgb5nEU8ahV6gZllSjSqVRR77tUQecm5 IcQAfrlAMyTjxggLHGty2LT4NKZW3M8UhhP8/0RqfQ6VsKklwYsVONBjGzrEVHYM yO9pGpvEIWY2lhCwHK2ztI1x383VntFeOknF7D9rUvNyf6eFVAYqbGKaA2WJgF8P VYT4/95HLAKi1TjOEsLkkD/djxybH5WkgQjFFDIku7V3cAlDiVCXBWKmOx9/U6zC iRb5bRspECJ8QbQHJ/RKTTA0yfp9yopAmqFAKyOK+L8+vteMYKNQymJE+4TGOJPY uRPF6XbBrM4pK0QoFh8NAwmCrjs+bnc= -----END CERTIFICATE-----Generated at Tue Oct 21 00:14:04 2025 by rpki-client