$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/12992c0f-86d6-30f1-97dc-97152a137e4e.roa File: 12992c0f-86d6-30f1-97dc-97152a137e4e.roa (raw, json) Hash identifier: tLIBCfQXvJSFv6mOULZNqnsiZKk9z+T5yCsHMfolMhE= Subject key identifier: 0A:6B:E9:85:30:E0:6F:A3:F2:F9:E3:F2:CD:D6:8C:F8:CA:3A:9E:55 Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Certificate serial: 010D0C9F4328584B90C9383B8FCF99938292B300 Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/12992c0f-86d6-30f1-97dc-97152a137e4e.roa Signing time: Sat 18 Oct 2025 19:09:32 +0000 ROA not before: Sat 18 Oct 2025 19:09:32 +0000 ROA not after: Fri 16 Jan 2026 20:09:32 +0000 asID: 40663 IP address blocks: 104.36.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:90:c9:38:3b:8f:cf:99:93:82:92:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Validity Not Before: Oct 18 19:09:32 2025 GMT Not After : Jan 16 20:09:32 2026 GMT Subject: CN=e9f93869-aa39-4505-8f49-d67f91e2f895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bb:1b:90:4d:2a:94:7b:b8:fb:3a:1d:0c:8f: 6f:1a:aa:92:0a:c8:ad:83:56:18:88:16:bc:a9:b3: c0:e1:e5:89:90:05:f0:64:4d:11:26:2e:cc:98:b4: 06:b0:04:0c:06:8e:b6:95:be:c8:4c:ce:9e:bd:e2: a8:76:49:64:5b:03:9c:02:91:51:08:20:60:06:92: 35:72:be:bc:50:ee:be:99:54:bf:47:a3:ed:33:52: d4:fb:4c:a0:bb:80:9e:a3:29:98:b7:d5:8b:08:4f: 85:6e:fb:9a:36:26:fe:49:b5:a5:0d:56:9e:fe:0f: ad:8a:0b:99:70:31:ae:26:20:b9:85:14:8f:cc:7e: e2:01:32:d9:88:4b:2c:0f:b5:ba:62:0c:4c:94:79: 2f:b4:2f:ad:7a:36:52:33:b2:ed:02:bf:a3:1c:ee: 53:a1:fe:7d:5a:06:a9:d9:05:ec:62:a4:25:44:4d: 20:99:3d:f6:fb:75:1a:b1:9a:4c:54:4e:b7:96:47: 3f:10:ed:58:84:0a:eb:20:8e:73:93:47:7b:bb:1a: e6:89:57:86:c6:29:88:06:e1:ba:b0:68:4e:b2:78: eb:52:b3:6c:54:16:dd:88:97:25:60:a1:d8:0c:c2: c1:3e:67:f4:08:e4:da:da:e5:f7:65:bb:ac:40:4c: b2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6B:E9:85:30:E0:6F:A3:F2:F9:E3:F2:CD:D6:8C:F8:CA:3A:9E:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/12992c0f-86d6-30f1-97dc-97152a137e4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl X509v3 Authority Key Identifier: keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer sbgp-ipAddrBlock: critical IPv4: 104.36.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ba:c0:e6:1a:23:99:20:a7:1f:b2:98:97:61:36:ca:ac:8c: 93:c9:2a:3b:6a:7d:b7:d5:cd:09:50:19:d1:19:7a:1d:71:16: 91:54:91:3a:7c:3a:f4:0c:3f:e1:c3:53:7b:fa:00:b6:fa:52: 0e:32:4d:36:48:b2:fa:37:82:f3:e1:45:0d:c2:23:09:f9:8c: 48:30:86:88:17:36:f3:2f:8f:8b:e6:9f:dd:e3:df:ad:8a:6b: c8:16:fb:c0:24:16:44:1d:be:1b:eb:6a:18:7f:06:a8:f2:32: db:f0:77:fd:8c:f1:1f:a0:14:47:ea:d9:91:36:ec:f3:07:e8: 52:eb:bb:96:11:f1:83:61:d4:a8:13:6f:6d:ae:04:21:aa:43: 3e:8c:f9:e6:d2:25:4d:95:30:fb:10:a1:11:e7:8d:23:7b:5d: e3:a5:74:7b:65:1b:00:9e:44:61:9b:ce:21:09:28:b9:a4:ca: ea:30:b1:73:b1:e5:c4:c0:a8:92:f3:21:6b:61:2e:0f:58:d2: 0b:67:26:63:eb:b4:eb:80:22:5d:4e:a3:b6:c8:22:6e:c5:5f: d1:2f:ea:36:9f:fc:3f:3c:45:87:97:4e:c3:18:00:ea:22:2b: 10:5e:8a:fb:07:7e:be:2f:8b:dc:0f:6b:8c:74:43:60:6f:b0: c5:c0:03:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuQyTg7j8+Zk4KSswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3 Y2IzMB4XDTI1MTAxODE5MDkzMloXDTI2MDExNjIwMDkzMlowLzEtMCsGA1UEAxMk ZTlmOTM4NjktYWEzOS00NTA1LThmNDktZDY3ZjkxZTJmODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLsbkE0qlHu4+zodDI9vGqqSCsitg1YYiBa8 qbPA4eWJkAXwZE0RJi7MmLQGsAQMBo62lb7ITM6eveKodklkWwOcApFRCCBgBpI1 cr68UO6+mVS/R6PtM1LU+0ygu4CeoymYt9WLCE+FbvuaNib+SbWlDVae/g+tiguZ cDGuJiC5hRSPzH7iATLZiEssD7W6YgxMlHkvtC+tejZSM7LtAr+jHO5Tof59Wgap 2QXsYqQlRE0gmT32+3UasZpMVE63lkc/EO1YhArrII5zk0d7uxrmiVeGximIBuG6 sGhOsnjrUrNsVBbdiJclYKHYDMLBPmf0COTa2uX3ZbusQEyyNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApr6YUw4G+j8vnj8s3WjPjKOp5VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0 OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvMTI5OTJjMGYtODZkNi0z MGYxLTk3ZGMtOTcxNTJhMTM3ZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw OGUxYzdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCRQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA26wOYaI5kgpx+ymJdhNsqsjJPJKjtqfbfVzQlQGdEZeh1xFpFUkTp8 OvQMP+HDU3v6ALb6Ug4yTTZIsvo3gvPhRQ3CIwn5jEgwhogXNvMvj4vmn93j362K a8gW+8AkFkQdvhvrahh/BqjyMtvwd/2M8R+gFEfq2ZE27PMH6FLru5YR8YNh1KgT b22uBCGqQz6M+ebSJU2VMPsQoRHnjSN7XeOldHtlGwCeRGGbziEJKLmkyuowsXOx 5cTAqJLzIWthLg9Y0gtnJmPrtOuAIl1Oo7bIIm7FX9Ev6jaf/D88RYeXTsMYAOoi KxBeivsHfr4vi9wPa4x0Q2BvsMXAA14= -----END CERTIFICATE-----Generated at Mon Oct 20 09:16:00 2025 by rpki-client