$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/834a3b57-5c33-37e2-a602-f694461eb7c5.roa File: 834a3b57-5c33-37e2-a602-f694461eb7c5.roa (raw, json) Hash identifier: QgCM7Mj+67zeSDpcRtKBg4Frg6wDbbqwZq0KWP7x0Q4= Subject key identifier: E4:21:DB:DE:EA:32:05:23:57:13:27:BA:2D:D4:F6:5D:BA:D0:3E:83 Certificate issuer: /CN=b32ded34-63dd-4272-9a22-5524e5e4ab15 Certificate serial: 010D0C9F4328584B8EACD458CD3F42F55EE83D00 Authority key identifier: 95:F6:91:74:F3:9D:AA:FF:0E:3E:47:55:39:37:38:C3:90:74:6B:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/834a3b57-5c33-37e2-a602-f694461eb7c5.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 104.171.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/b32ded34-63dd-4272-9a22-5524e5e4ab15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/b32ded34-63dd-4272-9a22-5524e5e4ab15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:d4:58:cd:3f:42:f5:5e:e8:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32ded34-63dd-4272-9a22-5524e5e4ab15 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=d65adcb8-9d76-4e47-8312-e722a6e2d563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:98:85:f3:f4:e2:99:b3:5d:4c:5a:f9:49:13: 31:de:98:32:23:31:aa:9d:fc:ba:d5:97:0e:a1:5d: 23:75:57:9e:3a:52:c9:71:74:18:ae:9b:b1:d0:e9: 1d:1b:6d:65:db:ef:67:95:2e:d9:22:cd:be:e8:16: 4a:4b:02:42:15:0f:3d:4b:64:9e:4b:62:4e:69:07: 46:f0:89:18:c2:7b:57:d9:b7:49:06:5d:aa:c9:3b: 4c:8f:7e:c8:8f:58:68:ea:68:15:bf:13:91:4c:d0: a8:35:3f:6d:a8:60:87:5a:86:43:6e:f8:56:3c:94: 9f:9a:be:0b:cd:8d:6a:34:83:41:90:14:fd:25:e1: e8:48:b7:3f:a5:5f:1b:0d:98:c6:ea:81:27:09:80: 35:d2:db:f7:94:80:12:46:d8:11:7b:74:88:0b:b8: 8d:91:77:52:1f:be:a3:c0:eb:b8:5b:0e:99:50:d3: 06:8f:eb:84:68:59:1b:92:df:d7:6b:7c:de:62:14: 4d:e0:78:d0:d7:01:06:ea:4a:0f:2a:ed:39:48:c8: 26:e4:d8:a9:f6:59:55:f7:82:2d:c0:d7:60:5d:7e: 3c:2e:35:10:60:20:20:c8:80:0c:d3:bd:a6:8e:3a: 1c:d5:02:d4:c9:92:6a:f4:49:02:02:d6:1e:a1:34: 76:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:21:DB:DE:EA:32:05:23:57:13:27:BA:2D:D4:F6:5D:BA:D0:3E:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/834a3b57-5c33-37e2-a602-f694461eb7c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/b32ded34-63dd-4272-9a22-5524e5e4ab15.crl X509v3 Authority Key Identifier: keyid:95:F6:91:74:F3:9D:AA:FF:0E:3E:47:55:39:37:38:C3:90:74:6B:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15.cer sbgp-ipAddrBlock: critical IPv4: 104.171.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:a2:ed:51:18:b3:fe:76:f9:7c:b0:1e:1b:6e:4c:bb:55:55: 77:e7:f2:b1:fe:5e:8b:a1:2d:4d:28:d7:11:43:7d:86:e5:60: cf:0f:b0:31:be:1b:3b:dc:b5:11:91:82:69:ad:d1:94:46:13: 42:50:f4:cd:4b:7a:cc:be:f3:07:3d:72:de:73:53:82:e9:43: 32:63:52:d7:47:48:67:72:98:82:63:4a:54:dd:ca:15:91:44: 2d:27:7c:fa:07:06:7c:cd:5e:d5:c9:8a:b2:7d:65:17:12:12: 5f:da:55:4f:df:ed:6f:3a:9c:dd:65:29:86:4a:09:f1:e1:55: 18:42:cf:ba:59:83:e3:82:b9:8c:6e:9b:01:bd:13:42:38:ac: 02:b7:6d:98:3b:51:f8:b8:e2:ba:29:55:7a:c8:66:f8:33:1b: 83:7e:9f:ae:ad:6f:52:17:17:9a:ae:5f:d4:f3:be:94:27:67: 21:20:9d:aa:fc:e3:80:6b:95:a3:53:67:33:d4:b6:e3:c9:c2: a9:97:31:bd:5e:fb:be:95:ee:7d:f2:a1:5e:b2:5a:08:ce:60: 34:93:a0:73:ed:44:a0:8c:79:06:ad:b2:3f:4b:c5:d3:99:1b: 6f:92:f6:7e:44:a7:d1:97:08:5c:ad:d4:06:ce:e4:0f:47:3e: 13:1e:e2:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrNRYzT9C9V7oPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjMyZGVkMzQtNjNkZC00MjcyLTlhMjItNTUyNGU1ZTRh YjE1MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZDY1YWRjYjgtOWQ3Ni00ZTQ3LTgzMTItZTcyMmE2ZTJkNTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJiF8/TimbNdTFr5SRMx3pgyIzGqnfy61ZcO oV0jdVeeOlLJcXQYrpux0OkdG21l2+9nlS7ZIs2+6BZKSwJCFQ89S2SeS2JOaQdG 8IkYwntX2bdJBl2qyTtMj37Ij1ho6mgVvxORTNCoNT9tqGCHWoZDbvhWPJSfmr4L zY1qNINBkBT9JeHoSLc/pV8bDZjG6oEnCYA10tv3lIASRtgRe3SIC7iNkXdSH76j wOu4Ww6ZUNMGj+uEaFkbkt/Xa3zeYhRN4HjQ1wEG6koPKu05SMgm5Nip9llV94It wNdgXX48LjUQYCAgyIAM072mjjoc1QLUyZJq9EkCAtYeoTR2vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQh297qMgUjVxMnui3U9l260D6DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMzJk ZWQzNC02M2RkLTQyNzItOWEyMi01NTI0ZTVlNGFiMTUvODM0YTNiNTctNWMzMy0z N2UyLWE2MDItZjY5NDQ2MWViN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjMyZGVkMzQtNjNkZC00MjcyLTlh MjItNTUyNGU1ZTRhYjE1L2IzMmRlZDM0LTYzZGQtNDI3Mi05YTIyLTU1MjRlNWU0 YWIxNS5jcmwwHwYDVR0jBBgwFoAUlfaRdPOdqv8OPkdVOTc4w5B0a5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMzJkZWQzNC02M2RkLTQyNzItOWEyMi01NTI0 ZTVlNGFiMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKvGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSi7VEYs/52+XywHhtuTLtVVXfn8rH+XouhLU0o1xFDfYblYM8PsDG+ GzvctRGRgmmt0ZRGE0JQ9M1Lesy+8wc9ct5zU4LpQzJjUtdHSGdymIJjSlTdyhWR RC0nfPoHBnzNXtXJirJ9ZRcSEl/aVU/f7W86nN1lKYZKCfHhVRhCz7pZg+OCuYxu mwG9E0I4rAK3bZg7Ufi44ropVXrIZvgzG4N+n66tb1IXF5quX9TzvpQnZyEgnar8 44BrlaNTZzPUtuPJwqmXMb1e+76V7n3yoV6yWgjOYDSToHPtRKCMeQatsj9LxdOZ G2+S9n5Ep9GXCFyt1AbO5A9HPhMe4uo= -----END CERTIFICATE-----Generated at Mon Oct 20 13:22:57 2025 by rpki-client