$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/f0bf09cb-0ba6-3f0d-85d9-d21a4cb85376.roa File: f0bf09cb-0ba6-3f0d-85d9-d21a4cb85376.roa (raw, json) Hash identifier: OyBtEgj4+k51v2Az1ych8EwQWM35AihvkJya7vfMPfs= Subject key identifier: 3C:76:59:B9:46:39:15:6D:98:8B:FC:DE:BB:BD:CB:83:1A:40:C3:86 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584B891777B31EA7F21A0500D240 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/f0bf09cb-0ba6-3f0d-85d9-d21a4cb85376.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 5645 IP address blocks: 104.246.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:77:b3:1e:a7:f2:1a:05:00:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=57bece4c-4ce8-4c91-8c8a-6921a6787260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:32:ef:f0:23:b9:44:56:34:bb:8c:92:5d:60: 91:4c:13:b7:72:2d:e2:47:8b:ad:04:be:b7:58:7e: 57:52:21:d1:e8:3b:2c:bf:e1:2b:49:79:96:0f:97: 2b:6a:5e:c6:10:29:83:c7:8f:7a:a4:c4:3b:84:79: a7:6e:3a:37:66:49:94:55:22:a5:93:6e:c9:84:d0: 87:e3:8d:0b:61:e7:71:6c:a9:c7:dd:ee:20:81:39: 79:dc:1e:5e:7b:89:4e:55:20:c6:4f:d3:65:28:f6: 88:35:cc:be:45:1d:45:63:b0:12:18:b1:e3:8a:87: 46:28:6f:61:15:65:dd:19:eb:d7:61:da:2d:e8:75: f0:5a:ec:82:7d:59:6a:5f:2c:a6:15:96:ce:15:d3: b9:3d:2c:ab:e9:9e:ca:11:ab:4f:fb:e4:de:30:8f: 37:07:b9:a6:f0:a7:5f:50:a8:b2:8b:d8:e7:e0:66: c3:b7:3c:29:af:54:59:a0:7c:2b:9b:93:84:28:20: 4c:2f:4f:76:5d:70:bf:a5:21:c0:0c:87:73:4d:68: 1a:b6:c3:62:ab:53:2e:c4:1e:a4:fc:42:fd:17:d7: 34:56:3d:f2:14:e4:8d:46:a8:ae:75:bb:91:2a:1b: 2b:8f:c8:fa:63:fc:c0:26:1e:b1:3d:92:89:db:18: 30:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:76:59:B9:46:39:15:6D:98:8B:FC:DE:BB:BD:CB:83:1A:40:C3:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/f0bf09cb-0ba6-3f0d-85d9-d21a4cb85376.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 104.246.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:53:3e:06:66:29:f9:b5:68:76:66:d6:1e:b4:13:3f:14:21: fd:41:7d:b9:24:58:c6:d5:2f:ba:ff:3a:a9:70:c2:54:d1:c6: e1:b9:d7:e0:e3:c6:3f:f0:21:cc:e5:de:a4:ba:93:4a:01:99: 4c:54:0c:cd:60:f1:3f:60:f8:01:35:43:5e:1f:80:b0:94:16: 4a:1e:c0:7b:45:4b:7a:73:3a:46:32:d0:7d:0b:7d:75:fe:4b: 6c:02:cd:38:ba:89:10:53:e9:c0:05:53:72:f6:51:58:2f:77: f9:45:5d:fa:25:0f:ad:ce:63:dd:a6:ef:52:32:01:4b:7a:9e: 94:2e:56:7a:4d:42:bf:34:93:ac:65:b6:0f:a7:dd:fa:b1:b4: b3:66:bb:90:72:3b:f0:87:14:9a:a8:7d:60:97:d1:dc:7c:e2: 1d:9b:4e:6f:00:b1:11:aa:03:0d:73:39:c8:97:0e:a7:06:36: 40:bb:ff:76:48:69:9e:50:bd:78:49:41:50:25:8a:6f:4c:6b: 56:7f:6d:6c:a0:10:84:6e:e6:66:42:77:d6:94:91:25:2d:27: 14:2a:c3:e2:90:46:58:60:ec:b1:8d:0a:c1:ef:de:6d:8c:84: 1a:b0:2b:89:9d:e7:3a:7c:d5:a9:15:d9:2f:77:44:48:9f:0c: 57:9b:5e:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3ezHqfyGgUA0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk NTdiZWNlNGMtNGNlOC00YzkxLThjOGEtNjkyMWE2Nzg3MjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljLv8CO5RFY0u4ySXWCRTBO3ci3iR4utBL63 WH5XUiHR6Dssv+ErSXmWD5cral7GECmDx496pMQ7hHmnbjo3ZkmUVSKlk27JhNCH 440LYedxbKnH3e4ggTl53B5ee4lOVSDGT9NlKPaINcy+RR1FY7ASGLHjiodGKG9h FWXdGevXYdot6HXwWuyCfVlqXyymFZbOFdO5PSyr6Z7KEatP++TeMI83B7mm8Kdf UKiyi9jn4GbDtzwpr1RZoHwrm5OEKCBML092XXC/pSHADIdzTWgatsNiq1MuxB6k /EL9F9c0Vj3yFOSNRqiudbuRKhsrj8j6Y/zAJh6xPZKJ2xgwawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDx2WblGORVtmIv83ru9y4MaQMOGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvZjBiZjA5Y2ItMGJhNi0z ZjBkLTg1ZDktZDIxYTRjYjg1Mzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPasMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtTPgZmKfm1aHZm1h60Ez8UIf1BfbkkWMbVL7r/OqlwwlTRxuG51+Dj xj/wIczl3qS6k0oBmUxUDM1g8T9g+AE1Q14fgLCUFkoewHtFS3pzOkYy0H0LfXX+ S2wCzTi6iRBT6cAFU3L2UVgvd/lFXfolD63OY92m71IyAUt6npQuVnpNQr80k6xl tg+n3fqxtLNmu5ByO/CHFJqofWCX0dx84h2bTm8AsRGqAw1zOciXDqcGNkC7/3ZI aZ5QvXhJQVAlim9Ma1Z/bWygEIRu5mZCd9aUkSUtJxQqw+KQRlhg7LGNCsHv3m2M hBqwK4md5zp81akV2S93REifDFebXvU= -----END CERTIFICATE-----Generated at Mon Oct 20 21:15:11 2025 by rpki-client