$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/839f43fb-e65a-348f-8aa6-cb9e456a3c4a.roa File: 839f43fb-e65a-348f-8aa6-cb9e456a3c4a.roa (raw, json) Hash identifier: iBOE/0ZCbf5XLFspGNBXGSF3EQ+mWRl+Ky4QMqLxfno= Subject key identifier: 94:A7:79:3B:4B:F7:9A:B9:F8:C9:B2:87:6A:40:C5:14:3F:B4:73:F6 Certificate issuer: /CN=d426c818-fe62-465f-8184-d4f8176e2692 Certificate serial: 010D0C9F4328584B68FC9B0236A33CC9BC3D2080 Authority key identifier: F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/839f43fb-e65a-348f-8aa6-cb9e456a3c4a.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 6507 IP address blocks: 104.160.128.0/19 maxlen: 19 104.160.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:9b:02:36:a3:3c:c9:bc:3d:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d426c818-fe62-465f-8184-d4f8176e2692 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=5bcf9736-4c32-4e5c-8de4-70a23bf3c71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:80:55:6b:5a:ca:fd:dc:24:fb:11:30:40:4c: 93:88:86:b4:ca:36:9b:d0:fb:52:4c:22:da:d9:0e: 46:ab:34:b5:ce:27:6f:fe:ca:42:be:c3:06:4f:a7: 27:99:83:53:80:b8:ab:97:bb:9b:e3:49:c7:20:15: 7b:de:0a:b9:ef:14:10:2d:44:be:b8:02:66:19:45: 09:90:6f:e6:b2:9b:32:0a:34:14:1d:67:02:fa:c2: fa:f8:af:5d:41:66:ea:72:84:09:6c:63:19:81:d2: 8d:bb:75:da:bb:fa:25:fa:6c:54:a4:7b:19:8a:4a: 3c:81:f4:2a:7c:1f:98:2b:0d:60:e4:a6:eb:0b:63: 1e:91:db:37:40:06:06:90:b9:d9:11:c0:a9:fe:78: c0:e3:44:69:83:09:ff:36:fb:4e:92:8d:5c:85:19: dd:52:63:f8:4e:70:31:7b:95:2c:b0:17:f9:c6:cd: 90:0a:84:e8:66:9f:69:c5:04:c2:6a:ca:30:03:fe: 86:04:30:18:51:b7:09:cb:d5:24:04:5b:7f:7a:52: af:1a:dc:c9:fc:9f:85:c3:d5:c1:e7:04:39:33:a8: b6:e6:9a:0e:b4:d0:72:30:ce:ea:5d:4e:61:51:fe: f5:38:3a:8f:a2:b4:d5:c6:8e:b7:cb:14:b0:05:9c: 2f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A7:79:3B:4B:F7:9A:B9:F8:C9:B2:87:6A:40:C5:14:3F:B4:73:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/839f43fb-e65a-348f-8aa6-cb9e456a3c4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl X509v3 Authority Key Identifier: keyid:F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer sbgp-ipAddrBlock: critical IPv4: 104.160.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption df:cc:a3:a2:f7:5c:5a:9e:05:0c:ce:80:b1:b6:4d:f5:8e:e6: d7:d7:46:57:0b:3a:f2:ae:36:23:f7:e7:d5:da:5e:b4:ef:67: 13:d3:43:ef:6c:6f:c9:e0:60:40:47:da:a3:47:cd:eb:8f:04: 3a:63:e4:ec:67:a5:27:51:bb:9f:95:ce:aa:bf:df:64:02:ad: c1:0a:12:40:2e:f3:45:eb:0c:40:15:47:b3:19:84:fe:4d:df: c2:2b:8c:fc:46:e4:54:1d:f0:4f:19:56:ad:ce:59:ba:02:4f: d3:fe:29:9b:20:28:6a:1d:9b:37:58:f0:db:0c:e4:0e:63:a1: fc:bd:03:00:62:10:92:31:66:28:d4:11:42:f0:2b:56:c7:b3: e8:d4:9d:30:05:63:b2:91:ab:ac:5b:5d:54:30:9f:9f:79:97: 7c:4e:e4:2a:7f:24:ac:26:a1:32:88:0e:08:21:c4:60:31:16: 3f:7c:38:f0:bb:98:f8:2c:e0:2f:fb:30:dd:37:7e:2b:07:ae: 6a:e4:97:64:dd:3d:32:eb:a2:f8:c9:55:45:4e:aa:26:b8:0c: ee:26:47:70:7e:84:38:e9:33:7e:52:ce:5f:ec:3c:a6:a2:d0: 68:07:47:ce:63:c9:cb:5a:b4:a0:84:5e:a3:06:18:bd:0c:92: 18:c8:36:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/JsCNqM8ybw9IIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQyNmM4MTgtZmU2Mi00NjVmLTgxODQtZDRmODE3NmUy NjkyMB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk NWJjZjk3MzYtNGMzMi00ZTVjLThkZTQtNzBhMjNiZjNjNzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoBVa1rK/dwk+xEwQEyTiIa0yjab0PtSTCLa 2Q5GqzS1zidv/spCvsMGT6cnmYNTgLirl7ub40nHIBV73gq57xQQLUS+uAJmGUUJ kG/mspsyCjQUHWcC+sL6+K9dQWbqcoQJbGMZgdKNu3Xau/ol+mxUpHsZiko8gfQq fB+YKw1g5KbrC2Mekds3QAYGkLnZEcCp/njA40Rpgwn/NvtOko1chRndUmP4TnAx e5UssBf5xs2QCoToZp9pxQTCasowA/6GBDAYUbcJy9UkBFt/elKvGtzJ/J+Fw9XB 5wQ5M6i25poOtNByMM7qXU5hUf71ODqPorTVxo63yxSwBZwvxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSneTtL95q5+Mmyh2pAxRQ/tHP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNDI2 YzgxOC1mZTYyLTQ2NWYtODE4NC1kNGY4MTc2ZTI2OTIvODM5ZjQzZmItZTY1YS0z NDhmLThhYTYtY2I5ZTQ1NmEzYzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDQyNmM4MTgtZmU2Mi00NjVmLTgx ODQtZDRmODE3NmUyNjkyL2Q0MjZjODE4LWZlNjItNDY1Zi04MTg0LWQ0ZjgxNzZl MjY5Mi5jcmwwHwYDVR0jBBgwFoAU8F+ppzkydlY4j5FgaWTWQCUOPLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNDI2YzgxOC1mZTYyLTQ2NWYtODE4NC1kNGY4 MTc2ZTI2OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaKCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN/Mo6L3XFqeBQzOgLG2TfWO5tfXRlcLOvKuNiP359XaXrTvZxPTQ+9s b8ngYEBH2qNHzeuPBDpj5OxnpSdRu5+Vzqq/32QCrcEKEkAu80XrDEAVR7MZhP5N 38IrjPxG5FQd8E8ZVq3OWboCT9P+KZsgKGodmzdY8NsM5A5jofy9AwBiEJIxZijU EULwK1bHs+jUnTAFY7KRq6xbXVQwn595l3xO5Cp/JKwmoTKIDgghxGAxFj98OPC7 mPgs4C/7MN03fisHrmrkl2TdPTLrovjJVUVOqia4DO4mR3B+hDjpM35Szl/sPKai 0GgHR85jyctatKCEXqMGGL0MkhjINk0= -----END CERTIFICATE-----Generated at Mon Oct 20 13:56:06 2025 by rpki-client