$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/c8847bd4-be8e-3fcb-aad9-cea490dfbb4e.roa File: c8847bd4-be8e-3fcb-aad9-cea490dfbb4e.roa (raw, json) Hash identifier: PtXFRELT9pVDiDk5F8nZzmD6/wYZxj3rK4VqtUWrwDU= Subject key identifier: BC:F1:C3:87:12:A4:5E:85:19:72:50:C9:9A:87:99:26:C4:F7:51:97 Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F4328584B8EACC42A9B55BCD277A15F80 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/c8847bd4-be8e-3fcb-aad9-cea490dfbb4e.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 46408 IP address blocks: 104.255.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c4:2a:9b:55:bc:d2:77:a1:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=ce7961ec-bc5b-46c0-be90-e5461fa933a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:74:80:b0:05:29:f7:94:79:bc:f4:9e:43:29: d4:f1:5c:31:f6:bf:04:cb:e4:1b:04:e8:5c:b1:6b: 3d:43:47:66:c0:9f:1c:f4:d4:ac:f3:21:42:17:46: 85:f9:8f:07:32:75:5e:25:63:82:86:d1:29:25:fe: dc:4a:60:2c:df:25:21:a3:67:5b:1e:64:f1:f3:50: 16:e9:dc:87:4f:27:f7:51:f9:ba:f0:3c:54:d0:8a: d5:0d:13:df:87:dc:4d:bd:c5:69:9a:4e:ee:6b:42: e4:c9:a1:db:66:45:b3:63:05:15:98:39:f6:8d:9d: 70:77:fc:ac:8e:92:c8:40:9f:1b:75:20:f6:bd:40: 24:25:d8:28:8a:9b:5c:6e:9c:cd:6c:0c:3f:f5:b2: 83:40:e2:0e:d6:3c:45:ac:19:67:d6:f3:6f:e5:0a: 34:f2:51:cd:2f:8b:18:89:b9:2c:1b:e6:c8:4a:02: af:55:3f:e7:7a:96:ab:8f:5b:a6:fb:7d:98:57:c5: 0b:b5:26:d8:2c:81:3f:88:23:5f:cf:e5:0e:2d:d9: 98:b0:8d:61:cd:dd:36:1d:e1:3e:73:05:d6:cf:b0: fc:65:21:62:2b:38:f9:b9:5c:f0:19:04:51:0c:94: 9e:92:ed:82:57:4f:aa:4a:ff:d1:88:5a:a9:b4:75: 2d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F1:C3:87:12:A4:5E:85:19:72:50:C9:9A:87:99:26:C4:F7:51:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/c8847bd4-be8e-3fcb-aad9-cea490dfbb4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv4: 104.255.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:66:a1:78:70:e8:5a:b4:8b:8f:2d:9f:e2:66:f4:b1:67:f3: 78:ae:01:b1:85:d0:e9:04:8f:34:86:d3:4a:0c:ae:41:b7:6c: 0f:f5:fd:16:a9:9c:34:3d:9a:0f:ae:8a:04:97:72:f0:b9:12: 18:fe:73:87:f8:8b:b3:c7:f4:68:2d:0e:36:c9:6c:78:e7:a5: 0f:2a:35:00:20:b3:a2:e4:13:7d:2c:ac:33:cb:97:b0:39:f0: 86:05:a6:b6:f0:76:90:07:8c:40:c6:1f:ec:43:86:aa:ff:12: 98:d3:19:5c:a1:c3:23:a2:3d:66:4a:c5:db:01:76:7d:6a:07: f6:81:11:49:e0:9d:36:b7:df:40:8c:b6:7c:91:b0:71:ff:1c: 2d:74:42:03:74:76:eb:0a:3c:3b:e8:e3:70:b4:c0:65:e8:ce: b1:a4:50:10:79:aa:ae:4d:b2:09:0e:08:f0:8f:79:5c:47:34: 0e:d2:c4:93:a7:ea:c0:22:5c:b7:3c:9b:16:4c:96:18:2a:64: 0c:d7:83:e2:f9:d2:4b:ad:57:b3:21:c6:f6:c9:6e:57:81:92: 45:33:2b:e9:73:17:a1:1b:4d:93:9e:66:aa:1b:2a:81:bf:99: 24:7a:93:c4:6c:6f:2c:31:e9:c5:3f:ce:ec:80:92:2e:6c:82: 4e:59:cf:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMQqm1W80nehX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk Y2U3OTYxZWMtYmM1Yi00NmMwLWJlOTAtZTU0NjFmYTkzM2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnSAsAUp95R5vPSeQynU8Vwx9r8Ey+QbBOhc sWs9Q0dmwJ8c9NSs8yFCF0aF+Y8HMnVeJWOChtEpJf7cSmAs3yUho2dbHmTx81AW 6dyHTyf3Ufm68DxU0IrVDRPfh9xNvcVpmk7ua0LkyaHbZkWzYwUVmDn2jZ1wd/ys jpLIQJ8bdSD2vUAkJdgoiptcbpzNbAw/9bKDQOIO1jxFrBln1vNv5Qo08lHNL4sY ibksG+bISgKvVT/neparj1um+32YV8ULtSbYLIE/iCNfz+UOLdmYsI1hzd02HeE+ cwXWz7D8ZSFiKzj5uVzwGQRRDJSeku2CV0+qSv/RiFqptHUt0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzxw4cSpF6FGXJQyZqHmSbE91GXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvYzg4NDdiZDQtYmU4ZS0z ZmNiLWFhZDktY2VhNDkwZGZiYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhmoXhw6Fq0i48tn+Jm9LFn83iuAbGF0OkEjzSG00oMrkG3bA/1/Rap nDQ9mg+uigSXcvC5Ehj+c4f4i7PH9GgtDjbJbHjnpQ8qNQAgs6LkE30srDPLl7A5 8IYFprbwdpAHjEDGH+xDhqr/EpjTGVyhwyOiPWZKxdsBdn1qB/aBEUngnTa330CM tnyRsHH/HC10QgN0dusKPDvo43C0wGXozrGkUBB5qq5NsgkOCPCPeVxHNA7SxJOn 6sAiXLc8mxZMlhgqZAzXg+L50kutV7MhxvbJbleBkkUzK+lzF6EbTZOeZqobKoG/ mSR6k8Rsbywx6cU/zuyAki5sgk5Zz5w= -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:28 2025 by rpki-client