$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f90ad6f2-7955-3fbf-8a7c-139535e4c89c.roa File: f90ad6f2-7955-3fbf-8a7c-139535e4c89c.roa (raw, json) Hash identifier: hrFIRJh9ybAgCUcz/O1+IA93HD2XRQuis/J+wfyA56I= Subject key identifier: 9E:1C:ED:80:49:97:39:58:E0:F6:BD:66:91:93:01:71:63:C4:BF:A7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B79C9D53A302AFEAC25646E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f90ad6f2-7955-3fbf-8a7c-139535e4c89c.roa Signing time: Fri 10 Oct 2025 13:27:11 +0000 ROA not before: Fri 10 Oct 2025 13:27:11 +0000 ROA not after: Thu 08 Jan 2026 14:27:11 +0000 asID: 19905 IP address blocks: 104.166.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:c9:d5:3a:30:2a:fe:ac:25:64:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 10 13:27:11 2025 GMT Not After : Jan 8 14:27:11 2026 GMT Subject: CN=68b11231-dc7c-45c9-885f-e371957c8767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:86:b8:79:2d:af:3d:cd:fb:8b:79:dc:f4:2d: de:ee:60:f6:f1:7f:03:20:63:51:3f:0d:1a:a0:6b: 2c:2e:7b:25:1b:da:6b:b7:6e:2e:ed:93:a0:97:ca: 3f:2d:e6:1b:dd:e0:9a:76:9f:5d:69:be:1e:34:86: 8d:b4:4a:ae:ba:ad:ca:f5:eb:97:af:74:f3:3a:f7: 92:79:1d:77:67:2b:39:ff:4f:40:99:8c:8e:df:5d: 06:d2:12:27:ea:5c:e3:aa:88:b4:28:c0:75:e7:c1: d1:1a:12:36:f7:87:1a:24:b4:55:bd:2e:bd:cb:02: 6a:26:35:65:37:29:b5:9b:5c:4c:dc:97:91:0a:90: 52:ec:2e:c4:c8:44:61:0e:fa:af:b7:e3:1d:76:e8: 31:d6:90:c8:85:af:78:9a:75:04:15:9b:e6:ad:81: f7:8b:df:0e:4e:e3:f1:b6:47:02:db:0b:3c:4e:29: 40:4a:fc:16:da:f1:ee:bc:41:7e:11:78:e4:b2:eb: 7c:90:c1:ca:61:80:bf:93:92:ea:d5:ff:b2:8a:2c: 10:9e:bf:dc:60:3f:05:5f:02:c6:25:a1:7a:6d:b6: 4b:ac:5a:32:a3:fa:28:dc:8b:20:00:4b:d8:ad:9a: b1:4f:2c:26:e9:71:84:4c:9f:72:0c:ff:15:7b:b8: be:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1C:ED:80:49:97:39:58:E0:F6:BD:66:91:93:01:71:63:C4:BF:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f90ad6f2-7955-3fbf-8a7c-139535e4c89c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 104.166.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f5:d4:ef:e3:07:a0:ab:de:e3:e9:5a:3d:45:7c:86:93:26: ca:8e:ca:0b:89:1c:a2:99:be:65:ad:ca:ac:27:aa:d6:fc:04: 2a:f2:2d:fd:b6:e7:e2:68:7f:d7:9e:96:e8:8c:3b:cc:17:fb: d1:01:0f:d5:2b:ff:ac:d0:d8:c9:74:30:9e:d0:da:31:67:2b: 0c:d8:42:3b:73:81:18:44:09:b3:43:00:89:48:fd:96:dc:98: b3:61:00:34:32:07:9c:d0:3f:9f:b8:42:1d:c0:d2:ce:c0:c2: 47:39:4e:67:6d:b5:69:65:88:86:a9:4b:1b:c4:21:b1:5d:99: e4:6f:fc:3e:43:d9:84:26:01:dc:36:cd:86:2d:8a:0a:bc:db: fc:83:ec:41:79:f8:2c:8a:91:b8:04:39:dc:ef:b7:5a:6a:ef: c1:fa:ec:25:f6:b8:22:f1:b1:4b:aa:c0:b4:ff:b5:f5:85:25: 8a:72:4b:4a:28:29:c6:4f:3f:33:88:e9:c3:07:8b:d9:db:c5: 74:cd:fe:34:4f:8f:94:a0:5e:f0:ab:3b:9e:41:b0:c0:e0:04: b0:14:7c:a9:97:e3:7a:58:95:06:af:fb:d0:3a:9a:3e:01:ff: 85:06:10:e0:ef:65:74:55:cb:9d:48:82:5a:b8:2a:76:12:8e: 62:9e:0b:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5ydU6MCr+rCVkbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAxMDEzMjcxMVoXDTI2MDEwODE0MjcxMVowLzEtMCsGA1UEAxMk NjhiMTEyMzEtZGM3Yy00NWM5LTg4NWYtZTM3MTk1N2M4NzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4a4eS2vPc37i3nc9C3e7mD28X8DIGNRPw0a oGssLnslG9prt24u7ZOgl8o/LeYb3eCadp9dab4eNIaNtEquuq3K9euXr3TzOveS eR13Zys5/09AmYyO310G0hIn6lzjqoi0KMB158HRGhI294caJLRVvS69ywJqJjVl Nym1m1xM3JeRCpBS7C7EyERhDvqvt+Mddugx1pDIha94mnUEFZvmrYH3i98OTuPx tkcC2ws8TilASvwW2vHuvEF+EXjksut8kMHKYYC/k5Lq1f+yiiwQnr/cYD8FXwLG JaF6bbZLrFoyo/oo3IsgAEvYrZqxTywm6XGETJ9yDP8Ve7i+AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4c7YBJlzlY4Pa9ZpGTAXFjxL+nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjkwYWQ2ZjItNzk1NS0z ZmJmLThhN2MtMTM5NTM1ZTRjODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaKbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH311O/jB6Cr3uPpWj1FfIaTJsqOyguJHKKZvmWtyqwnqtb8BCryLf22 5+Jof9eeluiMO8wX+9EBD9Ur/6zQ2Ml0MJ7Q2jFnKwzYQjtzgRhECbNDAIlI/Zbc mLNhADQyB5zQP5+4Qh3A0s7Awkc5TmdttWlliIapSxvEIbFdmeRv/D5D2YQmAdw2 zYYtigq82/yD7EF5+CyKkbgEOdzvt1pq78H67CX2uCLxsUuqwLT/tfWFJYpyS0oo KcZPPzOI6cMHi9nbxXTN/jRPj5SgXvCrO55BsMDgBLAUfKmX43pYlQav+9A6mj4B /4UGEODvZXRVy51Iglq4KnYSjmKeC/c= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:38 2025 by rpki-client