$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa File: 3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa (raw, json) Hash identifier: qia1oClBfsLscNSeu0L+4N6ySl9djKvXmt+RXCVlnV8= Subject key identifier: 14:8E:60:43:65:54:4F:82:0E:14:57:AA:8F:5D:FB:1C:BF:19:02:FE Certificate issuer: /CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a Certificate serial: 010D0C9F4328584B33F1AA821878C14F13452100 Authority key identifier: 2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 9712 IP address blocks: 104.251.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:aa:82:18:78:c1:4f:13:45:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=eb7d4194-1181-4e36-b211-5e1a8d8351ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:23:93:42:2e:56:b4:3e:6f:6a:90:f7:85:18: 1a:bc:5f:90:fb:e8:e0:87:c5:11:d7:d6:21:7f:14: a5:76:20:6a:2e:1c:0f:f6:40:b0:b0:df:90:36:a3: 79:8d:7a:68:69:30:f0:e6:3f:2b:0e:7f:1f:d3:ef: 3b:da:3c:f3:db:74:f9:44:3f:c5:2b:34:8f:74:44: 16:48:bf:e3:e6:57:e0:e6:2c:85:e2:cb:09:ac:6a: e2:3c:8f:65:00:56:7a:16:ca:66:01:6f:21:e5:23: f6:9f:61:d2:12:b5:a3:03:69:54:09:89:6b:e3:7a: ad:bc:fd:3e:b2:5f:98:a7:e8:ad:6e:4a:97:a2:c1: 69:1a:55:de:f5:27:ed:68:6d:ba:15:58:15:ba:78: d5:01:d7:3b:6d:5f:f6:6c:23:e2:cb:6b:9e:57:80: 3f:0b:6a:1a:26:c5:cd:31:40:3f:0e:1a:07:d3:df: ee:c5:5f:76:9b:3e:49:55:46:b9:b5:ca:26:65:af: cf:b3:5e:41:63:73:4c:8a:34:f2:95:5b:eb:6e:c4: bf:61:03:a7:99:8e:24:8f:41:d7:e4:51:65:d6:e4: a1:55:3d:31:38:d2:1d:36:ef:4a:99:33:42:f2:b9: aa:72:89:00:ec:30:4f:53:f9:94:76:46:36:d2:f0: 42:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8E:60:43:65:54:4F:82:0E:14:57:AA:8F:5D:FB:1C:BF:19:02:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.crl X509v3 Authority Key Identifier: keyid:2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer sbgp-ipAddrBlock: critical IPv4: 104.251.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:a5:47:9f:3b:0e:c4:bd:94:78:25:c5:8e:56:9e:bc:00:44: c7:08:27:8c:15:47:97:e7:39:cd:c2:9f:b8:7d:07:fc:2f:4d: 58:05:76:8a:26:2b:8a:80:09:dd:64:40:b9:db:29:b2:4a:66: 78:4f:5d:9d:3a:ca:ba:f2:63:0f:a8:66:58:99:5d:63:ed:ae: 52:7c:0e:20:4b:a6:a1:d5:57:7b:1d:40:1b:9a:55:db:3d:3b: 3b:61:9c:53:96:01:74:c1:4d:68:b9:46:a2:c2:71:3f:6c:eb: 73:d2:07:30:41:c5:db:8d:e1:f1:fe:12:d0:6f:06:e4:f2:dc: 42:19:7b:f2:f1:e6:e1:87:63:47:18:2c:8b:94:74:98:1d:df: 79:e6:cd:a5:ea:b9:ef:8c:2f:ff:d1:3d:46:6a:51:7f:62:6c: d7:91:37:20:94:e5:df:e3:e4:21:4b:5d:1e:63:33:af:5e:51: b9:8d:9f:22:88:02:5a:d8:8f:ad:0e:6d:06:fd:58:60:aa:1d: 4c:84:1a:2f:74:cf:c6:93:16:76:70:9f:a4:03:3f:ab:b6:87: f5:27:db:43:9a:06:55:01:96:46:39:29:fd:4d:3c:8c:f2:c3: d1:4a:6a:b9:72:c7:2e:02:04:92:c2:8c:05:07:a2:20:a3:19: a6:12:0d:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8aqCGHjBTxNFIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFiZGUwN2ItMjg4OC00NTkyLTgxNDUtZjRiY2QzZTNh MTJhMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk ZWI3ZDQxOTQtMTE4MS00ZTM2LWIyMTEtNWUxYThkODM1MWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiOTQi5WtD5vapD3hRgavF+Q++jgh8UR19Yh fxSldiBqLhwP9kCwsN+QNqN5jXpoaTDw5j8rDn8f0+872jzz23T5RD/FKzSPdEQW SL/j5lfg5iyF4ssJrGriPI9lAFZ6FspmAW8h5SP2n2HSErWjA2lUCYlr43qtvP0+ sl+Yp+itbkqXosFpGlXe9SftaG26FVgVunjVAdc7bV/2bCPiy2ueV4A/C2oaJsXN MUA/DhoH09/uxV92mz5JVUa5tcomZa/Ps15BY3NMijTylVvrbsS/YQOnmY4kj0HX 5FFl1uShVT0xONIdNu9KmTNC8rmqcokA7DBPU/mUdkY20vBCUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSOYENlVE+CDhRXqo9d+xy/GQL+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMWJk ZTA3Yi0yODg4LTQ1OTItODE0NS1mNGJjZDNlM2ExMmEvM2ExNDAzZjEtMDFiYy0z MmY5LTk3MzQtYjFkZmM2ZGNkNmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjFiZGUwN2ItMjg4OC00NTkyLTgx NDUtZjRiY2QzZTNhMTJhL2IxYmRlMDdiLTI4ODgtNDU5Mi04MTQ1LWY0YmNkM2Uz YTEyYS5jcmwwHwYDVR0jBBgwFoAUK+RPWssBQtxS7Wsbo+me/XzGY7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMWJkZTA3Yi0yODg4LTQ1OTItODE0NS1mNGJj ZDNlM2ExMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaPs4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOlR587DsS9lHglxY5WnrwARMcIJ4wVR5fnOc3Cn7h9B/wvTVgFdoom K4qACd1kQLnbKbJKZnhPXZ06yrryYw+oZliZXWPtrlJ8DiBLpqHVV3sdQBuaVds9 OzthnFOWAXTBTWi5RqLCcT9s63PSBzBBxduN4fH+EtBvBuTy3EIZe/Lx5uGHY0cY LIuUdJgd33nmzaXque+ML//RPUZqUX9ibNeRNyCU5d/j5CFLXR5jM69eUbmNnyKI AlrYj60ObQb9WGCqHUyEGi90z8aTFnZwn6QDP6u2h/Un20OaBlUBlkY5Kf1NPIzy w9FKarlyxy4CBJLCjAUHoiCjGaYSDew= -----END CERTIFICATE-----Generated at Sat Oct 11 03:13:26 2025 by rpki-client