$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/b0b79048-232c-3882-9b3a-b655dc0ac343.roa File: b0b79048-232c-3882-9b3a-b655dc0ac343.roa (raw, json) Hash identifier: P+0klDwz/lnaARy+9yIoJt+D2POwWrTDW/8CdWXONnY= Subject key identifier: 39:34:A3:E6:DD:C1:ED:D9:18:0A:18:B5:79:C7:B1:1D:55:93:C7:5C Certificate issuer: /CN=c7fde067-6a5b-4ae6-b9a1-e3ec208c5940 Certificate serial: 010D0C9F4328584B3126EC13C4105CD07FBC8A00 Authority key identifier: 3C:69:02:72:6D:77:DC:4C:A9:8E:3C:9A:57:60:85:35:39:D6:EA:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/b0b79048-232c-3882-9b3a-b655dc0ac343.roa Signing time: Sun 14 Sep 2025 13:00:42 +0000 ROA not before: Sun 14 Sep 2025 13:00:42 +0000 ROA not after: Sat 13 Dec 2025 14:00:42 +0000 asID: 400260 IP address blocks: 104.232.0.0/24 maxlen: 24 192.231.84.0/23 maxlen: 24 2602:fcac::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:31:26:ec:13:c4:10:5c:d0:7f:bc:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7fde067-6a5b-4ae6-b9a1-e3ec208c5940 Validity Not Before: Sep 14 13:00:42 2025 GMT Not After : Dec 13 14:00:42 2025 GMT Subject: CN=749484d5-e5f2-49f7-88ff-2657056f7b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:41:64:11:46:2b:3b:ea:17:42:57:23:36:99: 0b:6b:00:9e:a1:a8:cc:9e:90:cf:92:d7:20:ce:c9: c3:6d:69:3b:55:b1:09:88:4d:73:ab:bd:b6:eb:62: e7:99:44:b9:97:76:30:a6:04:9d:b1:5f:58:03:0b: 31:9b:23:08:a7:c4:f6:72:ac:17:22:53:18:db:65: ae:8f:68:b9:53:f7:f3:8c:27:c3:b6:8b:48:ee:0c: a5:4f:ee:4c:80:20:c4:54:90:71:a4:d8:e2:f5:e6: c5:07:f0:75:6c:bd:57:51:b3:5b:ed:bb:5e:40:2c: b3:b7:1d:ab:d8:a9:55:d8:24:62:43:85:a4:49:a1: 53:e9:88:fc:ef:62:3e:ca:81:fe:78:1f:ba:ad:74: ee:cb:50:89:8c:82:3c:ed:1c:49:21:c7:76:c4:7c: fa:a9:0e:ce:2b:1a:9d:90:84:12:03:fa:69:28:20: 34:a6:95:94:c1:24:0d:03:88:b3:92:3b:87:e5:31: 0e:69:41:32:52:31:7f:6d:69:a9:50:35:7b:9f:d2: a4:53:49:16:2a:bb:07:de:5e:dc:22:6a:05:2b:87: 4c:21:9e:9c:57:51:36:05:70:af:44:c1:5a:bb:5e: 0f:c1:d3:a1:0f:16:6d:84:cb:63:5a:f6:15:2c:64: b8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:34:A3:E6:DD:C1:ED:D9:18:0A:18:B5:79:C7:B1:1D:55:93:C7:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/b0b79048-232c-3882-9b3a-b655dc0ac343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.crl X509v3 Authority Key Identifier: keyid:3C:69:02:72:6D:77:DC:4C:A9:8E:3C:9A:57:60:85:35:39:D6:EA:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.cer sbgp-ipAddrBlock: critical IPv4: 104.232.0.0/24 192.231.84.0/23 IPv6: 2602:fcac::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:08:05:9d:fb:8a:fb:4e:af:58:a4:b9:8d:98:33:3c:a2:24: 76:74:91:47:59:8b:e7:5e:f0:3c:65:7d:f6:dd:b9:d3:4f:5e: 06:cd:e8:0b:4e:d7:48:a5:d4:b6:af:39:07:1c:62:27:c8:89: f0:dd:0d:ab:63:60:16:78:dc:88:c6:e8:ba:5b:7b:03:3a:36: 43:5b:6c:26:e4:9c:93:b9:10:1d:14:2e:6f:61:43:48:38:98: 93:b4:db:59:3c:5a:0a:5c:36:3b:b5:5a:c9:b5:af:34:da:fb: 8a:20:f6:89:dc:31:78:32:6a:70:43:2a:f3:05:1b:05:96:7d: 8f:b2:27:51:58:db:cf:ec:4c:ca:84:8a:fc:ac:a9:df:12:29: ae:85:7a:b7:9f:90:cd:b5:aa:6c:8d:61:98:b2:f6:b8:72:af: 36:ab:55:38:87:ef:4d:f8:57:32:c5:78:c0:ae:26:93:ea:75: f0:75:c1:9e:64:c2:c8:22:e4:bf:4b:e3:42:2a:6f:57:f6:26: 28:93:03:50:5f:e7:9d:6c:b8:8f:ec:d0:6f:bd:52:6d:ca:f8: 87:e0:78:eb:0e:24:23:e5:2c:41:31:bc:7c:b4:ea:f6:d3:ad: 84:18:cc:58:ed:47:16:da:ad:91:5e:01:f9:d7:da:21:9f:70: a0:f8:04:62 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEsxJuwTxBBc0H+8igAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdmZGUwNjctNmE1Yi00YWU2LWI5YTEtZTNlYzIwOGM1 OTQwMB4XDTI1MDkxNDEzMDA0MloXDTI1MTIxMzE0MDA0MlowLzEtMCsGA1UEAxMk NzQ5NDg0ZDUtZTVmMi00OWY3LTg4ZmYtMjY1NzA1NmY3YjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0FkEUYrO+oXQlcjNpkLawCeoajMnpDPktcg zsnDbWk7VbEJiE1zq72262LnmUS5l3YwpgSdsV9YAwsxmyMIp8T2cqwXIlMY22Wu j2i5U/fzjCfDtotI7gylT+5MgCDEVJBxpNji9ebFB/B1bL1XUbNb7bteQCyztx2r 2KlV2CRiQ4WkSaFT6Yj872I+yoH+eB+6rXTuy1CJjII87RxJIcd2xHz6qQ7OKxqd kIQSA/ppKCA0ppWUwSQNA4izkjuH5TEOaUEyUjF/bWmpUDV7n9KkU0kWKrsH3l7c ImoFK4dMIZ6cV1E2BXCvRMFau14PwdOhDxZthMtjWvYVLGS4uQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFDk0o+bdwe3ZGAoYtXnHsR1Vk8dcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jN2Zk ZTA2Ny02YTViLTRhZTYtYjlhMS1lM2VjMjA4YzU5NDAvYjBiNzkwNDgtMjMyYy0z ODgyLTliM2EtYjY1NWRjMGFjMzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzdmZGUwNjctNmE1Yi00YWU2LWI5 YTEtZTNlYzIwOGM1OTQwL2M3ZmRlMDY3LTZhNWItNGFlNi1iOWExLWUzZWMyMDhj NTk0MC5jcmwwHwYDVR0jBBgwFoAUPGkCcm133EypjjyaV2CFNTnW6qwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jN2ZkZTA2Ny02YTViLTRhZTYtYjlhMS1lM2Vj MjA4YzU5NDAuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAaOgAAwQB wOdUMA4EAgACMAgDBgAmAvysADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAACAWd+4r7Tq9YpLmNmDM8oiR2 dJFHWYvnXvA8ZX323bnTT14GzegLTtdIpdS2rzkHHGInyInw3Q2rY2AWeNyIxui6 W3sDOjZDW2wm5JyTuRAdFC5vYUNIOJiTtNtZPFoKXDY7tVrJta802vuKIPaJ3DF4 MmpwQyrzBRsFln2PsidRWNvP7EzKhIr8rKnfEimuhXq3n5DNtapsjWGYsva4cq82 q1U4h+9N+FcyxXjAriaT6nXwdcGeZMLIIuS/S+NCKm9X9iYokwNQX+edbLiP7NBv vVJtyviH4HjrDiQj5SxBMbx8tOr2062EGMxY7UcW2q2RXgH519ohn3Cg+ARi -----END CERTIFICATE-----Generated at Fri Oct 10 21:32:53 2025 by rpki-client