$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/0b331785-22e9-33c4-88e6-e1ac36a14c88.roa File: 0b331785-22e9-33c4-88e6-e1ac36a14c88.roa (raw, json) Hash identifier: nJQXnE3ikWhD6bxkFPc1z8ARq53Bgg1D/WQm8P3Bkg4= Subject key identifier: 8D:AD:B5:8C:AA:A9:FF:84:0B:C7:58:62:1C:D2:D1:14:7E:6A:44:69 Certificate issuer: /CN=d25f3fa9-8b52-4f17-8aca-6740ded73683 Certificate serial: 010D0C9F4328584B66320ABC08EBF8AB89B229C0 Authority key identifier: 8E:B5:84:9A:70:4E:11:B0:46:6B:AD:9D:D3:5B:7B:FC:11:F0:B1:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/0b331785-22e9-33c4-88e6-e1ac36a14c88.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 14618 IP address blocks: 104.166.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d25f3fa9-8b52-4f17-8aca-6740ded73683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d25f3fa9-8b52-4f17-8aca-6740ded73683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:0a:bc:08:eb:f8:ab:89:b2:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d25f3fa9-8b52-4f17-8aca-6740ded73683 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=029c06ef-8d8a-48ac-964d-e7b5e05117d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1d:a2:a9:2c:10:ab:e9:e8:c5:32:11:39:c4: 3e:87:90:2f:ea:81:ea:6c:9e:f3:5e:b8:34:ae:fa: 58:ac:2a:51:ee:4f:f6:a2:ee:cb:17:a5:db:91:da: 0b:40:cb:92:fd:0e:68:2f:b2:f8:87:e6:58:9e:62: 54:d7:68:f5:8e:42:40:88:f3:e0:42:0a:0c:ad:01: 68:eb:b9:a2:db:98:14:f4:d3:22:be:bb:0e:5e:34: af:0a:0b:68:b3:a5:a5:75:70:04:84:17:90:28:30: 74:82:2b:88:b2:3d:2b:90:30:b5:c1:0e:91:7c:8b: df:32:a4:f4:94:00:7c:b4:e5:d2:02:b8:67:f2:d9: 75:66:08:c0:56:13:83:fc:f3:f1:76:8a:1c:67:74: 3e:27:60:14:e7:a7:71:bc:83:ee:38:9c:65:54:d3: f6:35:f8:e6:80:5d:fc:e6:66:da:46:53:a1:61:c3: b5:f2:64:ae:bc:7d:4f:0a:c8:58:52:b7:d8:c3:c6: 51:6f:9b:2f:18:86:9e:09:c9:99:d2:d7:33:27:0f: 2a:21:47:96:8c:9b:41:0c:8f:ed:78:5e:6f:68:bf: a5:58:2f:43:3c:31:b5:c9:5b:81:f5:f4:18:59:30: f9:eb:cc:f5:9d:30:4e:67:7b:be:55:d5:89:51:04: d3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AD:B5:8C:AA:A9:FF:84:0B:C7:58:62:1C:D2:D1:14:7E:6A:44:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/0b331785-22e9-33c4-88e6-e1ac36a14c88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d25f3fa9-8b52-4f17-8aca-6740ded73683.crl X509v3 Authority Key Identifier: keyid:8E:B5:84:9A:70:4E:11:B0:46:6B:AD:9D:D3:5B:7B:FC:11:F0:B1:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683.cer sbgp-ipAddrBlock: critical IPv4: 104.166.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:5a:c1:b8:79:c9:a9:f4:b7:ef:01:67:20:94:c2:0b:3f:85: 24:7f:fa:76:d5:cc:6a:3a:ef:1a:86:4a:29:a6:1b:95:56:df: 4c:a6:65:eb:29:68:84:cb:27:c7:9a:93:b8:85:d2:07:22:2c: 6a:12:29:76:56:8d:25:76:27:17:5b:3e:95:77:75:c5:9e:37: 46:aa:2d:da:22:9c:f5:ff:62:6f:e7:59:79:97:3f:a0:19:ad: 5b:0a:ea:05:3b:6c:fa:63:a7:19:83:2d:0d:f5:b2:02:05:10: d6:d2:38:4b:e0:8f:40:63:8e:c9:aa:07:c3:3a:f8:ec:e8:d4: 98:41:55:80:b4:9c:df:71:38:3e:ee:32:e8:f1:2e:2a:de:16: 21:a1:93:4d:70:fd:bf:fc:08:9e:97:e0:c5:cf:8e:be:32:03: c7:bd:c7:06:d7:22:18:40:81:39:8d:49:dc:0e:0a:78:27:00: 60:8f:c2:95:de:28:bc:c0:7c:e1:0f:63:ee:cf:63:3b:14:3d: 17:61:01:7e:ad:d3:74:04:ee:f5:bf:db:45:d4:9b:50:99:52: 54:f7:7b:67:a9:bb:a6:e0:40:de:e9:87:5f:53:95:aa:09:8b: 29:90:92:6e:c4:da:c8:8c:8b:df:c9:58:a5:02:c0:2c:15:86: bd:b1:ff:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgq8COv4q4myKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI1ZjNmYTktOGI1Mi00ZjE3LThhY2EtNjc0MGRlZDcz NjgzMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk MDI5YzA2ZWYtOGQ4YS00OGFjLTk2NGQtZTdiNWUwNTExN2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7h2iqSwQq+noxTIROcQ+h5Av6oHqbJ7zXrg0 rvpYrCpR7k/2ou7LF6XbkdoLQMuS/Q5oL7L4h+ZYnmJU12j1jkJAiPPgQgoMrQFo 67mi25gU9NMivrsOXjSvCgtos6WldXAEhBeQKDB0giuIsj0rkDC1wQ6RfIvfMqT0 lAB8tOXSArhn8tl1ZgjAVhOD/PPxdoocZ3Q+J2AU56dxvIPuOJxlVNP2NfjmgF38 5mbaRlOhYcO18mSuvH1PCshYUrfYw8ZRb5svGIaeCcmZ0tczJw8qIUeWjJtBDI/t eF5vaL+lWC9DPDG1yVuB9fQYWTD568z1nTBOZ3u+VdWJUQTTOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2ttYyqqf+EC8dYYhzS0RR+akRpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjVm M2ZhOS04YjUyLTRmMTctOGFjYS02NzQwZGVkNzM2ODMvMGIzMzE3ODUtMjJlOS0z M2M0LTg4ZTYtZTFhYzM2YTE0Yzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDI1ZjNmYTktOGI1Mi00ZjE3LThh Y2EtNjc0MGRlZDczNjgzL2QyNWYzZmE5LThiNTItNGYxNy04YWNhLTY3NDBkZWQ3 MzY4My5jcmwwHwYDVR0jBBgwFoAUjrWEmnBOEbBGa62d01t7/BHwsTYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjVmM2ZhOS04YjUyLTRmMTctOGFjYS02NzQw ZGVkNzM2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKZtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFawbh5yan0t+8BZyCUwgs/hSR/+nbVzGo67xqGSimmG5VW30ymZesp aITLJ8eak7iF0gciLGoSKXZWjSV2JxdbPpV3dcWeN0aqLdoinPX/Ym/nWXmXP6AZ rVsK6gU7bPpjpxmDLQ31sgIFENbSOEvgj0BjjsmqB8M6+Ozo1JhBVYC0nN9xOD7u MujxLireFiGhk01w/b/8CJ6X4MXPjr4yA8e9xwbXIhhAgTmNSdwOCngnAGCPwpXe KLzAfOEPY+7PYzsUPRdhAX6t03QE7vW/20XUm1CZUlT3e2epu6bgQN7ph19TlaoJ iymQkm7E2siMi9/JWKUCwCwVhr2x/34= -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:25 2025 by rpki-client