$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/240d63aa-87cf-3d6a-8f75-4c140ab4562b.roa File: 240d63aa-87cf-3d6a-8f75-4c140ab4562b.roa (raw, json) Hash identifier: jgma16blTy+59glubA7amOLiy691YGkd6nTMLA+2Hbc= Subject key identifier: E8:9A:75:BD:1D:B0:02:F5:6B:26:0C:26:A7:36:FE:BE:B2:37:50:7C Certificate issuer: /CN=d25f3fa9-8b52-4f17-8aca-6740ded73683 Certificate serial: 010D0C9F4328584B2CF71AC35F92A1C5B2B8AD40 Authority key identifier: 8E:B5:84:9A:70:4E:11:B0:46:6B:AD:9D:D3:5B:7B:FC:11:F0:B1:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/240d63aa-87cf-3d6a-8f75-4c140ab4562b.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 399487 IP address blocks: 104.166.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d25f3fa9-8b52-4f17-8aca-6740ded73683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d25f3fa9-8b52-4f17-8aca-6740ded73683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f7:1a:c3:5f:92:a1:c5:b2:b8:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d25f3fa9-8b52-4f17-8aca-6740ded73683 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=9491fd87-47d6-49a5-b4ac-0400bdd95aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1e:0d:db:ca:85:01:e3:da:0f:4c:1d:42:3b: 9f:aa:84:8b:fd:42:63:81:9b:5a:a2:8c:f7:f4:72: 39:08:b3:79:32:50:06:57:0e:d7:e9:40:05:f4:14: 28:1e:11:d2:55:f0:0d:58:83:73:5c:c4:07:8e:c7: 28:a6:48:b1:1f:89:27:26:b4:cd:0f:a1:c4:3e:6d: 29:06:1f:82:ff:a3:6d:d8:31:f9:30:6e:ec:66:0f: ff:e1:31:d6:a7:eb:74:ac:86:3f:d3:71:20:3e:68: df:c8:1f:55:f3:9c:70:2d:7a:c6:58:07:6f:3e:77: 10:12:4d:48:8f:78:c1:5e:fd:9b:67:ed:1a:17:ee: e5:37:21:3a:24:eb:d6:2c:d4:d3:96:42:43:92:af: f3:5a:1d:92:a9:15:d4:bb:2e:f4:a6:f1:cd:55:0e: 7f:01:c6:6d:30:38:76:2a:8c:d7:ac:85:37:e9:89: c9:63:8b:b5:3c:8e:16:aa:18:85:56:25:84:a4:15: 15:7e:92:8c:d4:33:8c:56:87:80:a9:3a:3e:e9:c0: ea:8b:1b:3f:de:49:17:05:9b:c6:5b:fd:25:60:ed: fd:34:e7:26:ff:18:50:7b:c3:e5:e6:91:45:7c:2c: c6:c4:d1:aa:61:d6:2e:82:16:27:1b:c6:90:70:e5: f2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9A:75:BD:1D:B0:02:F5:6B:26:0C:26:A7:36:FE:BE:B2:37:50:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/240d63aa-87cf-3d6a-8f75-4c140ab4562b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d25f3fa9-8b52-4f17-8aca-6740ded73683.crl X509v3 Authority Key Identifier: keyid:8E:B5:84:9A:70:4E:11:B0:46:6B:AD:9D:D3:5B:7B:FC:11:F0:B1:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683.cer sbgp-ipAddrBlock: critical IPv4: 104.166.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:c5:1c:88:8e:c4:a4:f8:9e:19:ef:1e:bd:50:c1:1e:de:d9: e0:08:16:b3:35:53:50:fb:bd:56:7f:8b:67:b5:83:f4:98:74: 38:3c:56:cc:a1:bb:c9:b3:f2:2e:83:ec:36:11:72:a1:8d:b4: ba:49:0c:9a:f5:93:31:1b:80:8a:9a:ec:e0:e7:93:94:48:45: f6:50:c9:36:6d:60:90:79:70:91:86:a8:b2:56:8f:d2:90:a6: 3a:b7:ef:2b:8f:f3:41:b8:a6:06:c3:a6:4f:43:5b:c6:16:bb: 08:ad:33:ba:91:ad:d0:38:07:0c:47:50:86:64:42:6d:e6:cc: f6:43:e8:de:c0:be:4b:d8:35:e0:00:52:9c:c7:4e:88:8f:cb: 59:58:70:e4:f4:41:28:be:72:be:91:3a:fc:72:33:58:05:ad: 0e:0f:ee:a2:45:3d:ef:66:f8:b5:32:b6:72:7b:aa:ea:a6:54: 7c:05:77:1e:e0:22:98:6d:56:0e:b6:04:05:a7:f6:b4:ec:8b: fe:f9:7a:98:68:42:d3:1f:01:b0:17:4c:98:48:92:c7:7c:33: 15:6e:7e:db:67:a2:d6:13:47:33:04:65:d3:1a:13:eb:a1:b0: 66:38:71:3b:d0:6d:1e:02:ea:c6:b1:55:ce:27:27:04:d9:31: 67:c2:df:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9xrDX5KhxbK4rUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI1ZjNmYTktOGI1Mi00ZjE3LThhY2EtNjc0MGRlZDcz NjgzMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk OTQ5MWZkODctNDdkNi00OWE1LWI0YWMtMDQwMGJkZDk1YWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR4N28qFAePaD0wdQjufqoSL/UJjgZtaooz3 9HI5CLN5MlAGVw7X6UAF9BQoHhHSVfANWINzXMQHjscopkixH4knJrTND6HEPm0p Bh+C/6Nt2DH5MG7sZg//4THWp+t0rIY/03EgPmjfyB9V85xwLXrGWAdvPncQEk1I j3jBXv2bZ+0aF+7lNyE6JOvWLNTTlkJDkq/zWh2SqRXUuy70pvHNVQ5/AcZtMDh2 KozXrIU36YnJY4u1PI4WqhiFViWEpBUVfpKM1DOMVoeAqTo+6cDqixs/3kkXBZvG W/0lYO39NOcm/xhQe8Pl5pFFfCzGxNGqYdYughYnG8aQcOXymwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiadb0dsAL1ayYMJqc2/r6yN1B8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjVm M2ZhOS04YjUyLTRmMTctOGFjYS02NzQwZGVkNzM2ODMvMjQwZDYzYWEtODdjZi0z ZDZhLThmNzUtNGMxNDBhYjQ1NjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDI1ZjNmYTktOGI1Mi00ZjE3LThh Y2EtNjc0MGRlZDczNjgzL2QyNWYzZmE5LThiNTItNGYxNy04YWNhLTY3NDBkZWQ3 MzY4My5jcmwwHwYDVR0jBBgwFoAUjrWEmnBOEbBGa62d01t7/BHwsTYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjVmM2ZhOS04YjUyLTRmMTctOGFjYS02NzQw ZGVkNzM2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKZtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnFHIiOxKT4nhnvHr1QwR7e2eAIFrM1U1D7vVZ/i2e1g/SYdDg8Vsyh u8mz8i6D7DYRcqGNtLpJDJr1kzEbgIqa7ODnk5RIRfZQyTZtYJB5cJGGqLJWj9KQ pjq37yuP80G4pgbDpk9DW8YWuwitM7qRrdA4BwxHUIZkQm3mzPZD6N7AvkvYNeAA UpzHToiPy1lYcOT0QSi+cr6ROvxyM1gFrQ4P7qJFPe9m+LUytnJ7quqmVHwFdx7g IphtVg62BAWn9rTsi/75ephoQtMfAbAXTJhIksd8MxVufttnotYTRzMEZdMaE+uh sGY4cTvQbR4C6saxVc4nJwTZMWfC358= -----END CERTIFICATE-----Generated at Sat Oct 11 03:11:31 2025 by rpki-client