$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/fc03f7df-9064-3b4a-8629-009d7f845cbb.roa File: fc03f7df-9064-3b4a-8629-009d7f845cbb.roa (raw, json) Hash identifier: bG6djyw7uhHSoOJieAbr6sEMRl73NNZUOtyH1Z1JhHM= Subject key identifier: 0A:8E:4D:FE:48:26:D0:F6:63:3B:C0:DE:6F:56:1D:9F:63:F0:61:2E Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76D2002DC05E6C3C670CC0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/fc03f7df-9064-3b4a-8629-009d7f845cbb.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 54858 IP address blocks: 104.244.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d2:00:2d:c0:5e:6c:3c:67:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=2521ce1d-0e0b-4c49-87de-6175efdca772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bd:07:ef:74:89:ad:2b:cc:03:17:b8:b9:b0: a1:da:63:32:4e:74:b2:d1:25:8d:f5:1b:6a:c2:7e: 6f:9d:ee:da:f3:69:d2:c1:75:bf:d5:a9:a7:e2:a6: bd:e2:24:5d:4d:d1:5e:d8:15:e3:c3:d1:10:40:37: 27:24:ff:c7:bc:81:0c:66:ca:f7:5d:f3:cb:c6:41: 16:66:3b:c3:49:16:4b:a9:45:6e:38:4e:cf:8b:66: a1:74:08:09:a7:37:a3:6c:5c:78:0f:e9:dd:41:b7: 79:f5:bd:f3:54:27:7f:15:ac:86:af:41:04:02:2b: 78:8a:e1:72:b7:88:32:ba:86:23:77:f2:94:a8:18: 96:25:2e:63:62:ef:fe:00:a7:5a:47:9c:4b:55:5d: 07:83:96:d2:6e:98:ea:f4:0a:44:99:45:90:c1:78: 08:d9:8b:75:63:ab:48:f8:4d:a0:8c:98:14:58:3c: 70:89:c9:56:5d:d8:49:ad:91:c5:29:2e:ef:cd:1e: 9a:e5:56:58:c7:e2:77:bc:80:6e:a6:b0:39:78:eb: f0:15:f9:79:fe:9a:a1:09:9d:86:a3:29:ee:23:5a: 8c:33:2a:67:7c:92:fb:26:1a:f7:b6:56:b2:f9:88: ff:dc:59:ee:10:73:d5:cf:4f:7d:9a:b3:38:43:a6: d7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8E:4D:FE:48:26:D0:F6:63:3B:C0:DE:6F:56:1D:9F:63:F0:61:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/fc03f7df-9064-3b4a-8629-009d7f845cbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.244.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:bc:2b:f9:39:a6:ee:30:26:e6:8d:d9:3f:44:0e:5d:ba:ce: 6e:39:15:22:79:03:43:4d:b9:4c:fc:d2:9d:cb:4b:61:29:66: e1:ae:b5:a3:1b:03:44:57:d3:08:7d:9b:16:52:7a:5c:ce:f4: 50:76:71:8a:dc:d7:a6:68:6c:71:97:b3:fb:28:22:71:21:4a: e7:85:37:e6:24:65:07:80:c6:17:0d:b6:e9:d1:ea:3b:49:18: 13:25:66:1f:0a:d9:ff:09:2b:44:f1:34:94:65:0e:34:3e:2d: ea:32:5d:ac:18:88:d5:79:79:96:05:76:09:88:7b:17:8c:06: 2b:30:68:85:2c:73:53:ca:49:e9:87:cd:39:0a:04:25:7f:3e: ee:20:a2:7f:c2:42:7d:23:06:a3:9d:a1:c8:43:6e:90:02:5e: 37:1f:a6:99:58:22:0d:15:fe:fc:24:3b:0e:44:1d:03:93:77: ec:98:65:b9:81:79:88:d5:7b:bb:b4:8e:c2:e4:27:40:53:59: c7:3d:25:28:f9:ee:d3:e4:02:25:68:6b:bb:b7:52:25:1e:58: dc:3c:1d:e2:64:94:a9:90:5f:cd:c9:1f:59:76:b5:14:c0:ad: 83:db:c5:82:e7:f1:6e:55:f0:46:a0:26:75:1f:66:d8:2a:1b: d8:72:d2:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdtIALcBebDxnDMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MjUyMWNlMWQtMGUwYi00YzQ5LTg3ZGUtNjE3NWVmZGNhNzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL0H73SJrSvMAxe4ubCh2mMyTnSy0SWN9Rtq wn5vne7a82nSwXW/1amn4qa94iRdTdFe2BXjw9EQQDcnJP/HvIEMZsr3XfPLxkEW ZjvDSRZLqUVuOE7Pi2ahdAgJpzejbFx4D+ndQbd59b3zVCd/FayGr0EEAit4iuFy t4gyuoYjd/KUqBiWJS5jYu/+AKdaR5xLVV0Hg5bSbpjq9ApEmUWQwXgI2Yt1Y6tI +E2gjJgUWDxwiclWXdhJrZHFKS7vzR6a5VZYx+J3vIBuprA5eOvwFfl5/pqhCZ2G oynuI1qMMypnfJL7Jhr3tlay+Yj/3FnuEHPVz099mrM4Q6bXtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqOTf5IJtD2YzvA3m9WHZ9j8GEuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZmMwM2Y3ZGYtOTA2NC0z YjRhLTg2MjktMDA5ZDdmODQ1Y2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPTcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADy8K/k5pu4wJuaN2T9EDl26zm45FSJ5A0NNuUz80p3LS2EpZuGutaMb A0RX0wh9mxZSelzO9FB2cYrc16ZobHGXs/soInEhSueFN+YkZQeAxhcNtunR6jtJ GBMlZh8K2f8JK0TxNJRlDjQ+LeoyXawYiNV5eZYFdgmIexeMBiswaIUsc1PKSemH zTkKBCV/Pu4gon/CQn0jBqOdochDbpACXjcfpplYIg0V/vwkOw5EHQOTd+yYZbmB eYjVe7u0jsLkJ0BTWcc9JSj57tPkAiVoa7u3UiUeWNw8HeJklKmQX83JH1l2tRTA rYPbxYLn8W5V8EagJnUfZtgqG9hy0lk= -----END CERTIFICATE-----Generated at Fri Oct 10 21:32:38 2025 by rpki-client