$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa File: ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa (raw, json) Hash identifier: yt27cTqi/jjg/B6H78ZUBsaPQPi7dPdwiGYQ9J0Jenc= Subject key identifier: D7:AF:89:51:64:5B:8C:6A:B2:12:1D:35:93:C3:82:CD:9E:1A:F3:EE Certificate issuer: /CN=a5ffb160-7d08-4282-966a-137e7328c1b0 Certificate serial: 010D0C9F4328584B715CAF908A1E6FA6673CC900 Authority key identifier: 3C:2E:40:AC:19:47:1C:23:8C:42:39:6E:D3:35:EC:B6:BB:E5:D6:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 63330 IP address blocks: 104.222.64.0/20 maxlen: 24 2605:e580::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/a5ffb160-7d08-4282-966a-137e7328c1b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/a5ffb160-7d08-4282-966a-137e7328c1b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:af:90:8a:1e:6f:a6:67:3c:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ffb160-7d08-4282-966a-137e7328c1b0 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=2a251347-e2c9-4a37-a145-61ecb981584f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:eb:0f:f6:f4:49:08:17:b4:76:da:81:21:fb: 6e:0c:05:60:93:d6:40:b3:41:2a:8b:33:bd:71:4e: 26:dc:a0:f6:c0:07:6b:da:97:20:14:77:21:b4:0e: 41:b1:08:98:50:8b:71:b1:0c:06:46:4c:0f:ba:6f: 68:bd:d8:bd:1d:de:56:f5:95:50:c2:51:59:f3:db: b5:35:d7:72:92:2c:68:78:61:4c:29:b5:1e:9d:b9: 70:da:2d:c4:0f:fe:83:8d:25:41:d1:b8:da:6f:8a: 93:30:be:f9:ab:ab:3b:5e:d3:71:ce:e5:8d:f1:86: 02:42:b8:30:b8:7d:b0:83:21:79:4d:49:f2:df:e7: de:de:10:26:f8:be:ee:8e:22:ef:26:f5:eb:73:f8: d1:4d:5e:55:92:21:13:fd:5d:01:c3:ad:cd:e0:19: 86:18:9c:d7:63:89:e0:26:06:5f:12:18:a3:79:62: 0a:7c:94:b8:32:92:62:67:07:26:c1:38:de:60:9d: 38:fc:13:7b:49:f9:7b:ec:3c:8c:1f:0f:05:a8:e8: c7:e3:30:9a:4c:25:06:c2:c8:44:12:c1:fd:a3:bb: 14:da:09:20:0d:d1:a6:7d:59:05:06:c0:98:7b:82: ba:3d:8c:76:e4:33:11:0e:88:4d:ba:be:36:6a:78: 39:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AF:89:51:64:5B:8C:6A:B2:12:1D:35:93:C3:82:CD:9E:1A:F3:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/a5ffb160-7d08-4282-966a-137e7328c1b0.crl X509v3 Authority Key Identifier: keyid:3C:2E:40:AC:19:47:1C:23:8C:42:39:6E:D3:35:EC:B6:BB:E5:D6:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0.cer sbgp-ipAddrBlock: critical IPv4: 104.222.64.0/20 IPv6: 2605:e580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:1f:39:31:6a:93:c8:bc:20:7a:a8:10:85:1b:50:fd:93:da: 3b:66:ed:10:77:ee:16:78:eb:58:d0:f9:bf:f2:da:6d:ce:17: 3d:18:f6:44:64:ee:06:42:8b:fb:d0:6e:59:82:f7:b8:35:72: b2:75:b0:3d:32:f0:49:17:f4:9f:bd:d4:bc:07:ea:c7:92:c8: e9:53:82:81:06:9c:37:7d:5d:40:88:06:37:1a:38:9b:91:11: 4d:b5:97:95:ea:c5:ca:39:e3:f3:23:3b:ce:5f:61:63:f8:49: 5d:31:9f:b2:a8:db:1c:f2:ca:ae:87:c1:63:82:c1:83:79:47: 76:8e:16:24:39:b6:bf:40:5d:10:46:05:80:36:db:fc:ba:37: 7f:c6:bf:75:ec:e1:f1:ed:9f:33:68:8e:5e:8c:82:29:c5:a8: b4:2b:ff:7d:ea:3f:38:4a:85:18:96:b6:ed:10:9a:49:6f:30: 83:f6:af:61:65:6c:54:22:70:64:2d:7a:ed:7a:35:3a:ff:61: d3:fc:40:39:03:95:2f:83:5f:46:d8:fd:ba:09:c1:fa:27:b1: 99:43:ce:d9:65:76:78:6c:c4:1d:ce:d8:d3:f7:97:8e:2a:cd: 50:a5:fc:6e:65:58:10:de:d5:75:97:fd:f6:5e:a7:cc:86:7c: 81:e0:0c:c0 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEtxXK+Qih5vpmc8yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVmZmIxNjAtN2QwOC00MjgyLTk2NmEtMTM3ZTczMjhj MWIwMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MmEyNTEzNDctZTJjOS00YTM3LWExNDUtNjFlY2I5ODE1ODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+sP9vRJCBe0dtqBIftuDAVgk9ZAs0EqizO9 cU4m3KD2wAdr2pcgFHchtA5BsQiYUItxsQwGRkwPum9ovdi9Hd5W9ZVQwlFZ89u1 NddykixoeGFMKbUenblw2i3ED/6DjSVB0bjab4qTML75q6s7XtNxzuWN8YYCQrgw uH2wgyF5TUny3+fe3hAm+L7ujiLvJvXrc/jRTV5VkiET/V0Bw63N4BmGGJzXY4ng JgZfEhijeWIKfJS4MpJiZwcmwTjeYJ04/BN7Sfl77DyMHw8FqOjH4zCaTCUGwshE EsH9o7sU2gkgDdGmfVkFBsCYe4K6PYx25DMRDohNur42ang5SQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFNeviVFkW4xqshIdNZPDgs2eGvPuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hNWZm YjE2MC03ZDA4LTQyODItOTY2YS0xMzdlNzMyOGMxYjAvZWNlZmVhZGEtY2JkYi0z ZjhhLTlhYmUtNTBlYTM1YTcyOGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTVmZmIxNjAtN2QwOC00MjgyLTk2 NmEtMTM3ZTczMjhjMWIwL2E1ZmZiMTYwLTdkMDgtNDI4Mi05NjZhLTEzN2U3MzI4 YzFiMC5jcmwwHwYDVR0jBBgwFoAUPC5ArBlHHCOMQjlu0zXstrvl1jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hNWZmYjE2MC03ZDA4LTQyODItOTY2YS0xMzdl NzMyOGMxYjAuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEaN5AMA0E AgACMAcDBQAmBeWAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADEfOTFqk8i8IHqoEIUbUP2T2jtm7RB37hZ4 61jQ+b/y2m3OFz0Y9kRk7gZCi/vQblmC97g1crJ1sD0y8EkX9J+91LwH6seSyOlT goEGnDd9XUCIBjcaOJuREU21l5Xqxco54/MjO85fYWP4SV0xn7Ko2xzyyq6HwWOC wYN5R3aOFiQ5tr9AXRBGBYA22/y6N3/Gv3Xs4fHtnzNojl6MginFqLQr/33qPzhK hRiWtu0QmklvMIP2r2FlbFQicGQteu16NTr/YdP8QDkDlS+DX0bY/boJwfonsZlD ztlldnhsxB3O2NP3l44qzVCl/G5lWBDe1XWX/fZep8yGfIHgDMA= -----END CERTIFICATE-----Generated at Wed Oct 8 19:36:54 2025 by rpki-client