$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/cebdec51-99ad-378c-9ad6-936ea7e7b823.roa File: cebdec51-99ad-378c-9ad6-936ea7e7b823.roa (raw, json) Hash identifier: bUdyLK2GvISxuKz01HdQLUFDOfkKAnGBNqDlTNo2MZ0= Subject key identifier: 36:59:3F:9B:90:D1:85:A2:39:18:12:6F:9B:3B:77:45:03:7B:A2:FD Certificate issuer: /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Certificate serial: 010D0C9F4328584B0CDC1AFF17EFD025AE371FC0 Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/cebdec51-99ad-378c-9ad6-936ea7e7b823.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 19740 IP address blocks: 172.84.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:1a:ff:17:ef:d0:25:ae:37:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=75c7e668-9d1c-4121-a793-eab8ebbf781e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5b:69:75:4b:71:72:3f:55:4d:87:62:81:64: b5:b8:63:3a:14:8f:b9:cc:3b:f7:a5:9c:98:d7:b8: e3:ec:c9:1d:41:66:ea:c8:b6:f7:e5:76:80:e5:20: 7c:a0:a7:50:bb:3f:2f:e6:fa:a6:9c:64:62:79:45: 19:87:84:ab:ca:f2:70:07:52:82:ed:60:07:47:e3: e2:86:38:d7:a1:34:56:0e:85:b5:07:cf:68:65:93: 1b:b5:1b:84:bf:5c:3a:9c:b6:9e:c6:30:11:76:c3: a1:6b:ca:71:ac:82:d4:f1:1d:8f:e1:04:75:da:ee: 8b:f8:e2:d1:37:2a:f2:20:d2:45:6e:9d:d5:be:89: e0:10:75:15:b3:a2:af:6f:08:91:48:96:eb:b3:c3: 50:a1:7c:95:1d:1b:83:1c:a2:8f:54:86:1e:80:d6: 35:8f:59:93:1c:94:46:bb:23:7c:56:f0:52:f6:5d: bb:f0:71:06:1f:79:0c:7f:32:ee:49:d4:41:0b:dd: 2c:a1:b8:a4:d7:db:cc:77:cd:8f:f4:c8:6c:20:00: 63:de:e9:70:60:25:ca:a7:ff:4d:a0:38:94:79:7a: 04:ff:9e:22:81:6c:96:a6:05:01:e9:6d:31:06:50: 3c:94:f1:2c:1d:f7:4c:fd:f2:fe:08:c9:18:6e:7e: e4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:59:3F:9B:90:D1:85:A2:39:18:12:6F:9B:3B:77:45:03:7B:A2:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/cebdec51-99ad-378c-9ad6-936ea7e7b823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl X509v3 Authority Key Identifier: keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer sbgp-ipAddrBlock: critical IPv4: 172.84.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:9f:1b:e8:a3:af:7c:17:fc:fc:15:f5:78:4d:c4:04:9d:0b: 06:c7:3e:48:f4:47:4c:60:74:32:14:86:fa:1a:fa:24:b7:c0: 17:00:b2:6f:76:89:28:fd:da:03:f6:55:47:6e:ff:d0:fc:42: e2:0c:d8:40:38:68:48:e8:70:d1:33:28:c0:3b:2e:27:74:f8: cb:f2:96:f1:37:1f:a3:34:fe:9b:bf:30:4c:dd:cd:47:13:57: 39:60:51:df:ef:b0:f5:f3:44:36:02:1e:55:c1:81:98:ec:fb: 17:63:4c:55:54:fd:b3:d9:1b:c8:5c:13:28:91:df:36:ad:d7: 2e:7e:da:2d:e8:ac:68:58:06:e2:f9:61:96:02:ab:a4:7f:6f: 0e:5b:c4:4d:46:12:3d:a1:24:12:58:98:d0:8f:dc:56:31:ea: 53:3f:ba:52:39:c9:39:b5:86:86:32:11:cf:66:8a:24:70:57: a9:d2:92:f5:17:18:ff:ac:b7:f4:e6:a2:03:e1:e7:d2:00:21: 3a:f4:53:c6:d2:8c:03:9b:ec:3b:37:a3:26:b2:83:a5:8c:5f: 5f:1f:49:ea:ac:05:c0:dd:cf:82:b0:ab:e9:e9:a4:61:1c:81: bd:c9:f1:b0:e0:11:dc:c5:31:a2:84:74:32:7e:3f:bb:2d:96: 03:4b:8d:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3Br/F+/QJa43H8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz NGQ2MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk NzVjN2U2NjgtOWQxYy00MTIxLWE3OTMtZWFiOGViYmY3ODFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVtpdUtxcj9VTYdigWS1uGM6FI+5zDv3pZyY 17jj7MkdQWbqyLb35XaA5SB8oKdQuz8v5vqmnGRieUUZh4SryvJwB1KC7WAHR+Pi hjjXoTRWDoW1B89oZZMbtRuEv1w6nLaexjARdsOha8pxrILU8R2P4QR12u6L+OLR NyryINJFbp3VvongEHUVs6KvbwiRSJbrs8NQoXyVHRuDHKKPVIYegNY1j1mTHJRG uyN8VvBS9l278HEGH3kMfzLuSdRBC90sobik19vMd82P9MhsIABj3ulwYCXKp/9N oDiUeXoE/54igWyWpgUB6W0xBlA8lPEsHfdM/fL+CMkYbn7kCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZZP5uQ0YWiORgSb5s7d0UDe6L9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvY2ViZGVjNTEtOTlhZC0z NzhjLTlhZDYtOTM2ZWE3ZTdiODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0 YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1 MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2 MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEufG+ijr3wX/PwV9XhNxASdCwbHPkj0R0xgdDIUhvoa+iS3wBcAsm92 iSj92gP2VUdu/9D8QuIM2EA4aEjocNEzKMA7Lid0+MvylvE3H6M0/pu/MEzdzUcT VzlgUd/vsPXzRDYCHlXBgZjs+xdjTFVU/bPZG8hcEyiR3zat1y5+2i3orGhYBuL5 YZYCq6R/bw5bxE1GEj2hJBJYmNCP3FYx6lM/ulI5yTm1hoYyEc9miiRwV6nSkvUX GP+st/TmogPh59IAITr0U8bSjAOb7Ds3oyayg6WMX18fSeqsBcDdz4Kwq+nppGEc gb3J8bDgEdzFMaKEdDJ+P7stlgNLjX4= -----END CERTIFICATE-----Generated at Sat Oct 11 21:23:18 2025 by rpki-client