$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0ed2e2de-3bf2-3738-a1d7-370ca79945e3.roa File: 0ed2e2de-3bf2-3738-a1d7-370ca79945e3.roa (raw, json) Hash identifier: sviUWUQgzmua1N58MIXctgXGvbWr0pXaLUPCLNezHs0= Subject key identifier: 46:35:65:2C:90:76:00:B5:9E:05:92:5C:45:A1:55:DE:F8:1B:16:31 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B1AD1B0AF80546FC983941800 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0ed2e2de-3bf2-3738-a1d7-370ca79945e3.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 9304 IP address blocks: 104.206.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:b0:af:80:54:6f:c9:83:94:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=a6fd9f74-e7f1-4970-86cb-cc115af9befe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1f:87:c5:7e:c1:37:46:27:37:11:2f:21:cb: 3a:22:43:b7:f1:e6:55:0d:19:9f:e7:fa:ed:c1:71: 04:cc:4c:7b:14:da:98:26:7b:00:63:93:44:71:12: 0c:f0:a2:c2:2e:9e:f7:1b:a4:ce:89:4d:9c:d0:0c: 88:7e:6f:d4:c7:1e:f6:2f:ae:00:7c:ad:e8:c1:f7: 6f:47:0d:d5:c3:57:b6:33:8b:7d:53:cb:e8:66:f1: d0:d2:9c:c1:4a:8e:24:96:bc:60:2d:6e:75:d6:a7: 73:0f:23:f6:57:89:90:09:eb:b4:76:79:06:1d:ca: 56:8e:b6:06:90:79:5d:6f:5e:61:f7:4c:8a:f6:fd: 42:f6:0d:65:78:f9:72:b0:17:e3:cb:db:d9:7a:49: 28:8e:ad:16:4d:c8:1d:bb:59:4d:4e:a2:54:16:d0: cc:d1:ab:25:5c:26:ad:7c:11:0a:a1:1d:01:4d:c5: fe:cc:20:e4:4a:aa:d8:25:c3:f5:ba:bf:58:74:09: f0:5d:af:35:2a:16:1c:37:fd:66:d1:22:f5:a7:ca: 03:12:c5:a1:c0:3f:ad:41:08:2e:f1:5a:5c:05:6b: df:6e:9a:3f:2f:6f:f0:82:e3:4c:e6:52:34:10:33: a0:41:75:9c:4a:bf:1d:7d:50:51:73:ac:92:af:bb: bf:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:35:65:2C:90:76:00:B5:9E:05:92:5C:45:A1:55:DE:F8:1B:16:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0ed2e2de-3bf2-3738-a1d7-370ca79945e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 104.206.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:9e:14:0c:54:3e:4e:4f:e1:26:42:46:a6:83:42:73:e6:ea: 29:8c:16:b2:66:96:5c:b5:2d:14:29:bf:a6:e0:c8:5b:f5:7a: 80:dd:a5:76:6d:89:74:4f:75:99:12:ca:ec:7b:b3:72:56:0d: 27:e7:de:9f:09:77:3d:d1:57:99:06:c8:e7:01:c8:73:6d:86: c6:ff:12:a7:49:03:6f:4a:ae:7a:0f:be:b2:fe:74:d6:32:a5: 03:23:0b:59:a8:b3:df:8b:25:85:e0:d5:0a:a4:01:ad:6d:c5: b7:2b:44:77:38:84:98:00:64:0b:eb:9d:7e:78:11:e9:86:02: aa:14:50:f2:22:69:fe:95:51:2e:b7:11:d8:02:f1:cd:a1:95: 2c:b8:9a:e8:ea:18:71:0c:a3:26:ec:74:c5:1b:24:41:fe:d1: 87:11:6e:6b:f8:9a:2f:93:c3:27:8a:cd:40:91:c0:8f:e8:43: 0a:bb:26:e4:d9:cc:9c:5e:9c:ab:a5:59:62:96:8e:59:45:b7: 7d:95:2c:09:07:cf:e1:a0:4e:ed:95:b3:d2:ed:8d:e5:17:ba: bb:2b:87:f4:6a:9e:79:4f:e3:cb:77:7d:5c:94:04:e6:0e:3a: e8:d1:d0:58:59:23:47:19:85:08:f3:0e:1c:e1:7b:53:34:5e: bf:ce:fe:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0bCvgFRvyYOUGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk YTZmZDlmNzQtZTdmMS00OTcwLTg2Y2ItY2MxMTVhZjliZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR+HxX7BN0YnNxEvIcs6IkO38eZVDRmf5/rt wXEEzEx7FNqYJnsAY5NEcRIM8KLCLp73G6TOiU2c0AyIfm/Uxx72L64AfK3owfdv Rw3Vw1e2M4t9U8voZvHQ0pzBSo4klrxgLW511qdzDyP2V4mQCeu0dnkGHcpWjrYG kHldb15h90yK9v1C9g1lePlysBfjy9vZekkojq0WTcgdu1lNTqJUFtDM0aslXCat fBEKoR0BTcX+zCDkSqrYJcP1ur9YdAnwXa81KhYcN/1m0SL1p8oDEsWhwD+tQQgu 8VpcBWvfbpo/L2/wguNM5lI0EDOgQXWcSr8dfVBRc6ySr7u/gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEY1ZSyQdgC1ngWSXEWhVd74GxYxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMGVkMmUyZGUtM2JmMi0z NzM4LWExZDctMzcwY2E3OTk0NWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaM4OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGeFAxUPk5P4SZCRqaDQnPm6imMFrJmlly1LRQpv6bgyFv1eoDdpXZt iXRPdZkSyux7s3JWDSfn3p8Jdz3RV5kGyOcByHNthsb/EqdJA29KrnoPvrL+dNYy pQMjC1mos9+LJYXg1QqkAa1txbcrRHc4hJgAZAvrnX54EemGAqoUUPIiaf6VUS63 EdgC8c2hlSy4mujqGHEMoybsdMUbJEH+0YcRbmv4mi+TwyeKzUCRwI/oQwq7JuTZ zJxenKulWWKWjllFt32VLAkHz+GgTu2Vs9LtjeUXursrh/RqnnlP48t3fVyUBOYO OujR0FhZI0cZhQjzDhzhe1M0Xr/O/pI= -----END CERTIFICATE-----Generated at Wed Oct 8 15:42:57 2025 by rpki-client