$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8e71e085-4614-3be4-977f-94f936f51919.roa File: 8e71e085-4614-3be4-977f-94f936f51919.roa (raw, json) Hash identifier: 1VDckWBR41oJcqHxruQaaf0AZC2h8L95FtmB+W6Yn10= Subject key identifier: 3C:79:8C:B1:5A:A8:18:9B:62:FE:1E:71:5A:B6:31:6B:12:74:B7:19 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B0746D52CC02EFA6FD50FB000 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8e71e085-4614-3be4-977f-94f936f51919.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 215595 IP address blocks: 104.206.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:d5:2c:c0:2e:fa:6f:d5:0f:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=42663c17-cbcf-43ed-87f0-21ee534f2296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:11:22:2c:bd:3a:2f:92:54:61:4a:07:30:ff: bb:c1:f2:81:7f:2e:70:d7:42:93:cd:84:01:b9:2c: 3d:51:9f:d7:11:a1:17:d4:25:a4:24:04:5b:09:1d: 78:c0:7b:b1:82:92:c3:1c:c6:c9:4c:a9:7b:d3:57: d8:f1:13:51:18:44:05:9c:d2:24:91:ed:a1:f3:22: b9:70:83:9e:4a:45:ed:38:e0:1b:8b:94:fb:90:fb: 4b:33:6d:fb:51:b0:25:03:47:2e:e7:38:17:22:2a: de:1a:48:ad:22:45:7e:00:60:8e:07:d0:da:3f:8d: ec:75:29:2d:c2:e4:d2:63:c0:64:16:b9:a6:09:8d: 96:d2:cf:aa:53:ee:96:f0:f3:e5:5d:dd:a2:7f:a8: fe:67:33:36:08:13:ed:d8:86:85:d0:5c:e6:7b:19: 5d:60:b1:92:2e:62:ad:dc:8f:fe:21:e1:da:ef:25: b1:a1:5b:96:8b:52:d4:1d:9c:9d:a9:be:97:5e:cc: f6:47:06:2f:a5:cd:24:6b:78:ae:9e:10:9d:bc:c9: 36:be:61:f5:91:57:03:60:cc:12:b4:39:95:b6:ee: 98:a5:5b:82:0f:7a:fa:d3:97:b4:6d:10:fc:9d:61: c0:bc:62:59:e5:f2:5c:28:06:1b:8e:c8:eb:a8:d8: d2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:79:8C:B1:5A:A8:18:9B:62:FE:1E:71:5A:B6:31:6B:12:74:B7:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8e71e085-4614-3be4-977f-94f936f51919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 104.206.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:75:91:b5:0e:6e:cf:dc:fb:fb:07:ae:f1:ca:2e:35:6f:67: de:84:4d:e2:07:48:a2:35:1c:5a:56:d4:3b:7d:d9:72:85:a2: 82:2a:e6:a2:16:f0:42:c3:33:a6:64:ae:1d:d1:34:a2:10:e5: fe:e1:45:94:77:00:85:c0:2d:03:e9:b4:9a:fe:58:a1:39:22: f0:4d:cc:4e:8e:e4:a6:52:cb:fb:e5:49:41:69:da:71:74:30: f6:27:72:dd:63:64:ed:65:65:b7:58:37:ff:d6:ef:0a:0f:67: 52:2a:45:47:2e:af:1f:a3:89:36:c2:d8:2e:a6:fa:dc:50:80: 97:3d:c2:e4:7f:f9:0f:48:22:3f:0b:d7:b9:a4:bb:97:8d:08: dc:d9:cc:db:08:e5:9f:95:75:f0:95:8e:39:60:bb:71:4e:37: a4:85:6c:55:2d:3a:4a:7d:37:3d:1e:c1:9f:3d:b3:a8:0d:57: b5:b3:2f:c9:f7:74:09:fa:f2:4a:7e:1d:44:23:42:1f:15:53: 3c:82:24:40:a6:5e:e1:97:bd:54:27:a0:ee:0c:77:fd:00:a3: 48:be:cf:03:3c:c3:fc:dc:78:88:99:8d:ca:83:96:6e:c3:22: 50:0a:18:4b:34:50:92:d2:1d:7b:04:76:25:8b:6c:13:4b:3e: 99:50:2f:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRtUswC76b9UPsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk NDI2NjNjMTctY2JjZi00M2VkLTg3ZjAtMjFlZTUzNGYyMjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhEiLL06L5JUYUoHMP+7wfKBfy5w10KTzYQB uSw9UZ/XEaEX1CWkJARbCR14wHuxgpLDHMbJTKl701fY8RNRGEQFnNIkke2h8yK5 cIOeSkXtOOAbi5T7kPtLM237UbAlA0cu5zgXIireGkitIkV+AGCOB9DaP43sdSkt wuTSY8BkFrmmCY2W0s+qU+6W8PPlXd2if6j+ZzM2CBPt2IaF0FzmexldYLGSLmKt 3I/+IeHa7yWxoVuWi1LUHZydqb6XXsz2RwYvpc0ka3iunhCdvMk2vmH1kVcDYMwS tDmVtu6YpVuCD3r605e0bRD8nWHAvGJZ5fJcKAYbjsjrqNjSAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDx5jLFaqBibYv4ecVq2MWsSdLcZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOGU3MWUwODUtNDYxNC0z YmU0LTk3N2YtOTRmOTM2ZjUxOTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaM5vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFV1kbUObs/c+/sHrvHKLjVvZ96ETeIHSKI1HFpW1Dt92XKFooIq5qIW 8ELDM6Zkrh3RNKIQ5f7hRZR3AIXALQPptJr+WKE5IvBNzE6O5KZSy/vlSUFp2nF0 MPYnct1jZO1lZbdYN//W7woPZ1IqRUcurx+jiTbC2C6m+txQgJc9wuR/+Q9IIj8L 17mku5eNCNzZzNsI5Z+VdfCVjjlgu3FON6SFbFUtOkp9Nz0ewZ89s6gNV7WzL8n3 dAn68kp+HUQjQh8VUzyCJECmXuGXvVQnoO4Md/0Ao0i+zwM8w/zceIiZjcqDlm7D IlAKGEs0UJLSHXsEdiWLbBNLPplQLzY= -----END CERTIFICATE-----Generated at Wed Oct 8 15:42:57 2025 by rpki-client