$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/88374a1d-fd36-32d4-98a5-465f80889ca4.roa File: 88374a1d-fd36-32d4-98a5-465f80889ca4.roa (raw, json) Hash identifier: cFiGRGPY8FBNnA6nUJUTfSuW49UzTAiYZLuvT9LmAr8= Subject key identifier: C0:6E:6D:CA:6B:2B:BF:5E:0D:C8:75:48:55:34:97:DE:08:CD:31:0E Certificate issuer: /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Certificate serial: 010D0C9F4328584B28C6DE3817FFADA705366740 Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/88374a1d-fd36-32d4-98a5-465f80889ca4.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 203020 IP address blocks: 104.232.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:de:38:17:ff:ad:a7:05:36:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=f7a5329b-44e7-4b16-a54f-4ef085e1cb8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:94:c3:43:bb:b5:5e:a9:34:4f:47:0b:e6:c9: 76:b6:20:32:16:b8:f4:5a:50:51:90:79:62:a0:b6: 34:77:c1:1c:31:1b:b5:0e:77:e1:bf:a1:c2:16:8d: 67:d9:9b:2c:ba:d6:2a:b0:23:7d:0f:87:69:cc:1c: 11:a2:82:fc:dc:2b:67:c7:cb:a1:48:26:3d:60:d4: 40:60:c7:aa:f1:6f:d6:b9:78:7d:f8:d7:ac:72:d4: 61:19:25:e1:fd:14:37:24:29:40:31:72:89:a2:b1: 14:0e:75:31:39:65:c6:68:d8:b8:fc:90:5d:ee:9d: 69:72:28:3e:75:4d:9f:fc:d1:44:f8:03:fc:c5:25: 0f:28:a0:f0:8c:6d:94:3b:50:44:cd:c8:07:a1:63: 23:32:f5:9d:5a:19:cd:c1:dc:69:81:e9:e4:26:12: 94:d1:10:af:3a:07:48:04:cc:d1:56:aa:6d:b7:f4: d3:a5:37:97:94:77:52:3d:1b:ad:b1:f6:8c:35:44: 80:07:51:37:41:2c:c4:74:b5:1a:23:ba:bd:64:96: be:e9:2e:31:15:45:d9:44:75:83:49:a6:49:4a:90: 37:5a:a6:a8:f7:f7:40:51:b3:2c:91:56:b5:7e:2b: 3c:98:a3:0e:e9:ed:30:68:51:0a:c2:3c:34:93:b6: c1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6E:6D:CA:6B:2B:BF:5E:0D:C8:75:48:55:34:97:DE:08:CD:31:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/88374a1d-fd36-32d4-98a5-465f80889ca4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl X509v3 Authority Key Identifier: keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer sbgp-ipAddrBlock: critical IPv4: 104.232.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:9b:5d:52:47:17:2d:71:41:bb:16:3f:72:6b:f3:5b:c3:14: a8:cb:e9:20:18:2d:48:7f:67:79:78:7c:67:9e:dd:f7:2f:dd: 8c:58:be:88:8a:d9:57:6f:53:cb:77:64:6a:ed:67:44:c5:3e: dc:e9:10:2e:a1:a8:8f:21:ef:59:3f:5c:03:8a:40:a7:d0:f7: 5c:a6:20:c7:72:34:06:67:b6:6d:03:b8:2f:99:c6:72:df:be: 11:f2:6c:71:cd:d6:27:5d:33:be:6e:de:f9:19:e6:43:1f:09: 33:aa:9e:ed:50:70:54:71:14:00:f0:07:45:98:f7:aa:a0:0b: 34:de:ec:a3:9b:75:37:1a:c3:00:89:ce:60:db:72:c7:1c:68: 4e:e7:41:c1:35:31:d7:89:44:95:23:dc:2e:a5:d2:29:79:71: 91:30:5f:d6:4a:1c:68:4d:12:01:4b:ef:fd:d8:82:1c:9f:9a: b0:09:e6:c8:4e:52:3b:54:6f:45:99:ac:8a:e6:7b:8b:72:9a: 3e:11:01:5f:30:d3:a3:9e:a5:1e:3e:9c:5a:03:17:fb:65:ca: 7e:ef:2a:70:b8:99:6b:b4:be:bc:55:8d:1f:f6:7a:bc:5a:dc: ab:13:91:52:36:50:f1:ee:4b:37:40:dc:d0:2a:ca:7c:bd:c6: 00:0f:70:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxt44F/+tpwU2Z0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY3OTk5YzgtZTRhNS00NWZjLTljYzItYzRmZTdmMThi ZmUyMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk ZjdhNTMyOWItNDRlNy00YjE2LWE1NGYtNGVmMDg1ZTFjYjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JTDQ7u1Xqk0T0cL5sl2tiAyFrj0WlBRkHli oLY0d8EcMRu1Dnfhv6HCFo1n2ZssutYqsCN9D4dpzBwRooL83Ctnx8uhSCY9YNRA YMeq8W/WuXh9+NesctRhGSXh/RQ3JClAMXKJorEUDnUxOWXGaNi4/JBd7p1pcig+ dU2f/NFE+AP8xSUPKKDwjG2UO1BEzcgHoWMjMvWdWhnNwdxpgenkJhKU0RCvOgdI BMzRVqptt/TTpTeXlHdSPRutsfaMNUSAB1E3QSzEdLUaI7q9ZJa+6S4xFUXZRHWD SaZJSpA3Wqao9/dAUbMskVa1fis8mKMO6e0waFEKwjw0k7bBwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBubcprK79eDch1SFU0l94IzTEOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5 OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZlN2YxOGJmZTIvODgzNzRhMWQtZmQzNi0z MmQ0LTk4YTUtNDY1ZjgwODg5Y2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGY3OTk5YzgtZTRhNS00NWZjLTlj YzItYzRmZTdmMThiZmUyL2RmNzk5OWM4LWU0YTUtNDVmYy05Y2MyLWM0ZmU3ZjE4 YmZlMi5jcmwwHwYDVR0jBBgwFoAUGekERPSo9doFk24jLmU0Yzeeu6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZl N2YxOGJmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOjBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIebXVJHFy1xQbsWP3Jr81vDFKjL6SAYLUh/Z3l4fGee3fcv3YxYvoiK 2VdvU8t3ZGrtZ0TFPtzpEC6hqI8h71k/XAOKQKfQ91ymIMdyNAZntm0DuC+ZxnLf vhHybHHN1iddM75u3vkZ5kMfCTOqnu1QcFRxFADwB0WY96qgCzTe7KObdTcawwCJ zmDbcsccaE7nQcE1MdeJRJUj3C6l0il5cZEwX9ZKHGhNEgFL7/3YghyfmrAJ5shO UjtUb0WZrIrme4tymj4RAV8w06OepR4+nFoDF/tlyn7vKnC4mWu0vrxVjR/2erxa 3KsTkVI2UPHuSzdA3NAqyny9xgAPcD8= -----END CERTIFICATE-----Generated at Wed Oct 8 15:34:37 2025 by rpki-client