$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b3ae037a-93d7-379e-94a3-ef8de4f644db.roa File: b3ae037a-93d7-379e-94a3-ef8de4f644db.roa (raw, json) Hash identifier: 3V/dEP8v82DCl5HB0QJfSLlCygGY2V82ZHwBgZwfXxo= Subject key identifier: D1:77:A6:F0:04:1B:8D:97:29:E0:D4:4C:8D:FD:98:28:C3:70:53:AF Certificate issuer: /CN=b09eeed3-3c84-4892-89ae-0ce139a9ca4a Certificate serial: 010D0C9F4328584B33F19706C13989AB6F74D1C0 Authority key identifier: 65:6D:DC:8C:64:FE:51:A7:CF:6F:01:44:7E:5D:6B:44:20:DE:B2:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b3ae037a-93d7-379e-94a3-ef8de4f644db.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 14325 IP address blocks: 104.249.184.0/22 maxlen: 24 170.39.220.0/22 maxlen: 24 192.107.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:97:06:c1:39:89:ab:6f:74:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b09eeed3-3c84-4892-89ae-0ce139a9ca4a Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=2c2c1b34-fe97-4635-ad8e-07a81ba34685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3e:12:a0:2b:f2:a6:59:ae:71:8a:97:47:be: 48:ed:b9:2e:fe:68:c7:ae:5e:e9:ee:50:3e:79:12: 60:97:78:b6:78:02:f3:ed:14:d3:37:52:db:fe:53: 56:88:f5:49:f0:80:ee:96:e4:b2:c0:96:31:44:2e: 77:25:2b:13:c9:80:01:3e:b5:4e:49:8e:b6:e6:4d: b3:67:b4:ac:63:8c:4c:3c:b9:77:ec:3a:fb:74:31: 47:a0:39:a3:5a:4b:d3:6d:a0:2a:84:ec:8d:3b:32: 3b:8e:7a:6b:ca:bc:a1:98:7c:96:de:d4:6f:06:d8: be:7f:ca:74:98:21:a2:c5:27:71:db:50:67:b1:23: b5:6d:8a:45:81:72:e9:3e:0c:98:98:03:c1:7c:7c: 91:06:f8:78:85:f8:e3:3a:46:c4:21:29:0e:b6:d5: 15:69:a3:75:e6:00:39:70:c0:68:07:a4:74:f8:dc: b5:fe:15:9a:08:b5:ef:dd:86:e1:e2:64:dc:a1:5a: 86:f7:3a:28:d2:2f:1e:56:bc:6e:f4:82:54:d1:be: 2c:52:cc:e1:9e:46:4e:46:e4:c1:26:fc:86:ab:8f: da:da:88:a8:dc:cb:19:47:41:2d:76:c9:4f:e9:b5: bb:cb:64:d3:2c:25:2b:9c:c4:98:fe:cd:35:05:cc: 00:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:77:A6:F0:04:1B:8D:97:29:E0:D4:4C:8D:FD:98:28:C3:70:53:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b3ae037a-93d7-379e-94a3-ef8de4f644db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.crl X509v3 Authority Key Identifier: keyid:65:6D:DC:8C:64:FE:51:A7:CF:6F:01:44:7E:5D:6B:44:20:DE:B2:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.cer sbgp-ipAddrBlock: critical IPv4: 104.249.184.0/22 170.39.220.0/22 192.107.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:83:c1:2d:75:28:52:34:c8:b5:29:bb:92:b2:9b:00:b9:21: ae:c3:95:d3:0f:25:7f:25:0d:b1:9e:02:92:e3:eb:2d:74:cf: fe:08:47:42:87:e9:e0:c7:ba:0b:fa:15:5e:fa:ed:10:70:58: 54:b4:ad:85:da:a6:45:e1:78:41:1d:d6:5a:ae:d8:7b:03:1c: 9f:a7:94:cd:aa:3e:d2:30:b8:fd:e5:c9:b0:b1:36:a3:fd:e6: 9c:f7:25:ab:79:67:3a:5b:72:a8:6e:95:6a:7a:64:40:d4:3f: 3d:b4:41:dd:77:ba:8c:8d:4f:db:f3:c5:6c:77:0f:37:90:86: 7a:d6:2c:b8:19:de:74:61:1a:40:0e:fb:69:5b:14:01:04:2e: 8b:e3:13:c4:36:d2:30:ba:6a:fd:63:ee:ac:d8:e3:20:20:40: 14:7d:97:64:74:92:5b:1b:79:67:8d:d5:8a:b4:5a:e4:6f:28: 5f:19:ac:7d:84:f1:ec:0e:16:7c:4c:84:bb:74:22:36:d6:dd: 24:4a:d2:76:71:13:c7:6d:ca:3f:c3:95:19:2d:b2:0d:9a:8b: 02:31:54:cf:8d:8c:1b:36:e7:c6:46:99:0b:f0:8d:34:6d:dc: 36:63:09:40:8e:46:50:e1:13:b4:3a:25:12:06:87:c1:6d:33: 3d:48:56:9d -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEsz8ZcGwTmJq2900cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjA5ZWVlZDMtM2M4NC00ODkyLTg5YWUtMGNlMTM5YTlj YTRhMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk MmMyYzFiMzQtZmU5Ny00NjM1LWFkOGUtMDdhODFiYTM0Njg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD4SoCvyplmucYqXR75I7bku/mjHrl7p7lA+ eRJgl3i2eALz7RTTN1Lb/lNWiPVJ8IDuluSywJYxRC53JSsTyYABPrVOSY625k2z Z7SsY4xMPLl37Dr7dDFHoDmjWkvTbaAqhOyNOzI7jnpryryhmHyW3tRvBti+f8p0 mCGixSdx21BnsSO1bYpFgXLpPgyYmAPBfHyRBvh4hfjjOkbEISkOttUVaaN15gA5 cMBoB6R0+Ny1/hWaCLXv3Ybh4mTcoVqG9zoo0i8eVrxu9IJU0b4sUszhnkZORuTB JvyGq4/a2oio3MsZR0EtdslP6bW7y2TTLCUrnMSY/s01BcwA1wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFNF3pvAEG42XKeDUTI39mCjDcFOvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMDll ZWVkMy0zYzg0LTQ4OTItODlhZS0wY2UxMzlhOWNhNGEvYjNhZTAzN2EtOTNkNy0z NzllLTk0YTMtZWY4ZGU0ZjY0NGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjA5ZWVlZDMtM2M4NC00ODkyLTg5 YWUtMGNlMTM5YTljYTRhL2IwOWVlZWQzLTNjODQtNDg5Mi04OWFlLTBjZTEzOWE5 Y2E0YS5jcmwwHwYDVR0jBBgwFoAUZW3cjGT+UafPbwFEfl1rRCDesvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMDllZWVkMy0zYzg0LTQ4OTItODlhZS0wY2Ux MzlhOWNhNGEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCaPm4AwQC qifcAwQBwGt4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACWDwS11KFI0yLUpu5KymwC5Ia7DldMPJX8lDbGe ApLj6y10z/4IR0KH6eDHugv6FV767RBwWFS0rYXapkXheEEd1lqu2HsDHJ+nlM2q PtIwuP3lybCxNqP95pz3Jat5ZzpbcqhulWp6ZEDUPz20Qd13uoyNT9vzxWx3DzeQ hnrWLLgZ3nRhGkAO+2lbFAEELovjE8Q20jC6av1j7qzY4yAgQBR9l2R0klsbeWeN 1Yq0WuRvKF8ZrH2E8ewOFnxMhLt0IjbW3SRK0nZxE8dtyj/DlRktsg2aiwIxVM+N jBs258ZGmQvwjTRt3DZjCUCORlDhE7Q6JRIGh8FtMz1IVp0= -----END CERTIFICATE-----Generated at Sat Oct 11 07:27:55 2025 by rpki-client