$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/92aef79f-77ad-33ba-abc3-b40cb7da0988.roa File: 92aef79f-77ad-33ba-abc3-b40cb7da0988.roa (raw, json) Hash identifier: 8+FjcX+mhyANATfH3NH55ACYyp0OSq6olZI9jcl1XKY= Subject key identifier: 57:5D:25:46:43:3D:CE:84:6E:EB:81:DE:00:84:77:5E:35:B5:39:12 Certificate issuer: /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb Certificate serial: 010D0C9F4328584B1D786ADF6864DB235635C580 Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/92aef79f-77ad-33ba-abc3-b40cb7da0988.roa Signing time: Sun 07 Sep 2025 11:48:46 +0000 ROA not before: Sun 07 Sep 2025 11:48:46 +0000 ROA not after: Sat 06 Dec 2025 12:48:46 +0000 asID: 395201 IP address blocks: 104.204.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:78:6a:df:68:64:db:23:56:35:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb Validity Not Before: Sep 7 11:48:46 2025 GMT Not After : Dec 6 12:48:46 2025 GMT Subject: CN=aa2e2f1f-67d4-4a0c-aaf7-185492ff5d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d2:8d:b8:71:33:b8:c1:50:ac:e9:8f:67:48: 18:3c:86:e2:75:6f:0e:4e:97:1e:08:37:18:b4:84: db:42:36:e8:f7:5e:56:e9:e2:1d:f8:e1:cc:11:6f: 71:62:77:51:df:14:58:cf:5f:96:9c:10:ac:4c:fa: 75:0c:b7:cc:d1:6d:4a:9d:c4:8e:ba:ad:32:ee:4e: 0b:8a:13:bf:7f:db:c7:fe:6b:ea:c2:61:f0:07:af: 28:37:c8:f7:27:f7:8f:68:19:89:e9:0a:6a:ea:8b: 0d:2d:bb:b6:12:e0:7c:50:9f:82:ce:fe:76:0f:c8: 1e:9d:2b:5a:3e:9a:a5:aa:8f:6b:9a:51:4e:fa:e5: 1c:93:9d:b5:6d:d1:32:39:d4:e7:f6:71:28:59:1a: ab:bf:8b:b5:a0:a2:38:45:c1:6d:41:84:30:aa:e3: f1:ae:d4:b2:9e:1b:a5:5d:96:86:2b:9d:5c:10:42: eb:a3:de:de:b2:08:75:2d:69:c2:f1:3c:6e:e9:32: 15:13:cd:ce:48:83:9d:89:92:b4:39:94:9b:2b:46: d0:1e:4a:8c:81:06:cf:49:b5:31:3e:c2:20:8b:8e: 0d:62:2f:2b:92:43:e6:cb:99:cb:0a:6d:d1:ed:b2: 26:f5:d2:9c:08:19:fc:13:1b:67:6b:f1:fa:e4:52: 40:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5D:25:46:43:3D:CE:84:6E:EB:81:DE:00:84:77:5E:35:B5:39:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/92aef79f-77ad-33ba-abc3-b40cb7da0988.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl X509v3 Authority Key Identifier: keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer sbgp-ipAddrBlock: critical IPv4: 104.204.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:38:f6:3e:e8:69:93:ca:a8:fc:84:12:a4:1e:2d:0c:af:81: 23:e3:2e:7d:bb:bf:94:62:97:01:83:43:c9:6f:ab:cf:3a:86: b2:79:b6:79:fe:9f:a4:dd:a4:f4:c3:cc:ce:4c:0e:ae:c3:8d: 1b:9a:d2:12:91:2e:2e:fd:5d:19:e1:ea:58:cf:91:66:f1:f3: 78:08:ca:fd:bf:3b:a5:be:83:5d:e1:64:0d:ec:85:f3:ec:03: 28:b2:c7:7d:c8:3f:ab:39:08:b8:f1:6f:39:47:5a:52:54:fe: fc:5f:c2:fd:57:60:5c:36:1a:07:4b:3e:f4:c5:18:5e:91:bf: cb:5f:86:39:da:a3:cd:89:6e:c9:16:83:d6:f1:40:f3:09:e7: 63:ed:18:0a:18:0a:0e:b9:3b:c1:b0:a9:84:91:ed:cd:69:d7: ba:35:82:29:51:03:ef:df:34:8f:de:27:96:c3:5a:05:69:7e: dc:33:8e:13:e8:69:e3:bb:47:5d:8c:86:95:2f:48:2b:eb:6c: e8:5c:8b:c7:7a:03:64:84:3e:99:9c:4c:0c:c9:9a:74:a1:b2: 98:fe:8a:79:2e:49:29:de:b1:cf:06:6b:ce:46:82:35:35:61: 9a:c7:c4:e7:7c:aa:c1:c1:69:b3:90:76:ed:0c:b0:2a:58:e9: 73:72:58:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdeGrfaGTbI1Y1xYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzkwY2ViMWUtMzhmMC00NjkwLThlMTItZmRlZjBkYzBl ZGRiMB4XDTI1MDkwNzExNDg0NloXDTI1MTIwNjEyNDg0NlowLzEtMCsGA1UEAxMk YWEyZTJmMWYtNjdkNC00YTBjLWFhZjctMTg1NDkyZmY1ZDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9KNuHEzuMFQrOmPZ0gYPIbidW8OTpceCDcY tITbQjbo915W6eId+OHMEW9xYndR3xRYz1+WnBCsTPp1DLfM0W1KncSOuq0y7k4L ihO/f9vH/mvqwmHwB68oN8j3J/ePaBmJ6Qpq6osNLbu2EuB8UJ+Czv52D8genSta Ppqlqo9rmlFO+uUck521bdEyOdTn9nEoWRqrv4u1oKI4RcFtQYQwquPxrtSynhul XZaGK51cEELro97esgh1LWnC8Txu6TIVE83OSIOdiZK0OZSbK0bQHkqMgQbPSbUx PsIgi44NYi8rkkPmy5nLCm3R7bIm9dKcCBn8Extna/H65FJAjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFddJUZDPc6EbuuB3gCEd141tTkSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBj ZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVmMGRjMGVkZGIvOTJhZWY3OWYtNzdhZC0z M2JhLWFiYzMtYjQwY2I3ZGEwOTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzkwY2ViMWUtMzhmMC00NjkwLThl MTItZmRlZjBkYzBlZGRiLzM5MGNlYjFlLTM4ZjAtNDY5MC04ZTEyLWZkZWYwZGMw ZWRkYi5jcmwwHwYDVR0jBBgwFoAU7IhVYel9//xGKMwSEvEQkth0VUswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBjZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVm MGRjMGVkZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaMyMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC449j7oaZPKqPyEEqQeLQyvgSPjLn27v5RilwGDQ8lvq886hrJ5tnn+ n6TdpPTDzM5MDq7DjRua0hKRLi79XRnh6ljPkWbx83gIyv2/O6W+g13hZA3shfPs Ayiyx33IP6s5CLjxbzlHWlJU/vxfwv1XYFw2GgdLPvTFGF6Rv8tfhjnao82JbskW g9bxQPMJ52PtGAoYCg65O8GwqYSR7c1p17o1gilRA+/fNI/eJ5bDWgVpftwzjhPo aeO7R12MhpUvSCvrbOhci8d6A2SEPpmcTAzJmnShspj+inkuSSnesc8Ga85GgjU1 YZrHxOd8qsHBabOQdu0MsCpY6XNyWMQ= -----END CERTIFICATE-----Generated at Tue Oct 14 02:18:26 2025 by rpki-client