$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/6806c449-9b48-3ef6-8232-47296eb5e804.roa File: 6806c449-9b48-3ef6-8232-47296eb5e804.roa (raw, json) Hash identifier: /Er/t+CqgP9A4Zw+9zutwhmXBSxXlbeJITAgkUQybUk= Subject key identifier: B2:2D:85:34:7D:65:68:8E:8F:B7:E2:81:31:33:41:BA:D4:34:61:03 Certificate issuer: /CN=7c13aa5c-d4a3-425b-b898-1c456c6426d7 Certificate serial: 010D0C9F4328584B8917763F4021838ABDEAF680 Authority key identifier: AB:03:E7:2E:3F:2F:B8:43:7A:DC:13:B1:DC:AA:B4:64:45:46:FF:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/6806c449-9b48-3ef6-8232-47296eb5e804.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 46886 IP address blocks: 104.36.252.0/22 maxlen: 32 104.193.128.0/22 maxlen: 32 158.51.192.0/22 maxlen: 32 165.140.16.0/22 maxlen: 32 170.178.140.0/22 maxlen: 32 2602:ffa4::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/7c13aa5c-d4a3-425b-b898-1c456c6426d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/7c13aa5c-d4a3-425b-b898-1c456c6426d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:76:3f:40:21:83:8a:bd:ea:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c13aa5c-d4a3-425b-b898-1c456c6426d7 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=d4aa591c-0228-4cb4-be5f-b2dcdce12106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:5d:8b:e8:30:60:e0:bf:b6:0f:2b:18:f7:33: 1f:5c:e7:de:a1:5a:88:3d:fa:57:62:cf:2b:2a:f4: 46:e2:45:10:e7:73:f7:57:17:1f:7a:e5:cb:2c:c5: 3a:c1:46:5f:1a:77:06:b7:f3:66:eb:83:61:66:a9: 9a:4a:c5:0f:e2:e6:46:b4:ef:53:e4:09:7e:6d:4e: c4:91:89:52:df:98:d1:6d:f6:4b:42:24:ef:ed:ec: f1:32:52:34:97:60:da:e8:3a:53:45:ed:4b:e6:fd: 96:b9:36:6c:03:2e:3c:a8:fa:e1:cf:13:d8:0b:b1: 05:0f:02:a0:16:53:de:06:a6:4c:11:90:a7:84:4d: 34:ea:35:b3:42:ed:76:e2:e3:96:ee:af:2c:c0:f5: 59:bb:33:4b:f0:d6:84:cd:dd:39:88:20:d0:1b:eb: c7:9c:97:ee:ca:b0:d7:fa:cc:d4:6d:ff:89:98:91: 81:01:fd:93:c9:62:10:b4:75:c7:df:04:e5:95:c4: 58:c4:81:96:dc:98:6f:84:b1:95:46:a5:b6:ee:a5: 65:f0:44:c0:59:2c:04:39:33:da:e9:8e:60:5c:2d: 98:41:2b:7e:41:9c:f9:33:b8:09:b2:21:29:32:dc: 0c:83:95:03:61:60:49:d1:44:a7:fc:b6:42:c5:7d: c6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2D:85:34:7D:65:68:8E:8F:B7:E2:81:31:33:41:BA:D4:34:61:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/6806c449-9b48-3ef6-8232-47296eb5e804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/7c13aa5c-d4a3-425b-b898-1c456c6426d7.crl X509v3 Authority Key Identifier: keyid:AB:03:E7:2E:3F:2F:B8:43:7A:DC:13:B1:DC:AA:B4:64:45:46:FF:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer sbgp-ipAddrBlock: critical IPv4: 104.36.252.0/22 104.193.128.0/22 158.51.192.0/22 165.140.16.0/22 170.178.140.0/22 IPv6: 2602:ffa4::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b4:3f:1e:36:23:17:43:b5:85:dc:db:dd:f7:b9:38:f1:8a: 16:ef:a1:d8:0f:65:7e:0f:08:fe:4f:45:43:d1:ce:5f:96:dc: 88:8e:29:4a:8b:5f:e5:e6:e8:ab:27:c8:91:64:a7:13:d7:ee: 8b:2e:3b:12:42:2a:8a:f1:bf:3c:d2:66:66:2f:58:d8:04:ad: f7:42:e2:d3:a1:e5:35:87:d0:42:6d:83:6d:5c:3b:9e:b5:19: 5d:36:29:2d:7b:f2:ec:d9:67:f6:50:8c:6f:9c:63:10:95:81: 88:81:c9:73:93:93:3a:fa:d1:e1:b9:99:84:b6:83:bb:29:ad: 6d:89:43:ff:20:5a:ec:91:31:cd:08:72:6c:f0:97:c3:0d:d0: 36:d1:f3:d0:54:14:14:5a:ef:a0:f9:d1:db:e0:0f:ae:e3:cb: c3:58:3e:61:bf:3f:cf:0b:0d:3d:00:4c:bb:2e:6e:6f:ad:83: 20:d4:5c:cd:d8:f7:1e:ee:1e:a2:f4:00:39:0a:c3:46:60:d7: 85:89:0b:de:b0:df:41:de:8c:2f:c7:b2:a0:60:43:4d:ff:1f: f5:63:8b:d1:c3:d0:51:44:b4:26:de:06:ef:30:3d:1a:6d:4a: c7:fc:c4:ce:64:ae:61:c7:ee:2a:8c:72:f5:5b:d8:d8:b1:ad: dc:e1:27:77 -----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWEuJF3Y/QCGDir3q9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2MxM2FhNWMtZDRhMy00MjViLWI4OTgtMWM0NTZjNjQy NmQ3MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk ZDRhYTU5MWMtMDIyOC00Y2I0LWJlNWYtYjJkY2RjZTEyMTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8F2L6DBg4L+2DysY9zMfXOfeoVqIPfpXYs8r KvRG4kUQ53P3VxcfeuXLLMU6wUZfGncGt/Nm64NhZqmaSsUP4uZGtO9T5Al+bU7E kYlS35jRbfZLQiTv7ezxMlI0l2Da6DpTRe1L5v2WuTZsAy48qPrhzxPYC7EFDwKg FlPeBqZMEZCnhE006jWzQu124uOW7q8swPVZuzNL8NaEzd05iCDQG+vHnJfuyrDX +szUbf+JmJGBAf2TyWIQtHXH3wTllcRYxIGW3JhvhLGVRqW27qVl8ETAWSwEOTPa 6Y5gXC2YQSt+QZz5M7gJsiEpMtwMg5UDYWBJ0USn/LZCxX3GhQIDAQABo4IDfTCC A3kwHQYDVR0OBBYEFLIthTR9ZWiOj7figTEzQbrUNGEDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83YzEz YWE1Yy1kNGEzLTQyNWItYjg5OC0xYzQ1NmM2NDI2ZDcvNjgwNmM0NDktOWI0OC0z ZWY2LTgyMzItNDcyOTZlYjVlODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2MxM2FhNWMtZDRhMy00MjViLWI4 OTgtMWM0NTZjNjQyNmQ3LzdjMTNhYTVjLWQ0YTMtNDI1Yi1iODk4LTFjNDU2YzY0 MjZkNy5jcmwwHwYDVR0jBBgwFoAUqwPnLj8vuEN63BOx3Kq0ZEVG/74wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83YzEzYWE1Yy1kNGEzLTQyNWItYjg5OC0xYzQ1 NmM2NDI2ZDcuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjAkBAIAATAeAwQCaCT8AwQC aMGAAwQCnjPAAwQCpYwQAwQCqrKMMA4EAgACMAgDBgQmAv+kADBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBg tD8eNiMXQ7WF3Nvd97k48YoW76HYD2V+Dwj+T0VD0c5fltyIjilKi1/l5uirJ8iR ZKcT1+6LLjsSQiqK8b880mZmL1jYBK33QuLToeU1h9BCbYNtXDuetRldNikte/Ls 2Wf2UIxvnGMQlYGIgclzk5M6+tHhuZmEtoO7Ka1tiUP/IFrskTHNCHJs8JfDDdA2 0fPQVBQUWu+g+dHb4A+u48vDWD5hvz/PCw09AEy7Lm5vrYMg1FzN2Pce7h6i9AA5 CsNGYNeFiQvesN9B3owvx7KgYENN/x/1Y4vRw9BRRLQm3gbvMD0abUrH/MTOZK5h x+4qjHL1W9jYsa3c4Sd3 -----END CERTIFICATE-----Generated at Mon Nov 3 08:48:29 2025 by rpki-client