$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/5149ea9d-085b-32d4-ba40-19d14821e133.roa File: 5149ea9d-085b-32d4-ba40-19d14821e133.roa (raw, json) Hash identifier: JadfLYNGX56AQUfPYk9uGu8xsadN7h7KQQkgL0EIMbE= Subject key identifier: FA:BF:82:52:FE:54:C8:C4:E5:B1:74:7D:25:62:5A:AA:1D:50:93:F2 Certificate issuer: /CN=7f9f70ac-2c51-4fbe-b73a-a81973e583e3 Certificate serial: 010D0C9F4328584B293139ED95820BFAD4719B00 Authority key identifier: DC:8B:26:D0:11:03:66:6D:54:34:8D:33:2F:16:39:6E:4E:52:76:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/5149ea9d-085b-32d4-ba40-19d14821e133.roa Signing time: Thu 11 Sep 2025 16:35:02 +0000 ROA not before: Thu 11 Sep 2025 16:35:02 +0000 ROA not after: Wed 10 Dec 2025 17:35:02 +0000 asID: 16851 IP address blocks: 104.218.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:29:31:39:ed:95:82:0b:fa:d4:71:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f9f70ac-2c51-4fbe-b73a-a81973e583e3 Validity Not Before: Sep 11 16:35:02 2025 GMT Not After : Dec 10 17:35:02 2025 GMT Subject: CN=26f200e2-aa9c-4d1f-bdad-97f7b57e33a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1b:f8:0e:63:1d:1e:50:6f:38:69:94:4f:41: c7:67:d6:22:ac:0d:e3:ec:df:f6:80:44:ab:07:9d: 9f:9c:c4:12:b0:ba:87:09:0c:ef:4c:05:87:53:df: 51:42:34:df:82:70:ce:fa:b9:6b:b0:1b:b0:5d:c7: fc:0e:65:1d:0c:0e:a8:7d:e7:a6:a8:55:2f:5e:91: 99:d9:83:00:86:87:3c:e0:72:49:6f:4e:bc:50:e3: df:ff:67:8d:5c:64:1f:db:a4:9e:44:56:b5:3f:2e: ee:93:fd:bd:da:22:31:59:f0:9f:15:13:c8:69:e6: 17:d5:06:3f:81:66:9a:46:a2:31:fa:a8:24:2e:fa: 22:67:d7:74:5a:ec:35:22:8a:80:c6:0a:97:63:e0: 52:51:a3:b0:e9:bc:d1:15:3e:f9:b9:bb:10:c5:76: fb:71:98:63:d6:51:0c:f1:35:68:7c:a4:66:c6:b5: aa:7f:cd:3a:57:86:8f:b7:3c:23:f6:18:53:30:d5: 6f:44:41:45:93:fe:07:6c:46:9f:fc:b0:bb:e6:f2: b3:6a:2b:8b:04:09:e4:94:fe:7e:1c:0c:43:59:07: 44:0e:b6:10:9e:4d:80:02:2f:a9:ac:74:a4:05:f2: 85:ad:ad:97:11:8a:01:16:49:0b:c1:ac:17:44:3d: e7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BF:82:52:FE:54:C8:C4:E5:B1:74:7D:25:62:5A:AA:1D:50:93:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/5149ea9d-085b-32d4-ba40-19d14821e133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.crl X509v3 Authority Key Identifier: keyid:DC:8B:26:D0:11:03:66:6D:54:34:8D:33:2F:16:39:6E:4E:52:76:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer sbgp-ipAddrBlock: critical IPv4: 104.218.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:e0:2a:d4:20:d1:17:49:0d:d5:2f:c8:56:4b:d5:d2:da:f0: 3f:cc:48:b3:4a:d0:48:64:01:b5:78:7a:22:36:32:79:79:47: 51:98:39:14:bf:8f:4f:85:4b:ef:4d:47:b5:7e:37:02:de:f3: aa:4f:a4:c2:b5:4d:28:6a:48:08:97:05:ae:1a:d8:1a:f0:d4: 47:cc:79:56:e0:cc:c1:3f:ab:07:06:e8:84:bd:41:94:00:35: 97:a6:4f:d9:9e:7a:7e:29:5e:07:10:99:96:4b:48:a3:b8:0e: 65:c4:32:79:1f:92:8e:69:64:19:8f:c6:e9:a6:1c:39:fe:65: c1:c7:24:ab:10:83:19:5c:16:a2:47:c2:9c:bf:46:c1:14:48: f9:68:7b:25:81:fe:ad:b3:3b:30:d9:87:5e:f3:e5:7a:fb:5f: 36:b7:ef:f8:16:d2:35:df:75:37:ed:cd:86:66:44:4b:3c:ac: 32:db:5d:cb:0d:1e:22:4f:40:f8:f7:df:aa:9a:2b:32:85:df: 54:35:45:89:35:e6:80:9f:6f:75:43:de:51:30:c1:4e:dc:f0: 0b:dd:6e:6a:fb:22:72:d8:8a:a0:e5:ce:7e:df:61:c5:18:59: 32:aa:61:06:36:f3:59:6f:dd:6f:d6:75:5c:a8:ac:66:6e:21: 09:1b:69:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEspMTntlYIL+tRxmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y5ZjcwYWMtMmM1MS00ZmJlLWI3M2EtYTgxOTczZTU4 M2UzMB4XDTI1MDkxMTE2MzUwMloXDTI1MTIxMDE3MzUwMlowLzEtMCsGA1UEAxMk MjZmMjAwZTItYWE5Yy00ZDFmLWJkYWQtOTdmN2I1N2UzM2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRv4DmMdHlBvOGmUT0HHZ9YirA3j7N/2gESr B52fnMQSsLqHCQzvTAWHU99RQjTfgnDO+rlrsBuwXcf8DmUdDA6ofeemqFUvXpGZ 2YMAhoc84HJJb068UOPf/2eNXGQf26SeRFa1Py7uk/292iIxWfCfFRPIaeYX1QY/ gWaaRqIx+qgkLvoiZ9d0Wuw1IoqAxgqXY+BSUaOw6bzRFT75ubsQxXb7cZhj1lEM 8TVofKRmxrWqf806V4aPtzwj9hhTMNVvREFFk/4HbEaf/LC75vKzaiuLBAnklP5+ HAxDWQdEDrYQnk2AAi+prHSkBfKFra2XEYoBFkkLwawXRD3nIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPq/glL+VMjE5bF0fSViWqodUJPyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83Zjlm NzBhYy0yYzUxLTRmYmUtYjczYS1hODE5NzNlNTgzZTMvNTE0OWVhOWQtMDg1Yi0z MmQ0LWJhNDAtMTlkMTQ4MjFlMTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2Y5ZjcwYWMtMmM1MS00ZmJlLWI3 M2EtYTgxOTczZTU4M2UzLzdmOWY3MGFjLTJjNTEtNGZiZS1iNzNhLWE4MTk3M2U1 ODNlMy5jcmwwHwYDVR0jBBgwFoAU3Ism0BEDZm1UNI0zLxY5bk5SdgcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83ZjlmNzBhYy0yYzUxLTRmYmUtYjczYS1hODE5 NzNlNTgzZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaNpQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbgKtQg0RdJDdUvyFZL1dLa8D/MSLNK0EhkAbV4eiI2Mnl5R1GYORS/ j0+FS+9NR7V+NwLe86pPpMK1TShqSAiXBa4a2Brw1EfMeVbgzME/qwcG6IS9QZQA NZemT9meen4pXgcQmZZLSKO4DmXEMnkfko5pZBmPxummHDn+ZcHHJKsQgxlcFqJH wpy/RsEUSPloeyWB/q2zOzDZh17z5Xr7Xza37/gW0jXfdTftzYZmREs8rDLbXcsN HiJPQPj336qaKzKF31Q1RYk15oCfb3VD3lEwwU7c8Avdbmr7InLYiqDlzn7fYcUY WTKqYQY281lv3W/WdVyorGZuIQkbaZE= -----END CERTIFICATE-----Generated at Sat Sep 20 04:08:41 2025 by rpki-client