$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/e2968863-eee1-30ce-b7a1-bf2f19ec51c4.roa File: e2968863-eee1-30ce-b7a1-bf2f19ec51c4.roa (raw, json) Hash identifier: fJ7oStQIZsMg0IUWxP65YDHZ/lMTk9qrUVj1fR+q0tM= Subject key identifier: B8:C9:29:88:3E:E9:50:25:7A:0D:83:F5:D7:FB:F9:25:0B:A8:2E:03 Certificate issuer: /CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6 Certificate serial: 010D0C9F4328584AFF2C3163EE2FA033EEABDD00 Authority key identifier: 7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/e2968863-eee1-30ce-b7a1-bf2f19ec51c4.roa Signing time: Wed 27 Aug 2025 15:20:56 +0000 ROA not before: Wed 27 Aug 2025 15:20:56 +0000 ROA not after: Tue 25 Nov 2025 16:20:56 +0000 asID: 11588 IP address blocks: 104.171.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ff:2c:31:63:ee:2f:a0:33:ee:ab:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6 Validity Not Before: Aug 27 15:20:56 2025 GMT Not After : Nov 25 16:20:56 2025 GMT Subject: CN=53c20302-3bea-464f-bb05-9b7761f7b67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c6:16:ad:00:50:9d:7c:f9:e2:11:ab:39:55: 12:95:53:b3:bc:9e:b5:54:71:1b:e9:dd:47:04:38: db:b0:00:61:97:20:91:7d:d4:f5:6e:e8:37:7c:3d: 44:bc:c9:31:e5:d5:66:66:1c:c7:b9:28:72:90:ce: 9b:40:ee:7a:7c:8b:7e:48:7c:f9:ee:93:cf:9c:92: 42:48:49:a4:ba:c5:01:88:15:f4:db:3d:a4:85:b8: 5e:70:ca:c6:26:2d:a6:62:7f:42:45:02:66:3e:05: 52:61:83:90:ed:ee:1c:6b:32:1f:e0:e4:35:67:df: f2:45:95:ed:6a:2f:c8:4d:d2:3b:4c:a7:8a:11:ea: d3:40:50:e8:13:e8:53:f3:c5:43:ca:c6:7c:70:ad: 61:08:b8:db:74:8c:bb:68:d0:e6:8e:7c:da:3f:83: b1:60:9d:60:16:bc:19:93:b8:2e:cb:7f:c8:dc:ab: de:b3:76:d4:a3:3e:95:45:82:d5:b8:f6:fa:1c:a0: 0c:4d:33:20:2c:f6:e1:f0:16:ad:04:ed:d1:18:82: 93:7a:eb:8e:fb:a1:38:7b:d2:87:c1:34:c2:d4:c8: 7c:98:3f:2a:ee:22:15:ae:02:4e:ea:76:59:c2:56: 06:4a:fb:e1:22:64:3a:69:ff:8e:5b:f5:3a:82:42: 97:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C9:29:88:3E:E9:50:25:7A:0D:83:F5:D7:FB:F9:25:0B:A8:2E:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/e2968863-eee1-30ce-b7a1-bf2f19ec51c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl X509v3 Authority Key Identifier: keyid:7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer sbgp-ipAddrBlock: critical IPv4: 104.171.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b0:9c:d8:d8:cd:fb:11:5a:58:57:f6:02:61:ed:03:e8:7c: 75:34:96:b5:ea:33:cb:95:2c:b1:9a:87:e6:69:c6:74:fc:56: 1d:d1:c5:36:65:e8:b6:87:7f:27:53:6f:bf:c7:a3:0a:fc:5f: 9f:d6:80:7b:16:95:1d:e2:0d:a6:0b:6f:a3:9a:84:5a:31:e1: 7a:7e:ce:b9:6d:4b:28:e5:c2:aa:8c:34:98:c3:ad:4d:25:39: 2f:f2:dd:ce:e4:2e:e5:30:bf:09:3d:89:50:15:a8:c7:d5:45: e8:5f:87:66:95:60:46:32:8c:c2:a5:49:4e:d8:94:99:e8:c4: 3d:42:57:50:e0:4a:72:45:8f:a8:bc:ca:48:bf:97:23:65:89: c3:cd:6d:43:df:a3:b6:a5:a7:77:a6:75:90:cd:e1:f0:84:24: 79:8f:68:6b:5f:5f:c6:2e:b1:fe:9a:db:d9:55:43:d3:bb:69: 39:f3:fb:74:ad:e0:76:db:49:90:a2:f6:32:1e:e0:2b:e3:2e: de:b4:00:08:66:6b:ed:ed:15:25:4f:e6:7b:52:f2:2d:af:de: 65:79:14:99:39:bc:db:dd:e6:9e:97:30:dc:f6:99:f5:5c:f7: e5:4b:2f:27:02:c2:b1:32:9a:be:5c:1d:4f:79:f0:61:44:5a: 5a:94:80:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr/LDFj7i+gM+6r3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNiMzZhN2ItYmYzYy00YTgxLThjNWItYTQ4ZDFhNTdk MmQ2MB4XDTI1MDgyNzE1MjA1NloXDTI1MTEyNTE2MjA1NlowLzEtMCsGA1UEAxMk NTNjMjAzMDItM2JlYS00NjRmLWJiMDUtOWI3NzYxZjdiNjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsYWrQBQnXz54hGrOVUSlVOzvJ61VHEb6d1H BDjbsABhlyCRfdT1bug3fD1EvMkx5dVmZhzHuShykM6bQO56fIt+SHz57pPPnJJC SEmkusUBiBX02z2khbhecMrGJi2mYn9CRQJmPgVSYYOQ7e4cazIf4OQ1Z9/yRZXt ai/ITdI7TKeKEerTQFDoE+hT88VDysZ8cK1hCLjbdIy7aNDmjnzaP4OxYJ1gFrwZ k7guy3/I3Kves3bUoz6VRYLVuPb6HKAMTTMgLPbh8BatBO3RGIKTeuuO+6E4e9KH wTTC1Mh8mD8q7iIVrgJO6nZZwlYGSvvhImQ6af+OW/U6gkKXawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjJKYg+6VAleg2D9df7+SULqC4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iY2Iz NmE3Yi1iZjNjLTRhODEtOGM1Yi1hNDhkMWE1N2QyZDYvZTI5Njg4NjMtZWVlMS0z MGNlLWI3YTEtYmYyZjE5ZWM1MWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmNiMzZhN2ItYmYzYy00YTgxLThj NWItYTQ4ZDFhNTdkMmQ2L2JjYjM2YTdiLWJmM2MtNGE4MS04YzViLWE0OGQxYTU3 ZDJkNi5jcmwwHwYDVR0jBBgwFoAUfPaBL9QJ/Qs44zusnpOitJm0xiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iY2IzNmE3Yi1iZjNjLTRhODEtOGM1Yi1hNDhk MWE1N2QyZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaKvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAawnNjYzfsRWlhX9gJh7QPofHU0lrXqM8uVLLGah+ZpxnT8Vh3RxTZl 6LaHfydTb7/Howr8X5/WgHsWlR3iDaYLb6OahFox4Xp+zrltSyjlwqqMNJjDrU0l OS/y3c7kLuUwvwk9iVAVqMfVRehfh2aVYEYyjMKlSU7YlJnoxD1CV1DgSnJFj6i8 yki/lyNlicPNbUPfo7alp3emdZDN4fCEJHmPaGtfX8Yusf6a29lVQ9O7aTnz+3St 4HbbSZCi9jIe4CvjLt60AAhma+3tFSVP5ntS8i2v3mV5FJk5vNvd5p6XMNz2mfVc 9+VLLycCwrEymr5cHU958GFEWlqUgCA= -----END CERTIFICATE-----Generated at Mon Sep 15 16:19:04 2025 by rpki-client