$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/a4598495-9436-3ec0-923d-347efe2e9436.roa File: a4598495-9436-3ec0-923d-347efe2e9436.roa (raw, json) Hash identifier: +/ik5NbiZVpq5laz7CpXBS1g7Bc7e6O4ysb1oWOz3PM= Subject key identifier: 61:26:F1:D9:B4:4C:5D:33:0A:77:E3:6D:E1:EA:A2:0D:D1:AC:BD:C1 Certificate issuer: /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Certificate serial: 010D0C9F4328584B3986FD51B33160F129600300 Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/a4598495-9436-3ec0-923d-347efe2e9436.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 60841 IP address blocks: 104.167.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:86:fd:51:b3:31:60:f1:29:60:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=65f7892d-ce13-45e5-9130-359e2497ec99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:74:ff:ae:ad:0c:93:13:06:f1:0f:3b:8e:03: af:0c:b8:9a:db:4d:d5:ce:58:8b:16:9f:26:3b:7d: e9:94:e3:ba:78:5c:1d:c0:0d:8f:6c:72:e8:5b:ac: fd:44:ba:d9:59:66:ed:2e:5b:f8:24:c8:2e:03:15: bd:8c:58:a8:0e:c8:93:46:eb:30:ec:42:ba:61:f1: e9:34:04:9a:7d:7b:a3:a4:ac:41:6f:7f:a0:df:5e: 25:de:38:b4:e9:e4:bf:92:81:25:1c:67:c5:94:a2: bc:7e:37:99:58:be:45:63:1f:da:f5:30:cc:ce:25: 29:01:cd:ab:0f:3f:11:c9:f6:13:20:de:e6:1f:9c: 88:5a:00:0a:25:51:3c:85:f8:96:4e:cc:c9:81:98: f6:ce:8b:70:e1:7f:ab:f3:c5:a8:0d:3c:56:1b:e3: f1:b5:e6:01:d2:e4:19:30:e1:11:18:30:24:aa:bb: 2f:9d:47:e5:05:b5:e4:a6:79:79:87:e6:9b:1a:aa: 64:25:ae:ef:dc:39:72:44:0e:67:cf:17:f0:a9:46: 12:34:f7:fb:86:58:f8:d9:b5:68:f9:b7:b1:ad:80: ac:66:16:eb:89:ea:78:db:51:3e:09:8f:15:e7:73: 05:7d:9a:3e:66:b3:d2:48:22:14:22:7d:75:12:55: 3b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:26:F1:D9:B4:4C:5D:33:0A:77:E3:6D:E1:EA:A2:0D:D1:AC:BD:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/a4598495-9436-3ec0-923d-347efe2e9436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl X509v3 Authority Key Identifier: keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer sbgp-ipAddrBlock: critical IPv4: 104.167.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:a0:6d:09:c3:54:fd:c1:16:66:82:da:0d:42:d7:bb:59:a1: f3:57:5a:b1:32:e2:d3:39:52:77:b2:19:15:a8:2a:f2:e4:01: f1:5e:46:e9:64:13:c8:7a:f9:4d:f5:ce:d4:70:39:4a:10:29: fd:85:ba:05:94:b8:77:33:e2:24:76:2b:2b:e9:dd:37:67:9a: d8:af:0e:6d:c4:9a:ff:75:97:6f:09:c0:26:95:57:44:32:c7: 31:1c:8d:b8:82:d0:7b:4c:7e:f6:cf:77:8d:fc:59:06:f3:3d: b1:d6:1a:17:42:dd:a5:68:2a:53:06:ad:a0:6b:90:c5:ef:2a: a1:c0:69:dd:5c:f4:67:4b:53:5c:00:98:a6:7c:84:1c:d7:57: b7:8a:1e:7a:a2:3c:a6:80:7c:a8:a4:5c:3d:c1:58:e4:1c:a9: be:0c:c9:17:c0:9f:82:64:e5:cd:67:a9:52:dd:02:45:df:bf: 2b:c1:69:f9:77:0f:f4:c0:6d:d0:f1:df:fe:0f:1e:bd:a6:10: 81:91:75:00:9c:c3:c7:db:63:66:e1:c7:7c:93:57:d8:90:4c: 0e:50:35:2a:36:d8:ca:f7:83:59:82:39:e4:54:e0:9f:ed:63: 72:98:b0:78:f8:c7:1d:ad:b3:1d:35:d0:d6:a0:0e:e6:79:7d: 87:fa:14:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hv1RszFg8SlgAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4 ZjcyMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk NjVmNzg5MmQtY2UxMy00NWU1LTkxMzAtMzU5ZTI0OTdlYzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinT/rq0MkxMG8Q87jgOvDLia203VzliLFp8m O33plOO6eFwdwA2PbHLoW6z9RLrZWWbtLlv4JMguAxW9jFioDsiTRusw7EK6YfHp NASafXujpKxBb3+g314l3ji06eS/koElHGfFlKK8fjeZWL5FYx/a9TDMziUpAc2r Dz8RyfYTIN7mH5yIWgAKJVE8hfiWTszJgZj2zotw4X+r88WoDTxWG+PxteYB0uQZ MOERGDAkqrsvnUflBbXkpnl5h+abGqpkJa7v3DlyRA5nzxfwqUYSNPf7hlj42bVo +bexrYCsZhbriep421E+CY8V53MFfZo+ZrPSSCIUIn11ElU7rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEm8dm0TF0zCnfjbeHqog3RrL3BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvYTQ1OTg0OTUtOTQzNi0z ZWMwLTkyM2QtMzQ3ZWZlMmU5NDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4 NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2 N2JmMDhmNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKfWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAygbQnDVP3BFmaC2g1C17tZofNXWrEy4tM5UneyGRWoKvLkAfFeRulk E8h6+U31ztRwOUoQKf2FugWUuHcz4iR2Kyvp3TdnmtivDm3Emv91l28JwCaVV0Qy xzEcjbiC0HtMfvbPd438WQbzPbHWGhdC3aVoKlMGraBrkMXvKqHAad1c9GdLU1wA mKZ8hBzXV7eKHnqiPKaAfKikXD3BWOQcqb4MyRfAn4Jk5c1nqVLdAkXfvyvBafl3 D/TAbdDx3/4PHr2mEIGRdQCcw8fbY2bhx3yTV9iQTA5QNSo22Mr3g1mCOeRU4J/t Y3KYsHj4xx2tsx010NagDuZ5fYf6FHI= -----END CERTIFICATE-----Generated at Wed Oct 15 09:16:02 2025 by rpki-client