$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9a432c63-3540-355c-b1d0-12798b119249.roa File: 9a432c63-3540-355c-b1d0-12798b119249.roa (raw, json) Hash identifier: HbRhjcJPnlkkkyaKGGs6IrD/hZ71ZpjWvtFTg3JEOWQ= Subject key identifier: 55:57:7B:AE:53:6B:D3:BB:6F:37:DB:34:C0:D5:9B:3F:FC:B5:CF:6C Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F521A9141EFF47E79B18600 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9a432c63-3540-355c-b1d0-12798b119249.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 104.137.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:1a:91:41:ef:f4:7e:79:b1:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=e7ebd9fe-4613-4554-8931-7b6b35a065b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:23:c7:e1:42:3e:a4:df:2c:43:64:f4:a3:dc: fa:89:62:01:df:59:bb:c2:1c:70:24:f5:dc:29:ea: ce:63:07:af:9f:d9:2f:71:61:bd:3a:e3:20:63:66: 6c:6f:c9:fc:f5:62:74:d3:82:da:3e:02:34:ef:f4: c6:40:ee:73:bc:3b:14:53:6c:83:52:22:22:3d:c3: f5:0b:a2:81:2c:13:4c:f9:f9:c0:ca:f1:02:b9:23: cc:1f:de:fb:03:e5:ee:00:7c:79:98:5b:11:72:b4: f3:05:f8:98:5a:20:58:b0:20:a5:45:23:c3:70:92: 41:a2:e9:67:95:1c:bc:22:f5:88:4a:19:a4:e0:7e: ab:3e:4d:35:b4:14:80:84:63:2a:e6:cb:af:89:d7: d9:19:39:b0:99:49:7d:3f:29:e0:f3:f4:19:78:0c: 48:64:40:4e:6f:15:3f:d9:2f:2c:0e:f5:10:bd:d7: 4c:e9:7e:50:83:83:bf:fe:4c:5c:0f:86:06:e2:0f: 9b:8a:10:d8:7a:51:3a:ae:af:3a:04:6e:71:53:45: 79:3a:ba:2f:91:b8:9f:20:bc:3a:5e:8d:4c:7f:4b: 18:ed:8d:29:53:94:9a:3e:25:98:18:61:c2:4f:d9: 65:68:ec:e0:4c:1a:04:d8:a2:21:5b:33:99:9b:91: d6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:57:7B:AE:53:6B:D3:BB:6F:37:DB:34:C0:D5:9B:3F:FC:B5:CF:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9a432c63-3540-355c-b1d0-12798b119249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 104.137.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:c4:c0:3e:c1:6c:21:8f:d6:75:77:02:11:42:04:27:a2:68: 91:2f:bd:ca:f9:07:9b:44:ab:a1:3c:19:86:93:9a:82:50:9a: fc:e8:b3:50:a8:48:16:76:5c:0a:68:28:c2:12:26:7a:93:23: 9c:3e:7b:ee:62:43:8e:39:d7:21:87:19:bc:e0:78:4a:98:a7: 97:80:9d:a8:e8:3f:1a:8a:41:bb:eb:24:84:8e:19:db:85:9f: 8f:76:b9:13:a7:59:da:21:3d:c3:89:2c:37:bb:00:6d:71:67: 75:39:6d:ab:f7:81:6d:5e:10:f2:6d:f5:c0:18:7d:0a:2c:8d: 2e:6e:8b:c9:37:ed:d0:8c:97:f9:c7:cb:91:b7:32:73:04:0a: 7e:6b:48:7e:40:9a:6d:6e:ee:6b:9b:e3:f4:7c:6b:16:47:5f: fc:2f:1a:99:ec:74:ea:80:13:7a:16:e6:85:b2:49:6e:4f:f7: 63:86:6e:4f:68:f1:72:5e:3f:81:69:91:a4:c9:9c:bb:2c:39: 77:f3:46:ac:7c:e7:ab:d9:b3:fc:68:02:4b:99:66:be:23:32: f7:e8:81:d5:f1:4b:6d:91:b1:b0:63:e2:d0:55:5d:4c:7c:96: 13:e2:f7:21:90:36:40:85:5f:9a:92:ef:4e:81:b5:35:0b:28: 3b:1c:7a:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UhqRQe/0fnmxhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZTdlYmQ5ZmUtNDYxMy00NTU0LTg5MzEtN2I2YjM1YTA2NWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCPH4UI+pN8sQ2T0o9z6iWIB31m7whxwJPXc KerOYwevn9kvcWG9OuMgY2Zsb8n89WJ004LaPgI07/TGQO5zvDsUU2yDUiIiPcP1 C6KBLBNM+fnAyvECuSPMH977A+XuAHx5mFsRcrTzBfiYWiBYsCClRSPDcJJBouln lRy8IvWIShmk4H6rPk01tBSAhGMq5suvidfZGTmwmUl9Pyng8/QZeAxIZEBObxU/ 2S8sDvUQvddM6X5Qg4O//kxcD4YG4g+bihDYelE6rq86BG5xU0V5OrovkbifILw6 Xo1Mf0sY7Y0pU5SaPiWYGGHCT9llaOzgTBoE2KIhWzOZm5HWYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVXe65Ta9O7bzfbNMDVmz/8tc9sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOWE0MzJjNjMtMzU0MC0z NTVjLWIxZDAtMTI3OThiMTE5MjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaImwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzEwD7BbCGP1nV3AhFCBCeiaJEvvcr5B5tEq6E8GYaTmoJQmvzos1Co SBZ2XApoKMISJnqTI5w+e+5iQ4451yGHGbzgeEqYp5eAnajoPxqKQbvrJISOGduF n492uROnWdohPcOJLDe7AG1xZ3U5bav3gW1eEPJt9cAYfQosjS5ui8k37dCMl/nH y5G3MnMECn5rSH5Amm1u7mub4/R8axZHX/wvGpnsdOqAE3oW5oWySW5P92OGbk9o 8XJeP4FpkaTJnLssOXfzRqx856vZs/xoAkuZZr4jMvfogdXxS22RsbBj4tBVXUx8 lhPi9yGQNkCFX5qS706BtTULKDscepo= -----END CERTIFICATE-----Generated at Fri Oct 17 05:08:48 2025 by rpki-client