$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/a492bc79-a43d-3b74-a966-215a139f5151.roa File: a492bc79-a43d-3b74-a966-215a139f5151.roa (raw, json) Hash identifier: OZT+dNVhMaJXck7Cld1QFnV10jH0nDY53KEoV0zzD2E= Subject key identifier: 6A:4D:57:A7:1A:A3:BD:95:1E:6B:E3:C2:B7:EC:A4:68:E1:1E:0B:C0 Certificate issuer: /CN=871ce6b0-1791-44dd-b7f7-f0b38bb30c09 Certificate serial: 010D0C9F4328584B047C0319E0DF0E8B72505D80 Authority key identifier: DF:3F:C7:D7:52:04:20:9C:7B:26:E5:0F:7E:C0:18:DB:3A:8C:76:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/a492bc79-a43d-3b74-a966-215a139f5151.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 399833 IP address blocks: 104.250.248.0/22 maxlen: 25 204.144.124.0/22 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:03:19:e0:df:0e:8b:72:50:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871ce6b0-1791-44dd-b7f7-f0b38bb30c09 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=66ee375d-f30a-4954-a6b3-8cedf7055ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1f:37:13:e5:92:0b:9f:ea:45:ac:98:7c:8f: bb:12:4e:06:30:9a:a7:5d:cc:33:c6:8b:f7:9c:e7: ab:b4:2f:46:b6:c0:2e:62:c4:e9:77:d5:d5:7b:46: c8:53:06:11:60:6b:ea:36:fc:56:ba:e6:d4:42:4e: 98:e9:d1:54:66:c9:18:e9:99:62:ea:ad:cb:b8:ae: ff:b3:7a:a6:d8:98:86:57:7f:c3:9c:58:85:61:d0: 82:88:49:86:4a:40:ef:b2:9e:a9:51:4a:9c:48:98: aa:a5:a3:3d:73:52:9f:03:e0:24:57:a2:04:4a:f5: 4c:0f:9e:ea:d5:1a:22:c6:b5:17:cb:dc:56:af:84: d4:d3:b3:c7:cc:3c:1d:b3:08:b9:ef:2d:6e:9f:29: fb:0d:d3:ec:a5:92:a0:f5:3a:7a:22:6a:57:78:76: d4:e9:79:fc:86:1f:e0:c4:46:a8:80:ec:46:79:cb: ce:29:e2:c0:28:3b:49:4e:ba:45:b8:13:d6:d6:99: 8a:8b:cb:6f:e3:5c:e1:46:99:f7:14:93:9b:ca:8a: 77:60:32:dc:a1:ba:63:33:a6:ca:47:a2:3b:0e:37: b0:7f:b1:70:e7:a0:c7:1d:a6:af:e1:4a:4f:0f:d5: de:28:92:16:a4:f5:8e:3d:60:81:22:63:11:ec:06: 60:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4D:57:A7:1A:A3:BD:95:1E:6B:E3:C2:B7:EC:A4:68:E1:1E:0B:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/a492bc79-a43d-3b74-a966-215a139f5151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.crl X509v3 Authority Key Identifier: keyid:DF:3F:C7:D7:52:04:20:9C:7B:26:E5:0F:7E:C0:18:DB:3A:8C:76:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.cer sbgp-ipAddrBlock: critical IPv4: 104.250.248.0/22 204.144.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c4:b0:42:0d:a9:b0:47:f2:4b:8e:c1:74:86:7e:0e:e5:f5: 0e:0a:0b:ee:b7:01:f5:f7:73:c8:55:da:2c:21:0a:f2:87:6d: 9c:11:9c:b1:3c:a9:3d:23:3a:f4:78:f5:e8:d3:d7:b3:3e:bd: 1c:de:63:48:f7:3a:a7:08:42:36:90:42:a3:14:41:ba:8f:45: 08:96:15:c3:c8:88:22:e0:61:9b:34:1d:8f:87:2b:48:94:d9: 38:40:9b:69:a1:5e:da:aa:9f:e8:0a:3b:57:2a:0c:4f:c9:9e: 58:57:ca:b6:50:21:06:cf:1d:6e:46:ba:fd:45:a4:a3:7c:8f: 32:b0:b4:69:71:ea:5c:67:15:4b:69:bb:e3:b9:25:86:0c:b2: b0:e5:40:a9:f1:c6:d8:48:76:63:28:25:f2:e1:ea:25:f4:e6: 8c:41:7b:e2:45:9c:13:fd:0b:09:91:28:f9:5b:98:79:4d:c1: 02:de:66:b3:80:7a:9a:bd:5d:d1:a8:0f:95:b4:ba:c9:41:1c: 91:8f:fd:af:f5:23:01:b5:a8:9d:00:b1:b5:5c:6a:0f:e3:a6: 32:09:7c:46:b0:f0:23:e3:0c:a8:14:a5:dc:31:ac:ea:67:42: 71:74:1c:61:10:ca:55:1f:3b:f4:f0:7e:99:88:a2:7d:08:2a: 8e:1f:d0:6a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsEfAMZ4N8Oi3JQXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxY2U2YjAtMTc5MS00NGRkLWI3ZjctZjBiMzhiYjMw YzA5MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk NjZlZTM3NWQtZjMwYS00OTU0LWE2YjMtOGNlZGY3MDU1YWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh83E+WSC5/qRayYfI+7Ek4GMJqnXcwzxov3 nOertC9GtsAuYsTpd9XVe0bIUwYRYGvqNvxWuubUQk6Y6dFUZskY6Zli6q3LuK7/ s3qm2JiGV3/DnFiFYdCCiEmGSkDvsp6pUUqcSJiqpaM9c1KfA+AkV6IESvVMD57q 1RoixrUXy9xWr4TU07PHzDwdswi57y1unyn7DdPspZKg9Tp6ImpXeHbU6Xn8hh/g xEaogOxGecvOKeLAKDtJTrpFuBPW1pmKi8tv41zhRpn3FJObyop3YDLcobpjM6bK R6I7Djewf7Fw56DHHaav4UpPD9XeKJIWpPWOPWCBImMR7AZg9wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGpNV6cao72VHmvjwrfspGjhHgvAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NzFj ZTZiMC0xNzkxLTQ0ZGQtYjdmNy1mMGIzOGJiMzBjMDkvYTQ5MmJjNzktYTQzZC0z Yjc0LWE5NjYtMjE1YTEzOWY1MTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODcxY2U2YjAtMTc5MS00NGRkLWI3 ZjctZjBiMzhiYjMwYzA5Lzg3MWNlNmIwLTE3OTEtNDRkZC1iN2Y3LWYwYjM4YmIz MGMwOS5jcmwwHwYDVR0jBBgwFoAU3z/H11IEIJx7JuUPfsAY2zqMdnswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NzFjZTZiMC0xNzkxLTQ0ZGQtYjdmNy1mMGIz OGJiMzBjMDkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCaPr4AwQC zJB8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAF/EsEINqbBH8kuOwXSGfg7l9Q4KC+63AfX3c8hV2iwhCvKH bZwRnLE8qT0jOvR49ejT17M+vRzeY0j3OqcIQjaQQqMUQbqPRQiWFcPIiCLgYZs0 HY+HK0iU2ThAm2mhXtqqn+gKO1cqDE/JnlhXyrZQIQbPHW5Guv1FpKN8jzKwtGlx 6lxnFUtpu+O5JYYMsrDlQKnxxthIdmMoJfLh6iX05oxBe+JFnBP9CwmRKPlbmHlN wQLeZrOAepq9XdGoD5W0uslBHJGP/a/1IwG1qJ0AsbVcag/jpjIJfEaw8CPjDKgU pdwxrOpnQnF0HGEQylUfO/TwfpmIon0IKo4f0Go= -----END CERTIFICATE-----Generated at Sun Sep 14 00:51:52 2025 by rpki-client