$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/dfbfc770-f1dd-38f6-8858-4800cd01515c.roa File: dfbfc770-f1dd-38f6-8858-4800cd01515c.roa (raw, json) Hash identifier: rLB2N6Je9cBb/AqoWawKe0efB3948agbgJZ0ODMSkFA= Subject key identifier: 2A:36:E3:AD:18:60:3B:35:9A:64:4B:54:80:7E:00:F0:58:DD:33:AE Certificate issuer: /CN=9ed327a2-62ee-4bd2-be90-1cf122db3819 Certificate serial: 010D0C9F4328584B8E1F30A04C67F2BDEA6FC280 Authority key identifier: CA:67:09:F5:E9:84:71:C3:8D:ED:F6:A7:3A:EE:E2:99:24:9C:B9:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/dfbfc770-f1dd-38f6-8858-4800cd01515c.roa Signing time: Fri 17 Oct 2025 20:15:20 +0000 ROA not before: Fri 17 Oct 2025 20:15:20 +0000 ROA not after: Thu 15 Jan 2026 21:15:20 +0000 asID: 11796 IP address blocks: 104.241.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/9ed327a2-62ee-4bd2-be90-1cf122db3819.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/9ed327a2-62ee-4bd2-be90-1cf122db3819.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:1f:30:a0:4c:67:f2:bd:ea:6f:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ed327a2-62ee-4bd2-be90-1cf122db3819 Validity Not Before: Oct 17 20:15:20 2025 GMT Not After : Jan 15 21:15:20 2026 GMT Subject: CN=cad3e7f3-b3f1-46fd-bfeb-2d0ea4333986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:37:23:2f:cf:83:44:ec:6f:4f:a8:84:c8:23: 76:17:fa:7a:5b:64:f7:c2:83:3e:66:f1:49:44:fc: f7:ac:ca:3c:05:ee:c3:6b:23:b9:a7:ae:ed:87:0b: 15:44:92:e4:99:8f:15:4a:c0:07:4c:a3:b9:83:68: c5:e8:8a:5a:e2:d8:4c:2d:9d:62:59:85:98:78:a0: 4b:16:e4:63:7c:47:f7:b5:63:92:26:8c:8a:7b:e7: fb:19:00:2d:0e:5a:e1:18:b0:f4:8a:53:11:cb:32: 8b:b3:5f:0d:9f:da:53:95:e0:c0:ca:9d:46:88:24: e4:0e:1c:3f:79:b7:31:e2:aa:43:eb:74:37:b1:1e: 2f:2b:19:de:9a:23:e6:50:99:67:8c:22:a6:1f:b0: da:7e:40:9e:9f:a8:32:4a:a0:b0:91:4a:87:99:41: 14:22:ba:e3:89:10:ca:68:d9:1d:80:15:08:97:19: e8:1a:52:05:a3:33:bd:0c:0f:e6:9e:5b:d5:c3:c3: 1d:f9:44:c7:b2:ab:7c:e4:5e:f7:c8:68:8f:88:8d: 05:04:4a:df:92:72:59:ee:48:23:d4:95:41:f8:7d: ac:40:93:4c:42:c3:56:d3:d6:6a:67:54:3c:f8:98: cd:92:21:01:1b:51:ac:38:61:b8:2b:d1:68:1c:be: 78:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:36:E3:AD:18:60:3B:35:9A:64:4B:54:80:7E:00:F0:58:DD:33:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/dfbfc770-f1dd-38f6-8858-4800cd01515c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/9ed327a2-62ee-4bd2-be90-1cf122db3819.crl X509v3 Authority Key Identifier: keyid:CA:67:09:F5:E9:84:71:C3:8D:ED:F6:A7:3A:EE:E2:99:24:9C:B9:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819.cer sbgp-ipAddrBlock: critical IPv4: 104.241.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:71:e2:ba:9f:fc:83:30:34:fb:e5:3a:ad:48:53:7d:84:9d: 41:f3:47:1d:9c:dc:74:1b:68:4f:0d:c2:95:99:8e:66:38:3c: 51:e1:15:b9:93:f5:56:aa:95:d7:56:a5:27:1d:f0:07:cb:e5: 2e:8e:56:88:60:bf:50:b1:70:eb:e5:2a:91:85:9e:8a:a4:24: e4:08:21:73:2c:be:6d:75:64:a5:4a:ab:71:c0:ef:c5:49:48: bf:90:41:db:fb:d5:7d:63:92:c8:1d:d6:5d:e3:e4:d6:4e:17: 45:86:d7:91:9d:4d:1e:a5:f3:ca:6a:cc:fd:b3:34:0e:5e:63: 7c:5d:23:0e:74:40:99:ca:db:14:21:0f:49:66:a8:4c:9f:79: 90:e6:d6:a7:d1:1f:f0:3a:e4:e9:4d:91:44:5d:dd:b9:51:18: 6e:3d:c4:68:32:37:0b:74:e8:72:01:1e:24:80:4d:1d:35:1f: b3:58:47:18:12:65:df:32:55:39:22:1e:e3:73:9d:e9:f2:e6: 9a:f2:8d:e8:8d:38:a5:71:7f:e2:b8:a5:52:2e:02:fe:0d:56: 38:fa:a7:29:89:03:6e:14:e5:ef:cb:5a:a3:9d:6a:37:d5:97: 4e:77:95:88:e9:67:0c:7f:93:4e:45:ec:f1:b8:04:66:fc:6d: bc:65:94:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOHzCgTGfyvepvwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWVkMzI3YTItNjJlZS00YmQyLWJlOTAtMWNmMTIyZGIz ODE5MB4XDTI1MTAxNzIwMTUyMFoXDTI2MDExNTIxMTUyMFowLzEtMCsGA1UEAxMk Y2FkM2U3ZjMtYjNmMS00NmZkLWJmZWItMmQwZWE0MzMzOTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDcjL8+DROxvT6iEyCN2F/p6W2T3woM+ZvFJ RPz3rMo8Be7DayO5p67thwsVRJLkmY8VSsAHTKO5g2jF6Ipa4thMLZ1iWYWYeKBL FuRjfEf3tWOSJoyKe+f7GQAtDlrhGLD0ilMRyzKLs18Nn9pTleDAyp1GiCTkDhw/ ebcx4qpD63Q3sR4vKxnemiPmUJlnjCKmH7DafkCen6gySqCwkUqHmUEUIrrjiRDK aNkdgBUIlxnoGlIFozO9DA/mnlvVw8Md+UTHsqt85F73yGiPiI0FBErfknJZ7kgj 1JVB+H2sQJNMQsNW09ZqZ1Q8+JjNkiEBG1GsOGG4K9FoHL54cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo2460YYDs1mmRLVIB+APBY3TOuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85ZWQz MjdhMi02MmVlLTRiZDItYmU5MC0xY2YxMjJkYjM4MTkvZGZiZmM3NzAtZjFkZC0z OGY2LTg4NTgtNDgwMGNkMDE1MTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOWVkMzI3YTItNjJlZS00YmQyLWJl OTAtMWNmMTIyZGIzODE5LzllZDMyN2EyLTYyZWUtNGJkMi1iZTkwLTFjZjEyMmRi MzgxOS5jcmwwHwYDVR0jBBgwFoAUymcJ9emEccON7fanOu7imSScuZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85ZWQzMjdhMi02MmVlLTRiZDItYmU5MC0xY2Yx MjJkYjM4MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaPHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBx4rqf/IMwNPvlOq1IU32EnUHzRx2c3HQbaE8NwpWZjmY4PFHhFbmT 9VaqlddWpScd8AfL5S6OVohgv1CxcOvlKpGFnoqkJOQIIXMsvm11ZKVKq3HA78VJ SL+QQdv71X1jksgd1l3j5NZOF0WG15GdTR6l88pqzP2zNA5eY3xdIw50QJnK2xQh D0lmqEyfeZDm1qfRH/A65OlNkURd3blRGG49xGgyNwt06HIBHiSATR01H7NYRxgS Zd8yVTkiHuNzneny5pryjeiNOKVxf+K4pVIuAv4NVjj6pymJA24U5e/LWqOdajfV l053lYjpZwx/k05F7PG4BGb8bbxllKY= -----END CERTIFICATE-----Generated at Tue Oct 21 01:10:46 2025 by rpki-client