$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/899fae21-fa2d-3995-9804-e288a337300f.roa File: 899fae21-fa2d-3995-9804-e288a337300f.roa (raw, json) Hash identifier: dHeQnIkPFUJPX51GZkx6DmT1yRDbcFy2EiJiCtdBX7o= Subject key identifier: 38:3D:0C:59:D3:05:50:F4:5E:C9:02:14:21:E1:82:07:74:63:E0:B1 Certificate issuer: /CN=00fb6efe-dbc1-45a8-b266-ca72f7e079c2 Certificate serial: 010D0C9F4328584BB1BFCF992B55D3390F76CDC0 Authority key identifier: D7:85:1F:AA:F6:15:70:21:20:57:58:8B:1C:D1:C3:BE:BA:D2:F4:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/899fae21-fa2d-3995-9804-e288a337300f.roa Signing time: Thu 30 Oct 2025 14:32:15 +0000 ROA not before: Thu 30 Oct 2025 14:32:15 +0000 ROA not after: Wed 28 Jan 2026 15:32:15 +0000 asID: 25816 IP address blocks: 104.254.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:bf:cf:99:2b:55:d3:39:0f:76:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00fb6efe-dbc1-45a8-b266-ca72f7e079c2 Validity Not Before: Oct 30 14:32:15 2025 GMT Not After : Jan 28 15:32:15 2026 GMT Subject: CN=c393182e-7206-4b32-97d1-9fd3b621287f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a3:d9:13:b8:1f:43:5a:b7:82:bf:25:bb:c7: aa:c7:6b:e0:c4:71:76:46:2d:40:55:e5:11:11:ba: 9b:d7:b8:ef:df:43:fd:44:62:46:9f:8a:26:e7:23: 1a:4d:8c:4f:40:05:89:4d:e5:da:1f:1c:84:ec:86: 0a:30:24:90:a7:a3:f7:32:7f:74:47:eb:a9:da:b2: 0f:64:56:4d:50:c2:47:2b:81:f1:33:b8:56:59:f2: 09:d5:ce:4f:da:76:64:67:4b:79:54:33:7e:04:da: e6:96:5b:f7:11:93:3b:67:a5:16:2c:b4:ca:d1:cf: c3:d2:a8:3c:ba:ec:d0:73:3b:7b:6c:57:3f:39:14: 6a:8c:97:09:61:b2:6b:07:d2:a4:65:ed:84:43:c8: fa:0e:ff:aa:96:f0:89:3f:63:6c:47:dc:47:58:0e: f3:10:3d:6f:c5:c0:b1:55:2c:9f:0a:d5:a2:c4:67: c3:6d:83:ac:a7:2c:6a:f1:9b:9e:f4:18:5c:54:0e: a8:b5:30:55:5d:a2:51:81:ba:dc:fb:ab:16:ac:fd: 63:4e:6a:16:77:1b:af:7c:6b:6a:fc:ce:1a:16:28: 40:42:74:8d:d2:8c:3c:cc:62:51:07:b4:56:d7:41: 4a:8b:33:06:94:7d:30:fa:a9:14:67:9a:46:16:dc: 04:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3D:0C:59:D3:05:50:F4:5E:C9:02:14:21:E1:82:07:74:63:E0:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/899fae21-fa2d-3995-9804-e288a337300f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.crl X509v3 Authority Key Identifier: keyid:D7:85:1F:AA:F6:15:70:21:20:57:58:8B:1C:D1:C3:BE:BA:D2:F4:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer sbgp-ipAddrBlock: critical IPv4: 104.254.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:8b:fb:d8:1e:12:50:89:af:39:c1:b5:bd:16:0e:14:89:f0: 49:e9:2b:bd:15:28:36:79:cf:bf:d1:2c:45:4e:0a:81:12:89: 29:48:45:18:8c:49:05:28:13:64:ad:9f:db:06:58:e1:a7:f1: e8:b8:be:39:73:96:88:1a:2a:26:ab:fc:25:7d:9c:82:f8:33: 51:11:8d:7e:53:1f:90:06:ba:98:82:17:74:76:79:5b:65:72: 22:0f:3f:e1:c0:92:38:d8:01:e5:c3:58:78:2b:ee:e6:fa:32: dc:1d:71:38:5a:6b:5c:8c:d2:c2:30:10:d0:ea:44:6d:29:18: 38:c5:17:c8:c1:80:fe:bc:7d:a2:92:8d:a2:bc:82:e9:86:2d: 00:9a:f0:15:d1:ad:0e:20:ce:66:71:a2:72:0f:12:6a:62:23: 2d:35:25:b8:0d:46:59:6c:ee:9f:af:a0:60:e1:54:16:c5:0f: 30:e8:3b:75:79:f7:fb:ce:b8:1d:13:63:0a:80:bc:6b:52:74: de:ae:35:58:bf:1b:6f:b9:07:06:ab:0e:7b:d1:51:69:7b:5f: b9:e9:31:1b:af:2d:00:0f:44:49:7a:ba:f4:8e:30:3b:d4:60: a8:bd:51:f0:3f:c1:ee:a6:05:69:89:59:c8:9e:a8:fe:f0:11: 26:16:d4:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxv8+ZK1XTOQ92zcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBmYjZlZmUtZGJjMS00NWE4LWIyNjYtY2E3MmY3ZTA3 OWMyMB4XDTI1MTAzMDE0MzIxNVoXDTI2MDEyODE1MzIxNVowLzEtMCsGA1UEAxMk YzM5MzE4MmUtNzIwNi00YjMyLTk3ZDEtOWZkM2I2MjEyODdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqPZE7gfQ1q3gr8lu8eqx2vgxHF2Ri1AVeUR Ebqb17jv30P9RGJGn4om5yMaTYxPQAWJTeXaHxyE7IYKMCSQp6P3Mn90R+up2rIP ZFZNUMJHK4HxM7hWWfIJ1c5P2nZkZ0t5VDN+BNrmllv3EZM7Z6UWLLTK0c/D0qg8 uuzQczt7bFc/ORRqjJcJYbJrB9KkZe2EQ8j6Dv+qlvCJP2NsR9xHWA7zED1vxcCx VSyfCtWixGfDbYOspyxq8Zue9BhcVA6otTBVXaJRgbrc+6sWrP1jTmoWdxuvfGtq /M4aFihAQnSN0ow8zGJRB7RW10FKizMGlH0w+qkUZ5pGFtwEdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDg9DFnTBVD0XskCFCHhggd0Y+CxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMGZi NmVmZS1kYmMxLTQ1YTgtYjI2Ni1jYTcyZjdlMDc5YzIvODk5ZmFlMjEtZmEyZC0z OTk1LTk4MDQtZTI4OGEzMzczMDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDBmYjZlZmUtZGJjMS00NWE4LWIy NjYtY2E3MmY3ZTA3OWMyLzAwZmI2ZWZlLWRiYzEtNDVhOC1iMjY2LWNhNzJmN2Uw NzljMi5jcmwwHwYDVR0jBBgwFoAU14UfqvYVcCEgV1iLHNHDvrrS9HcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMGZiNmVmZS1kYmMxLTQ1YTgtYjI2Ni1jYTcy ZjdlMDc5YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP4tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2L+9geElCJrznBtb0WDhSJ8EnpK70VKDZ5z7/RLEVOCoESiSlIRRiM SQUoE2Stn9sGWOGn8ei4vjlzlogaKiar/CV9nIL4M1ERjX5TH5AGupiCF3R2eVtl ciIPP+HAkjjYAeXDWHgr7ub6MtwdcThaa1yM0sIwENDqRG0pGDjFF8jBgP68faKS jaK8gumGLQCa8BXRrQ4gzmZxonIPEmpiIy01JbgNRlls7p+voGDhVBbFDzDoO3V5 9/vOuB0TYwqAvGtSdN6uNVi/G2+5BwarDnvRUWl7X7npMRuvLQAPREl6uvSOMDvU YKi9UfA/we6mBWmJWcieqP7wESYW1KU= -----END CERTIFICATE-----Generated at Mon Nov 3 12:36:37 2025 by rpki-client