$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/961fc803-a3e4-35e9-92e0-2d2b4bc57423.roa File: 961fc803-a3e4-35e9-92e0-2d2b4bc57423.roa (raw, json) Hash identifier: rxOe5NhH3pYivXxLuzjjcRG5embqbTf7Rtjk1op8HZA= Subject key identifier: 7C:95:CE:19:29:85:F3:EE:70:B4:07:0C:A7:FC:AD:F1:60:93:43:EC Certificate issuer: /CN=00fb6efe-dbc1-45a8-b266-ca72f7e079c2 Certificate serial: 010D0C9F4328584BB1BFA97D8065301E42E91D00 Authority key identifier: D7:85:1F:AA:F6:15:70:21:20:57:58:8B:1C:D1:C3:BE:BA:D2:F4:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/961fc803-a3e4-35e9-92e0-2d2b4bc57423.roa Signing time: Thu 30 Oct 2025 14:31:57 +0000 ROA not before: Thu 30 Oct 2025 14:31:57 +0000 ROA not after: Wed 28 Jan 2026 15:31:57 +0000 asID: 25816 IP address blocks: 104.254.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:bf:a9:7d:80:65:30:1e:42:e9:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00fb6efe-dbc1-45a8-b266-ca72f7e079c2 Validity Not Before: Oct 30 14:31:57 2025 GMT Not After : Jan 28 15:31:57 2026 GMT Subject: CN=ed4de46e-8ea9-4200-8b82-0adc68cbebcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:59:e1:0b:b8:45:42:e4:97:f1:86:d1:1e:0a: 1a:d8:42:72:88:26:e8:e4:6f:81:a9:62:cc:ef:f4: 76:0a:6f:7f:f9:f6:fa:63:58:80:fb:6b:8a:75:5d: 17:18:51:ab:d3:50:78:19:3d:76:91:cb:a0:73:b7: 5a:f0:77:c6:e8:8c:23:cb:5f:0f:17:c1:12:a9:09: a5:39:16:95:39:d6:20:29:f2:b9:dd:50:8b:92:66: 4d:e2:db:1b:29:b8:51:40:b4:ff:df:f3:26:d9:6e: 98:46:a1:f9:ff:76:15:95:6c:7e:2e:fd:24:25:1e: 36:d3:75:43:90:1d:d8:d5:07:c3:17:51:cc:a4:d1: 4a:07:8d:0c:b7:6a:28:af:1f:68:3d:ec:12:18:49: 5c:c4:87:f2:f2:bc:76:6e:f4:8c:db:d1:4d:b2:da: a5:68:7f:dd:16:90:27:cd:ac:9b:11:49:f5:4c:31: 86:46:27:c9:7a:32:a8:24:87:a1:d3:15:b0:86:0e: c0:8a:b5:7c:19:a9:54:86:20:d6:a2:e7:76:19:84: 2b:f0:5a:45:63:ce:be:2f:56:f6:4b:d4:46:c5:c7: ff:6a:dc:1c:34:ba:3e:6d:43:c1:44:8f:7b:fa:a5: 04:27:39:b5:b5:0b:23:5b:bc:5d:f2:7d:8f:49:0f: 48:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:95:CE:19:29:85:F3:EE:70:B4:07:0C:A7:FC:AD:F1:60:93:43:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/961fc803-a3e4-35e9-92e0-2d2b4bc57423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.crl X509v3 Authority Key Identifier: keyid:D7:85:1F:AA:F6:15:70:21:20:57:58:8B:1C:D1:C3:BE:BA:D2:F4:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer sbgp-ipAddrBlock: critical IPv4: 104.254.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:2e:a8:76:36:0c:da:57:15:a3:5e:87:7f:1e:8d:0f:6c:02: d8:4d:06:3a:55:bc:0f:ec:d1:0c:82:84:cc:7a:c3:de:d4:b4: 60:5d:4c:6f:b2:24:a8:a8:32:1c:e0:42:e3:64:d0:b0:44:8d: e7:6a:96:ab:11:14:81:1c:a0:c6:f6:28:d3:5b:27:47:35:01: ab:57:ff:70:da:9c:81:a4:c4:2c:13:bb:7a:a8:2e:3d:f6:1a: b4:2e:1e:27:27:d1:64:5c:c5:d6:8c:ae:69:b5:af:ba:a0:fd: fa:2a:09:4a:2d:6f:9e:1c:32:e6:08:e6:dd:8f:e0:01:67:4a: 77:75:03:28:1c:9e:95:5b:40:5f:44:be:cb:7d:6a:87:d0:61: 77:ac:5d:e6:21:eb:54:0b:40:56:5d:3e:85:3f:d0:c0:83:04: c3:5f:ef:cb:32:62:9d:21:95:b7:d5:07:89:de:19:aa:22:7b: 25:46:ca:1f:00:91:9c:5a:19:20:65:8f:37:db:e6:bc:8f:c7: 04:98:ea:60:e4:96:bf:73:f1:7f:d7:5e:95:42:13:41:27:74: 4d:2f:ce:df:37:d4:9d:22:e2:dc:23:4d:c3:be:e8:e3:89:3a: dd:45:ab:be:ab:0a:fa:2b:11:f4:17:15:30:bd:d6:7e:92:a7: 55:22:66:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxv6l9gGUwHkLpHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBmYjZlZmUtZGJjMS00NWE4LWIyNjYtY2E3MmY3ZTA3 OWMyMB4XDTI1MTAzMDE0MzE1N1oXDTI2MDEyODE1MzE1N1owLzEtMCsGA1UEAxMk ZWQ0ZGU0NmUtOGVhOS00MjAwLThiODItMGFkYzY4Y2JlYmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1nhC7hFQuSX8YbRHgoa2EJyiCbo5G+BqWLM 7/R2Cm9/+fb6Y1iA+2uKdV0XGFGr01B4GT12kcugc7da8HfG6Iwjy18PF8ESqQml ORaVOdYgKfK53VCLkmZN4tsbKbhRQLT/3/Mm2W6YRqH5/3YVlWx+Lv0kJR4203VD kB3Y1QfDF1HMpNFKB40Mt2oorx9oPewSGElcxIfy8rx2bvSM29FNstqlaH/dFpAn zaybEUn1TDGGRifJejKoJIeh0xWwhg7AirV8GalUhiDWoud2GYQr8FpFY86+L1b2 S9RGxcf/atwcNLo+bUPBRI97+qUEJzm1tQsjW7xd8n2PSQ9IeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyVzhkphfPucLQHDKf8rfFgk0PsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMGZi NmVmZS1kYmMxLTQ1YTgtYjI2Ni1jYTcyZjdlMDc5YzIvOTYxZmM4MDMtYTNlNC0z NWU5LTkyZTAtMmQyYjRiYzU3NDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDBmYjZlZmUtZGJjMS00NWE4LWIy NjYtY2E3MmY3ZTA3OWMyLzAwZmI2ZWZlLWRiYzEtNDVhOC1iMjY2LWNhNzJmN2Uw NzljMi5jcmwwHwYDVR0jBBgwFoAU14UfqvYVcCEgV1iLHNHDvrrS9HcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMGZiNmVmZS1kYmMxLTQ1YTgtYjI2Ni1jYTcy ZjdlMDc5YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP4sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACguqHY2DNpXFaNeh38ejQ9sAthNBjpVvA/s0QyChMx6w97UtGBdTG+y JKioMhzgQuNk0LBEjedqlqsRFIEcoMb2KNNbJ0c1AatX/3DanIGkxCwTu3qoLj32 GrQuHicn0WRcxdaMrmm1r7qg/foqCUotb54cMuYI5t2P4AFnSnd1AygcnpVbQF9E vst9aofQYXesXeYh61QLQFZdPoU/0MCDBMNf78syYp0hlbfVB4neGaoieyVGyh8A kZxaGSBljzfb5ryPxwSY6mDklr9z8X/XXpVCE0EndE0vzt831J0i4twjTcO+6OOJ Ot1Fq76rCvorEfQXFTC91n6Sp1UiZv0= -----END CERTIFICATE-----Generated at Mon Nov 3 12:36:42 2025 by rpki-client