$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/3835268a-a25e-35a1-9357-9942576a6214.roa File: 3835268a-a25e-35a1-9357-9942576a6214.roa (raw, json) Hash identifier: AivYkafZK2MR4LP2t9KZTM9vvKqmiPY+U8qfQJZIfx0= Subject key identifier: 15:AB:A5:F6:46:01:22:69:F7:4F:53:81:34:0D:B6:C8:05:26:A4:DE Certificate issuer: /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Certificate serial: 010D0C9F4328584B5B072BDDAFE9FD36CA366D00 Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/3835268a-a25e-35a1-9357-9942576a6214.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 201106 IP address blocks: 104.37.29.0/24 maxlen: 32 104.143.94.0/24 maxlen: 32 104.194.206.0/24 maxlen: 32 104.194.207.0/24 maxlen: 32 104.194.219.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:2b:dd:af:e9:fd:36:ca:36:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=5e05e4f7-4df8-44f5-b769-43a8b98834e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e5:0c:af:f3:df:5e:5e:44:f1:52:2e:ca:52: 3e:f0:cf:6b:89:28:1f:66:a8:99:a7:95:35:b7:00: 5b:77:64:1e:30:31:59:81:74:b9:3a:86:8d:79:9b: 4c:85:e6:fb:38:28:b4:78:f8:df:b1:56:c4:07:31: 44:61:d8:8e:7a:90:09:bd:15:31:25:ab:70:a1:00: 59:18:0f:59:e7:57:9a:4b:a1:84:cf:7c:6a:30:34: 30:a2:70:bd:80:5d:62:f0:69:6b:15:bd:71:f6:58: 7f:89:3f:eb:4b:e4:67:de:e6:19:6f:de:56:65:68: 3b:16:2e:4d:36:5d:d3:46:90:c0:75:d9:c7:00:86: 1a:5c:91:45:c9:15:89:35:e7:4b:ce:b1:32:8f:46: b4:74:84:e2:c0:3d:34:00:9c:75:c5:ed:f5:2f:08: 61:f5:bd:bf:c9:a6:b2:c0:be:55:14:c0:f9:9f:37: 02:44:be:75:1f:05:f9:98:81:dc:40:91:ea:db:25: 8f:9b:b8:a9:57:ff:c8:a4:2d:a8:07:d8:ca:d8:aa: 7d:b1:30:4c:24:d6:15:8b:f5:82:ac:4c:e9:19:bb: 06:96:cb:f6:b7:89:91:7f:cf:ac:d0:1b:bc:47:a0: 76:a1:a3:02:0d:7e:a1:be:55:8a:aa:1b:79:73:5f: 01:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AB:A5:F6:46:01:22:69:F7:4F:53:81:34:0D:B6:C8:05:26:A4:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/3835268a-a25e-35a1-9357-9942576a6214.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl X509v3 Authority Key Identifier: keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer sbgp-ipAddrBlock: critical IPv4: 104.37.29.0/24 104.143.94.0/24 104.194.206.0/23 104.194.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:2f:b8:53:04:47:6f:68:90:a1:d8:2a:02:3d:be:79:d8:3b: 88:17:95:3c:8d:67:a2:25:a9:9a:3e:75:60:8d:24:33:71:aa: 18:83:dd:60:a1:25:2d:fa:18:93:ef:fa:1c:fb:59:37:de:0b: c5:5a:2f:2b:5a:fd:d7:67:76:8c:9e:f1:f2:44:02:00:89:1a: 48:9f:f3:e0:3c:a4:e8:37:31:86:04:b9:e4:61:77:e5:11:af: 0d:00:a8:f5:76:1b:81:06:eb:84:eb:4e:28:55:ab:9d:41:aa: 07:c1:93:b4:bd:76:9b:0b:bc:c9:34:a6:cf:5d:f0:ea:1f:d6: 3a:ea:26:39:18:15:59:ec:ea:4c:a4:6e:d7:ef:ea:1c:36:bb: 06:0a:81:ca:46:e6:4a:89:ba:24:1a:7a:09:0a:49:83:9d:d9: 6c:ce:6f:4d:57:35:1e:24:d5:3c:9b:36:7b:97:b8:49:9a:d3: f5:e4:cb:2b:9c:f8:05:05:dd:61:55:26:d4:1c:57:7c:24:8d: 0f:95:ad:47:52:34:12:7e:bf:01:04:8b:b0:33:48:1c:aa:0a: 1a:35:e7:4c:e6:f3:a7:88:68:f3:1b:3e:b0:85:67:2b:6f:dd: 31:f8:41:5b:f6:25:84:ee:ca:e6:ea:08:2f:69:4d:08:b1:c3: 52:c0:ca:63 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEtbByvdr+n9Nso2bQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY3OTk5YzgtZTRhNS00NWZjLTljYzItYzRmZTdmMThi ZmUyMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NWUwNWU0ZjctNGRmOC00NGY1LWI3NjktNDNhOGI5ODgzNGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOUMr/PfXl5E8VIuylI+8M9riSgfZqiZp5U1 twBbd2QeMDFZgXS5OoaNeZtMheb7OCi0ePjfsVbEBzFEYdiOepAJvRUxJatwoQBZ GA9Z51eaS6GEz3xqMDQwonC9gF1i8GlrFb1x9lh/iT/rS+Rn3uYZb95WZWg7Fi5N Nl3TRpDAddnHAIYaXJFFyRWJNedLzrEyj0a0dITiwD00AJx1xe31Lwhh9b2/yaay wL5VFMD5nzcCRL51HwX5mIHcQJHq2yWPm7ipV//IpC2oB9jK2Kp9sTBMJNYVi/WC rEzpGbsGlsv2t4mRf8+s0Bu8R6B2oaMCDX6hvlWKqht5c18BxQIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFBWrpfZGASJp909TgTQNtsgFJqTeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5 OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZlN2YxOGJmZTIvMzgzNTI2OGEtYTI1ZS0z NWExLTkzNTctOTk0MjU3NmE2MjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGY3OTk5YzgtZTRhNS00NWZjLTlj YzItYzRmZTdmMThiZmUyL2RmNzk5OWM4LWU0YTUtNDVmYy05Y2MyLWM0ZmU3ZjE4 YmZlMi5jcmwwHwYDVR0jBBgwFoAUGekERPSo9doFk24jLmU0Yzeeu6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZl N2YxOGJmZTIuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAaCUdAwQA aI9eAwQBaMLOAwQAaMLbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBALUvuFMER29okKHYKgI9vnnYO4gXlTyN Z6IlqZo+dWCNJDNxqhiD3WChJS36GJPv+hz7WTfeC8VaLyta/ddndoye8fJEAgCJ Gkif8+A8pOg3MYYEueRhd+URrw0AqPV2G4EG64TrTihVq51BqgfBk7S9dpsLvMk0 ps9d8Oof1jrqJjkYFVns6kykbtfv6hw2uwYKgcpG5kqJuiQaegkKSYOd2WzOb01X NR4k1TybNnuXuEma0/Xkyyuc+AUF3WFVJtQcV3wkjQ+VrUdSNBJ+vwEEi7AzSByq Cho150zm86eIaPMbPrCFZytv3TH4QVv2JYTuyubqCC9pTQixw1LAymM= -----END CERTIFICATE-----Generated at Tue Oct 14 18:57:51 2025 by rpki-client