$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cd87bd94-2c4b-3ac6-8322-628a04e40d58.roa File: cd87bd94-2c4b-3ac6-8322-628a04e40d58.roa (raw, json) Hash identifier: K38DKHt/ULY2NprY5dfvIY+Eih9dVoh76XwFf81UI1I= Subject key identifier: 34:D9:63:2E:9D:80:E4:D6:00:56:5F:9A:E7:66:BE:BA:A5:2B:30:1C Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F4328584B7DECB0384065F92F1DE099C0 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cd87bd94-2c4b-3ac6-8322-628a04e40d58.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 13807 IP address blocks: 104.36.92.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b0:38:40:65:f9:2f:1d:e0:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=f7747c9a-5098-40dc-90fb-f587ded0dbd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1c:f1:5b:6f:7b:b1:34:b6:31:43:09:e7:37: 27:0d:5e:34:fa:1a:23:63:0e:f7:e8:6d:c9:cf:4b: f7:51:d1:e4:17:d8:ec:a3:75:da:a1:f8:84:6e:b9: af:58:9e:d3:39:53:c4:40:3f:60:46:94:09:6b:da: a2:53:01:a2:a4:68:02:6c:10:55:10:33:02:b3:06: 1e:0f:7d:dc:bb:71:f5:7e:d3:e1:43:f8:c8:53:86: 24:2f:f5:a1:d9:ba:83:90:dd:ed:ef:b7:d9:77:be: 61:f7:f4:e2:be:d3:1f:37:d0:13:ab:52:06:ef:a2: 25:3e:02:3e:db:83:d7:6e:30:04:20:c6:54:84:a9: ce:1a:58:0b:d3:36:55:b1:46:9e:05:99:06:fc:d5: 6c:8f:08:2b:7a:57:05:5b:b4:10:9c:69:78:ee:7d: ad:2c:2a:42:e0:7b:22:4b:fa:94:73:98:dc:14:8b: c8:31:50:c9:49:37:17:12:8e:02:88:b1:91:d8:14: d0:15:8e:61:95:c0:50:8f:85:7c:04:0d:f3:15:ed: fd:87:5b:81:ae:8c:e0:54:35:14:c7:72:48:a1:67: e3:e2:81:6c:d1:ae:81:df:6e:0a:ca:7a:48:78:ea: 7f:fd:e6:72:90:43:90:28:d4:af:a2:bd:94:1f:04: e4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D9:63:2E:9D:80:E4:D6:00:56:5F:9A:E7:66:BE:BA:A5:2B:30:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cd87bd94-2c4b-3ac6-8322-628a04e40d58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv4: 104.36.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:17:39:74:a4:ca:e9:e6:e0:6d:84:e3:75:95:2a:65:1e:d4: 39:ad:a5:f2:a7:f7:86:fc:a2:9d:0d:9d:e3:a1:c4:5a:e3:8b: 9f:53:70:4c:03:1b:63:3c:27:52:a5:2e:a0:1c:89:d1:6c:e9: 43:25:19:27:ce:f2:d6:ad:b6:09:86:43:35:72:4b:52:2b:14: b1:82:8c:69:ca:65:43:49:e9:17:16:b4:14:4c:e8:0b:8d:16: 52:a3:de:51:e2:e8:54:f5:8b:08:ab:58:44:dd:d2:83:5b:5f: 86:8f:f1:c7:cd:e5:aa:25:e2:e7:ec:f6:a4:3e:7a:d4:8f:d8: 11:67:84:f6:cd:b8:27:f4:05:d1:38:dc:54:2f:ad:f5:f8:46: 20:de:e2:01:db:90:63:38:25:0c:d7:f8:ec:df:75:e0:f0:60: 79:4f:96:a0:a9:67:ce:ec:aa:48:96:44:5f:a1:21:7c:3c:40: c0:5a:59:bf:57:f7:f2:68:5c:52:12:79:9f:a8:db:58:97:4f: 50:92:c0:88:fe:eb:ee:29:4c:a8:47:33:de:1c:3f:60:16:f4: 26:d9:0b:df:94:ac:a7:89:71:94:24:bb:fc:86:42:bc:2e:d6: fb:22:d0:39:2d:26:52:d6:b4:46:01:09:02:72:3e:be:40:d1: a8:96:57:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LA4QGX5Lx3gmcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk Zjc3NDdjOWEtNTA5OC00MGRjLTkwZmItZjU4N2RlZDBkYmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBzxW297sTS2MUMJ5zcnDV40+hojYw736G3J z0v3UdHkF9jso3XaofiEbrmvWJ7TOVPEQD9gRpQJa9qiUwGipGgCbBBVEDMCswYe D33cu3H1ftPhQ/jIU4YkL/Wh2bqDkN3t77fZd75h9/TivtMfN9ATq1IG76IlPgI+ 24PXbjAEIMZUhKnOGlgL0zZVsUaeBZkG/NVsjwgrelcFW7QQnGl47n2tLCpC4Hsi S/qUc5jcFIvIMVDJSTcXEo4CiLGR2BTQFY5hlcBQj4V8BA3zFe39h1uBrozgVDUU x3JIoWfj4oFs0a6B324KynpIeOp//eZykEOQKNSvor2UHwTkxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTZYy6dgOTWAFZfmudmvrqlKzAcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvY2Q4N2JkOTQtMmM0Yi0z YWM2LTgzMjItNjI4YTA0ZTQwZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaCRcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4XOXSkyunm4G2E43WVKmUe1DmtpfKn94b8op0NneOhxFrji59TcEwD G2M8J1KlLqAcidFs6UMlGSfO8tattgmGQzVyS1IrFLGCjGnKZUNJ6RcWtBRM6AuN FlKj3lHi6FT1iwirWETd0oNbX4aP8cfN5aol4ufs9qQ+etSP2BFnhPbNuCf0BdE4 3FQvrfX4RiDe4gHbkGM4JQzX+OzfdeDwYHlPlqCpZ87sqkiWRF+hIXw8QMBaWb9X 9/JoXFISeZ+o21iXT1CSwIj+6+4pTKhHM94cP2AW9CbZC9+UrKeJcZQku/yGQrwu 1vsi0DktJlLWtEYBCQJyPr5A0aiWV0s= -----END CERTIFICATE-----Generated at Thu Oct 16 13:50:44 2025 by rpki-client