$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/dc207e8d-b19a-3f55-a68f-71e0189c5d6e.roa File: dc207e8d-b19a-3f55-a68f-71e0189c5d6e.roa (raw, json) Hash identifier: CjScAKplu4AE/OJl0JbO2XW8FssQoUQ/4sMeyaUonTc= Subject key identifier: 87:CA:40:B4:D4:A2:5C:7B:51:27:31:E2:2A:92:EE:7F:13:9F:1B:6B Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F4328584B89176DED4F27A1E02E15AF10 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/dc207e8d-b19a-3f55-a68f-71e0189c5d6e.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 13807 IP address blocks: 104.37.224.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:6d:ed:4f:27:a1:e0:2e:15:af:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=da8e3bc5-aa40-4608-a003-db19f36828cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:82:38:6b:0e:ef:2e:ed:62:60:02:dd:47:22: 81:bf:da:b8:75:a9:3e:b1:4e:05:dd:94:cb:14:35: 99:c0:9e:5a:64:26:55:2e:ec:c5:b2:b4:84:d8:fb: 1b:7b:71:78:70:ad:5f:dd:81:d3:47:91:78:18:6f: 87:68:3d:b8:f9:10:05:8c:c6:52:6d:36:8d:01:8f: cf:d3:b1:90:27:5f:87:44:30:bf:55:a0:fb:10:0d: f8:29:42:08:db:1e:5f:bb:6d:36:c9:89:93:20:f4: 28:dd:18:c6:e8:f8:4a:29:d6:7f:0b:10:18:66:e7: 0a:c6:8f:4d:33:a6:d2:fe:90:88:f1:2f:1f:c1:05: b4:d0:aa:92:9f:6e:54:b3:10:9d:8a:5a:77:17:ba: a5:d5:14:b3:5d:4a:ee:a9:c0:84:d7:72:c6:7d:cd: 6f:2f:d4:72:87:b2:38:6a:5b:2d:3d:69:1e:cf:bf: a9:f5:be:16:e4:72:84:f6:1c:70:79:fa:61:cd:34: cb:d5:75:6c:68:44:e4:cb:52:40:b2:9a:69:37:3b: 3f:72:21:a5:fc:41:70:a7:05:18:1e:32:7f:ca:0b: af:98:a8:db:c6:53:3a:a7:b3:87:5c:74:e2:c2:02: 91:88:f6:1d:e2:08:63:0e:43:3f:b4:3b:04:37:51: 3d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CA:40:B4:D4:A2:5C:7B:51:27:31:E2:2A:92:EE:7F:13:9F:1B:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/dc207e8d-b19a-3f55-a68f-71e0189c5d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv4: 104.37.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:06:fb:12:63:0c:76:79:55:26:48:2c:93:8c:e1:e2:59:c3: e2:24:cd:f8:b2:81:0c:05:1c:ae:55:9d:8d:c8:cc:e9:0a:e8: e7:be:13:bb:e5:ba:70:9e:40:64:ab:31:db:06:38:14:d9:12: 4a:ba:5c:8d:bb:8a:77:c0:2c:d6:b9:d2:44:75:5e:b5:77:8f: 3a:08:7e:bf:fb:20:92:26:6e:0b:3d:10:74:08:16:7c:ec:0a: b7:17:7a:0c:d0:56:a0:70:58:5e:46:07:df:75:2f:f4:4b:3c: d9:be:5e:78:8b:6a:b5:8f:9d:8d:2a:9b:42:35:db:61:c0:be: 36:59:12:5d:a4:83:c3:c4:12:60:1f:9b:d9:e4:3f:2f:f2:f8: db:47:ea:89:5d:8b:0e:b1:f2:82:c6:36:8a:68:33:a1:fe:04: d1:3f:5e:54:42:8e:52:8c:a8:33:8c:49:54:4c:16:8d:2e:86: 48:db:cc:bf:25:0d:35:82:a5:07:7e:5f:c6:fe:f1:8e:6c:d6: 04:f4:e7:a5:30:c2:73:8e:58:a1:5d:91:ab:1a:49:f7:51:ee: 71:55:69:5c:4a:87:2c:f3:f2:c9:4a:ea:9c:67:7e:e6:89:b0: 1e:3f:6b:bc:27:21:f9:fd:02:dc:78:d6:f2:a1:d3:8d:72:73: 14:df:4d:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF23tTyeh4C4VrxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk ZGE4ZTNiYzUtYWE0MC00NjA4LWEwMDMtZGIxOWYzNjgyOGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4I4aw7vLu1iYALdRyKBv9q4dak+sU4F3ZTL FDWZwJ5aZCZVLuzFsrSE2Psbe3F4cK1f3YHTR5F4GG+HaD24+RAFjMZSbTaNAY/P 07GQJ1+HRDC/VaD7EA34KUII2x5fu202yYmTIPQo3RjG6PhKKdZ/CxAYZucKxo9N M6bS/pCI8S8fwQW00KqSn25UsxCdilp3F7ql1RSzXUruqcCE13LGfc1vL9Ryh7I4 alstPWkez7+p9b4W5HKE9hxwefphzTTL1XVsaETky1JAspppNzs/ciGl/EFwpwUY HjJ/yguvmKjbxlM6p7OHXHTiwgKRiPYd4ghjDkM/tDsEN1E9fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfKQLTUolx7UScx4iqS7n8TnxtrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvZGMyMDdlOGQtYjE5YS0z ZjU1LWE2OGYtNzFlMDE4OWM1ZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaCXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkG+xJjDHZ5VSZILJOM4eJZw+IkzfiygQwFHK5VnY3IzOkK6Oe+E7vl unCeQGSrMdsGOBTZEkq6XI27infALNa50kR1XrV3jzoIfr/7IJImbgs9EHQIFnzs CrcXegzQVqBwWF5GB991L/RLPNm+XniLarWPnY0qm0I122HAvjZZEl2kg8PEEmAf m9nkPy/y+NtH6oldiw6x8oLGNopoM6H+BNE/XlRCjlKMqDOMSVRMFo0uhkjbzL8l DTWCpQd+X8b+8Y5s1gT056UwwnOOWKFdkasaSfdR7nFVaVxKhyzz8slK6pxnfuaJ sB4/a7wnIfn9Atx41vKh041ycxTfTQU= -----END CERTIFICATE-----Generated at Thu Oct 16 13:52:25 2025 by rpki-client