$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/df61bb8b-6c75-397e-84df-0353bf3e6294.roa File: df61bb8b-6c75-397e-84df-0353bf3e6294.roa (raw, json) Hash identifier: huntzvTV8wOCaKF0dhtnEHVfIp0QxRVUKw6dl7PVp2Q= Subject key identifier: 9E:A9:19:63:66:0A:44:D5:ED:15:32:80:66:62:8D:5F:16:71:D8:86 Certificate issuer: /CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8 Certificate serial: 010D0C9F4328584B477C7C1E859409EB10DE7E80 Authority key identifier: D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/df61bb8b-6c75-397e-84df-0353bf3e6294.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 63267 IP address blocks: 104.171.216.0/24 maxlen: 24 104.171.217.0/24 maxlen: 24 104.171.218.0/24 maxlen: 24 104.171.219.0/24 maxlen: 24 104.171.220.0/24 maxlen: 24 104.171.221.0/24 maxlen: 24 104.171.222.0/24 maxlen: 24 104.171.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:7c:1e:85:94:09:eb:10:de:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=47b4323d-7eb9-4955-b7a6-0c8c3e2969e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:79:1a:35:4e:23:45:0a:16:17:96:71:4e:7d: 28:e1:f3:56:67:29:e0:3b:c0:ba:58:67:46:4a:6e: 60:44:9f:83:a9:ff:8f:68:42:d8:27:a5:ff:13:cd: 78:0a:e6:56:a5:f4:f2:37:1b:4b:14:5e:76:44:50: 32:d8:d4:7e:dc:cd:b0:5d:64:1f:c5:8d:4b:ee:a1: 63:99:87:4d:19:60:e3:70:6e:e8:72:74:a8:c3:37: 9f:3a:b3:4e:9c:b0:76:17:47:61:5e:f2:af:51:a2: a7:18:f5:e3:90:c7:00:93:7f:76:02:4f:0d:30:f3: 1b:de:ba:34:a8:2b:db:10:ea:2f:56:cf:b2:b7:5c: 39:43:27:ae:de:dd:0f:b0:c1:ba:83:5a:3f:8f:14: 50:ef:37:e7:00:01:6c:ae:e8:87:9f:7f:2e:49:12: 1d:b4:88:21:a8:43:ba:21:46:fe:0d:eb:6f:a9:5c: 78:ca:17:0c:e8:26:36:1d:ec:8b:14:e6:ad:99:f5: 90:b5:db:86:c8:9a:45:94:b0:ff:17:91:ac:42:ba: 1c:eb:23:86:87:0d:97:39:b4:ce:99:25:42:de:76: 2e:31:42:41:ba:24:bc:49:05:39:23:cd:86:07:ba: b9:9e:54:40:2d:3c:c5:90:72:29:e1:d8:09:22:13: 41:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A9:19:63:66:0A:44:D5:ED:15:32:80:66:62:8D:5F:16:71:D8:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/df61bb8b-6c75-397e-84df-0353bf3e6294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl X509v3 Authority Key Identifier: keyid:D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer sbgp-ipAddrBlock: critical IPv4: 104.171.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:3d:56:68:b7:a4:80:a1:55:91:09:80:d4:a5:fa:30:90:66: 16:ed:9e:7f:5d:fb:1d:99:7a:2b:5a:e0:ab:89:83:1e:1b:3c: 92:db:3b:9e:fd:bc:6a:eb:91:54:5a:48:c9:ea:54:d6:e3:fc: ec:3b:8f:75:d5:41:ee:b1:b4:e5:bb:dc:7f:17:a1:39:7d:22: 10:ae:99:07:b3:f0:d5:28:61:94:1e:e8:1d:79:8e:e6:e5:d3: 59:20:61:3e:67:cf:ca:cb:2e:c9:ef:00:32:d9:b2:e0:58:a7: 6f:06:8c:e0:60:a4:96:13:b2:27:7f:89:98:e6:f6:a0:2c:b2: bd:9e:12:d8:28:9f:d4:d4:20:06:17:33:a7:25:00:53:f8:78: 81:c5:42:e9:b7:a3:bd:b9:42:88:51:d9:18:c8:41:81:fe:8e: 4f:c2:4e:e5:d3:29:ec:30:b5:85:81:d3:5c:79:70:23:e2:c2: 54:99:41:fc:75:d8:dd:0c:3d:fb:f7:0d:86:01:a1:9d:b6:63: 5c:a6:55:37:dd:74:c4:20:e1:f3:1a:be:ef:6f:48:a1:d4:c0: 86:15:3b:88:c6:ab:da:9e:c8:e0:71:ac:6c:39:94:32:ec:34: 6c:72:35:17:54:09:5a:ca:d1:e0:53:9f:99:f9:b3:02:93:86: 9c:79:91:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfHwehZQJ6xDefoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjdjN2EzNDQtNGJjNy00NjhiLWFkMzAtM2I5YzAwNmNk MGM4MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk NDdiNDMyM2QtN2ViOS00OTU1LWI3YTYtMGM4YzNlMjk2OWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnkaNU4jRQoWF5ZxTn0o4fNWZyngO8C6WGdG Sm5gRJ+Dqf+PaELYJ6X/E814CuZWpfTyNxtLFF52RFAy2NR+3M2wXWQfxY1L7qFj mYdNGWDjcG7ocnSowzefOrNOnLB2F0dhXvKvUaKnGPXjkMcAk392Ak8NMPMb3ro0 qCvbEOovVs+yt1w5Qyeu3t0PsMG6g1o/jxRQ7zfnAAFsruiHn38uSRIdtIghqEO6 IUb+DetvqVx4yhcM6CY2HeyLFOatmfWQtduGyJpFlLD/F5GsQroc6yOGhw2XObTO mSVC3nYuMUJBuiS8SQU5I82GB7q5nlRALTzFkHIp4dgJIhNB0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6pGWNmCkTV7RUygGZijV8WcdiGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yN2M3 YTM0NC00YmM3LTQ2OGItYWQzMC0zYjljMDA2Y2QwYzgvZGY2MWJiOGItNmM3NS0z OTdlLTg0ZGYtMDM1M2JmM2U2Mjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjdjN2EzNDQtNGJjNy00NjhiLWFk MzAtM2I5YzAwNmNkMGM4LzI3YzdhMzQ0LTRiYzctNDY4Yi1hZDMwLTNiOWMwMDZj ZDBjOC5jcmwwHwYDVR0jBBgwFoAU2UqH6Z9k85IcgEkD0OABbmMYM90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yN2M3YTM0NC00YmM3LTQ2OGItYWQzMC0zYjlj MDA2Y2QwYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaKvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIk9Vmi3pIChVZEJgNSl+jCQZhbtnn9d+x2Zeita4KuJgx4bPJLbO579 vGrrkVRaSMnqVNbj/Ow7j3XVQe6xtOW73H8XoTl9IhCumQez8NUoYZQe6B15jubl 01kgYT5nz8rLLsnvADLZsuBYp28GjOBgpJYTsid/iZjm9qAssr2eEtgon9TUIAYX M6clAFP4eIHFQum3o725QohR2RjIQYH+jk/CTuXTKewwtYWB01x5cCPiwlSZQfx1 2N0MPfv3DYYBoZ22Y1ymVTfddMQg4fMavu9vSKHUwIYVO4jGq9qeyOBxrGw5lDLs NGxyNRdUCVrK0eBTn5n5swKThpx5kbI= -----END CERTIFICATE-----Generated at Wed Nov 5 11:14:36 2025 by rpki-client