$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa File: a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa (raw, json) Hash identifier: 64GTxbOn8CSjzLZI+zg2fAe0fiQ3KTxuFl4uh7Niw3s= Subject key identifier: 33:06:AF:A4:FF:25:FA:87:8C:0C:AB:7D:82:DA:73:D3:F2:35:75:75 Certificate issuer: /CN=900920d7-dc26-412d-b92a-7af35af2cc24 Certificate serial: 010D0C9F4328584B7DECA9EC92825F5E79721F00 Authority key identifier: D7:72:A6:9A:5A:9A:5E:31:05:1B:21:51:B8:3B:C7:48:89:48:D3:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 36694 IP address blocks: 104.219.228.0/22 maxlen: 24 2620:11d:1000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:a9:ec:92:82:5f:5e:79:72:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900920d7-dc26-412d-b92a-7af35af2cc24 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=a319bdce-7409-464e-b5a6-41a7092d42ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a2:de:08:48:73:57:8a:8a:33:96:3e:72:ef: 5d:09:d1:54:f9:cf:2c:a1:c0:be:4c:e3:f4:cf:b1: fd:e2:be:c5:60:8a:33:df:88:1d:a6:e5:8f:e8:af: 6a:1d:46:15:cf:14:ed:31:d9:61:6e:36:dd:2f:ee: 0a:20:6c:a5:29:72:e0:71:21:9a:3c:f5:ed:2d:2b: f3:0d:4b:98:35:73:ea:24:84:c2:c8:17:6d:1c:50: cb:4c:80:4a:e9:4f:72:78:d6:a8:e9:e7:82:78:c3: 27:8a:a8:5b:a1:95:4b:e8:c9:ae:c6:ac:96:5c:a8: a4:02:11:e3:f2:5c:6a:45:35:81:c0:bc:3c:2f:af: ac:f8:14:16:90:54:44:6e:8a:c7:11:dc:31:5e:9f: 84:3e:84:99:84:cb:c6:5b:82:6c:96:1a:7b:94:ed: 03:73:af:bf:ed:7a:25:08:e5:7c:3b:2e:26:b1:4f: 94:53:22:67:20:23:b1:4d:63:36:08:d9:54:d0:8f: 36:76:85:76:84:b6:bf:f4:2d:7f:3d:0b:b6:6a:de: c6:d1:3b:37:a4:8a:3d:e5:5a:4b:4e:04:cf:0f:f0: d9:34:d4:37:32:af:a9:2b:e5:45:0f:3b:9d:3e:90: ab:28:0a:51:a7:ed:ce:2c:9b:ca:00:7a:ef:fd:73: 3d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:06:AF:A4:FF:25:FA:87:8C:0C:AB:7D:82:DA:73:D3:F2:35:75:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.crl X509v3 Authority Key Identifier: keyid:D7:72:A6:9A:5A:9A:5E:31:05:1B:21:51:B8:3B:C7:48:89:48:D3:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer sbgp-ipAddrBlock: critical IPv4: 104.219.228.0/22 IPv6: 2620:11d:1000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:0a:cb:47:1c:e3:33:b1:3c:3b:df:d6:4e:d3:4b:f7:63:ba: 15:65:a6:0d:ce:93:3c:49:e8:bc:ae:8f:ea:60:87:5e:44:e4: e3:d9:12:4d:d7:56:b8:a1:f5:4d:15:eb:0c:59:72:48:5c:18: 00:5a:7d:a8:14:e4:31:35:82:af:59:6a:0e:34:41:48:d7:d2: 99:34:27:55:06:4a:97:34:76:97:da:b9:cb:57:38:39:e0:38: 29:93:60:f3:af:52:e3:72:1d:a5:d4:a7:3c:99:ae:75:8e:75: ad:4a:15:b1:39:47:b1:b6:06:89:a8:36:32:ae:57:cc:39:75: e7:e1:dd:4e:d2:cd:82:22:30:67:63:0f:e1:53:c4:13:0b:6a: 7b:1c:a7:f7:5d:b6:57:86:16:c0:35:e1:85:e7:e5:ca:37:c8: 8c:86:4d:64:20:91:b4:46:ed:3e:db:c6:13:d4:d9:6f:b6:a7: 2f:8d:72:b3:b7:cf:e6:37:0a:bb:f5:ca:98:15:01:26:97:a0: 3a:f0:d6:c2:24:d8:01:73:bc:0a:32:10:8f:59:c4:fe:47:10: 9a:c5:b0:dc:29:9f:3b:e4:85:3e:68:3c:1e:e4:bf:a6:61:e2: e0:6b:a8:12:85:09:68:d4:ca:8b:09:71:f6:06:dc:c5:0b:60: 28:ec:2a:80 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEt97KnskoJfXnlyHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwOTIwZDctZGMyNi00MTJkLWI5MmEtN2FmMzVhZjJj YzI0MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk YTMxOWJkY2UtNzQwOS00NjRlLWI1YTYtNDFhNzA5MmQ0MmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aLeCEhzV4qKM5Y+cu9dCdFU+c8socC+TOP0 z7H94r7FYIoz34gdpuWP6K9qHUYVzxTtMdlhbjbdL+4KIGylKXLgcSGaPPXtLSvz DUuYNXPqJITCyBdtHFDLTIBK6U9yeNao6eeCeMMniqhboZVL6MmuxqyWXKikAhHj 8lxqRTWBwLw8L6+s+BQWkFREborHEdwxXp+EPoSZhMvGW4Jslhp7lO0Dc6+/7Xol COV8Oy4msU+UUyJnICOxTWM2CNlU0I82doV2hLa/9C1/PQu2at7G0Ts3pIo95VpL TgTPD/DZNNQ3Mq+pK+VFDzudPpCrKApRp+3OLJvKAHrv/XM98wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFDMGr6T/JfqHjAyrfYLac9PyNXV1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDA5 MjBkNy1kYzI2LTQxMmQtYjkyYS03YWYzNWFmMmNjMjQvYTg2ZGVhNGYtNWY2Zi0z MmFlLThhMjUtZWFkNGE0ZGJhMmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTAwOTIwZDctZGMyNi00MTJkLWI5 MmEtN2FmMzVhZjJjYzI0LzkwMDkyMGQ3LWRjMjYtNDEyZC1iOTJhLTdhZjM1YWYy Y2MyNC5jcmwwHwYDVR0jBBgwFoAU13KmmlqaXjEFGyFRuDvHSIlI0+AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDA5MjBkNy1kYzI2LTQxMmQtYjkyYS03YWYz NWFmMmNjMjQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCaNvkMA8E AgACMAkDBwQmIAEdEAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA1wrLRxzjM7E8O9/WTtNL92O6FWWmDc6T PEnovK6P6mCHXkTk49kSTddWuKH1TRXrDFlySFwYAFp9qBTkMTWCr1lqDjRBSNfS mTQnVQZKlzR2l9q5y1c4OeA4KZNg869S43IdpdSnPJmudY51rUoVsTlHsbYGiag2 Mq5XzDl15+HdTtLNgiIwZ2MP4VPEEwtqexyn9122V4YWwDXhheflyjfIjIZNZCCR tEbtPtvGE9TZb7anL41ys7fP5jcKu/XKmBUBJpegOvDWwiTYAXO8CjIQj1nE/kcQ msWw3CmfO+SFPmg8HuS/pmHi4GuoEoUJaNTKiwlx9gbcxQtgKOwqgA== -----END CERTIFICATE-----Generated at Wed Nov 5 14:40:47 2025 by rpki-client