$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/2cfc07a7-9790-3c1f-8f4a-56efc35ac620.roa File: 2cfc07a7-9790-3c1f-8f4a-56efc35ac620.roa (raw, json) Hash identifier: LcVGqUpVyjywP4ArbaBv8P90wjVuPBY7zEDZw7Zkqh8= Subject key identifier: 6E:90:DE:D7:2E:4A:D8:3E:7B:0C:77:6A:B5:94:42:67:7D:29:21:CC Certificate issuer: /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Certificate serial: 010D0C9F4328584B2A2C4F69B8CEADE19C264B80 Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/2cfc07a7-9790-3c1f-8f4a-56efc35ac620.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 399244 IP address blocks: 104.204.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:4f:69:b8:ce:ad:e1:9c:26:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=ce30e7c8-b7fa-4a99-bf48-e429b8419a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e8:d2:ed:0a:24:e8:3e:5c:79:b8:b3:cf:63: 45:f1:c1:df:50:c3:41:91:07:f0:9d:e0:99:58:1d: 86:b5:ca:46:39:66:01:04:d3:61:33:00:ee:7e:84: 27:de:6d:70:4d:22:2b:02:fc:10:cb:5e:7d:45:85: b1:52:0f:e5:83:f1:3d:92:b0:9e:da:1b:2b:1a:c2: 5d:de:20:7c:f1:fb:ce:a0:96:7b:55:89:5c:8c:8f: 0c:23:6c:23:b2:56:cb:5b:f9:36:eb:4e:47:31:f6: 2c:80:2d:e0:ef:59:0a:5f:3c:00:c5:c7:e1:5b:f6: 4e:f5:1a:73:97:61:b0:e6:3f:6d:c7:2a:de:2d:8a: 83:c3:56:0b:29:48:d3:31:4c:f9:22:04:10:b5:cd: 58:87:d4:54:fb:a4:19:fd:17:64:d5:9b:7d:f9:fc: e8:51:2a:f8:1f:13:13:59:d6:32:f9:3e:d6:0b:11: 25:cf:c2:ec:96:c0:76:a4:d7:a0:2a:62:57:2a:19: 4f:14:94:1f:d7:19:8e:69:d6:b6:e4:58:5f:cf:58: 89:91:c7:a4:2b:84:8a:8a:7e:19:34:58:d2:ab:4f: e1:b3:a8:0b:8a:61:73:fa:c9:fb:f2:f9:7e:83:34: 72:4a:8e:90:3b:c3:f8:cc:ae:60:65:fe:24:23:52: 1c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:90:DE:D7:2E:4A:D8:3E:7B:0C:77:6A:B5:94:42:67:7D:29:21:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/2cfc07a7-9790-3c1f-8f4a-56efc35ac620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl X509v3 Authority Key Identifier: keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer sbgp-ipAddrBlock: critical IPv4: 104.204.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:f3:b9:f9:02:a4:0a:bd:0a:45:cf:33:d8:f1:49:03:b2:30: 69:31:b1:34:b9:00:a8:6f:8f:ad:5b:9f:29:e3:cc:ee:89:87: a1:e3:5e:1a:56:aa:05:b1:9a:4a:e7:1b:41:f9:6f:a4:b1:9b: 84:07:bc:80:db:87:1a:2a:1c:53:3c:ad:b7:8b:c1:66:fd:96: 3a:45:2b:e5:95:13:a0:3a:ce:73:7a:2f:9f:8d:e9:7b:50:bc: dd:a5:c6:0e:6a:e7:bf:66:52:f8:4a:44:e1:fa:a3:bd:f3:ff: 7b:08:37:5f:be:8c:bb:b4:3f:9b:2b:1a:3e:fc:41:40:8d:40: d7:f0:39:d7:19:fa:65:7f:92:cc:59:20:43:f1:8f:7c:df:55: e5:41:e6:45:00:d8:e1:38:b1:4f:46:66:bb:88:16:2e:e4:8f: b9:0a:a3:e2:d6:e4:9f:9f:da:d7:87:23:e2:e6:63:f5:07:ad: 04:78:f5:92:82:a1:f8:0f:95:2b:4d:fc:d8:2a:ea:0f:9f:12: a5:1f:5e:73:a4:fa:c7:36:19:3a:b2:82:53:08:a9:71:da:79: ce:3f:dc:47:c7:14:6b:bd:16:ce:3b:6a:6c:dd:34:ae:5d:ed: 24:a8:63:2a:35:5f:5d:89:43:c9:f5:f2:61:4e:1e:5a:59:df: be:a1:02:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLE9puM6t4ZwmS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh MzhkMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk Y2UzMGU3YzgtYjdmYS00YTk5LWJmNDgtZTQyOWI4NDE5YTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OjS7Qok6D5cebizz2NF8cHfUMNBkQfwneCZ WB2GtcpGOWYBBNNhMwDufoQn3m1wTSIrAvwQy159RYWxUg/lg/E9krCe2hsrGsJd 3iB88fvOoJZ7VYlcjI8MI2wjslbLW/k2605HMfYsgC3g71kKXzwAxcfhW/ZO9Rpz l2Gw5j9txyreLYqDw1YLKUjTMUz5IgQQtc1Yh9RU+6QZ/Rdk1Zt9+fzoUSr4HxMT WdYy+T7WCxElz8LslsB2pNegKmJXKhlPFJQf1xmOada25Fhfz1iJkcekK4SKin4Z NFjSq0/hs6gLimFz+sn78vl+gzRySo6QO8P4zK5gZf4kI1IcdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6Q3tcuStg+ewx3arWUQmd9KSHMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvMmNmYzA3YTctOTc5MC0z YzFmLThmNGEtNTZlZmMzNWFjNjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl MTU0YmEzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaMzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/zufkCpAq9CkXPM9jxSQOyMGkxsTS5AKhvj61bnynjzO6Jh6HjXhpW qgWxmkrnG0H5b6Sxm4QHvIDbhxoqHFM8rbeLwWb9ljpFK+WVE6A6znN6L5+N6XtQ vN2lxg5q579mUvhKROH6o73z/3sIN1++jLu0P5srGj78QUCNQNfwOdcZ+mV/ksxZ IEPxj3zfVeVB5kUA2OE4sU9GZruIFi7kj7kKo+LW5J+f2teHI+LmY/UHrQR49ZKC ofgPlStN/Ngq6g+fEqUfXnOk+sc2GTqyglMIqXHaec4/3EfHFGu9Fs47amzdNK5d 7SSoYyo1X12JQ8n18mFOHlpZ376hAvY= -----END CERTIFICATE-----Generated at Wed Nov 5 06:24:39 2025 by rpki-client