$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/6987ceea-b04a-3ae2-a40a-d28cb3c0c962.roa File: 6987ceea-b04a-3ae2-a40a-d28cb3c0c962.roa (raw, json) Hash identifier: IT3SPFIdELzMqqAF4PF+es80iICXlF6opSOqPTWRuz8= Subject key identifier: 40:DF:6F:5A:86:B7:85:3E:CF:A6:10:B5:88:3E:33:6D:AE:19:0C:3C Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584B9D7825F2BF52AC6E35AE0780 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/6987ceea-b04a-3ae2-a40a-d28cb3c0c962.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 395886 IP address blocks: 104.143.32.0/20 maxlen: 24 172.81.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9d:78:25:f2:bf:52:ac:6e:35:ae:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=114fa458-7f6d-4399-9f00-6114273e039e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c3:e4:29:d5:f2:a4:7c:76:37:f5:a3:42:ad: 76:c8:67:7c:1b:57:0b:eb:87:8a:69:c2:52:43:be: 2b:04:c2:9d:46:d9:42:df:11:87:5b:a4:1b:54:72: 1a:21:a3:54:ba:a4:b7:e0:b3:95:5e:1f:4c:3c:f6: 4e:f0:d8:c5:b1:b9:b0:83:79:77:b6:11:c3:fc:ba: c2:42:a1:34:3a:8f:08:77:88:a6:47:8f:6e:14:27: 3f:7f:d0:bc:d8:68:c4:56:fe:1a:8f:ca:b1:38:6d: e4:71:49:1d:08:1d:64:4b:4e:c8:56:be:37:09:5e: dd:5d:7d:99:ea:19:52:2a:c9:1c:df:95:68:e7:5b: 3a:40:6f:25:43:0c:3a:20:bb:5c:be:6a:d8:85:ca: 4b:62:62:48:90:11:52:95:92:c5:72:7b:53:2e:b9: a9:3c:af:5d:8c:b5:aa:e7:1a:03:49:c1:08:ad:d1: 27:25:15:c9:49:0d:c8:cf:40:f5:55:e6:27:ff:fc: 37:75:70:2c:d7:2a:de:8d:4b:fe:a4:8f:e3:22:90: df:dc:5f:fe:ac:1f:9b:04:84:74:f9:12:8d:93:a1: 5a:ee:4e:e2:c3:cb:f9:57:5b:ce:f9:09:1e:d0:f9: 0e:4b:90:da:c1:f1:a8:7d:68:9a:73:c3:39:b0:fc: 0a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DF:6F:5A:86:B7:85:3E:CF:A6:10:B5:88:3E:33:6D:AE:19:0C:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/6987ceea-b04a-3ae2-a40a-d28cb3c0c962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 104.143.32.0/20 172.81.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:cc:92:36:82:12:8c:31:11:63:c0:a4:8b:b3:0d:06:18:95: 3d:8b:73:5a:57:a6:05:e8:eb:a7:44:94:83:24:3b:53:19:a1: ec:ab:1b:cd:5a:1a:e3:02:18:ae:9a:e0:f6:f8:25:ef:a7:90: 50:e7:e7:1f:16:2c:8f:fd:3d:6f:bc:b3:b7:8d:91:aa:02:b1: 1f:69:bf:38:0c:af:56:c9:9a:25:0b:61:c3:2a:88:b2:60:71: bc:fc:9f:f9:b4:b6:ef:d9:4e:38:99:e4:2a:83:e8:44:72:e0: 5c:8e:04:93:00:b1:d3:28:16:51:37:37:ac:84:ea:c0:d8:ad: 7f:6c:d0:29:64:77:a4:92:80:ae:f8:07:54:25:03:93:e6:d4: 14:c5:e9:3f:21:d2:43:23:a0:e9:e7:4a:e0:52:c7:7f:f1:02: df:13:73:26:e1:f8:b7:a3:d5:af:3f:10:e0:73:56:95:b9:ca: fc:01:24:a6:6e:39:39:9f:35:15:d4:9b:7c:f9:0b:74:25:a5: 00:72:5b:ca:49:aa:e2:ca:a8:bc:c4:e8:28:f1:dc:b1:08:e8: 68:1b:f2:18:7a:98:c5:e8:0b:f3:a9:c4:38:d3:c0:82:bd:04: 42:88:d7:a3:57:37:0f:b7:dc:dd:08:ff:ec:ec:55:cb:af:15: a2:62:d9:b3 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEudeCXyv1KsbjWuB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MTE0ZmE0NTgtN2Y2ZC00Mzk5LTlmMDAtNjExNDI3M2UwMzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMPkKdXypHx2N/WjQq12yGd8G1cL64eKacJS Q74rBMKdRtlC3xGHW6QbVHIaIaNUuqS34LOVXh9MPPZO8NjFsbmwg3l3thHD/LrC QqE0Oo8Id4imR49uFCc/f9C82GjEVv4aj8qxOG3kcUkdCB1kS07IVr43CV7dXX2Z 6hlSKskc35Vo51s6QG8lQww6ILtcvmrYhcpLYmJIkBFSlZLFcntTLrmpPK9djLWq 5xoDScEIrdEnJRXJSQ3Iz0D1VeYn//w3dXAs1yrejUv+pI/jIpDf3F/+rB+bBIR0 +RKNk6Fa7k7iw8v5V1vO+Qke0PkOS5DawfGofWiac8M5sPwKywIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEDfb1qGt4U+z6YQtYg+M22uGQw8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvNjk4N2NlZWEtYjA0YS0z YWUyLWE0MGEtZDI4Y2IzYzBjOTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEaI8gAwQB rFFkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADPMkjaCEowxEWPApIuzDQYYlT2Lc1pXpgXo66dElIMkO1MZ oeyrG81aGuMCGK6a4Pb4Je+nkFDn5x8WLI/9PW+8s7eNkaoCsR9pvzgMr1bJmiUL YcMqiLJgcbz8n/m0tu/ZTjiZ5CqD6ERy4FyOBJMAsdMoFlE3N6yE6sDYrX9s0Clk d6SSgK74B1QlA5Pm1BTF6T8h0kMjoOnnSuBSx3/xAt8Tcybh+Lej1a8/EOBzVpW5 yvwBJKZuOTmfNRXUm3z5C3QlpQByW8pJquLKqLzE6Cjx3LEI6Ggb8hh6mMXoC/Op xDjTwIK9BEKI16NXNw+33N0I/+zsVcuvFaJi2bM= -----END CERTIFICATE-----Generated at Tue Nov 4 22:19:20 2025 by rpki-client