$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/4fd2deb2-4eb7-31d5-941b-417d5bef3ced.roa File: 4fd2deb2-4eb7-31d5-941b-417d5bef3ced.roa (raw, json) Hash identifier: efydJJq2Gu34Zkl4ZxcXyJU7MmCJq4AhaFSrz66NjeI= Subject key identifier: 78:49:26:34:54:3C:B3:20:06:E1:55:69:CE:0B:52:66:32:80:76:56 Certificate issuer: /CN=613bdd67-74b5-4268-96e7-b3cbb049d7aa Certificate serial: 010D0C9F4328584BB88D26C4ADE2E131A57CF280 Authority key identifier: 40:4E:D7:BD:F4:3E:F6:0C:7D:D8:0C:9D:2F:FF:08:A7:F4:62:65:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/4fd2deb2-4eb7-31d5-941b-417d5bef3ced.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 46960 IP address blocks: 104.255.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:26:c4:ad:e2:e1:31:a5:7c:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=613bdd67-74b5-4268-96e7-b3cbb049d7aa Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=843991e9-3055-48a5-a485-de7ea45bbdde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:66:88:04:53:9a:0e:50:54:5d:56:46:e9:a1: d8:a6:fc:bf:9c:73:a0:bc:6d:2a:62:51:c7:02:1c: 61:cc:eb:49:17:3b:d1:63:52:a2:c3:c1:86:ec:15: cf:a9:f4:d7:5b:4f:9d:2b:a7:31:f4:61:02:4a:ef: e7:51:65:40:e2:a9:cf:b3:df:dd:ca:60:61:a2:fe: 24:a7:07:5f:6e:d6:f0:c2:25:65:19:e2:a4:21:ce: 55:be:b4:86:e9:a9:79:e3:70:3e:f3:ec:c0:ed:ee: c6:35:34:0e:81:4b:30:10:6c:19:7a:b2:87:35:ed: 4a:1e:fc:7f:d4:45:8b:b3:df:20:81:90:71:9e:a2: 6b:de:60:0f:29:ea:87:6a:28:1e:d9:fa:b2:29:a8: 9e:6c:b1:4f:f9:db:fd:94:fe:d5:22:da:ea:94:c3: 10:0a:d3:4b:87:c0:fa:3b:80:91:a5:df:09:ec:62: 8f:1a:f6:a8:f6:a5:e6:6d:fe:73:b7:dc:c4:14:b6: cd:01:6a:2f:00:db:e8:1d:3f:3c:ec:0e:21:97:a7: 1b:4f:ce:3c:82:4a:6c:fa:c1:54:3c:e5:8b:2f:b5: f4:cd:9e:88:53:01:cf:1a:ec:9d:6b:cd:9b:af:63: 64:32:6f:57:06:d5:88:1d:a9:39:a2:e8:08:ec:27: c8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:49:26:34:54:3C:B3:20:06:E1:55:69:CE:0B:52:66:32:80:76:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/4fd2deb2-4eb7-31d5-941b-417d5bef3ced.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.crl X509v3 Authority Key Identifier: keyid:40:4E:D7:BD:F4:3E:F6:0C:7D:D8:0C:9D:2F:FF:08:A7:F4:62:65:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer sbgp-ipAddrBlock: critical IPv4: 104.255.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:49:6e:4d:cd:8e:e0:03:b8:2a:67:75:d1:56:5d:b1:f0:75: b7:cf:10:b4:97:16:74:fc:82:5e:c3:e2:1a:46:ff:28:c5:37: d3:ce:71:df:ab:68:6c:d7:b3:31:e3:a7:af:1f:66:9b:bb:19: 4d:02:d8:c6:96:5f:26:03:dc:d0:50:02:6b:d9:be:dc:f1:28: 23:23:a0:ca:e7:b5:ea:1d:fa:1b:75:d0:03:de:16:19:85:b2: b3:b4:fd:cc:6e:08:19:30:2b:91:06:88:69:16:b7:16:d0:7d: 3e:40:42:4f:ea:58:0c:73:72:a8:30:0b:05:ef:ff:85:ce:d0: e7:95:58:0f:d1:08:28:f2:dd:29:44:3c:2c:83:24:b2:60:0e: 88:a8:c3:63:dc:a7:19:e3:2c:00:69:79:73:cc:d5:01:6f:18: 81:52:c5:0a:b3:6b:ea:8f:fc:a8:8c:c8:3d:e7:da:3c:5e:72: 1f:66:83:8c:e2:32:48:54:46:96:55:6a:43:71:5f:91:9b:aa: c9:d8:d6:99:5d:33:56:59:c9:3e:4c:55:89:08:e4:a8:6d:44: cb:d9:0b:ea:9d:56:fe:dc:79:8b:15:46:29:b7:a6:4b:e8:d4: da:5f:e1:fb:e7:28:f6:5f:9a:ba:60:73:0a:93:fc:c7:4f:2e: c8:5c:fd:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jSbEreLhMaV88oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjEzYmRkNjctNzRiNS00MjY4LTk2ZTctYjNjYmIwNDlk N2FhMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ODQzOTkxZTktMzA1NS00OGE1LWE0ODUtZGU3ZWE0NWJiZGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWaIBFOaDlBUXVZG6aHYpvy/nHOgvG0qYlHH AhxhzOtJFzvRY1Kiw8GG7BXPqfTXW0+dK6cx9GECSu/nUWVA4qnPs9/dymBhov4k pwdfbtbwwiVlGeKkIc5VvrSG6al543A+8+zA7e7GNTQOgUswEGwZerKHNe1KHvx/ 1EWLs98ggZBxnqJr3mAPKeqHaige2fqyKaiebLFP+dv9lP7VItrqlMMQCtNLh8D6 O4CRpd8J7GKPGvao9qXmbf5zt9zEFLbNAWovANvoHT887A4hl6cbT848gkps+sFU POWLL7X0zZ6IUwHPGuyda82br2NkMm9XBtWIHak5ougI7CfILQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhJJjRUPLMgBuFVac4LUmYygHZWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82MTNi ZGQ2Ny03NGI1LTQyNjgtOTZlNy1iM2NiYjA0OWQ3YWEvNGZkMmRlYjItNGViNy0z MWQ1LTk0MWItNDE3ZDViZWYzY2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjEzYmRkNjctNzRiNS00MjY4LTk2 ZTctYjNjYmIwNDlkN2FhLzYxM2JkZDY3LTc0YjUtNDI2OC05NmU3LWIzY2JiMDQ5 ZDdhYS5jcmwwHwYDVR0jBBgwFoAUQE7XvfQ+9gx92AydL/8Ip/RiZXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82MTNiZGQ2Ny03NGI1LTQyNjgtOTZlNy1iM2Ni YjA0OWQ3YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtJbk3NjuADuCpnddFWXbHwdbfPELSXFnT8gl7D4hpG/yjFN9POcd+r aGzXszHjp68fZpu7GU0C2MaWXyYD3NBQAmvZvtzxKCMjoMrnteod+ht10APeFhmF srO0/cxuCBkwK5EGiGkWtxbQfT5AQk/qWAxzcqgwCwXv/4XO0OeVWA/RCCjy3SlE PCyDJLJgDoiow2PcpxnjLABpeXPM1QFvGIFSxQqza+qP/KiMyD3n2jxech9mg4zi MkhURpZVakNxX5GbqsnY1pldM1ZZyT5MVYkI5KhtRMvZC+qdVv7ceYsVRim3pkvo 1Npf4fvnKPZfmrpgcwqT/MdPLshc/cI= -----END CERTIFICATE-----Generated at Wed Nov 5 02:32:11 2025 by rpki-client