$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/6dfcd7af-de21-3ba3-b413-81d0d31cac48.roa File: 6dfcd7af-de21-3ba3-b413-81d0d31cac48.roa (raw, json) Hash identifier: /Wtcewzx3rhDWStO3nMETDHCzhlLTGip/7DmSGT5I+s= Subject key identifier: 85:E2:4E:7B:EC:46:0D:59:5D:82:6A:5D:3B:08:F5:FD:94:39:94:FB Certificate issuer: /CN=67c32d4d-1a33-4637-a07d-fcaee3a3c83b Certificate serial: 010D0C9F4328584BB45D2F510446C25EFA3623C5 Authority key identifier: 0C:27:40:58:56:BC:42:98:19:65:4F:F1:F8:9F:79:32:47:C1:91:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/6dfcd7af-de21-3ba3-b413-81d0d31cac48.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 59362 IP address blocks: 104.193.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:2f:51:04:46:c2:5e:fa:36:23:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67c32d4d-1a33-4637-a07d-fcaee3a3c83b Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=30548c63-cca7-4d2e-93dd-d368777ab87d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7b:0f:de:cf:f1:cd:9b:fb:74:6a:7d:8c:53: 51:a3:db:54:67:07:1a:48:9e:38:dc:5c:39:5f:4d: 91:9d:86:82:48:49:fd:72:ab:6f:ed:87:21:3c:24: 74:4f:07:7e:ca:5f:f6:a0:0f:c8:07:66:60:1e:1d: 0c:f8:f2:7c:b8:1a:af:7b:41:cc:c9:ad:0e:ba:b2: 41:4e:97:8e:16:1c:c5:b5:7e:0f:1d:c0:dc:7b:c6: cb:75:7b:7b:1a:22:53:3d:3b:a1:f2:94:63:65:c9: 38:3c:c3:45:3b:b9:01:04:ec:41:ae:13:19:00:19: c3:aa:db:ff:5c:98:54:2a:38:6e:4e:b8:7d:d6:0e: 8a:e8:19:cc:71:40:48:23:5c:49:8b:c3:2c:27:0c: 31:46:33:da:5f:e1:6b:07:32:8a:b1:2c:3f:c7:d8: ca:88:ee:9c:ff:9a:40:e9:41:22:37:86:0b:17:38: 7f:d7:65:a4:fa:97:6b:0d:88:6b:06:86:8b:7e:0e: 47:81:ab:27:e2:0a:87:79:f6:dd:19:79:72:e7:c7: f9:f5:f6:4d:a6:9f:b5:80:ef:bc:73:ee:5e:1c:05: cd:fc:ed:1b:8a:df:97:8d:f3:22:92:d5:15:77:93: 87:26:4a:4b:40:61:7b:a4:50:c9:96:93:38:f1:06: 20:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E2:4E:7B:EC:46:0D:59:5D:82:6A:5D:3B:08:F5:FD:94:39:94:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/6dfcd7af-de21-3ba3-b413-81d0d31cac48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.crl X509v3 Authority Key Identifier: keyid:0C:27:40:58:56:BC:42:98:19:65:4F:F1:F8:9F:79:32:47:C1:91:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.cer sbgp-ipAddrBlock: critical IPv4: 104.193.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:30:a4:7c:b3:71:e6:e6:48:5e:86:7f:06:b0:98:de:44:c7: 28:84:dc:ba:be:99:28:84:c6:60:28:2f:d8:5e:ba:c0:43:dd: 7f:61:55:78:64:7d:ee:35:3e:ed:5a:00:05:55:bb:ab:1d:e7: 00:43:8e:97:ad:1a:ea:8b:dd:ee:79:13:93:32:66:4a:a7:80: f9:36:e3:8c:bf:f5:43:1e:70:34:2b:e8:dc:1b:c1:5e:a1:ad: 00:40:a8:8d:52:f9:cd:39:c7:8b:7a:b6:e9:13:fd:70:c4:2a: 61:5a:0a:33:d6:96:d0:8d:25:b0:ea:28:70:a9:2d:59:6e:56: bc:d8:31:4e:89:97:1d:91:50:ea:fd:2f:86:42:78:f9:28:d2: 87:3b:d2:19:11:1b:1d:d3:2b:8f:bd:d7:d2:17:71:bc:39:a1: c4:e6:7c:47:c2:c8:3d:ec:75:0e:18:17:27:68:3a:1e:cc:33: 15:ae:85:78:cd:18:47:a1:2b:3c:ba:0f:c0:e8:4a:1e:89:60: 7f:bb:2d:d1:95:5f:a9:83:5c:2b:b5:27:e4:08:6f:fd:54:ed: b1:49:8d:be:da:d1:53:08:3d:a3:04:70:0a:23:a3:b6:7d:04: 30:5a:43:bd:d9:95:20:95:db:fc:fd:ca:75:c5:85:8c:e9:73: 8a:ce:0a:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XS9RBEbCXvo2I8UwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdjMzJkNGQtMWEzMy00NjM3LWEwN2QtZmNhZWUzYTNj ODNiMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk MzA1NDhjNjMtY2NhNy00ZDJlLTkzZGQtZDM2ODc3N2FiODdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknsP3s/xzZv7dGp9jFNRo9tUZwcaSJ443Fw5 X02RnYaCSEn9cqtv7YchPCR0Twd+yl/2oA/IB2ZgHh0M+PJ8uBqve0HMya0OurJB TpeOFhzFtX4PHcDce8bLdXt7GiJTPTuh8pRjZck4PMNFO7kBBOxBrhMZABnDqtv/ XJhUKjhuTrh91g6K6BnMcUBII1xJi8MsJwwxRjPaX+FrBzKKsSw/x9jKiO6c/5pA 6UEiN4YLFzh/12Wk+pdrDYhrBoaLfg5Hgasn4gqHefbdGXly58f59fZNpp+1gO+8 c+5eHAXN/O0bit+XjfMiktUVd5OHJkpLQGF7pFDJlpM48QYgzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXiTnvsRg1ZXYJqXTsI9f2UOZT7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82N2Mz MmQ0ZC0xYTMzLTQ2MzctYTA3ZC1mY2FlZTNhM2M4M2IvNmRmY2Q3YWYtZGUyMS0z YmEzLWI0MTMtODFkMGQzMWNhYzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjdjMzJkNGQtMWEzMy00NjM3LWEw N2QtZmNhZWUzYTNjODNiLzY3YzMyZDRkLTFhMzMtNDYzNy1hMDdkLWZjYWVlM2Ez YzgzYi5jcmwwHwYDVR0jBBgwFoAUDCdAWFa8QpgZZU/x+J95MkfBkaEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82N2MzMmQ0ZC0xYTMzLTQ2MzctYTA3ZC1mY2Fl ZTNhM2M4M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMEkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIwpHyzcebmSF6GfwawmN5ExyiE3Lq+mSiExmAoL9heusBD3X9hVXhk fe41Pu1aAAVVu6sd5wBDjpetGuqL3e55E5MyZkqngPk244y/9UMecDQr6NwbwV6h rQBAqI1S+c05x4t6tukT/XDEKmFaCjPWltCNJbDqKHCpLVluVrzYMU6Jlx2RUOr9 L4ZCePko0oc70hkRGx3TK4+919IXcbw5ocTmfEfCyD3sdQ4YFydoOh7MMxWuhXjN GEehKzy6D8DoSh6JYH+7LdGVX6mDXCu1J+QIb/1U7bFJjb7a0VMIPaMEcAojo7Z9 BDBaQ73ZlSCV2/z9ynXFhYzpc4rOCqk= -----END CERTIFICATE-----Generated at Wed Nov 5 22:51:39 2025 by rpki-client