$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/ebfc0fb2-00ab-3668-ab6b-daafd14150c4.roa File: ebfc0fb2-00ab-3668-ab6b-daafd14150c4.roa (raw, json) Hash identifier: NkJsZr2T35E6ZXxNEuywzjYvJL2WWJ5YkjUsFT8KK0Y= Subject key identifier: F5:D7:00:AD:F6:2E:F3:0D:FF:D1:05:04:D2:D3:B2:25:31:AD:76:1D Certificate issuer: /CN=8847f57c-ba5f-4d96-baa3-c4a4de39d5a8 Certificate serial: 010D0C9F4328584B1C36CB9082BB83C7F8B97800 Authority key identifier: 42:67:38:47:82:B9:45:C0:A3:38:2D:C4:3E:C7:38:D3:35:D9:AC:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/ebfc0fb2-00ab-3668-ab6b-daafd14150c4.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 23465 IP address blocks: 104.255.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:cb:90:82:bb:83:c7:f8:b9:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8847f57c-ba5f-4d96-baa3-c4a4de39d5a8 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=75b1d0ee-23ab-4210-a31e-045e0ddc3be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:78:f5:53:56:5d:51:d9:3c:f9:fc:db:f6:21: 58:3a:62:7a:9e:42:d9:cb:d8:47:cd:3b:1e:d2:67: 37:c6:04:cc:46:5d:b1:a9:d7:b5:7e:cd:b8:07:dd: 56:a9:35:af:cd:bb:14:dd:44:e0:20:a8:62:e3:f3: 34:f9:65:58:e6:30:e9:22:d3:8f:b6:bb:9e:f6:0c: bc:c5:c7:06:ed:7c:1b:26:d4:b2:d2:bd:a6:f8:74: 9d:f6:3b:ab:ee:8e:94:48:2b:33:a7:69:07:3a:5e: 80:ad:8b:4a:b9:be:f8:13:33:68:4c:73:09:da:9d: 0e:46:76:fa:0b:0b:aa:62:02:38:37:15:5a:03:c9: a5:c2:e3:02:06:41:94:84:b9:c4:de:95:ab:80:6f: 60:53:93:c8:17:50:da:17:dd:38:c5:b7:a7:58:71: 09:69:46:8b:0a:f9:e5:cf:3c:aa:a7:96:79:5e:74: 6d:cb:77:f1:24:60:a9:f6:d9:9e:d1:19:75:ec:0c: ca:70:ba:b1:31:8f:9a:ea:fe:ec:f5:b7:1e:b7:93: 27:03:f3:cd:2f:15:32:90:a1:af:b5:63:95:fe:af: c1:c8:49:86:05:bc:f2:e4:b8:13:d6:b0:95:37:b1: 56:24:4a:8a:52:4d:3c:d0:f2:e4:bc:11:25:9b:c9: 5c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D7:00:AD:F6:2E:F3:0D:FF:D1:05:04:D2:D3:B2:25:31:AD:76:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/ebfc0fb2-00ab-3668-ab6b-daafd14150c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.crl X509v3 Authority Key Identifier: keyid:42:67:38:47:82:B9:45:C0:A3:38:2D:C4:3E:C7:38:D3:35:D9:AC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.cer sbgp-ipAddrBlock: critical IPv4: 104.255.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ce:44:97:ae:78:33:51:df:07:5f:2f:19:36:7b:f2:3f:e5: c8:7e:ed:65:ad:71:dd:10:9a:b2:30:83:7f:e6:2e:bc:d3:4b: 12:17:17:65:a9:44:39:8a:95:91:da:9b:e0:61:01:c4:39:d0: b2:4a:55:2e:97:ab:db:37:43:71:9f:03:43:8e:71:bc:5c:44: 9a:c0:04:d5:4d:86:79:39:28:ac:af:04:2a:28:3c:15:d9:6a: da:53:3e:25:d6:c0:fc:00:5e:90:e8:56:fc:ad:76:69:0a:71: e9:98:97:ed:47:b0:2d:62:97:7f:bc:f1:36:d7:39:2a:75:19: 93:0a:51:59:2a:ad:3b:b8:b4:d5:60:b0:c9:d3:9a:1d:2e:73: f3:36:2e:7a:4b:e9:f9:56:8f:bf:9e:d1:aa:21:48:c7:d5:18: 48:2c:ec:3b:6a:ec:e0:27:33:bc:c9:57:9b:d9:16:e8:5d:7b: ef:f5:de:79:53:3d:ea:ad:fa:ec:4b:31:58:83:97:32:1f:5b: e8:b0:8b:30:10:bb:10:b6:d4:4e:ab:a0:d4:7f:76:82:e6:5b: 49:d8:63:32:8b:99:f5:d5:0c:34:b8:45:ac:35:19:4b:e8:8d: a7:d4:56:2c:09:3c:b6:7a:3c:d2:7f:e8:46:14:a1:1d:f7:83: f3:59:29:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNsuQgruDx/i5eAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0N2Y1N2MtYmE1Zi00ZDk2LWJhYTMtYzRhNGRlMzlk NWE4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NzViMWQwZWUtMjNhYi00MjEwLWEzMWUtMDQ1ZTBkZGMzYmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunj1U1ZdUdk8+fzb9iFYOmJ6nkLZy9hHzTse 0mc3xgTMRl2xqde1fs24B91WqTWvzbsU3UTgIKhi4/M0+WVY5jDpItOPtrue9gy8 xccG7XwbJtSy0r2m+HSd9jur7o6USCszp2kHOl6ArYtKub74EzNoTHMJ2p0ORnb6 CwuqYgI4NxVaA8mlwuMCBkGUhLnE3pWrgG9gU5PIF1DaF904xbenWHEJaUaLCvnl zzyqp5Z5XnRty3fxJGCp9tme0Rl17AzKcLqxMY+a6v7s9bcet5MnA/PNLxUykKGv tWOV/q/ByEmGBbzy5LgT1rCVN7FWJEqKUk080PLkvBElm8lcRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXXAK32LvMN/9EFBNLTsiUxrXYdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84ODQ3 ZjU3Yy1iYTVmLTRkOTYtYmFhMy1jNGE0ZGUzOWQ1YTgvZWJmYzBmYjItMDBhYi0z NjY4LWFiNmItZGFhZmQxNDE1MGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODg0N2Y1N2MtYmE1Zi00ZDk2LWJh YTMtYzRhNGRlMzlkNWE4Lzg4NDdmNTdjLWJhNWYtNGQ5Ni1iYWEzLWM0YTRkZTM5 ZDVhOC5jcmwwHwYDVR0jBBgwFoAUQmc4R4K5RcCjOC3EPsc40zXZrNQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84ODQ3ZjU3Yy1iYTVmLTRkOTYtYmFhMy1jNGE0 ZGUzOWQ1YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPORJeueDNR3wdfLxk2e/I/5ch+7WWtcd0QmrIwg3/mLrzTSxIXF2Wp RDmKlZHam+BhAcQ50LJKVS6Xq9s3Q3GfA0OOcbxcRJrABNVNhnk5KKyvBCooPBXZ atpTPiXWwPwAXpDoVvytdmkKcemYl+1HsC1il3+88TbXOSp1GZMKUVkqrTu4tNVg sMnTmh0uc/M2LnpL6flWj7+e0aohSMfVGEgs7Dtq7OAnM7zJV5vZFuhde+/13nlT Peqt+uxLMViDlzIfW+iwizAQuxC21E6roNR/doLmW0nYYzKLmfXVDDS4Raw1GUvo jafUViwJPLZ6PNJ/6EYUoR33g/NZKYQ= -----END CERTIFICATE-----Generated at Wed Nov 5 04:53:10 2025 by rpki-client