$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/32cdd595-39b5-33f1-b3d3-81573d4f0634.roa File: 32cdd595-39b5-33f1-b3d3-81573d4f0634.roa (raw, json) Hash identifier: Hyce+rXKyBq71LWC/z2O+XuzvaR2PBaz9lB9UvA/z1k= Subject key identifier: 57:24:F2:26:DB:56:01:59:D8:6C:38:9D:2E:0A:09:B4:1B:E0:93:35 Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Certificate serial: 010D0C9F4328584B047C19EF5B78BDA35F371580 Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/32cdd595-39b5-33f1-b3d3-81573d4f0634.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 4922 IP address blocks: 104.244.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:19:ef:5b:78:bd:a3:5f:37:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=e9aaf64c-883f-467b-8cb2-c50bdb73188f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c0:2d:c7:1e:03:26:2c:37:6b:21:16:cd:42: 77:9a:f4:42:40:46:ef:dc:cb:7a:1c:a8:55:0e:5b: 3b:36:11:ef:2a:b0:87:51:f2:3e:68:68:55:75:ad: 23:fe:33:da:b0:fd:81:4e:53:36:93:3a:3c:96:44: 01:59:c7:b1:7c:95:af:95:53:2e:58:8a:2a:48:cc: 30:df:46:4a:6c:0c:66:09:a6:2e:fd:9b:07:50:c2: 05:c3:bf:84:1d:93:e3:b9:82:2d:95:98:a3:b4:38: 53:b5:7f:5a:15:54:ee:fc:28:5c:e0:11:6b:94:f8: f8:ca:e6:1c:45:03:0a:f6:18:44:26:24:fa:a3:cb: 3e:34:19:83:10:db:48:1e:16:47:db:85:78:72:46: 8f:aa:47:56:c2:63:6e:f6:1b:e0:ee:1f:7d:30:ca: 32:aa:94:16:cd:ba:49:5d:6a:40:ea:f4:82:13:00: 93:55:6b:cb:d8:51:ee:01:a2:25:7a:95:8c:77:55: 2f:16:a1:9a:d5:69:77:7b:fb:5f:fc:72:47:92:b5: 48:c1:a3:18:7d:5e:9e:3b:75:ef:04:81:59:dc:c2: dc:b0:27:84:89:e1:02:b6:96:76:37:dc:38:f0:83: 57:90:50:18:1f:44:d3:e7:fd:f5:8a:d3:ab:86:e3: 18:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:24:F2:26:DB:56:01:59:D8:6C:38:9D:2E:0A:09:B4:1B:E0:93:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/32cdd595-39b5-33f1-b3d3-81573d4f0634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl X509v3 Authority Key Identifier: keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer sbgp-ipAddrBlock: critical IPv4: 104.244.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:e1:3b:ab:18:7b:73:a5:bc:b7:a4:5d:b5:cd:23:90:0d:bd: c6:4f:fa:9f:76:ef:2b:e9:78:f7:99:c3:11:2d:c1:cb:13:1b: a2:44:3e:62:f4:4d:2d:ba:19:b4:69:16:af:5f:11:9b:97:7e: ab:95:98:1a:e0:9d:ad:b7:2d:67:26:46:87:3b:c4:b4:50:09: 14:bf:9d:a9:92:70:fc:62:85:50:fc:19:a5:a9:1e:66:45:85: 4d:ae:ab:f5:bd:3d:de:4b:cc:ec:47:9b:30:2d:0f:4b:72:9e: 78:8f:18:53:09:97:ea:a5:e9:8c:83:71:a6:c7:e5:73:7f:14: aa:11:e3:8b:d0:6d:d4:39:2e:ac:43:32:e9:56:fc:ae:0e:9a: c4:34:30:24:42:d4:f3:ec:ae:38:d6:f6:1c:82:03:5e:4b:42: 96:80:c6:56:51:4a:ab:a2:a3:fb:4a:89:d9:1f:87:50:63:7c: 6c:b3:2a:c1:89:04:9e:99:63:ec:3d:40:5f:e0:68:41:4e:db: c2:e6:de:bb:ae:72:a6:d3:4b:fb:9f:77:a2:25:b2:e4:72:c3: d7:d5:1d:90:fe:06:ca:61:73:b2:4e:8b:98:41:d2:8f:0e:af: 1a:41:39:a0:d2:71:94:80:8b:a2:cb:fe:7c:d2:5a:95:0d:41: 0e:12:01:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBnvW3i9o183FYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz MTA5MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZTlhYWY2NGMtODgzZi00NjdiLThjYjItYzUwYmRiNzMxODhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsAtxx4DJiw3ayEWzUJ3mvRCQEbv3Mt6HKhV Dls7NhHvKrCHUfI+aGhVda0j/jPasP2BTlM2kzo8lkQBWcexfJWvlVMuWIoqSMww 30ZKbAxmCaYu/ZsHUMIFw7+EHZPjuYItlZijtDhTtX9aFVTu/Chc4BFrlPj4yuYc RQMK9hhEJiT6o8s+NBmDENtIHhZH24V4ckaPqkdWwmNu9hvg7h99MMoyqpQWzbpJ XWpA6vSCEwCTVWvL2FHuAaIlepWMd1UvFqGa1Wl3e/tf/HJHkrVIwaMYfV6eO3Xv BIFZ3MLcsCeEieECtpZ2N9w48INXkFAYH0TT5/31itOrhuMYnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFck8ibbVgFZ2Gw4nS4KCbQb4JM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvMzJjZGQ1OTUtMzliNS0z M2YxLWIzZDMtODE1NzNkNGYwNjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3 MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPRsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzhO6sYe3OlvLekXbXNI5ANvcZP+p927yvpePeZwxEtwcsTG6JEPmL0 TS26GbRpFq9fEZuXfquVmBrgna23LWcmRoc7xLRQCRS/namScPxihVD8GaWpHmZF hU2uq/W9Pd5LzOxHmzAtD0tynniPGFMJl+ql6YyDcabH5XN/FKoR44vQbdQ5LqxD MulW/K4OmsQ0MCRC1PPsrjjW9hyCA15LQpaAxlZRSquio/tKidkfh1BjfGyzKsGJ BJ6ZY+w9QF/gaEFO28Lm3ruucqbTS/ufd6IlsuRyw9fVHZD+Bsphc7JOi5hB0o8O rxpBOaDScZSAi6LL/nzSWpUNQQ4SAT0= -----END CERTIFICATE-----Generated at Wed Nov 5 15:11:15 2025 by rpki-client