$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/3e90970f-dd28-30ac-83fd-9f25160e4d92.roa File: 3e90970f-dd28-30ac-83fd-9f25160e4d92.roa (raw, json) Hash identifier: FNxWEUzmSk6XoSzQUr/QMMPjN2vKw2kmHAUQ7EDPC8c= Subject key identifier: FE:2C:DB:87:FE:D4:55:CE:18:10:1C:54:D3:D2:73:1D:30:D7:82:F1 Certificate issuer: /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483 Certificate serial: 010D0C9F4328584BB2F7A5A54E67D0FB20423400 Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/3e90970f-dd28-30ac-83fd-9f25160e4d92.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 26863 IP address blocks: 104.143.2.0/23 maxlen: 32 104.238.229.0/24 maxlen: 32 208.52.152.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:a5:a5:4e:67:d0:fb:20:42:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=117f7385-0146-44b2-9f04-7c62597da1f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c2:3f:9b:31:e7:58:5d:fa:59:d8:7e:c9:23: f2:9a:a5:d0:1d:dd:43:c6:f2:ed:fb:4e:bd:30:5b: 8d:f6:f3:d0:c9:20:22:4b:f6:f8:34:0c:5b:9c:4c: bf:71:57:93:52:20:91:0b:79:e6:00:85:5d:82:56: 2d:a8:a2:b8:71:81:fc:d8:83:71:6e:50:a0:66:83: 87:54:69:28:a8:7f:e2:fc:b1:e1:48:5d:18:ea:d6: 4e:02:03:ae:f2:61:cd:a0:ff:80:93:53:a1:ea:7d: db:34:de:31:88:dc:c5:62:e0:a7:23:70:e2:2f:f2: 95:f6:96:fc:4b:c3:cf:54:eb:17:a0:67:6b:fd:28: 51:71:94:b2:2a:2f:14:48:23:26:15:a7:e6:b2:9b: 3d:ca:87:0d:f1:e5:ec:e0:b7:8a:77:11:53:a8:4c: 04:3d:e5:1c:c6:8b:72:34:d1:d3:26:6e:d2:1a:a1: 6e:e7:63:9a:f8:f2:26:38:a1:87:25:95:2b:1a:4e: 5c:b6:4a:2d:48:16:27:ce:f3:a5:71:57:5e:35:b8: a8:5a:0f:d6:5b:80:07:e1:ed:cb:0f:db:66:2a:41: fa:7e:11:99:03:3a:95:6b:0a:4a:78:2d:4e:1f:b4: 51:01:58:72:e4:3a:c3:a3:4c:1e:67:db:52:28:f8: d8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2C:DB:87:FE:D4:55:CE:18:10:1C:54:D3:D2:73:1D:30:D7:82:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/3e90970f-dd28-30ac-83fd-9f25160e4d92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl X509v3 Authority Key Identifier: keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer sbgp-ipAddrBlock: critical IPv4: 104.143.2.0/23 104.238.229.0/24 208.52.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:8b:1c:99:c4:70:96:65:09:3b:50:0e:9f:23:80:f7:a7:df: 87:df:c0:5b:bd:6c:8c:6e:a0:c0:8b:c1:b2:f1:be:2c:ca:9f: ea:fd:51:16:9c:e0:71:06:d1:29:5b:00:80:02:0e:e0:40:14: 4a:26:22:d7:6d:df:5b:95:d2:85:9a:ae:8e:49:66:d4:7a:bd: a1:f0:5e:29:58:9d:ad:da:9a:43:09:04:7e:b8:c8:44:f0:91: ff:cf:d3:ce:d5:cc:11:2a:0a:d0:4a:03:50:a1:71:fa:e0:ca: 5c:7f:75:aa:c4:79:12:95:b2:bb:39:5b:35:bf:17:5a:98:4a: a7:57:28:21:ba:2b:96:4e:b4:bc:53:cf:08:02:96:00:1e:85: f1:18:7a:14:4c:90:b7:c5:c3:e3:b4:ed:a1:43:fd:32:fa:fa: 76:9e:eb:2c:e3:f2:91:01:3a:74:6f:b8:14:33:6b:ff:a0:6a: bd:28:7f:c0:44:df:88:41:ca:53:70:33:48:b2:7b:bb:8e:41: 14:2c:c8:e3:d1:d2:97:04:4e:74:0d:ce:84:71:df:38:7a:46: e1:ce:61:5d:4a:cb:ab:86:5d:ea:d0:0f:ea:cd:21:e9:94:0a: 72:2f:b2:40:63:61:76:d3:e3:12:63:99:77:7f:76:b3:c2:a7: cc:7f:e8:81 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEuy96WlTmfQ+yBCNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzFjMTllNTctYTZmNS00YzQ4LWI0ZGYtYjhkNDJkN2I3 NDgzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MTE3ZjczODUtMDE0Ni00NGIyLTlmMDQtN2M2MjU5N2RhMWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMI/mzHnWF36Wdh+ySPymqXQHd1DxvLt+069 MFuN9vPQySAiS/b4NAxbnEy/cVeTUiCRC3nmAIVdglYtqKK4cYH82INxblCgZoOH VGkoqH/i/LHhSF0Y6tZOAgOu8mHNoP+Ak1Oh6n3bNN4xiNzFYuCnI3DiL/KV9pb8 S8PPVOsXoGdr/ShRcZSyKi8USCMmFafmsps9yocN8eXs4LeKdxFTqEwEPeUcxoty NNHTJm7SGqFu52Oa+PImOKGHJZUrGk5ctkotSBYnzvOlcVdeNbioWg/WW4AH4e3L D9tmKkH6fhGZAzqVawpKeC1OH7RRAVhy5DrDo0weZ9tSKPjYvwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFP4s24f+1FXOGBAcVNPScx0w14LxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMx OWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0MmQ3Yjc0ODMvM2U5MDk3MGYtZGQyOC0z MGFjLTgzZmQtOWYyNTE2MGU0ZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzFjMTllNTctYTZmNS00YzQ4LWI0 ZGYtYjhkNDJkN2I3NDgzLzMxYzE5ZTU3LWE2ZjUtNGM0OC1iNGRmLWI4ZDQyZDdi NzQ4My5jcmwwHwYDVR0jBBgwFoAU/pJi5eJ2pwPKSRroNOSF02JXoFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMxOWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0 MmQ3Yjc0ODMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBaI8CAwQA aO7lAwQB0DSYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEGLHJnEcJZlCTtQDp8jgPen34ffwFu9bIxuoMCL wbLxvizKn+r9URac4HEG0SlbAIACDuBAFEomItdt31uV0oWaro5JZtR6vaHwXilY na3amkMJBH64yETwkf/P087VzBEqCtBKA1Chcfrgylx/darEeRKVsrs5WzW/F1qY SqdXKCG6K5ZOtLxTzwgClgAehfEYehRMkLfFw+O07aFD/TL6+nae6yzj8pEBOnRv uBQza/+gar0of8BE34hBylNwM0iye7uOQRQsyOPR0pcETnQNzoRx3zh6RuHOYV1K y6uGXerQD+rNIemUCnIvskBjYXbT4xJjmXd/drPCp8x/6IE= -----END CERTIFICATE-----Generated at Wed Nov 5 04:55:21 2025 by rpki-client