$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa File: 8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa (raw, json) Hash identifier: wf6HdqyMZrA4eEU2yVdi29WKfz0Mw5uo4JJf41dnMRE= Subject key identifier: 3B:F0:A6:57:B8:CC:AC:88:4B:EE:AC:F0:F1:9F:00:D9:56:EE:9C:B3 Certificate issuer: /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Certificate serial: 010D0C9F4328584BA0D2479ABA11CBD12EAE0080 Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 1239 IP address blocks: 104.171.160.0/20 maxlen: 24 162.250.96.0/21 maxlen: 24 162.254.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:47:9a:ba:11:cb:d1:2e:ae:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=c81cedec-4216-4ecc-956a-291f9c24eb3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b5:d1:b2:fe:d8:8a:28:85:6f:18:6a:55:bf: 96:e6:40:b2:0d:b3:25:e0:91:31:50:36:a5:07:5a: 48:6e:a1:8b:92:c9:ec:4a:18:4d:d8:d8:1e:9a:ed: d4:f8:7d:1b:33:f2:59:64:4e:95:66:39:19:0c:74: 80:39:f8:53:d3:d4:4c:8d:15:b7:ff:1e:ed:16:a9: b8:be:69:07:43:d3:74:33:28:b4:71:b5:7e:e7:62: 4e:09:ce:a7:74:30:3e:6b:16:20:27:8e:01:b1:c1: 30:b7:50:ed:7a:ca:43:3c:0c:aa:4c:fb:fa:a6:c5: 80:71:e3:8a:8e:33:e4:10:b4:67:e0:78:23:b4:50: e3:e3:d7:4b:4b:5e:ab:59:b2:dc:dd:d5:46:08:94: 89:8c:96:a2:17:88:e1:08:3b:02:81:13:47:ff:c8: 3a:91:6f:c3:33:01:ad:ba:8c:6b:30:13:85:b4:a0: 8e:1d:c9:38:a2:99:ad:07:bb:95:11:8b:09:98:a8: 28:2c:f9:f8:87:a2:e1:70:f6:9b:a6:80:57:6e:91: 5c:9a:be:a7:07:c1:75:b9:51:cc:f2:c8:c6:db:72: 5c:93:26:f8:0f:56:7e:d6:69:2a:dc:eb:65:d1:a6: 6e:5d:8c:35:ce:0d:17:34:1a:51:9e:c5:d8:57:a2: 60:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F0:A6:57:B8:CC:AC:88:4B:EE:AC:F0:F1:9F:00:D9:56:EE:9C:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl X509v3 Authority Key Identifier: keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer sbgp-ipAddrBlock: critical IPv4: 104.171.160.0/20 162.250.96.0/21 162.254.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:cb:52:cc:97:c3:fa:c4:ab:d3:cb:87:26:a3:b7:62:89:f5: 1c:00:9b:26:cd:3d:5a:ee:9d:2a:78:db:21:2a:fa:95:8b:56: f1:b8:5d:be:b6:61:64:4b:7f:60:ae:1d:d4:37:b8:29:3e:a3: 3a:88:73:ca:25:bc:8f:fc:12:2e:75:1f:a3:e4:0b:cc:3c:68: 48:14:a9:61:7b:24:48:e2:b7:08:c0:14:1f:21:44:6e:92:0b: b0:cd:67:06:2d:54:91:88:66:39:78:1e:86:00:05:15:e9:cb: 6c:df:7a:1a:05:ab:a4:72:ad:61:d1:09:6a:2e:fd:70:e7:d7: 47:f1:8d:dc:3e:c3:4f:57:c7:3e:3b:c7:b4:20:b3:72:77:39: 44:ca:b0:cc:df:39:ea:d2:aa:a6:e7:ca:07:cf:36:7e:88:f9: 8b:05:9b:4c:27:11:e9:b5:80:74:ae:1e:e4:78:07:af:3a:dd: f4:d4:90:bd:ac:ce:73:c7:52:2b:12:2a:2f:43:e6:8c:06:a0: 5e:a8:f9:87:c9:df:11:a6:f4:6c:51:6a:da:c5:e9:b8:0d:cf: fa:1b:92:21:00:4f:8e:6d:c6:59:34:87:56:52:03:8d:41:b4: 92:f6:de:45:38:2b:e6:78:63:f0:40:79:cd:6f:8a:fa:85:c4: b0:03:78:2e -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEug0keauhHL0S6uAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVlMmU0YjAtNmY5YS00M2M3LWI2YmUtNmVmZjQ4ODc2 NjNlMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YzgxY2VkZWMtNDIxNi00ZWNjLTk1NmEtMjkxZjljMjRlYjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7XRsv7YiiiFbxhqVb+W5kCyDbMl4JExUDal B1pIbqGLksnsShhN2Ngemu3U+H0bM/JZZE6VZjkZDHSAOfhT09RMjRW3/x7tFqm4 vmkHQ9N0Myi0cbV+52JOCc6ndDA+axYgJ44BscEwt1DtespDPAyqTPv6psWAceOK jjPkELRn4HgjtFDj49dLS16rWbLc3dVGCJSJjJaiF4jhCDsCgRNH/8g6kW/DMwGt uoxrMBOFtKCOHck4opmtB7uVEYsJmKgoLPn4h6LhcPabpoBXbpFcmr6nB8F1uVHM 8sjG23Jckyb4D1Z+1mkq3Otl0aZuXYw1zg0XNBpRnsXYV6JgHQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFDvwple4zKyIS+6s8PGfANlW7pyzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUy ZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZmNDg4NzY2M2UvOGE5MzBkNWMtMTdmZi0z YTdlLWJjNmEtMDA4MWVhYTU1NzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWVlMmU0YjAtNmY5YS00M2M3LWI2 YmUtNmVmZjQ4ODc2NjNlLzVlZTJlNGIwLTZmOWEtNDNjNy1iNmJlLTZlZmY0ODg3 NjYzZS5jcmwwHwYDVR0jBBgwFoAUDhljVY9E40F4e1TAZyFIXjijozAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUyZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZm NDg4NzY2M2UuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEaKugAwQD ovpgAwQDov4AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAI3LUsyXw/rEq9PLhyajt2KJ9RwAmybNPVrunSp4 2yEq+pWLVvG4Xb62YWRLf2CuHdQ3uCk+ozqIc8olvI/8Ei51H6PkC8w8aEgUqWF7 JEjitwjAFB8hRG6SC7DNZwYtVJGIZjl4HoYABRXpy2zfehoFq6RyrWHRCWou/XDn 10fxjdw+w09Xxz47x7Qgs3J3OUTKsMzfOerSqqbnygfPNn6I+YsFm0wnEem1gHSu HuR4B6863fTUkL2sznPHUisSKi9D5owGoF6o+YfJ3xGm9GxRatrF6bgNz/obkiEA T45txlk0h1ZSA41BtJL23kU4K+Z4Y/BAec1vivqFxLADeC4= -----END CERTIFICATE-----Generated at Tue Nov 4 22:03:15 2025 by rpki-client