$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/a9de4f19-b042-31bc-b04a-dbfd3f28c3e7.roa File: a9de4f19-b042-31bc-b04a-dbfd3f28c3e7.roa (raw, json) Hash identifier: 6qtqDGYQbmd6HIphBUci5egtzTigBodEy7h3Xg0x6MQ= Subject key identifier: 98:5C:A4:2D:4E:52:51:3A:93:F8:EF:6B:A4:E8:AA:2E:AB:65:21:81 Certificate issuer: /CN=954e2959-b160-4ffa-86b4-aaa94863154c Certificate serial: 010D0C9F4328584B9E07A02B122B8766B7063080 Authority key identifier: 7A:0D:9D:66:5A:CD:4F:54:DB:65:04:14:29:CB:05:0D:D9:7D:51:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/a9de4f19-b042-31bc-b04a-dbfd3f28c3e7.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 3801 IP address blocks: 104.156.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:a0:2b:12:2b:87:66:b7:06:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954e2959-b160-4ffa-86b4-aaa94863154c Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=7261f48c-dd94-4024-9d3f-7de02051b81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:dc:75:d3:07:62:87:2c:41:d3:6a:dd:df:ec: 66:59:5a:45:18:b7:f9:91:fe:81:8d:0e:6c:21:80: b4:32:11:88:fa:a4:3b:8b:54:90:8d:22:e3:c6:51: 32:08:e7:f7:25:19:0a:68:e8:54:69:05:9f:84:da: ee:1a:6a:c0:90:62:68:a0:ca:58:a6:83:a5:43:3a: b0:92:02:29:ee:66:0b:41:a6:81:db:70:7f:7a:73: 42:6f:e7:02:16:7b:12:f3:7e:dc:6a:f2:81:ee:b5: 3f:7e:7c:3d:c3:0e:bb:df:58:8e:0e:4b:0d:66:23: 45:57:42:ba:d5:64:93:bc:d6:81:30:58:a9:c4:9b: 4c:21:d4:f5:35:82:b3:e8:62:15:75:31:27:6d:8c: 3d:7e:b7:83:b7:1f:a1:a2:bd:95:ed:cf:e1:cf:75: 63:89:6c:12:c4:15:f8:a0:f3:05:9e:d1:c1:e3:6d: 4e:32:23:f3:78:07:67:b6:e1:be:f1:22:17:a7:4d: 18:59:e1:d9:a0:49:ea:fd:52:30:11:5e:69:08:60: f2:ae:18:ff:a3:f9:f5:fe:1f:92:79:c6:7a:d1:95: 1f:33:04:53:f8:e8:cc:73:63:3f:9d:86:f0:5f:70: 53:3e:63:f8:f3:d2:ba:f9:83:29:54:f5:dc:47:e1: 53:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5C:A4:2D:4E:52:51:3A:93:F8:EF:6B:A4:E8:AA:2E:AB:65:21:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/a9de4f19-b042-31bc-b04a-dbfd3f28c3e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.crl X509v3 Authority Key Identifier: keyid:7A:0D:9D:66:5A:CD:4F:54:DB:65:04:14:29:CB:05:0D:D9:7D:51:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer sbgp-ipAddrBlock: critical IPv4: 104.156.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:fb:c1:fe:4d:e0:55:1b:f0:84:f9:25:f7:9e:34:45:d6:f2: 0b:11:08:57:a0:89:68:e7:bb:7e:14:1e:6e:8c:c8:28:4c:14: 31:34:e8:8e:b4:dc:69:b3:72:8c:6d:20:57:39:59:9f:f8:d4: 8c:b6:4b:4a:83:a9:3d:d8:9d:69:ae:01:3d:cc:ce:25:0c:b7: 14:ca:a4:3d:59:60:e8:25:b2:bc:0d:e8:44:35:df:ac:5c:5e: 1d:dd:01:05:4f:e3:09:e5:f6:22:c8:9f:3a:b8:83:e3:4a:96: c0:97:40:ba:86:37:c3:99:ab:d6:3b:8c:db:b2:b1:de:02:a7: c0:a7:64:22:fd:c5:cf:fc:91:19:57:ad:8f:44:ad:a3:55:3d: 3a:05:e0:6b:5f:ae:e1:2c:31:4b:56:c9:9b:45:9b:57:fe:c0: bb:76:35:7b:53:aa:e6:78:ec:82:18:7b:d7:33:d5:97:cd:3f: 5e:f2:76:e3:7f:b2:a3:29:90:2d:d6:93:9a:11:65:33:8e:c3: 25:41:92:8d:29:c3:92:32:6b:00:cf:e3:78:8e:ad:db:83:03: 59:a2:c9:ba:24:96:fc:6f:ae:c5:fa:be:ed:be:52:b4:ea:16: 6c:22:a9:e3:87:f2:7b:c3:bb:ff:24:ab:c8:15:26:1a:df:1e: 5e:cd:c7:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB6ArEiuHZrcGMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU0ZTI5NTktYjE2MC00ZmZhLTg2YjQtYWFhOTQ4NjMx NTRjMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NzI2MWY0OGMtZGQ5NC00MDI0LTlkM2YtN2RlMDIwNTFiODFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Nx10wdihyxB02rd3+xmWVpFGLf5kf6BjQ5s IYC0MhGI+qQ7i1SQjSLjxlEyCOf3JRkKaOhUaQWfhNruGmrAkGJooMpYpoOlQzqw kgIp7mYLQaaB23B/enNCb+cCFnsS837cavKB7rU/fnw9ww6731iODksNZiNFV0K6 1WSTvNaBMFipxJtMIdT1NYKz6GIVdTEnbYw9freDtx+hor2V7c/hz3VjiWwSxBX4 oPMFntHB421OMiPzeAdntuG+8SIXp00YWeHZoEnq/VIwEV5pCGDyrhj/o/n1/h+S ecZ60ZUfMwRT+OjMc2M/nYbwX3BTPmP489K6+YMpVPXcR+FTBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhcpC1OUlE6k/jva6Toqi6rZSGBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NTRl Mjk1OS1iMTYwLTRmZmEtODZiNC1hYWE5NDg2MzE1NGMvYTlkZTRmMTktYjA0Mi0z MWJjLWIwNGEtZGJmZDNmMjhjM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTU0ZTI5NTktYjE2MC00ZmZhLTg2 YjQtYWFhOTQ4NjMxNTRjLzk1NGUyOTU5LWIxNjAtNGZmYS04NmI0LWFhYTk0ODYz MTU0Yy5jcmwwHwYDVR0jBBgwFoAUeg2dZlrNT1TbZQQUKcsFDdl9UbwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NTRlMjk1OS1iMTYwLTRmZmEtODZiNC1hYWE5 NDg2MzE1NGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALf7wf5N4FUb8IT5JfeeNEXW8gsRCFegiWjnu34UHm6MyChMFDE06I60 3GmzcoxtIFc5WZ/41Iy2S0qDqT3YnWmuAT3MziUMtxTKpD1ZYOglsrwN6EQ136xc Xh3dAQVP4wnl9iLInzq4g+NKlsCXQLqGN8OZq9Y7jNuysd4Cp8CnZCL9xc/8kRlX rY9EraNVPToF4GtfruEsMUtWyZtFm1f+wLt2NXtTquZ47IIYe9cz1ZfNP17yduN/ sqMpkC3Wk5oRZTOOwyVBko0pw5IyawDP43iOrduDA1miyboklvxvrsX6vu2+UrTq FmwiqeOH8nvDu/8kq8gVJhrfHl7Nxxw= -----END CERTIFICATE-----Generated at Wed Nov 5 08:49:55 2025 by rpki-client