$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa File: 871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa (raw, json) Hash identifier: OQSJHxomJc5ZjaXr8egJUtyP4t0vkTHQOkKCLl79oek= Subject key identifier: 2C:9A:07:B6:05:6B:0A:C4:0F:80:54:4F:D0:87:A6:3D:A1:95:19:C5 Certificate issuer: /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Certificate serial: 010D0C9F4328584BA39D0BBA306B293C49CFD740 Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 41378 IP address blocks: 104.249.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:0b:ba:30:6b:29:3c:49:cf:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=bbb40e75-0822-487d-a258-60ae5db76abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cc:62:ea:40:22:de:f3:af:fd:a5:6b:c0:07: 78:08:9c:7b:73:94:29:81:8f:17:bb:33:5b:1a:cb: ac:9d:cc:2c:45:1a:a2:f0:8e:c7:07:11:24:14:a2: 59:dc:e8:a8:a1:81:77:aa:6a:9f:63:20:27:02:65: 61:a1:40:9d:ae:03:e5:53:c3:2a:57:c1:f8:b5:8d: 14:2c:b4:1a:86:89:0b:1e:ae:f2:cd:77:d6:29:bb: da:e2:dd:f7:e2:39:15:e7:23:33:6b:c2:79:38:de: 6d:ef:e4:ac:4d:c8:97:0b:c6:55:83:fa:7d:cd:d1: 53:3c:d1:87:24:f7:c5:16:4a:36:0b:ef:25:32:1c: 6a:87:3a:64:93:bd:0c:34:94:b2:2d:f9:8a:b5:83: 4c:9c:e0:8d:13:aa:3d:40:45:37:0f:e6:f0:ee:46: 82:98:62:16:59:2e:7d:43:e5:79:1b:77:ce:3b:e7: d3:41:10:ce:14:e3:43:2e:77:d6:71:e7:f7:6e:7c: a3:fa:30:95:c8:06:7b:18:8e:2d:49:1d:1e:a7:44: 1c:d0:b9:e2:6c:38:73:f4:7b:01:7b:ab:a5:11:c8: 7f:4f:99:70:df:d5:d8:d3:8b:03:84:76:68:84:69: 60:df:66:da:d7:b8:88:42:90:04:d0:3a:1a:f2:3d: eb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9A:07:B6:05:6B:0A:C4:0F:80:54:4F:D0:87:A6:3D:A1:95:19:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl X509v3 Authority Key Identifier: keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer sbgp-ipAddrBlock: critical IPv4: 104.249.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f3:d1:c7:c4:24:32:94:7e:1d:65:d5:6a:1c:22:38:f9:14: 72:f0:96:83:37:e7:28:b9:02:08:2c:2e:5f:c8:e4:14:10:d2: 4b:8a:40:b7:56:73:00:fc:66:12:42:ed:23:17:14:6b:2a:7c: 7b:a0:7e:c0:3d:74:cf:f6:1d:13:c8:47:53:ca:bc:df:a3:b4: 94:82:d3:ca:cb:82:b1:c7:04:04:70:fe:78:f5:2c:46:e4:d1: 1f:b9:e5:6e:85:3b:19:a4:1c:e4:84:08:05:7c:1b:b4:9b:a3: 76:ef:a2:c5:00:58:f4:a3:d4:ae:33:75:51:2e:92:8a:f6:c1: 7d:fa:0a:73:35:49:d2:21:55:8d:e1:30:36:17:85:c3:8b:d9: 4d:7a:31:c0:ce:fe:70:1d:38:1a:a4:10:a1:72:33:8d:5c:41: b7:09:0a:4e:8f:16:54:b4:9b:ae:98:a1:54:fb:e8:82:04:b1: fd:18:34:de:60:f3:32:a4:48:33:f6:81:58:44:70:5b:dc:b6: 74:3d:3b:f5:c0:10:41:87:15:7b:9f:60:62:0a:60:94:7a:69: f1:80:dd:3b:30:04:36:26:0c:0b:81:9e:cf:54:84:ef:50:0c: 6f:7e:1b:ec:1b:87:37:83:38:d5:6a:c9:68:50:e4:81:e9:4d: eb:f6:e0:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQu6MGspPEnP10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3ZmY1Y2MtZThhZS00MGY4LWJjYjktMzkwODEwZWI4 MjFlMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YmJiNDBlNzUtMDgyMi00ODdkLWEyNTgtNjBhZTVkYjc2YWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cxi6kAi3vOv/aVrwAd4CJx7c5QpgY8XuzNb GsusncwsRRqi8I7HBxEkFKJZ3OiooYF3qmqfYyAnAmVhoUCdrgPlU8MqV8H4tY0U LLQahokLHq7yzXfWKbva4t334jkV5yMza8J5ON5t7+SsTciXC8ZVg/p9zdFTPNGH JPfFFko2C+8lMhxqhzpkk70MNJSyLfmKtYNMnOCNE6o9QEU3D+bw7kaCmGIWWS59 Q+V5G3fOO+fTQRDOFONDLnfWcef3bnyj+jCVyAZ7GI4tSR0ep0Qc0LnibDhz9HsB e6ulEch/T5lw39XY04sDhHZohGlg32ba17iIQpAE0Doa8j3rFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyaB7YFawrED4BUT9CHpj2hlRnFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdm ZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4MTBlYjgyMWUvODcxNjY0ZGEtNGM0Yy0z ZDlkLTljZWUtYWJkZTNmNWE5ZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWE3ZmY1Y2MtZThhZS00MGY4LWJj YjktMzkwODEwZWI4MjFlLzFhN2ZmNWNjLWU4YWUtNDBmOC1iY2I5LTM5MDgxMGVi ODIxZS5jcmwwHwYDVR0jBBgwFoAUjcqIVSKcOh2gFz9eNrHSpw0vYCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdmZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4 MTBlYjgyMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXz0cfEJDKUfh1l1WocIjj5FHLwloM35yi5AggsLl/I5BQQ0kuKQLdW cwD8ZhJC7SMXFGsqfHugfsA9dM/2HRPIR1PKvN+jtJSC08rLgrHHBARw/nj1LEbk 0R+55W6FOxmkHOSECAV8G7Sbo3bvosUAWPSj1K4zdVEukor2wX36CnM1SdIhVY3h MDYXhcOL2U16McDO/nAdOBqkEKFyM41cQbcJCk6PFlS0m66YoVT76IIEsf0YNN5g 8zKkSDP2gVhEcFvctnQ9O/XAEEGHFXufYGIKYJR6afGA3TswBDYmDAuBns9UhO9Q DG9+G+wbhzeDONVqyWhQ5IHpTev24Gs= -----END CERTIFICATE-----Generated at Wed Nov 5 04:31:59 2025 by rpki-client