$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/97bc6d79-fa01-33f8-b9f5-8f8fd0f53fda.roa File: 97bc6d79-fa01-33f8-b9f5-8f8fd0f53fda.roa (raw, json) Hash identifier: In9nAur4FODBknq16aRcfI9EMt6j5lkNqzngS+HnL8c= Subject key identifier: CE:2D:E9:B8:9A:AD:C5:55:04:40:FD:CE:1C:32:8E:F5:D1:0B:75:01 Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584B110BFB737C258508FE7349C0 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/97bc6d79-fa01-33f8-b9f5-8f8fd0f53fda.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 395092 IP address blocks: 104.225.128.0/22 maxlen: 24 2607:a680:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0b:fb:73:7c:25:85:08:fe:73:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=fe595bbd-bab2-4c64-90d0-b48652af5a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a4:ba:e9:c1:96:97:56:16:23:a4:98:8d:73: 90:ee:0e:5a:ac:2a:bf:11:67:6b:a4:4e:3d:a2:64: 23:10:86:33:62:42:19:02:e4:6d:ab:b9:6e:9c:43: 31:84:ff:27:86:64:bb:0e:92:d6:5d:fe:db:0c:cb: 02:1d:59:c2:ac:36:48:07:8a:10:48:77:6a:26:2d: 9d:dd:eb:c4:07:38:50:45:b5:0f:c0:ed:9c:de:e8: 4a:23:04:69:13:00:8c:26:3b:c9:a8:08:ec:30:68: 42:38:5f:df:f2:9e:d6:84:71:b4:21:67:70:b8:eb: fa:10:0a:6b:dd:a0:34:87:ee:5b:b3:d9:c7:ff:8a: e3:0d:7d:47:07:d0:14:29:76:c7:fb:49:74:0d:0e: ec:8c:5d:c3:f8:b8:85:01:57:2a:62:8b:65:c4:86: 24:08:fc:02:bc:87:dd:5a:a1:5a:f3:80:17:d0:ef: 4b:54:c9:d7:d0:20:38:ae:ef:bd:ec:c3:c3:c2:62: a7:37:9d:41:9a:24:ae:4c:61:6c:1e:1e:33:9d:10: 21:ac:b6:f3:b7:26:eb:cb:63:0f:64:ca:b6:79:bf: 92:be:ec:9c:2f:1c:74:fd:f0:67:d0:10:f7:10:48: d2:d1:7e:e1:b3:1e:23:4d:27:b6:1d:88:57:73:28: 1a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2D:E9:B8:9A:AD:C5:55:04:40:FD:CE:1C:32:8E:F5:D1:0B:75:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/97bc6d79-fa01-33f8-b9f5-8f8fd0f53fda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 104.225.128.0/22 IPv6: 2607:a680:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:35:a3:f7:bf:de:cc:d6:ba:58:1e:88:a5:3f:44:3b:0c:c7: f6:ec:00:77:61:dc:90:5e:3e:b4:7d:44:ed:1f:72:36:96:d5: 48:60:82:8b:a2:3b:ee:0e:66:a7:06:df:18:0e:90:28:b3:c2: 66:ac:c3:48:2f:19:8b:16:92:14:43:9e:65:e6:88:e1:8e:84: 4b:b7:6b:68:18:6c:49:6b:df:8d:88:e9:64:42:b3:d6:c8:6f: f2:92:2e:21:41:44:14:21:f1:ab:3b:e9:4d:e2:d9:db:c8:b9: 3b:59:ef:f9:2c:35:9c:c8:36:28:a0:7b:e6:2d:1d:88:cc:6f: 81:4c:96:90:6e:54:23:a3:59:c2:11:9c:0e:df:14:47:7c:e1: b1:81:78:c6:0a:08:70:78:42:74:5a:63:6c:64:78:c2:bd:6c: ed:da:3b:ba:26:88:2e:71:b7:97:eb:de:67:bc:64:e1:f1:1a: 3b:56:5b:df:c5:be:b2:f6:6b:bf:8a:17:fa:58:4f:65:fe:96: 1b:30:da:fc:d7:1e:28:50:8d:68:64:56:06:b3:d4:9d:a2:f2: 51:3e:7d:44:4b:11:5b:51:9a:5f:5d:b4:69:e8:41:22:24:fa: 38:f4:6e:82:c5:d7:fe:65:4d:e8:86:48:8a:6c:68:4a:9c:aa: e6:d4:90:7c -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEsRC/tzfCWFCP5zScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZmU1OTViYmQtYmFiMi00YzY0LTkwZDAtYjQ4NjUyYWY1YTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqS66cGWl1YWI6SYjXOQ7g5arCq/EWdrpE49 omQjEIYzYkIZAuRtq7lunEMxhP8nhmS7DpLWXf7bDMsCHVnCrDZIB4oQSHdqJi2d 3evEBzhQRbUPwO2c3uhKIwRpEwCMJjvJqAjsMGhCOF/f8p7WhHG0IWdwuOv6EApr 3aA0h+5bs9nH/4rjDX1HB9AUKXbH+0l0DQ7sjF3D+LiFAVcqYotlxIYkCPwCvIfd WqFa84AX0O9LVMnX0CA4ru+97MPDwmKnN51BmiSuTGFsHh4znRAhrLbztybry2MP ZMq2eb+SvuycLxx0/fBn0BD3EEjS0X7hsx4jTSe2HYhXcygaMQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFM4t6biarcVVBED9zhwyjvXRC3UBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvOTdiYzZkNzktZmEwMS0z M2Y4LWI5ZjUtOGY4ZmQwZjUzZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCaOGAMA8E AgACMAkDBwAmB6aAAAQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOzWj97/ezNa6WB6IpT9EOwzH9uwAd2Hc kF4+tH1E7R9yNpbVSGCCi6I77g5mpwbfGA6QKLPCZqzDSC8ZixaSFEOeZeaI4Y6E S7draBhsSWvfjYjpZEKz1shv8pIuIUFEFCHxqzvpTeLZ28i5O1nv+Sw1nMg2KKB7 5i0diMxvgUyWkG5UI6NZwhGcDt8UR3zhsYF4xgoIcHhCdFpjbGR4wr1s7do7uiaI LnG3l+veZ7xk4fEaO1Zb38W+svZrv4oX+lhPZf6WGzDa/NceKFCNaGRWBrPUnaLy UT59REsRW1GaX120aehBIiT6OPRugsXX/mVN6IZIimxoSpyq5tSQfA== -----END CERTIFICATE-----Generated at Wed Nov 5 06:05:17 2025 by rpki-client