$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/2acba3df-9f0a-3582-b2f6-62a24560f8a1.roa File: 2acba3df-9f0a-3582-b2f6-62a24560f8a1.roa (raw, json) Hash identifier: wuvAVq4W8YdsebDBkRUI5597xT+kXW0yxMyqCzz9uIQ= Subject key identifier: 19:EC:79:1D:F9:0C:16:D7:75:10:FC:7F:4F:DC:CD:07:C3:F2:2C:06 Certificate issuer: /CN=8fe40320-74dc-4444-a6ef-bd88d604a876 Certificate serial: 010D0C9F4328584B9E07950005F4B646E8287B00 Authority key identifier: 06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/2acba3df-9f0a-3582-b2f6-62a24560f8a1.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 33387 IP address blocks: 104.224.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:95:00:05:f4:b6:46:e8:28:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fe40320-74dc-4444-a6ef-bd88d604a876 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=e8376a0f-9d91-4c3b-98f5-cb561f9aae71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8c:6d:77:38:ab:28:58:24:79:29:b2:83:58: 6d:2b:e0:e6:bd:aa:23:72:b7:45:1b:c0:1a:3a:d9: 85:6c:34:fd:78:6e:e1:47:f7:a3:fc:5d:0d:bc:31: a5:92:d4:64:10:be:be:95:30:57:6d:c8:7c:96:04: aa:f7:92:58:a2:bc:a8:e4:71:f7:71:95:fb:e7:34: f0:ba:a1:36:22:35:d6:09:14:2a:b4:23:25:61:6b: 58:e0:c1:87:c1:31:9f:a3:a8:84:ce:36:4a:f0:7b: 24:0f:1d:82:eb:36:bd:4b:c6:4e:55:c9:d0:38:3a: 5d:d5:05:b6:69:0e:65:ce:8b:55:f4:69:37:f5:67: 06:83:27:ff:09:a7:d1:b9:7e:9a:d3:ef:b1:74:0e: 23:c4:91:40:f0:6f:e2:78:e6:7a:ab:c9:b0:49:5e: 1d:a1:a7:ed:2f:32:90:ec:0f:db:36:07:c6:f3:dd: d1:14:f6:e6:59:73:27:e2:66:13:07:9c:ec:f0:79: a6:31:44:6f:49:ef:4c:8d:44:3b:30:33:81:6c:f5: 0e:cc:4b:5b:a9:cd:c8:ca:9f:aa:05:35:e0:d6:8c: 14:a8:ff:b0:a8:49:61:98:cc:a4:fd:82:2d:3b:12: ee:9f:25:48:7f:c4:6d:82:f6:e1:9b:3c:c6:81:d8: c6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EC:79:1D:F9:0C:16:D7:75:10:FC:7F:4F:DC:CD:07:C3:F2:2C:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/2acba3df-9f0a-3582-b2f6-62a24560f8a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl X509v3 Authority Key Identifier: keyid:06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer sbgp-ipAddrBlock: critical IPv4: 104.224.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:a3:48:24:43:92:7b:67:c9:e5:a5:5d:42:eb:1c:8f:7c:d3: b6:da:b8:1a:45:20:bd:07:b3:68:af:f7:a8:3d:4f:01:71:c0: 94:38:c5:80:7f:e6:75:df:3f:41:39:12:42:46:35:4b:fd:96: 8c:2c:79:02:f2:41:1a:b1:02:d7:56:cf:c3:c0:cd:85:bd:fa: ef:44:12:83:30:fd:0b:05:a8:07:50:32:a1:9b:b4:d3:a5:a4: 56:85:0a:ee:5e:c7:69:b7:d2:fc:f7:63:10:c7:0b:54:88:6e: ea:a4:85:3f:df:0f:ef:42:45:cb:3d:96:18:e8:6f:62:ab:65: 7c:42:47:ea:2a:89:4e:d0:7a:66:b8:19:2c:02:74:2f:25:55: 42:ed:4e:5e:9b:90:da:f5:4b:d0:6b:04:61:f3:7e:57:54:1e: 2f:e3:e0:72:ae:4b:9e:e2:3d:cc:d5:8c:02:ce:db:5b:53:b1: fc:99:c1:5c:8b:c2:23:3a:b3:6c:36:28:8a:91:56:d5:22:25: 26:f7:0c:50:17:88:35:dd:87:57:71:91:88:d6:e8:60:96:36: 66:ec:31:aa:12:5e:ef:99:78:7f:28:d1:b0:d8:a7:90:45:33: 54:51:43:18:75:ab:3f:b0:71:ae:40:d3:91:47:20:3b:9e:1d: 52:e0:63:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB5UABfS2RugoewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZlNDAzMjAtNzRkYy00NDQ0LWE2ZWYtYmQ4OGQ2MDRh ODc2MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZTgzNzZhMGYtOWQ5MS00YzNiLTk4ZjUtY2I1NjFmOWFhZTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoxtdzirKFgkeSmyg1htK+DmvaojcrdFG8Aa OtmFbDT9eG7hR/ej/F0NvDGlktRkEL6+lTBXbch8lgSq95JYoryo5HH3cZX75zTw uqE2IjXWCRQqtCMlYWtY4MGHwTGfo6iEzjZK8HskDx2C6za9S8ZOVcnQODpd1QW2 aQ5lzotV9Gk39WcGgyf/CafRuX6a0++xdA4jxJFA8G/ieOZ6q8mwSV4doaftLzKQ 7A/bNgfG893RFPbmWXMn4mYTB5zs8HmmMURvSe9MjUQ7MDOBbPUOzEtbqc3Iyp+q BTXg1owUqP+wqElhmMyk/YItOxLunyVIf8RtgvbhmzzGgdjGxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnseR35DBbXdRD8f0/czQfD8iwGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZmU0 MDMyMC03NGRjLTQ0NDQtYTZlZi1iZDg4ZDYwNGE4NzYvMmFjYmEzZGYtOWYwYS0z NTgyLWIyZjYtNjJhMjQ1NjBmOGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGZlNDAzMjAtNzRkYy00NDQ0LWE2 ZWYtYmQ4OGQ2MDRhODc2LzhmZTQwMzIwLTc0ZGMtNDQ0NC1hNmVmLWJkODhkNjA0 YTg3Ni5jcmwwHwYDVR0jBBgwFoAUBpspmYh8dDlJyy1jHEtRwUvXMnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZmU0MDMyMC03NGRjLTQ0NDQtYTZlZi1iZDg4 ZDYwNGE4NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOANMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6jSCRDkntnyeWlXULrHI9807bauBpFIL0Hs2iv96g9TwFxwJQ4xYB/ 5nXfP0E5EkJGNUv9lowseQLyQRqxAtdWz8PAzYW9+u9EEoMw/QsFqAdQMqGbtNOl pFaFCu5ex2m30vz3YxDHC1SIbuqkhT/fD+9CRcs9lhjob2KrZXxCR+oqiU7Qema4 GSwCdC8lVULtTl6bkNr1S9BrBGHzfldUHi/j4HKuS57iPczVjALO21tTsfyZwVyL wiM6s2w2KIqRVtUiJSb3DFAXiDXdh1dxkYjW6GCWNmbsMaoSXu+ZeH8o0bDYp5BF M1RRQxh1qz+wca5A05FHIDueHVLgYxU= -----END CERTIFICATE-----Generated at Wed Nov 5 07:13:41 2025 by rpki-client