$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/237a50c0-d85e-3ba2-8503-4ea809e4a78b.roa File: 237a50c0-d85e-3ba2-8503-4ea809e4a78b.roa (raw, json) Hash identifier: 12C+JtUvi+X1c7D9bJ5zd/FgSJg7fvz4okbdYZptu3E= Subject key identifier: 4D:C8:BF:63:8B:F5:F4:81:6C:82:CD:CD:C4:E5:DC:6A:9B:DE:C3:5B Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584B95A78C513F660AABB0974600 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/237a50c0-d85e-3ba2-8503-4ea809e4a78b.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 25649 IP address blocks: 104.153.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:8c:51:3f:66:0a:ab:b0:97:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=d027ca2b-d41d-4898-8c3c-17c19a27bea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:14:98:31:8c:28:32:99:79:2f:6d:74:b4:44: d6:33:28:94:d7:45:f5:13:11:e6:8a:56:8c:64:6f: ca:5e:f8:38:21:8e:75:fb:d2:10:f4:e7:2e:d3:32: 90:87:88:6b:df:97:92:ef:4e:0d:7e:50:9c:2f:0b: 31:c2:dc:84:53:9d:9f:7c:56:60:28:39:11:ee:f1: 9b:97:09:67:1e:c2:96:40:24:05:4e:46:0f:27:93: 30:f5:b0:f2:1f:f0:7b:cf:2e:6d:b5:9c:f5:74:94: 42:51:1c:31:ee:bc:a0:ee:0f:7a:26:19:8d:08:fc: 4b:ed:f0:f3:61:71:26:74:cf:8c:5a:34:a6:98:01: 57:ff:45:ee:c1:82:64:b0:1c:35:8a:86:6f:97:76: ab:ff:e0:e9:b8:29:2b:c1:7a:c6:24:35:ea:b1:ae: 0c:95:b3:94:a2:55:e3:55:64:53:6f:11:4c:1e:84: e8:87:d3:f1:e1:1d:ae:ae:24:5f:3d:2e:67:60:fc: fd:e0:d0:c0:9c:17:26:11:ba:bb:a1:70:00:fe:1d: 6f:78:d3:d1:ab:aa:72:56:2c:e4:c2:b9:d7:3b:27: 01:bf:b6:3a:c4:7f:42:85:a2:3a:93:b5:14:b9:6c: ae:fe:01:b9:40:b3:9e:03:62:2b:93:49:99:34:6b: dd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C8:BF:63:8B:F5:F4:81:6C:82:CD:CD:C4:E5:DC:6A:9B:DE:C3:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/237a50c0-d85e-3ba2-8503-4ea809e4a78b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 104.153.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:38:ac:d1:76:0d:96:5b:6a:45:7a:b1:27:77:0e:ac:8e:2a: 60:ae:f3:41:af:a2:53:9b:94:bb:be:ca:a5:48:d9:f5:62:f8: 8b:81:25:7e:54:d7:c7:fa:c9:97:6c:bd:97:db:66:9c:9c:e4: b9:c8:8a:03:bf:a4:7e:2b:22:43:42:5e:bc:ec:0e:04:72:26: f2:a9:73:4d:50:80:a7:f0:4c:d1:fe:cc:03:94:f3:5e:8d:94: f1:1f:56:1e:c9:5e:b2:5a:6a:6d:f9:5a:7d:93:be:ef:85:73: a4:74:39:67:45:44:ef:c9:3c:e8:a6:85:e2:a2:f8:6d:08:82: e0:33:24:3f:26:f6:73:98:74:3a:d5:e2:3d:0b:7d:4d:52:ad: be:6f:1b:7f:ac:7e:74:14:c3:3a:3b:5b:bd:69:d2:af:3e:ab: 31:f6:7d:21:6d:95:75:bd:5f:f8:09:6b:c3:0d:e4:8c:26:a0: 15:70:65:cc:3b:a2:9b:0b:00:ec:29:2a:d7:47:d5:8d:f9:4c: 68:6b:a1:3d:38:9a:f2:fe:d1:98:2e:43:9d:bb:15:4a:e7:33: 71:c9:d8:88:65:16:5b:a5:38:3d:2a:cb:4b:e7:53:f9:d4:d7: cf:6f:88:52:90:17:46:e6:bf:96:dc:27:ac:a2:18:1d:c9:21: 01:cb:8b:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp4xRP2YKq7CXRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZDAyN2NhMmItZDQxZC00ODk4LThjM2MtMTdjMTlhMjdiZWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihSYMYwoMpl5L210tETWMyiU10X1ExHmilaM ZG/KXvg4IY51+9IQ9Ocu0zKQh4hr35eS704NflCcLwsxwtyEU52ffFZgKDkR7vGb lwlnHsKWQCQFTkYPJ5Mw9bDyH/B7zy5ttZz1dJRCURwx7ryg7g96JhmNCPxL7fDz YXEmdM+MWjSmmAFX/0XuwYJksBw1ioZvl3ar/+DpuCkrwXrGJDXqsa4MlbOUolXj VWRTbxFMHoToh9Px4R2uriRfPS5nYPz94NDAnBcmEbq7oXAA/h1veNPRq6pyVizk wrnXOycBv7Y6xH9ChaI6k7UUuWyu/gG5QLOeA2Irk0mZNGvdawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3Iv2OL9fSBbILNzcTl3Gqb3sNbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvMjM3YTUwYzAtZDg1ZS0z YmEyLTg1MDMtNGVhODA5ZTRhNzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABY4rNF2DZZbakV6sSd3DqyOKmCu80GvolOblLu+yqVI2fVi+IuBJX5U 18f6yZdsvZfbZpyc5LnIigO/pH4rIkNCXrzsDgRyJvKpc01QgKfwTNH+zAOU816N lPEfVh7JXrJaam35Wn2Tvu+Fc6R0OWdFRO/JPOimheKi+G0IguAzJD8m9nOYdDrV 4j0LfU1Srb5vG3+sfnQUwzo7W71p0q8+qzH2fSFtlXW9X/gJa8MN5IwmoBVwZcw7 opsLAOwpKtdH1Y35TGhroT04mvL+0ZguQ527FUrnM3HJ2IhlFlulOD0qy0vnU/nU 189viFKQF0bmv5bcJ6yiGB3JIQHLiyw= -----END CERTIFICATE-----Generated at Wed Nov 5 14:06:14 2025 by rpki-client