$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/08760972-a6be-3ce7-afc1-cec03eb601a3.roa File: 08760972-a6be-3ce7-afc1-cec03eb601a3.roa (raw, json) Hash identifier: 3WMpnDQLUeQaxQn09rDK4J3Rrf+NBO6wf/4nQfOolAw= Subject key identifier: 29:28:C6:A6:78:B9:E9:13:0E:6D:5E:2A:CE:DC:E4:50:E9:11:4E:D4 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584BBA105CEA0F663028AA30B700 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/08760972-a6be-3ce7-afc1-cec03eb601a3.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 2914 IP address blocks: 104.206.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:5c:ea:0f:66:30:28:aa:30:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=9c409aed-359d-44dd-8db8-a4ec7bc46cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:08:3e:e9:3d:4f:f7:cd:df:b5:e1:ce:44:81: cb:0c:27:75:08:ee:49:fa:e9:1d:78:42:57:b2:d3: ad:f6:5b:ff:b5:ab:2f:30:da:ae:6b:05:d3:f3:d3: ce:fe:35:e9:94:d2:11:3e:c2:84:20:09:cf:8a:61: 53:5f:54:68:60:6e:ac:7b:c2:61:d0:6a:15:f4:66: 91:1e:66:dc:86:51:45:a0:e9:3e:7d:17:54:6b:84: 85:43:e6:52:de:b9:62:dc:aa:b5:d2:67:c7:03:b7: 45:37:d1:02:79:39:bf:07:e0:43:3c:db:2f:64:e7: 55:be:30:7f:64:63:21:a5:8e:cd:22:75:48:45:66: 52:87:74:c5:75:62:f9:98:ae:a8:ca:91:04:69:22: fc:b4:d5:e7:03:ae:e7:78:84:3f:80:92:ee:d6:1e: f8:17:c2:4b:4c:90:36:47:c8:7e:d7:b8:2b:9b:e4: 7b:02:ae:6a:8c:bd:7c:7d:62:72:85:d7:62:e0:b7: b1:91:f8:ec:d6:23:56:d1:4e:94:03:2c:51:cf:fa: 29:0c:f4:74:4f:5e:9a:e2:79:ef:17:1e:c7:2e:7f: 99:de:fd:2b:c4:6d:a4:08:86:51:49:28:60:7a:9f: 84:39:0a:30:42:ec:08:37:14:61:fb:9a:7e:58:36: a7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:28:C6:A6:78:B9:E9:13:0E:6D:5E:2A:CE:DC:E4:50:E9:11:4E:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/08760972-a6be-3ce7-afc1-cec03eb601a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 104.206.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:be:05:7f:92:6b:dd:24:8a:63:74:35:bf:a5:d9:1f:c5:1b: d5:04:81:26:2e:aa:16:49:47:38:83:35:b9:97:d0:0c:81:38: 04:fb:ab:28:09:cb:9b:b6:9d:ec:b2:27:68:9b:67:aa:86:48: d0:a1:8b:6e:70:26:e7:df:d1:52:f9:9b:20:af:1e:9a:58:dd: 46:45:42:83:31:e3:a4:2d:06:1b:a1:cf:7d:4b:c3:6e:85:4d: 30:e1:0a:6f:38:b7:8c:32:7d:52:0c:ef:e4:dc:c4:0f:c0:61: c2:c0:2d:62:a4:56:2e:e8:d4:a7:a4:31:15:d1:45:11:68:ee: c8:6d:aa:60:85:e6:15:59:68:80:f4:74:e2:50:96:69:8b:5d: dd:a8:ea:ca:62:cc:bf:4f:29:9f:fb:c6:82:e0:e2:2d:57:34: 6e:d7:65:8d:10:62:45:ff:df:49:e4:1e:5e:19:d2:d6:7b:1d: 4a:05:53:72:b0:ea:fb:15:cc:a7:04:f5:83:4f:1b:e8:bf:eb: 02:85:b4:b5:98:64:ed:be:42:ff:75:b8:f2:9d:bf:c2:03:0b: 6b:b8:5e:57:a7:c0:b7:46:be:49:d4:22:aa:cf:85:17:dd:67: 83:bc:54:b8:e0:71:7f:cf:6d:02:bd:a6:c7:1e:67:bc:36:0a: 7b:40:2c:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EFzqD2YwKKowtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk OWM0MDlhZWQtMzU5ZC00NGRkLThkYjgtYTRlYzdiYzQ2Y2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwg+6T1P983fteHORIHLDCd1CO5J+ukdeEJX stOt9lv/tasvMNquawXT89PO/jXplNIRPsKEIAnPimFTX1RoYG6se8Jh0GoV9GaR HmbchlFFoOk+fRdUa4SFQ+ZS3rli3Kq10mfHA7dFN9ECeTm/B+BDPNsvZOdVvjB/ ZGMhpY7NInVIRWZSh3TFdWL5mK6oypEEaSL8tNXnA67neIQ/gJLu1h74F8JLTJA2 R8h+17grm+R7Aq5qjL18fWJyhddi4Lexkfjs1iNW0U6UAyxRz/opDPR0T16a4nnv Fx7HLn+Z3v0rxG2kCIZRSShgep+EOQowQuwINxRh+5p+WDancQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkoxqZ4uekTDm1eKs7c5FDpEU7UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMDg3NjA5NzItYTZiZS0z Y2U3LWFmYzEtY2VjMDNlYjYwMWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaM56MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK++BX+Sa90kimN0Nb+l2R/FG9UEgSYuqhZJRziDNbmX0AyBOAT7qygJ y5u2neyyJ2ibZ6qGSNChi25wJuff0VL5myCvHppY3UZFQoMx46QtBhuhz31Lw26F TTDhCm84t4wyfVIM7+TcxA/AYcLALWKkVi7o1KekMRXRRRFo7shtqmCF5hVZaID0 dOJQlmmLXd2o6spizL9PKZ/7xoLg4i1XNG7XZY0QYkX/30nkHl4Z0tZ7HUoFU3Kw 6vsVzKcE9YNPG+i/6wKFtLWYZO2+Qv91uPKdv8IDC2u4XlenwLdGvknUIqrPhRfd Z4O8VLjgcX/PbQK9psceZ7w2CntALAk= -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:20 2025 by rpki-client