$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3b4d73af-ea73-375b-85d2-0abc2807b135.roa File: 3b4d73af-ea73-375b-85d2-0abc2807b135.roa (raw, json) Hash identifier: PtA3xqEe/mF1xuJHlMuyZsc1Se5HQbg4q8wn0E7dFS0= Subject key identifier: B3:CF:B0:AF:C6:B4:71:3A:59:9C:F7:E5:9B:88:05:61:7A:6E:25:B5 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584BB5C2688E2948138BD4EF5DC0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3b4d73af-ea73-375b-85d2-0abc2807b135.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 2914 IP address blocks: 104.140.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:68:8e:29:48:13:8b:d4:ef:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=61a2ca9c-5a7a-4a67-bebe-a10a559b3b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7f:a6:98:3e:d6:7e:38:5f:46:db:98:bc:da: 65:71:75:89:44:a1:4a:3a:7f:8f:d5:72:02:63:a3: c6:66:40:3a:ef:96:22:5b:00:4e:d7:c8:ac:bb:45: db:ae:a6:19:69:3c:2b:85:62:be:6f:08:4c:13:a7: fb:5c:28:0c:49:38:fb:34:6e:7f:eb:c2:8e:2d:a6: f4:12:76:83:e5:84:90:08:0a:89:df:d4:91:cc:11: e5:82:d0:d1:10:20:b1:9b:8a:c5:30:aa:f1:31:63: ab:15:03:a8:ff:1e:32:77:80:6b:c4:e8:76:43:bc: 00:b1:57:ef:14:45:ec:43:09:de:3f:2c:82:04:e7: b7:3b:d4:19:ce:f1:1b:1f:c0:3c:65:2f:4d:18:fa: a1:94:72:05:74:3e:35:ef:86:15:cb:d4:df:6a:be: 91:57:6c:40:28:58:68:b5:a2:38:62:af:0a:11:2a: 7f:1d:32:c0:8a:9f:e5:4b:25:ab:1d:72:98:fb:4f: e0:ec:d5:2b:b1:de:2c:fe:20:f2:c3:f1:ed:89:db: 93:5c:3f:50:6a:88:c7:00:15:32:ab:0d:95:20:06: 6a:49:18:4e:7b:94:b6:6e:36:b4:6e:a5:0d:c7:d2: b9:2a:01:d4:5c:c8:a6:ee:ec:13:17:b9:07:40:7f: 0b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CF:B0:AF:C6:B4:71:3A:59:9C:F7:E5:9B:88:05:61:7A:6E:25:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3b4d73af-ea73-375b-85d2-0abc2807b135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 104.140.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:1e:8e:2e:92:75:a2:32:70:a0:1a:a5:26:cc:f1:35:e7:a5: ff:6d:be:c8:55:1f:cf:c8:a0:98:40:05:7c:54:60:36:1d:e6: 49:68:c5:ce:95:09:a4:e6:82:ab:f0:45:e7:90:af:6a:ef:11: 27:66:43:a2:d5:e8:f2:49:48:95:b3:be:a7:a6:b8:34:9b:0a: d6:2e:f1:43:90:69:3a:b8:69:93:eb:e5:b0:92:d9:88:ce:b3: 8e:ad:5b:01:7b:c5:9a:ab:07:c2:07:25:a2:1e:73:20:a7:a2: 73:7a:c0:b2:e8:fb:98:f3:4a:8b:84:d9:2c:ca:e8:99:a5:69: 0d:88:a7:0a:ff:dd:9f:70:4d:ef:58:a9:be:1c:1a:15:d9:8d: 5a:83:ca:b7:7e:6f:c9:d7:7d:98:d6:3b:75:1c:aa:fd:ab:f8: 6e:85:3a:c1:e3:51:35:e4:80:a8:c1:5d:8d:2f:33:08:8e:c3: 90:57:63:1e:b7:75:4d:56:e4:ca:78:ec:3c:00:f9:29:a9:9f: 22:74:06:0a:4e:38:3a:43:6a:d7:72:7a:df:0b:ae:1a:5c:32: e6:fd:bb:32:d7:8a:10:94:b6:c8:7b:63:f7:55:7b:5f:2e:eb: f1:22:53:55:bc:7b:47:bd:d2:d0:58:ac:b2:f1:8c:63:fb:20: 53:38:d0:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmiOKUgTi9TvXcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk NjFhMmNhOWMtNWE3YS00YTY3LWJlYmUtYTEwYTU1OWIzYjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH+mmD7WfjhfRtuYvNplcXWJRKFKOn+P1XIC Y6PGZkA675YiWwBO18isu0XbrqYZaTwrhWK+bwhME6f7XCgMSTj7NG5/68KOLab0 EnaD5YSQCAqJ39SRzBHlgtDRECCxm4rFMKrxMWOrFQOo/x4yd4BrxOh2Q7wAsVfv FEXsQwnePyyCBOe3O9QZzvEbH8A8ZS9NGPqhlHIFdD4174YVy9Tfar6RV2xAKFho taI4Yq8KESp/HTLAip/lSyWrHXKY+0/g7NUrsd4s/iDyw/HtiduTXD9QaojHABUy qw2VIAZqSRhOe5S2bja0bqUNx9K5KgHUXMim7uwTF7kHQH8LhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPPsK/GtHE6WZz35ZuIBWF6biW1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvM2I0ZDczYWYtZWE3My0z NzViLTg1ZDItMGFiYzI4MDdiMTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKoeji6SdaIycKAapSbM8TXnpf9tvshVH8/IoJhABXxUYDYd5kloxc6V CaTmgqvwReeQr2rvESdmQ6LV6PJJSJWzvqemuDSbCtYu8UOQaTq4aZPr5bCS2YjO s46tWwF7xZqrB8IHJaIecyCnonN6wLLo+5jzSouE2SzK6JmlaQ2Ipwr/3Z9wTe9Y qb4cGhXZjVqDyrd+b8nXfZjWO3Ucqv2r+G6FOsHjUTXkgKjBXY0vMwiOw5BXYx63 dU1W5Mp47DwA+SmpnyJ0BgpOODpDatdyet8LrhpcMub9uzLXihCUtsh7Y/dVe18u 6/EiU1W8e0e90tBYrLLxjGP7IFM40Cg= -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:16 2025 by rpki-client