$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d87cb088-b0d7-3e3c-8e86-8ee81a20bb92.roa File: d87cb088-b0d7-3e3c-8e86-8ee81a20bb92.roa (raw, json) Hash identifier: LQTvfyvlQo+vLSqfQQWbijStEyoIIVNs/cRWAAOvoJM= Subject key identifier: 3B:FC:D0:9F:44:81:F9:34:9C:DF:AB:95:AF:EC:D9:E9:92:E3:0F:39 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584BBA105CBA5CB31E3E899BDC00 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d87cb088-b0d7-3e3c-8e86-8ee81a20bb92.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 395793 IP address blocks: 104.206.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:5c:ba:5c:b3:1e:3e:89:9b:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=e7c17151-130e-41e9-9656-ff1446b9241d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5f:49:42:be:56:ac:17:43:e3:fb:89:d0:5b: b9:5b:04:c9:87:5a:5a:df:24:ff:23:a3:ec:d2:6c: c7:40:5c:f8:0e:82:52:71:fc:e2:64:3e:0d:ce:fe: 8f:ea:5f:62:a2:d1:a9:af:20:5b:81:35:6d:1c:2a: ea:e2:86:83:3c:cf:d3:82:09:60:7a:53:f4:a4:28: ea:b4:c6:3b:f3:90:fa:58:73:92:07:56:91:32:19: af:a7:0d:1e:a9:ea:c0:77:6c:13:f5:a1:38:99:b3: d1:ca:e0:77:7f:08:7a:ba:57:fa:d8:e7:7e:2d:33: 2a:43:01:18:e9:73:ca:72:fe:b3:31:33:7e:54:d3: a6:d0:b9:bc:b0:aa:ae:88:6d:d5:5f:08:34:15:44: df:71:d0:34:e6:78:0d:0a:b4:3e:2f:b9:66:bb:48: eb:7b:6a:8f:77:e5:c1:62:95:91:f6:c9:26:96:78: 7f:60:fb:a4:0a:4b:c7:20:c2:c3:3e:ef:81:85:64: d0:07:d7:da:70:dc:bb:70:36:b9:84:bd:48:98:66: cc:48:74:d9:2a:7b:45:f5:58:9a:d7:ff:67:9a:e7: 5f:64:18:fd:6f:9d:6d:e3:5b:29:70:98:a0:a5:93: fa:13:2c:66:fa:e7:bf:22:41:fe:22:2a:80:12:46: b2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FC:D0:9F:44:81:F9:34:9C:DF:AB:95:AF:EC:D9:E9:92:E3:0F:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d87cb088-b0d7-3e3c-8e86-8ee81a20bb92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 104.206.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:68:4f:82:bd:4c:4c:c4:8a:b9:c7:bb:4f:64:9e:98:f3:72: 76:3d:b2:8d:16:42:14:57:ca:06:b3:55:0b:62:7e:33:a7:58: 67:19:4e:9e:82:0c:b1:79:cf:d5:02:7c:c9:4c:44:01:b6:18: f4:b2:d6:7c:ea:9b:17:2d:26:52:a1:46:c3:de:18:38:59:0a: 95:68:5b:86:00:25:76:e0:06:09:41:6e:c2:42:91:f0:ea:c6: 36:a7:99:e1:a1:28:0c:76:9a:5f:b5:d3:67:19:0d:25:b6:75: 19:87:f9:ac:42:dd:77:97:f6:7d:e7:88:88:78:d5:72:40:28: 84:a6:4f:94:06:c4:bc:06:21:a3:c2:d7:8d:d9:71:9d:ad:60: a6:2a:69:ee:0c:bf:5e:f9:1a:47:2a:f9:d9:c1:a9:3b:73:36: ef:fd:96:0b:d6:82:42:2b:e0:c7:78:1c:72:89:6f:a0:db:44: 2b:04:47:83:c3:43:f1:19:70:a4:4f:22:b5:82:3d:bb:14:42: a9:16:fc:d3:4e:77:f1:42:6a:72:b3:42:7a:52:02:74:37:a2: c8:b6:25:6d:46:1f:98:09:42:ba:79:8a:9c:20:1b:5d:96:63: ba:cb:5e:3c:c4:05:b6:3a:92:ac:eb:65:12:bd:9f:4d:55:50: ee:a2:24:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EFy6XLMePomb3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk ZTdjMTcxNTEtMTMwZS00MWU5LTk2NTYtZmYxNDQ2YjkyNDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp19JQr5WrBdD4/uJ0Fu5WwTJh1pa3yT/I6Ps 0mzHQFz4DoJScfziZD4Nzv6P6l9iotGpryBbgTVtHCrq4oaDPM/TgglgelP0pCjq tMY785D6WHOSB1aRMhmvpw0eqerAd2wT9aE4mbPRyuB3fwh6ulf62Od+LTMqQwEY 6XPKcv6zMTN+VNOm0Lm8sKquiG3VXwg0FUTfcdA05ngNCrQ+L7lmu0jre2qPd+XB YpWR9skmlnh/YPukCkvHIMLDPu+BhWTQB9facNy7cDa5hL1ImGbMSHTZKntF9Via 1/9nmudfZBj9b51t41spcJigpZP6Eyxm+ue/IkH+IiqAEkaySwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDv80J9Egfk0nN+rla/s2emS4w85MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZDg3Y2IwODgtYjBkNy0z ZTNjLThlODYtOGVlODFhMjBiYjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaM5MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdoT4K9TEzEirnHu09knpjzcnY9so0WQhRXygazVQtifjOnWGcZTp6C DLF5z9UCfMlMRAG2GPSy1nzqmxctJlKhRsPeGDhZCpVoW4YAJXbgBglBbsJCkfDq xjanmeGhKAx2ml+102cZDSW2dRmH+axC3XeX9n3niIh41XJAKISmT5QGxLwGIaPC 143ZcZ2tYKYqae4Mv175Gkcq+dnBqTtzNu/9lgvWgkIr4Md4HHKJb6DbRCsER4PD Q/EZcKRPIrWCPbsUQqkW/NNOd/FCanKzQnpSAnQ3osi2JW1GH5gJQrp5ipwgG12W Y7rLXjzEBbY6kqzrZRK9n01VUO6iJHc= -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:23 2025 by rpki-client