$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/e8e2ede4-2a1b-3e46-a1cd-7935952e3968.roa File: e8e2ede4-2a1b-3e46-a1cd-7935952e3968.roa (raw, json) Hash identifier: bsCl9LdE/8OtBinGONJxdm+dPhvoi+8XOzNLxZVObjM= Subject key identifier: 9B:9F:91:7B:21:30:63:23:50:59:26:5D:07:AA:E8:0C:D5:48:9E:B1 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584BBA105C971C20DDC53728E9C0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/e8e2ede4-2a1b-3e46-a1cd-7935952e3968.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 395793 IP address blocks: 104.206.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:5c:97:1c:20:dd:c5:37:28:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=10c49668-59db-4266-9004-6e58cf0f01e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d1:c0:25:c4:2f:a1:29:c9:57:e6:c3:69:92: 33:59:87:06:4f:8e:ee:7e:7b:84:f9:62:6e:ec:0a: be:5a:31:07:54:f1:9c:a4:84:d7:3f:dc:8a:d4:fa: 0d:9d:f8:41:cd:a9:d5:fd:d0:39:4a:f3:db:3c:89: 1a:d9:3b:98:fd:a6:59:42:6b:54:69:ea:89:c6:06: fc:bc:27:22:c2:97:a5:1a:fb:35:1a:88:6f:c0:eb: 2e:5b:fb:b5:87:15:af:08:e3:c6:80:e2:d1:34:0d: 7a:9f:13:ff:bc:72:c0:84:73:2e:48:e8:13:fa:ad: 2d:eb:35:1f:65:43:0c:cd:60:88:3a:77:00:cf:50: 0e:a5:ea:90:ef:26:1b:c8:24:fe:d4:69:d0:7c:ac: 9a:29:f7:5e:2b:4c:b9:6d:d2:c5:08:a6:98:82:0a: 2a:6a:bc:8c:d3:93:31:36:77:ed:2e:88:09:18:fc: 94:09:bf:49:12:50:1d:00:92:af:ac:a8:88:16:a7: e7:f3:20:13:5e:cd:7d:69:8e:d0:28:7e:ca:c6:98: 6a:d1:fa:1a:78:fd:12:4c:a1:e9:de:e1:a3:0b:25: b9:70:75:3c:c9:34:b1:f2:6c:9d:82:73:7f:bb:4b: 75:4a:ce:6d:b2:1b:f2:69:38:9b:60:c3:d2:40:76: 09:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:9F:91:7B:21:30:63:23:50:59:26:5D:07:AA:E8:0C:D5:48:9E:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/e8e2ede4-2a1b-3e46-a1cd-7935952e3968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 104.206.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:43:01:5b:6b:a0:f3:a1:2d:34:00:7c:82:74:c7:56:62:3e: 94:f1:be:f9:eb:a0:ed:80:b9:a0:6b:b0:28:4c:8a:44:ad:be: 60:12:26:88:35:c3:4a:08:40:aa:3b:d5:44:db:ae:e9:82:37: fa:35:6c:85:0a:07:74:13:65:07:ad:44:3a:79:83:e3:d5:56: 1f:27:39:55:b8:aa:57:06:52:79:ec:e6:a0:5b:3b:ba:69:e5: 06:f1:49:71:5f:f9:13:10:48:01:c7:4f:aa:9c:e4:ef:e2:72: 5d:46:b4:4f:8f:d4:61:e0:99:8a:0f:55:a7:b0:6e:82:b9:e3: 33:3f:44:c8:3c:44:26:62:02:b9:6a:f8:55:43:c3:ec:db:52: f2:df:99:41:c5:0a:cf:73:5d:f1:97:19:0d:73:99:8a:9c:92: 64:0a:5e:9c:ce:b3:42:28:47:d9:2e:e0:79:00:93:13:1f:88: b8:0e:4d:48:a9:69:f1:5c:88:81:4b:0b:16:a3:82:bd:fd:34: 98:5f:df:cb:6d:48:1f:dd:49:71:fa:c5:1e:85:3c:74:cf:7d: 50:7a:11:dd:41:07:b4:96:38:d9:f0:67:bf:c5:fc:dd:19:37: 0c:2d:a2:b3:10:6b:b9:7d:7d:22:46:98:83:df:7d:5c:89:a3: 0d:cd:9b:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EFyXHCDdxTco6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk MTBjNDk2NjgtNTlkYi00MjY2LTkwMDQtNmU1OGNmMGYwMWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9HAJcQvoSnJV+bDaZIzWYcGT47ufnuE+WJu 7Aq+WjEHVPGcpITXP9yK1PoNnfhBzanV/dA5SvPbPIka2TuY/aZZQmtUaeqJxgb8 vCciwpelGvs1GohvwOsuW/u1hxWvCOPGgOLRNA16nxP/vHLAhHMuSOgT+q0t6zUf ZUMMzWCIOncAz1AOpeqQ7yYbyCT+1GnQfKyaKfdeK0y5bdLFCKaYggoqaryM05Mx NnftLogJGPyUCb9JElAdAJKvrKiIFqfn8yATXs19aY7QKH7Kxphq0foaeP0STKHp 3uGjCyW5cHU8yTSx8mydgnN/u0t1Ss5tshvyaTibYMPSQHYJtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJufkXshMGMjUFkmXQeq6AzVSJ6xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZThlMmVkZTQtMmExYi0z ZTQ2LWExY2QtNzkzNTk1MmUzOTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaM4KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENDAVtroPOhLTQAfIJ0x1ZiPpTxvvnroO2AuaBrsChMikStvmASJog1 w0oIQKo71UTbrumCN/o1bIUKB3QTZQetRDp5g+PVVh8nOVW4qlcGUnns5qBbO7pp 5QbxSXFf+RMQSAHHT6qc5O/icl1GtE+P1GHgmYoPVaewboK54zM/RMg8RCZiArlq +FVDw+zbUvLfmUHFCs9zXfGXGQ1zmYqckmQKXpzOs0IoR9ku4HkAkxMfiLgOTUip afFciIFLCxajgr39NJhf38ttSB/dSXH6xR6FPHTPfVB6Ed1BB7SWONnwZ7/F/N0Z NwwtorMQa7l9fSJGmIPffVyJow3Nm1Q= -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:23 2025 by rpki-client