$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/b843c24c-9470-32c3-9572-a733f7a4b73d.roa File: b843c24c-9470-32c3-9572-a733f7a4b73d.roa (raw, json) Hash identifier: 8WVUPJBifcz/SimtIMoDgNr7VJTIxOg8xW0di4U3BH8= Subject key identifier: 58:F0:C8:2D:DF:5B:82:DA:28:05:98:07:1C:2E:BC:B0:A5:E4:51:76 Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Certificate serial: 010D0C9F4328584BB2F7A3BB37A28543EACF75C0 Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/b843c24c-9470-32c3-9572-a733f7a4b73d.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 21782 IP address blocks: 104.156.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:a3:bb:37:a2:85:43:ea:cf:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=63090957-aa7c-42bf-a5dd-e9b8452adc67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0d:29:70:2d:9e:8e:5e:9a:f0:44:f8:82:61: 75:37:e8:d0:c7:ab:00:d0:48:4c:ea:18:e4:2d:3b: 62:2c:ba:8d:08:96:0d:21:e3:cb:d2:76:07:da:df: 59:00:7d:9d:56:9a:cb:27:1a:2a:b8:dc:31:cd:15: fc:8c:12:ca:5c:0d:9a:f3:06:00:eb:89:72:70:4b: 6b:13:52:2e:73:8b:e4:0c:31:64:b2:b3:35:3f:98: 2d:22:0f:d5:79:5b:52:95:24:18:de:c8:41:2c:4f: f9:c7:0a:e5:c6:70:9f:14:45:e4:13:1c:67:b6:df: 1a:2c:39:45:cf:64:1a:65:db:66:d3:8a:22:89:a2: 6d:fe:0c:de:44:8e:02:57:d7:89:3e:48:0e:32:70: e8:ff:d0:fc:a0:f3:fc:12:c2:c2:f5:93:13:09:be: d8:e9:db:83:64:5a:15:0d:5b:b9:14:52:18:07:b4: bf:67:df:ad:bf:0a:c7:53:71:18:68:0a:33:b0:5f: a0:2d:a2:db:60:b5:fa:e0:34:39:16:ec:f1:47:20: f1:d4:a4:db:b3:18:9e:07:f8:f8:83:25:c3:4a:44: 88:f5:b2:d7:a1:67:cb:ee:38:e9:f6:52:72:24:71: 13:72:3f:f9:f2:4f:5b:94:07:d8:84:a6:93:73:3f: a4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F0:C8:2D:DF:5B:82:DA:28:05:98:07:1C:2E:BC:B0:A5:E4:51:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/b843c24c-9470-32c3-9572-a733f7a4b73d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl X509v3 Authority Key Identifier: keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer sbgp-ipAddrBlock: critical IPv4: 104.156.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:d0:07:c9:af:80:ef:8c:3c:a3:d3:be:d3:fa:60:10:fb:17: 4a:91:a9:71:3d:61:6b:ba:58:57:6f:f4:00:db:74:5e:d9:be: c5:a7:6d:0a:52:38:98:8d:2c:7e:13:ae:dc:4f:4a:87:88:fd: 3e:56:91:d6:29:8b:83:4f:a3:9f:fc:2f:b8:65:83:37:bb:13: b4:5e:ea:6f:bf:9c:65:1c:50:14:35:34:e7:34:08:78:61:0f: 3f:00:ae:5e:95:33:71:18:e4:7d:8f:c7:72:98:a0:74:ba:44: d6:08:dd:39:31:bf:2a:2a:3c:40:38:92:53:b7:b5:ef:e0:54: f0:29:99:ed:0b:85:58:a1:1a:19:32:04:f7:75:62:43:ec:5b: 43:ab:48:a7:06:a0:7e:65:cc:66:4c:75:e0:14:ee:54:35:84: 01:04:4c:8d:c6:36:d9:12:5a:0c:31:5a:47:93:bd:08:e9:64: 66:08:2d:d3:f7:1d:32:5d:7f:0d:58:e5:37:56:26:60:63:99: 3a:a8:8e:5a:78:ff:33:e7:43:41:07:40:ce:bb:32:da:f8:1a: cc:b1:1f:a0:cd:9c:45:17:8a:35:69:93:43:ce:83:de:c6:74: 43:7e:43:78:68:d9:b3:89:b3:30:b5:17:42:6c:a9:8e:48:a9: 20:6a:3a:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy96O7N6KFQ+rPdcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl OTNhMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NjMwOTA5NTctYWE3Yy00MmJmLWE1ZGQtZTliODQ1MmFkYzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4g0pcC2ejl6a8ET4gmF1N+jQx6sA0EhM6hjk LTtiLLqNCJYNIePL0nYH2t9ZAH2dVprLJxoquNwxzRX8jBLKXA2a8wYA64lycEtr E1Iuc4vkDDFksrM1P5gtIg/VeVtSlSQY3shBLE/5xwrlxnCfFEXkExxntt8aLDlF z2QaZdtm04oiiaJt/gzeRI4CV9eJPkgOMnDo/9D8oPP8EsLC9ZMTCb7Y6duDZFoV DVu5FFIYB7S/Z9+tvwrHU3EYaAozsF+gLaLbYLX64DQ5FuzxRyDx1KTbsxieB/j4 gyXDSkSI9bLXoWfL7jjp9lJyJHETcj/58k9blAfYhKaTcz+kNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjwyC3fW4LaKAWYBxwuvLCl5FF2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvYjg0M2MyNGMtOTQ3MC0z MmMzLTk1NzItYTczM2Y3YTRiNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4 YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1 MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaJwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLQB8mvgO+MPKPTvtP6YBD7F0qRqXE9YWu6WFdv9ADbdF7ZvsWnbQpS OJiNLH4TrtxPSoeI/T5WkdYpi4NPo5/8L7hlgze7E7Re6m+/nGUcUBQ1NOc0CHhh Dz8Arl6VM3EY5H2Px3KYoHS6RNYI3TkxvyoqPEA4klO3te/gVPApme0LhVihGhky BPd1YkPsW0OrSKcGoH5lzGZMdeAU7lQ1hAEETI3GNtkSWgwxWkeTvQjpZGYILdP3 HTJdfw1Y5TdWJmBjmTqojlp4/zPnQ0EHQM67Mtr4GsyxH6DNnEUXijVpk0POg97G dEN+Q3ho2bOJszC1F0JsqY5IqSBqOtk= -----END CERTIFICATE-----Generated at Wed Nov 5 12:37:54 2025 by rpki-client