$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/7328d350-a18c-3f29-847c-d151d2597c2b.roa File: 7328d350-a18c-3f29-847c-d151d2597c2b.roa (raw, json) Hash identifier: 5dYbL5ct2ZKMQRWhW6ZLb/jK+d2Zb3ncSuZOnL8rOqM= Subject key identifier: 0F:68:CF:5D:3B:F7:14:2D:7B:BC:A7:8F:CC:DD:87:A3:B8:47:DA:CB Certificate issuer: /CN=1b7151e5-64cf-4efa-968e-47796f2f7523 Certificate serial: 010D0C9F4328584B89176F107241E31CC6F80500 Authority key identifier: CE:CA:18:2C:24:A5:DF:87:16:2C:E1:A2:FD:5E:B0:55:E0:7A:CE:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/7328d350-a18c-3f29-847c-d151d2597c2b.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 16995 IP address blocks: 104.218.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/1b7151e5-64cf-4efa-968e-47796f2f7523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/1b7151e5-64cf-4efa-968e-47796f2f7523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:6f:10:72:41:e3:1c:c6:f8:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b7151e5-64cf-4efa-968e-47796f2f7523 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=3acd808b-2782-48ba-b5fb-8254b2d0f92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bf:1a:e9:28:c0:88:ff:b4:ca:bb:2b:bb:8c: a5:66:0f:e2:0b:13:76:2f:47:a5:de:9a:e4:57:cd: 5b:df:b4:7c:a0:46:69:3f:94:2e:89:95:ca:b4:2e: b8:42:9b:0d:d0:85:97:b3:c1:62:ff:e1:d2:f5:0b: d0:4b:98:1a:50:43:09:04:fd:a2:fc:41:38:d1:d2: 11:a1:01:0b:0b:75:77:5d:91:8f:5b:5e:10:f7:63: db:6b:61:f0:69:3e:e0:69:10:e1:7f:68:ae:b4:61: 80:19:58:03:5c:e1:b8:cd:d2:02:03:15:88:63:90: 7b:07:ca:7b:c3:f6:09:d2:08:d4:50:9c:81:f3:f0: 8b:5f:2e:fd:bb:c4:22:0d:71:e3:39:a0:51:51:29: 0f:6b:a4:9c:65:2d:f3:db:31:a2:bc:e8:ae:96:64: 5c:bb:79:5d:92:0c:8e:f8:08:78:0b:b8:38:6a:25: f9:4d:56:1e:30:5d:55:c1:c0:56:ad:fe:9a:3a:60: 44:0c:74:34:4d:17:1d:79:77:11:c4:2c:53:e5:c8: 93:97:e9:7b:1d:5e:f8:a0:8d:a4:c5:e5:76:ac:86: dc:76:1c:0c:f2:c1:9b:e4:4a:9f:18:74:48:b4:53: b1:bf:c9:13:48:9d:c4:e4:ed:b5:8e:c4:e7:44:34: 07:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:68:CF:5D:3B:F7:14:2D:7B:BC:A7:8F:CC:DD:87:A3:B8:47:DA:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/7328d350-a18c-3f29-847c-d151d2597c2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/1b7151e5-64cf-4efa-968e-47796f2f7523.crl X509v3 Authority Key Identifier: keyid:CE:CA:18:2C:24:A5:DF:87:16:2C:E1:A2:FD:5E:B0:55:E0:7A:CE:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523.cer sbgp-ipAddrBlock: critical IPv4: 104.218.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:1a:3f:67:e2:40:cf:c7:7d:2e:25:8a:7d:96:71:e6:7c:3d: 62:ae:7b:5f:50:f9:ec:92:35:45:73:a9:a2:5a:46:fe:ae:5d: 2d:81:17:9b:e2:ef:df:18:6c:e7:2d:c8:3c:14:71:b1:61:59: dc:9c:89:b8:23:89:ad:fe:65:2d:f6:3f:b9:d5:d0:30:ed:ad: 44:15:69:7a:f5:5f:91:95:ba:e7:af:8b:80:05:99:85:3f:2c: 55:0e:ff:d3:a7:3b:2b:e9:a3:7f:06:86:05:d4:cc:2b:ba:fe: 43:e1:72:f1:a3:eb:01:68:50:52:b5:1b:93:c2:2f:5e:ec:0c: 3e:af:00:4f:6b:47:39:b4:fd:b3:1d:b0:b2:ed:da:1b:07:25: da:cd:07:9e:23:5e:ab:61:a8:9f:8d:72:cc:bd:da:da:45:16: 21:af:a7:13:02:8f:6e:74:0c:8f:5a:9e:aa:69:eb:c0:57:e9: 33:c6:be:70:ef:b3:be:7a:6f:c2:31:f4:30:6d:a3:2e:b4:cc: e6:4c:8f:bb:1e:58:ab:53:8f:a1:51:71:d6:1f:2c:b7:c4:8f: f0:43:c2:8a:f2:cf:00:26:75:8e:2a:3a:2e:43:f9:e4:ed:5f: 55:f1:1d:de:22:7c:70:a3:90:42:c1:71:fe:8b:05:a2:18:53: 11:c7:8d:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF28QckHjHMb4BQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI3MTUxZTUtNjRjZi00ZWZhLTk2OGUtNDc3OTZmMmY3 NTIzMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk M2FjZDgwOGItMjc4Mi00OGJhLWI1ZmItODI1NGIyZDBmOTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb8a6SjAiP+0yrsru4ylZg/iCxN2L0el3prk V81b37R8oEZpP5QuiZXKtC64QpsN0IWXs8Fi/+HS9QvQS5gaUEMJBP2i/EE40dIR oQELC3V3XZGPW14Q92Pba2HwaT7gaRDhf2iutGGAGVgDXOG4zdICAxWIY5B7B8p7 w/YJ0gjUUJyB8/CLXy79u8QiDXHjOaBRUSkPa6ScZS3z2zGivOiulmRcu3ldkgyO +Ah4C7g4aiX5TVYeMF1VwcBWrf6aOmBEDHQ0TRcdeXcRxCxT5ciTl+l7HV74oI2k xeV2rIbcdhwM8sGb5EqfGHRItFOxv8kTSJ3E5O21jsTnRDQH0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9oz1079xQte7ynj8zdh6O4R9rLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYjcx NTFlNS02NGNmLTRlZmEtOTY4ZS00Nzc5NmYyZjc1MjMvNzMyOGQzNTAtYTE4Yy0z ZjI5LTg0N2MtZDE1MWQyNTk3YzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWI3MTUxZTUtNjRjZi00ZWZhLTk2 OGUtNDc3OTZmMmY3NTIzLzFiNzE1MWU1LTY0Y2YtNGVmYS05NjhlLTQ3Nzk2ZjJm NzUyMy5jcmwwHwYDVR0jBBgwFoAUzsoYLCSl34cWLOGi/V6wVeB6zrgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYjcxNTFlNS02NGNmLTRlZmEtOTY4ZS00Nzc5 NmYyZjc1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaNpUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgaP2fiQM/HfS4lin2WceZ8PWKue19Q+eySNUVzqaJaRv6uXS2BF5vi 798YbOctyDwUcbFhWdycibgjia3+ZS32P7nV0DDtrUQVaXr1X5GVuuevi4AFmYU/ LFUO/9OnOyvpo38GhgXUzCu6/kPhcvGj6wFoUFK1G5PCL17sDD6vAE9rRzm0/bMd sLLt2hsHJdrNB54jXqthqJ+Ncsy92tpFFiGvpxMCj250DI9anqpp68BX6TPGvnDv s756b8Ix9DBtoy60zOZMj7seWKtTj6FRcdYfLLfEj/BDworyzwAmdY4qOi5D+eTt X1XxHd4ifHCjkELBcf6LBaIYUxHHjSY= -----END CERTIFICATE-----Generated at Wed Nov 5 17:37:32 2025 by rpki-client