$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3ffe2b76-e774-3c56-aae6-c2359820c5cf.roa File: 3ffe2b76-e774-3c56-aae6-c2359820c5cf.roa (raw, json) Hash identifier: /5R08nPpJgAiSLMXnCRery+aCo3LrEepwBMsDYJUgaY= Subject key identifier: 5D:09:EC:B1:63:5F:4E:6D:C9:15:8C:3F:5D:67:95:9A:80:43:B5:51 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584B8BE224607C4C548737772700 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3ffe2b76-e774-3c56-aae6-c2359820c5cf.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 20127 IP address blocks: 104.152.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:24:60:7c:4c:54:87:37:77:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=fe9030eb-aa20-48f5-aa32-b4045874a55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e7:4e:5b:34:14:9a:b7:c7:7f:2a:85:44:b5: 96:8e:9b:78:28:ed:1c:c0:8d:fd:79:ce:f1:a0:73: 99:20:63:26:6e:d5:fc:97:fa:ba:d5:4f:52:12:25: 1c:06:ee:80:57:2e:aa:97:a7:e0:79:89:be:40:07: 78:79:51:8d:2d:9e:d3:26:c9:3e:16:8f:44:35:28: 5e:ab:59:d6:b7:10:4d:a0:42:4d:94:4c:06:28:e5: ba:6c:6e:e1:e8:42:19:59:aa:33:7f:64:36:5c:ba: 65:5e:ed:d0:0d:99:fb:45:69:dd:90:7c:cd:3a:3a: 55:74:4e:7e:dd:49:fe:40:1c:f9:a9:11:f7:3e:f3: 2a:75:1e:50:18:6c:da:ee:4c:db:4f:f7:54:53:d3: ac:91:71:28:0a:c6:97:4a:16:85:e9:2a:95:c1:da: 29:b5:00:80:0a:91:2b:c7:38:42:88:50:e9:41:f3: 71:c7:04:80:0f:5c:fc:ad:d8:32:e3:43:56:f2:e7: 1f:02:46:22:8a:0b:06:97:80:a2:0d:a0:93:e7:fc: 05:80:fe:d7:f0:c4:f4:c6:0b:6f:44:b1:4c:01:b2: a1:06:2d:89:ef:f5:99:b7:70:c1:a9:9a:71:5c:87: 04:e0:ed:89:80:bd:f0:76:f8:77:d3:6a:0f:51:69: 3e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:09:EC:B1:63:5F:4E:6D:C9:15:8C:3F:5D:67:95:9A:80:43:B5:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3ffe2b76-e774-3c56-aae6-c2359820c5cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 104.152.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:03:5b:de:4a:b7:e9:7c:45:7e:c5:85:32:43:41:8b:8a:6c: e0:99:01:da:92:75:37:70:53:06:d7:ab:a5:df:26:1e:1b:0c: 2c:29:13:f5:02:f3:29:0b:b5:e5:1b:34:8f:b0:14:a2:ac:35: 69:d9:a0:0e:d7:cb:ad:d8:9d:7b:b1:cd:e2:c7:e2:7b:04:2d: 89:a8:18:3e:bc:42:a5:59:48:02:28:8d:56:1b:20:9a:ab:2a: 28:25:91:f2:e1:62:15:e2:a9:f2:9e:e9:83:13:bd:eb:ec:f0: 4d:f2:d9:c2:e1:c5:99:5f:f0:10:e6:62:0f:9a:95:2d:39:20: 99:39:2a:36:42:7b:78:7e:32:04:53:9f:c7:a2:cc:6b:75:4e: 50:5c:78:86:ea:35:e9:82:e6:3c:81:29:7b:db:3e:a5:17:d0: db:94:09:ee:d1:43:5b:4f:2e:0f:c2:78:95:35:bd:b8:c5:6a: 5f:4e:2e:6f:ec:2f:ea:f5:03:2a:ad:36:53:48:31:b4:c4:09: f3:0b:25:8c:f3:d2:45:65:5b:62:49:19:c3:f8:3a:7d:08:16: 93:25:02:7e:ff:68:91:90:00:bc:69:77:d9:58:67:89:01:3d: 0a:c9:97:69:ea:a0:eb:3a:bf:f9:93:54:81:60:04:de:11:a1: 3a:be:76:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4iRgfExUhzd3JwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk ZmU5MDMwZWItYWEyMC00OGY1LWFhMzItYjQwNDU4NzRhNTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsudOWzQUmrfHfyqFRLWWjpt4KO0cwI39ec7x oHOZIGMmbtX8l/q61U9SEiUcBu6AVy6ql6fgeYm+QAd4eVGNLZ7TJsk+Fo9ENShe q1nWtxBNoEJNlEwGKOW6bG7h6EIZWaozf2Q2XLplXu3QDZn7RWndkHzNOjpVdE5+ 3Un+QBz5qRH3PvMqdR5QGGza7kzbT/dUU9OskXEoCsaXShaF6SqVwdoptQCACpEr xzhCiFDpQfNxxwSAD1z8rdgy40NW8ucfAkYiigsGl4CiDaCT5/wFgP7X8MT0xgtv RLFMAbKhBi2J7/WZt3DBqZpxXIcE4O2JgL3wdvh302oPUWk+bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0J7LFjX05tyRWMP11nlZqAQ7VRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvM2ZmZTJiNzYtZTc3NC0z YzU2LWFhZTYtYzIzNTk4MjBjNWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJjFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwDW95Kt+l8RX7FhTJDQYuKbOCZAdqSdTdwUwbXq6XfJh4bDCwpE/UC 8ykLteUbNI+wFKKsNWnZoA7Xy63YnXuxzeLH4nsELYmoGD68QqVZSAIojVYbIJqr KiglkfLhYhXiqfKe6YMTvevs8E3y2cLhxZlf8BDmYg+alS05IJk5KjZCe3h+MgRT n8eizGt1TlBceIbqNemC5jyBKXvbPqUX0NuUCe7RQ1tPLg/CeJU1vbjFal9OLm/s L+r1AyqtNlNIMbTECfMLJYzz0kVlW2JJGcP4On0IFpMlAn7/aJGQALxpd9lYZ4kB PQrJl2nqoOs6v/mTVIFgBN4RoTq+dio= -----END CERTIFICATE-----Generated at Wed Nov 5 23:04:35 2025 by rpki-client