$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/b96fa30c-800a-3f27-bbe0-a0466bba322b.roa File: b96fa30c-800a-3f27-bbe0-a0466bba322b.roa (raw, json) Hash identifier: 3z9Q2wRJRdUXmU/9ULAxUrsUIPK+BOoEeQ0eALctfS4= Subject key identifier: E2:B6:55:5F:6F:43:13:64:C3:0A:98:02:26:85:2F:5B:DC:EB:3C:27 Certificate issuer: /CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d Certificate serial: 010D0C9F4328584B99D7820F6008E54A2C3A6000 Authority key identifier: F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/b96fa30c-800a-3f27-bbe0-a0466bba322b.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 398993 IP address blocks: 104.219.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:82:0f:60:08:e5:4a:2c:3a:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=77d5feb0-7af9-4aa3-977a-d200afbbe0cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8d:50:d5:1c:c7:9b:69:b0:f2:56:87:0c:4c: cc:29:4e:28:46:45:ad:cf:c4:a7:66:97:43:d1:c6: ad:02:19:db:10:c0:52:70:1c:8c:00:9c:01:3d:1a: 8b:20:00:5e:1f:7d:0f:31:2e:47:ed:5c:90:c3:45: c2:08:a8:9b:c1:c7:a5:10:e4:9e:a0:59:96:07:55: 83:c5:ea:ff:b6:2f:7b:71:1d:ca:83:59:bd:7f:58: 60:31:e9:de:19:58:eb:8f:c4:b3:f3:cb:be:0f:71: 62:48:43:ab:14:35:f9:4e:13:97:6e:17:65:c9:37: 8b:b1:10:00:4c:68:d1:53:6c:c2:a0:c0:9a:d3:10: ac:a7:0d:bc:8e:74:c8:65:72:5e:bf:05:3c:fe:88: 1d:3d:95:43:af:c6:50:62:a7:36:5e:f2:38:39:75: 77:f3:79:ca:24:b1:10:14:fd:94:be:e0:8e:24:d7: c6:cb:5a:da:e0:b7:ca:33:04:1b:e9:56:93:94:2a: 9a:3a:63:90:22:b5:46:74:79:84:c2:04:8a:c6:0d: d6:42:50:04:03:49:50:20:d1:35:a8:da:cc:f9:10: 86:e7:db:79:ef:1b:42:48:3c:bd:cd:2a:bf:78:89: cf:be:db:49:1c:a5:23:74:84:30:70:60:41:3c:ac: f5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B6:55:5F:6F:43:13:64:C3:0A:98:02:26:85:2F:5B:DC:EB:3C:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/b96fa30c-800a-3f27-bbe0-a0466bba322b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl X509v3 Authority Key Identifier: keyid:F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer sbgp-ipAddrBlock: critical IPv4: 104.219.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:1c:73:71:8c:58:9b:f4:7c:25:56:11:02:85:c3:d1:60:11: 61:28:d3:96:60:45:7b:dc:4a:d6:80:c3:07:c9:d8:ab:a7:20: 9f:d3:77:da:de:04:3e:e8:f6:21:27:a4:26:03:8b:89:aa:f7: 25:37:84:7c:4b:ed:95:74:2f:82:20:cc:24:29:32:52:fb:65: e9:58:f7:8d:9d:d4:5f:25:97:a9:5a:c2:78:7f:9c:74:84:05: 80:04:03:f1:5a:7f:87:8d:91:d8:da:c4:21:cb:44:55:40:7e: 75:c3:8f:74:48:64:f4:d0:ab:af:7d:ae:3a:b8:f7:85:d4:32: a4:a4:a6:5e:70:83:a5:7e:71:ca:01:9e:0f:45:8b:00:36:ac: eb:26:a3:af:56:7e:87:9b:d3:15:cf:58:f4:51:16:b7:e0:c4: 53:18:22:62:d6:9e:6a:c7:f9:ae:8b:cf:ad:25:47:5d:6b:e1: 73:80:5f:43:3f:38:9b:43:c4:16:f4:3b:da:a0:54:88:2d:57: 54:52:7f:9e:cf:17:95:1c:5e:b5:25:f9:93:66:7a:90:dd:71: d0:61:f2:49:ff:fe:57:0a:e7:fb:2d:60:ad:7a:dd:26:30:b9: c8:16:6f:e2:67:ea:c1:89:69:18:b3:63:79:ee:d3:62:8a:72: 66:15:56:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14IPYAjlSiw6YAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjNiM2ZjZDktZjkwZC00ZjIwLTk2ZWMtZDRkMzI4NTE3 YzBkMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NzdkNWZlYjAtN2FmOS00YWEzLTk3N2EtZDIwMGFmYmJlMGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY1Q1RzHm2mw8laHDEzMKU4oRkWtz8SnZpdD 0catAhnbEMBScByMAJwBPRqLIABeH30PMS5H7VyQw0XCCKibwcelEOSeoFmWB1WD xer/ti97cR3Kg1m9f1hgMeneGVjrj8Sz88u+D3FiSEOrFDX5ThOXbhdlyTeLsRAA TGjRU2zCoMCa0xCspw28jnTIZXJevwU8/ogdPZVDr8ZQYqc2XvI4OXV383nKJLEQ FP2UvuCOJNfGy1ra4LfKMwQb6VaTlCqaOmOQIrVGdHmEwgSKxg3WQlAEA0lQINE1 qNrM+RCG59t57xtCSDy9zSq/eInPvttJHKUjdIQwcGBBPKz1xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOK2VV9vQxNkwwqYAiaFL1vc6zwnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82M2Iz ZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQzMjg1MTdjMGQvYjk2ZmEzMGMtODAwYS0z ZjI3LWJiZTAtYTA0NjZiYmEzMjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjNiM2ZjZDktZjkwZC00ZjIwLTk2 ZWMtZDRkMzI4NTE3YzBkLzYzYjNmY2Q5LWY5MGQtNGYyMC05NmVjLWQ0ZDMyODUx N2MwZC5jcmwwHwYDVR0jBBgwFoAU85szvqOxj6FrnsAlnz3NKvxiOA0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82M2IzZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQz Mjg1MTdjMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaNvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQcc3GMWJv0fCVWEQKFw9FgEWEo05ZgRXvcStaAwwfJ2KunIJ/Td9re BD7o9iEnpCYDi4mq9yU3hHxL7ZV0L4IgzCQpMlL7ZelY942d1F8ll6lawnh/nHSE BYAEA/Faf4eNkdjaxCHLRFVAfnXDj3RIZPTQq699rjq494XUMqSkpl5wg6V+ccoB ng9FiwA2rOsmo69Wfoeb0xXPWPRRFrfgxFMYImLWnmrH+a6Lz60lR11r4XOAX0M/ OJtDxBb0O9qgVIgtV1RSf57PF5UcXrUl+ZNmepDdcdBh8kn//lcK5/stYK163SYw ucgWb+Jn6sGJaRizY3nu02KKcmYVVlg= -----END CERTIFICATE-----Generated at Wed Nov 5 02:55:32 2025 by rpki-client