$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/2de13f6e-ba53-3029-9dbc-cc6728951529.roa File: 2de13f6e-ba53-3029-9dbc-cc6728951529.roa (raw, json) Hash identifier: 3I/XFslALFktZg0eM30CYCpDLxzsTTZo2biPlHq0zU0= Subject key identifier: 40:12:0F:DE:25:40:D1:D7:3F:7E:41:7A:24:A2:C3:C3:C7:FB:EC:BE Certificate issuer: /CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Certificate serial: 010D0C9F4328584B0A1157F8F0143D58D027B300 Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/2de13f6e-ba53-3029-9dbc-cc6728951529.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 803 IP address blocks: 104.152.28.0/22 maxlen: 22 104.219.8.0/22 maxlen: 22 104.255.48.0/22 maxlen: 22 108.60.160.0/19 maxlen: 19 108.160.16.0/20 maxlen: 20 108.174.160.0/20 maxlen: 20 162.253.8.0/22 maxlen: 22 192.34.224.0/21 maxlen: 21 198.245.112.0/20 maxlen: 20 199.26.190.0/23 maxlen: 23 199.189.88.0/21 maxlen: 21 206.163.224.0/19 maxlen: 19 207.47.128.0/17 maxlen: 17 216.126.200.0/22 maxlen: 22 216.174.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:57:f8:f0:14:3d:58:d0:27:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=4fe9da36-10e1-45ac-8664-bb8875b12750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:46:b4:18:a0:fb:ff:b6:79:2e:8a:a6:45:db: 27:1b:ed:88:75:a0:46:03:46:89:ec:c7:2f:23:ee: 4c:4a:88:38:02:ee:0f:cd:7b:80:27:e2:ef:5e:13: 96:87:b4:30:79:56:96:37:67:74:d3:ff:59:c8:cc: df:16:70:b9:c2:69:18:02:6a:3f:63:55:15:06:fc: 97:73:19:93:ba:ca:03:5d:69:aa:a8:6a:d0:9a:b3: 7f:56:b6:31:2a:21:78:a5:76:eb:7b:60:3c:63:21: 63:76:ec:ab:5b:ac:17:70:f5:0d:aa:69:2c:65:f1: 26:6d:6e:e1:22:0f:2a:33:d0:6d:f4:7f:cb:2d:a8: 8b:e7:b7:28:98:f0:f7:c9:10:b5:4c:e6:41:5a:1a: 65:4c:1a:23:79:cf:f2:ca:c5:ad:5d:d8:5f:8c:38: f6:f1:d9:b1:f6:6f:b4:18:7e:3a:e3:68:45:f2:69: 0d:21:0d:a9:08:b6:1b:f8:bd:8f:b1:8b:e2:10:f8: fc:fd:1d:8f:30:4a:25:8d:2f:6a:7c:68:93:08:2e: b6:55:86:7e:f9:a3:1f:95:c0:30:7f:7c:e8:ae:3f: ba:7e:8f:85:fa:dd:7c:c6:d7:00:59:a7:4e:68:60: 63:2e:a4:c8:e6:6c:da:c1:01:a1:82:cc:eb:c5:4f: 87:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:12:0F:DE:25:40:D1:D7:3F:7E:41:7A:24:A2:C3:C3:C7:FB:EC:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/2de13f6e-ba53-3029-9dbc-cc6728951529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl X509v3 Authority Key Identifier: keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer sbgp-ipAddrBlock: critical IPv4: 104.152.28.0/22 104.219.8.0/22 104.255.48.0/22 108.60.160.0/19 108.160.16.0/20 108.174.160.0/20 162.253.8.0/22 192.34.224.0/21 198.245.112.0/20 199.26.190.0/23 199.189.88.0/21 206.163.224.0/19 207.47.128.0/17 216.126.200.0/22 216.174.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:5b:5d:30:15:a6:69:23:7a:83:91:4a:b9:41:54:a7:ab:e5: 0d:48:b5:09:73:88:c4:b3:20:40:86:a6:91:fe:cf:d0:52:76: b0:c6:37:b1:61:24:50:8e:12:24:67:26:44:a0:f6:fc:81:f4: c3:4e:c6:15:67:3b:6d:77:11:92:d2:c4:14:ef:1a:7e:53:6d: 88:22:93:66:28:64:87:04:c2:15:ee:af:47:0c:69:b7:97:87: 7b:8c:dc:8d:85:85:0f:66:ae:93:04:d4:4d:50:9a:25:48:68: 97:8b:5a:af:b8:ea:40:42:41:68:14:b3:1a:31:0c:20:f4:b9: dc:f9:09:2a:a7:47:b0:b3:72:d6:92:b9:07:6b:f8:43:3f:d9: a3:5c:4e:f0:d1:84:fa:02:0b:e1:fe:fb:b2:85:ef:3c:44:cd: 7d:ab:1b:1b:07:08:97:57:21:ae:f1:f2:ab:51:07:d9:92:fe: 38:c0:97:ff:60:b8:f1:59:48:64:a9:4f:a1:87:f1:c5:7c:84: 62:df:4a:e8:3e:ac:8a:20:ff:db:0e:5f:56:b8:dc:c6:57:2a: a2:5e:62:a9:33:6f:6d:02:dd:b2:5c:02:37:74:26:bb:42:96: 4b:b2:93:a9:4f:c8:7c:aa:80:59:66:dc:06:c2:0f:6a:25:83: 1c:7b:94:e9 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUAQ0Mn0MoWEsKEVf48BQ9WNAnswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA2MmEyMTktOWVlOC00OGEzLTg5N2EtODQxMGI2ZGE5 NGExMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk NGZlOWRhMzYtMTBlMS00NWFjLTg2NjQtYmI4ODc1YjEyNzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ka0GKD7/7Z5LoqmRdsnG+2IdaBGA0aJ7Mcv I+5MSog4Au4PzXuAJ+LvXhOWh7QweVaWN2d00/9ZyMzfFnC5wmkYAmo/Y1UVBvyX cxmTusoDXWmqqGrQmrN/VrYxKiF4pXbre2A8YyFjduyrW6wXcPUNqmksZfEmbW7h Ig8qM9Bt9H/LLaiL57comPD3yRC1TOZBWhplTBojec/yysWtXdhfjDj28dmx9m+0 GH4642hF8mkNIQ2pCLYb+L2PsYviEPj8/R2PMEoljS9qfGiTCC62VYZ++aMflcAw f3zorj+6fo+F+t18xtcAWadOaGBjLqTI5mzawQGhgszrxU+HLwIDAQABo4IDqTCC A6UwHQYDVR0OBBYEFEASD94lQNHXP35BeiSiw8PH++y+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYy YTIxOS05ZWU4LTQ4YTMtODk3YS04NDEwYjZkYTk0YTEvMmRlMTNmNmUtYmE1My0z MDI5LTlkYmMtY2M2NzI4OTUxNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTA2MmEyMTktOWVlOC00OGEzLTg5 N2EtODQxMGI2ZGE5NGExL2EwNjJhMjE5LTllZTgtNDhhMy04OTdhLTg0MTBiNmRh OTRhMS5jcmwwHwYDVR0jBBgwFoAUFCgnZgWdJKC08ogP76ns4OluhhgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYyYTIxOS05ZWU4LTQ4YTMtODk3YS04NDEw YjZkYTk0YTEuY2VyMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQCaJgcAwQC aNsIAwQCaP8wAwQFbDygAwQEbKAQAwQEbK6gAwQCov0IAwQDwCLgAwQExvVwAwQB xxq+AwQDx71YAwQFzqPgAwQHzy+AAwQC2H7IAwQF2K6AMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFhbXTAV pmkjeoORSrlBVKer5Q1ItQlziMSzIECGppH+z9BSdrDGN7FhJFCOEiRnJkSg9vyB 9MNOxhVnO213EZLSxBTvGn5TbYgik2YoZIcEwhXur0cMabeXh3uM3I2FhQ9mrpME 1E1QmiVIaJeLWq+46kBCQWgUsxoxDCD0udz5CSqnR7CzctaSuQdr+EM/2aNcTvDR hPoCC+H++7KF7zxEzX2rGxsHCJdXIa7x8qtRB9mS/jjAl/9guPFZSGSpT6GH8cV8 hGLfSug+rIog/9sOX1a43MZXKqJeYqkzb20C3bJcAjd0JrtClkuyk6lPyHyqgFlm 3AbCD2olgxx7lOk= -----END CERTIFICATE-----Generated at Wed Nov 5 15:14:37 2025 by rpki-client