$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/90e30d69-d192-3d3b-af69-a1564717f280.roa File: 90e30d69-d192-3d3b-af69-a1564717f280.roa (raw, json) Hash identifier: dIroPQjln2nyGW3nbXVyyOQBlj7a6dfjUj/2zfu6eb0= Subject key identifier: 95:7D:2A:FB:65:D0:3C:DA:9E:37:8D:8F:2A:B0:58:E6:53:5C:71:EE Certificate issuer: /CN=3681ef63-b03c-48af-8191-e13ce8cb78c3 Certificate serial: 010D0C9F4328584B59A1E1294DBB4B56F9208980 Authority key identifier: 7B:B8:74:AC:94:43:89:50:D9:20:1E:3B:BD:36:E6:81:97:D1:3E:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/90e30d69-d192-3d3b-af69-a1564717f280.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 30580 IP address blocks: 104.249.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/3681ef63-b03c-48af-8191-e13ce8cb78c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/3681ef63-b03c-48af-8191-e13ce8cb78c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:e1:29:4d:bb:4b:56:f9:20:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3681ef63-b03c-48af-8191-e13ce8cb78c3 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=e914a14c-8a87-44a5-8a27-fe599efe63df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:38:f9:83:9a:ef:1d:20:47:1d:b1:58:60:7b: 33:56:18:eb:d3:b9:a4:da:92:89:26:ac:9e:90:af: 45:63:1b:07:1b:36:7a:99:6d:b3:50:d6:6d:25:74: be:e7:63:d4:2d:0b:68:9a:00:1b:84:bb:a5:bb:3b: e1:e0:a7:80:3c:f0:50:32:1b:ef:05:8a:79:11:38: fa:09:8e:09:81:9a:08:e9:5e:c3:c5:a5:df:02:71: a1:7b:da:02:8c:1e:72:4e:b5:89:93:8b:e9:17:92: 93:f7:3c:b9:b3:44:e8:3a:1b:5e:38:fc:4f:b6:da: 1b:81:1f:80:9f:e9:fa:85:9e:1a:5f:c2:96:9e:1b: c2:ee:64:c0:c4:01:c0:49:5e:62:4b:15:90:b5:50: 96:0b:07:70:a8:4d:da:35:ad:b2:8e:a0:cf:28:2c: 18:d8:f1:23:27:b2:86:a9:b1:1e:34:07:61:19:bb: c2:84:36:d9:f4:fe:bb:58:2c:e7:55:46:93:e4:5f: 2f:41:1c:5e:7b:bb:0c:27:c3:c7:93:04:53:dc:d4: 6a:29:b2:93:ce:15:73:34:5e:5f:9b:fd:6e:51:2a: 32:f4:3e:14:81:f6:c1:e5:79:92:59:2e:f3:8e:1d: 80:b6:70:67:0c:54:d6:f3:43:9e:37:ef:6a:22:84: 9e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7D:2A:FB:65:D0:3C:DA:9E:37:8D:8F:2A:B0:58:E6:53:5C:71:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/90e30d69-d192-3d3b-af69-a1564717f280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/3681ef63-b03c-48af-8191-e13ce8cb78c3.crl X509v3 Authority Key Identifier: keyid:7B:B8:74:AC:94:43:89:50:D9:20:1E:3B:BD:36:E6:81:97:D1:3E:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3.cer sbgp-ipAddrBlock: critical IPv4: 104.249.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:a9:65:09:06:13:2a:13:94:eb:4c:4f:84:85:82:7e:9c:b4: 93:3e:0b:68:62:2c:a8:8e:18:61:01:ec:a3:a2:54:2a:6a:b2: 39:57:40:a8:e4:55:97:9f:1f:ea:35:1c:44:bf:1e:51:c8:6f: 8e:62:ce:5e:4e:0a:a8:f1:be:37:62:df:c4:41:9a:e5:63:59: f5:8d:93:40:ac:19:b5:5f:7a:31:4f:ff:83:c6:b0:26:5c:7b: c4:90:83:8b:02:bf:82:e7:ec:b8:d1:c0:2b:19:b8:1f:23:20: d4:8b:bf:f5:59:44:23:fc:ae:66:fa:16:e6:d8:86:56:eb:35: 5f:2b:a2:39:e7:73:dd:c0:ab:11:32:bd:83:87:0b:ca:60:3e: 0b:aa:4b:92:ad:2b:68:35:01:59:ac:92:ad:2c:c9:9b:11:da: a8:97:f7:e0:01:6b:db:91:e8:c8:20:87:1e:93:ce:7b:00:cc: a0:43:14:cf:c6:2c:e9:0b:54:2b:b1:20:3d:1b:be:11:e1:7b: ce:9f:1d:d1:a7:ce:9a:b2:21:21:46:a4:e4:67:cd:c3:d6:39: e8:9a:35:f9:ee:0e:fc:df:ce:c6:c7:48:b5:5c:76:da:d0:1c: b0:ac:ca:54:6c:62:62:75:09:f9:b3:70:85:78:31:6d:23:32: bb:36:1a:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZoeEpTbtLVvkgiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4MWVmNjMtYjAzYy00OGFmLTgxOTEtZTEzY2U4Y2I3 OGMzMB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk ZTkxNGExNGMtOGE4Ny00NGE1LThhMjctZmU1OTllZmU2M2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTj5g5rvHSBHHbFYYHszVhjr07mk2pKJJqye kK9FYxsHGzZ6mW2zUNZtJXS+52PULQtomgAbhLuluzvh4KeAPPBQMhvvBYp5ETj6 CY4JgZoI6V7DxaXfAnGhe9oCjB5yTrWJk4vpF5KT9zy5s0ToOhteOPxPttobgR+A n+n6hZ4aX8KWnhvC7mTAxAHASV5iSxWQtVCWCwdwqE3aNa2yjqDPKCwY2PEjJ7KG qbEeNAdhGbvChDbZ9P67WCznVUaT5F8vQRxee7sMJ8PHkwRT3NRqKbKTzhVzNF5f m/1uUSoy9D4UgfbB5XmSWS7zjh2AtnBnDFTW80OeN+9qIoSebQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJV9Kvtl0DzanjeNjyqwWOZTXHHuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNjgx ZWY2My1iMDNjLTQ4YWYtODE5MS1lMTNjZThjYjc4YzMvOTBlMzBkNjktZDE5Mi0z ZDNiLWFmNjktYTE1NjQ3MTdmMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzY4MWVmNjMtYjAzYy00OGFmLTgx OTEtZTEzY2U4Y2I3OGMzLzM2ODFlZjYzLWIwM2MtNDhhZi04MTkxLWUxM2NlOGNi NzhjMy5jcmwwHwYDVR0jBBgwFoAUe7h0rJRDiVDZIB47vTbmgZfRPg8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNjgxZWY2My1iMDNjLTQ4YWYtODE5MS1lMTNj ZThjYjc4YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqpZQkGEyoTlOtMT4SFgn6ctJM+C2hiLKiOGGEB7KOiVCpqsjlXQKjk VZefH+o1HES/HlHIb45izl5OCqjxvjdi38RBmuVjWfWNk0CsGbVfejFP/4PGsCZc e8SQg4sCv4Ln7LjRwCsZuB8jINSLv/VZRCP8rmb6FubYhlbrNV8rojnnc93AqxEy vYOHC8pgPguqS5KtK2g1AVmskq0syZsR2qiX9+ABa9uR6Mgghx6TznsAzKBDFM/G LOkLVCuxID0bvhHhe86fHdGnzpqyISFGpORnzcPWOeiaNfnuDvzfzsbHSLVcdtrQ HLCsylRsYmJ1CfmzcIV4MW0jMrs2Gig= -----END CERTIFICATE-----Generated at Wed Nov 5 19:18:37 2025 by rpki-client