$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d135e39-3ac9-3ff5-b4ea-7f23618ed5f5.roa File: 4d135e39-3ac9-3ff5-b4ea-7f23618ed5f5.roa (raw, json) Hash identifier: ZMX2MLrK/CgkIKi+VrSHaROQzhex1xeRHPqHA0hpP6k= Subject key identifier: 69:55:A8:16:1B:37:B0:40:3F:66:B5:4D:39:FE:30:3A:F8:C5:EA:FF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D73AEE17932D6D1664AEC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d135e39-3ac9-3ff5-b4ea-7f23618ed5f5.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 104.166.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:3a:ee:17:93:2d:6d:16:64:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=1f066fd4-4915-4c91-83a7-cdd1f0e5c667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:42:9d:fb:78:bf:32:b9:25:45:b6:28:8e:ef: c6:4a:7b:3d:ab:8c:8c:d3:14:f4:1a:1a:e1:2e:5d: 2b:53:da:e9:0b:70:aa:1b:de:0c:72:ae:a6:a0:2b: 7d:c4:0f:1e:ab:83:5f:48:61:ce:40:bc:c4:c8:56: 48:44:29:2a:1d:ce:dd:39:04:5d:bc:41:9b:4a:c6: eb:c9:46:78:52:8e:8d:86:f6:45:98:25:a7:ce:b8: 25:b4:7a:86:33:d0:3b:d0:13:e6:e6:51:99:cd:54: e4:3d:1e:24:90:98:e5:32:c8:24:95:b6:55:99:94: 62:25:35:ed:26:07:c1:3f:c3:81:dc:be:16:3d:e4: 8c:ab:21:b0:52:ca:a4:c0:6e:ef:be:91:a7:03:db: 79:82:50:de:99:1b:82:45:ad:3e:be:81:0a:bf:dc: 2b:2e:c7:31:9f:15:1c:57:d3:61:3b:45:91:e1:61: ee:44:46:df:ad:3b:1f:44:56:9d:8e:28:76:86:f1: 76:95:28:f0:b0:2d:60:8e:96:2c:7d:23:3a:0d:b0: b8:24:9b:b9:7e:92:b0:d5:41:13:7d:9c:8b:60:3e: 50:33:29:cd:4b:64:bd:4c:0e:15:14:00:92:a1:1f: 5c:b5:3c:df:e8:2a:5a:05:e1:c5:ed:a7:af:0a:8d: ed:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:55:A8:16:1B:37:B0:40:3F:66:B5:4D:39:FE:30:3A:F8:C5:EA:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d135e39-3ac9-3ff5-b4ea-7f23618ed5f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 104.166.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a4:fd:90:a6:93:31:77:68:42:7d:5d:68:42:89:89:38:58: 2a:f9:e8:3e:cb:aa:40:5d:c0:37:05:8c:69:00:76:09:88:80: 1a:f3:e4:05:ce:7f:3b:24:45:67:34:a4:d9:b3:36:7e:a6:97: ca:a2:f1:3f:d2:05:49:f5:d9:0e:64:52:66:e7:73:bd:be:af: 91:d1:42:af:eb:24:ed:98:4a:34:20:82:50:96:fb:f4:12:44: 92:13:37:1f:03:fd:53:9b:1f:d6:41:ed:98:99:c4:7b:c5:f6: 58:0b:c4:33:04:de:28:8e:05:bc:e6:71:d5:1d:2c:9b:ad:57: 7a:6d:e0:a0:32:80:51:17:eb:d6:c2:48:ec:5c:f0:fd:05:72: 26:53:82:e6:c4:9a:46:1b:f2:14:3b:42:6e:1b:0c:26:b1:bc: a3:d1:b7:a3:e3:b3:91:1d:d7:57:47:32:34:af:30:5d:c3:bc: b8:0f:55:c0:59:93:e2:35:92:dc:5b:e0:7f:c9:18:5a:83:9e: 67:f8:f5:9f:1f:60:0c:36:2c:88:80:04:60:25:2e:0c:b3:ec: 61:a7:d5:01:29:05:0f:af:ea:84:1f:96:b9:66:24:d2:fb:71: 29:c9:5b:6e:b7:49:73:45:62:a9:03:54:2b:bf:d0:eb:5c:31: f7:e2:13:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1zruF5MtbRZkrsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk MWYwNjZmZDQtNDkxNS00YzkxLTgzYTctY2RkMWYwZTVjNjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkKd+3i/MrklRbYoju/GSns9q4yM0xT0Ghrh Ll0rU9rpC3CqG94Mcq6moCt9xA8eq4NfSGHOQLzEyFZIRCkqHc7dOQRdvEGbSsbr yUZ4Uo6NhvZFmCWnzrgltHqGM9A70BPm5lGZzVTkPR4kkJjlMsgklbZVmZRiJTXt JgfBP8OB3L4WPeSMqyGwUsqkwG7vvpGnA9t5glDemRuCRa0+voEKv9wrLscxnxUc V9NhO0WR4WHuREbfrTsfRFadjih2hvF2lSjwsC1gjpYsfSM6DbC4JJu5fpKw1UET fZyLYD5QMynNS2S9TA4VFACSoR9ctTzf6CpaBeHF7aevCo3tAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlVqBYbN7BAP2a1TTn+MDr4xer/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGQxMzVlMzktM2FjOS0z ZmY1LWI0ZWEtN2YyMzYxOGVkNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaKbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqk/ZCmkzF3aEJ9XWhCiYk4WCr56D7LqkBdwDcFjGkAdgmIgBrz5AXO fzskRWc0pNmzNn6ml8qi8T/SBUn12Q5kUmbnc72+r5HRQq/rJO2YSjQgglCW+/QS RJITNx8D/VObH9ZB7ZiZxHvF9lgLxDME3iiOBbzmcdUdLJutV3pt4KAygFEX69bC SOxc8P0FciZTgubEmkYb8hQ7Qm4bDCaxvKPRt6Pjs5Ed11dHMjSvMF3DvLgPVcBZ k+I1ktxb4H/JGFqDnmf49Z8fYAw2LIiABGAlLgyz7GGn1QEpBQ+v6oQflrlmJNL7 cSnJW263SXNFYqkDVCu/0OtcMffiE9k= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:50 2025 by rpki-client