$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/0420671e-3982-3344-9b47-51bea31f38a2.roa File: 0420671e-3982-3344-9b47-51bea31f38a2.roa (raw, json) Hash identifier: 3H0l06WX3Tu4Je0OgIDKUXlY53taS8b6x06yi8puQeI= Subject key identifier: 7F:AE:A8:C5:55:DF:FA:9D:DF:32:E6:CC:98:9D:E9:7F:4F:E8:99:19 Certificate issuer: /CN=61078829-6930-46b0-9ac8-91898d36b056 Certificate serial: 010D0C9F4328584B434C69FBDC71C97A9ABDDB78 Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/0420671e-3982-3344-9b47-51bea31f38a2.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 33548 IP address blocks: 104.200.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:69:fb:dc:71:c9:7a:9a:bd:db:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=2d02faee-8c69-4367-a23a-e1f34ceb11bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:86:99:1f:3c:0d:6e:6f:43:19:8e:42:2d:bb: 3a:9b:73:97:74:de:b8:f1:bb:10:2d:c7:72:1f:b9: c9:84:48:9b:3f:9c:1b:e2:58:bf:99:9a:2a:39:96: dd:eb:d1:99:65:20:95:43:04:57:f8:65:21:85:ed: 08:b1:3a:04:d4:e2:3c:e2:32:d1:b4:d5:68:6a:e2: 07:3a:07:8a:20:2c:e9:a9:c9:19:3c:40:6c:8c:d9: df:74:12:4e:92:68:1f:ed:78:ba:fc:8e:6f:85:09: 9c:db:db:64:ab:92:04:c0:f0:d0:96:a4:db:05:b5: cb:fd:55:3d:6c:bb:ce:4a:76:2a:73:96:52:94:c5: 53:85:ac:90:ce:0f:22:49:09:bb:20:2b:78:95:43: d7:9f:2e:cf:2a:ea:aa:c7:44:5f:6f:34:19:9a:66: e7:cd:eb:5d:8e:bb:ba:3c:62:dd:a8:a9:74:92:2a: 75:6a:1d:85:46:2c:d1:47:8c:2f:0d:49:ce:72:ad: a5:b5:1a:5e:e8:ec:72:48:1d:ed:90:f2:90:2c:6d: a5:73:98:ed:de:76:de:59:95:24:24:80:9b:88:af: ac:c5:3b:19:60:35:53:8d:ba:1e:91:5d:9e:99:6c: 0d:73:83:17:4c:f6:86:fe:13:fa:87:31:77:c6:a8: aa:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:AE:A8:C5:55:DF:FA:9D:DF:32:E6:CC:98:9D:E9:7F:4F:E8:99:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/0420671e-3982-3344-9b47-51bea31f38a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl X509v3 Authority Key Identifier: keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer sbgp-ipAddrBlock: critical IPv4: 104.200.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:da:e8:56:3d:0b:8b:48:bd:20:cf:dd:14:3f:0d:70:e9:dd: cb:10:85:ce:14:ba:c0:ba:78:c9:b3:c6:6a:be:aa:a3:76:6d: 8f:89:d3:03:71:84:5f:68:88:7e:ac:9d:7c:7e:64:86:bb:68: 4b:ed:00:16:61:6a:cd:12:ee:ff:b4:99:e1:e9:7b:95:c8:9e: 17:10:04:4c:86:71:39:06:98:d3:75:87:63:53:f0:4a:c7:bd: 98:29:ec:14:17:b6:05:08:4f:40:a5:56:e8:98:9a:46:22:3c: 10:e4:d8:be:25:77:ab:1a:b3:a6:7b:d1:c9:e5:d1:4d:f2:cc: 5a:a8:24:ad:ac:6c:23:40:3a:52:f4:53:e4:1a:74:a0:8b:e0: e6:f3:22:cc:ff:33:2a:d2:86:93:18:ff:58:e9:04:e8:b2:42: 0a:f8:81:e1:d7:df:71:bd:bf:75:b0:71:4c:35:a0:62:0b:cc: 3f:a3:36:b6:01:cc:2b:5c:6d:22:41:ff:4a:40:6d:05:a7:37: 15:d1:54:cf:12:69:61:0c:3f:46:0b:df:8e:98:44:b1:d9:6b: dc:51:0a:a1:b6:9a:23:59:84:92:93:a0:4a:aa:e6:29:f1:86: 9a:0c:ca:d8:c4:a4:ad:ea:93:17:6b:99:a9:19:8b:53:5b:88: f2:58:e0:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGn73HHJepq923gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjEwNzg4MjktNjkzMC00NmIwLTlhYzgtOTE4OThkMzZi MDU2MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MmQwMmZhZWUtOGM2OS00MzY3LWEyM2EtZTFmMzRjZWIxMWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4aZHzwNbm9DGY5CLbs6m3OXdN648bsQLcdy H7nJhEibP5wb4li/mZoqOZbd69GZZSCVQwRX+GUhhe0IsToE1OI84jLRtNVoauIH OgeKICzpqckZPEBsjNnfdBJOkmgf7Xi6/I5vhQmc29tkq5IEwPDQlqTbBbXL/VU9 bLvOSnYqc5ZSlMVThayQzg8iSQm7ICt4lUPXny7PKuqqx0RfbzQZmmbnzetdjru6 PGLdqKl0kip1ah2FRizRR4wvDUnOcq2ltRpe6OxySB3tkPKQLG2lc5jt3nbeWZUk JICbiK+sxTsZYDVTjboekV2emWwNc4MXTPaG/hP6hzF3xqiqcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+uqMVV3/qd3zLmzJid6X9P6JkZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MTA3 ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5OGQzNmIwNTYvMDQyMDY3MWUtMzk4Mi0z MzQ0LTliNDctNTFiZWEzMWYzOGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjEwNzg4MjktNjkzMC00NmIwLTlh YzgtOTE4OThkMzZiMDU2LzYxMDc4ODI5LTY5MzAtNDZiMC05YWM4LTkxODk4ZDM2 YjA1Ni5jcmwwHwYDVR0jBBgwFoAUIEXV2ie7S4lN1IK5ZqALwLa2VKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82MTA3ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5 OGQzNmIwNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLa6FY9C4tIvSDP3RQ/DXDp3csQhc4UusC6eMmzxmq+qqN2bY+J0wNx hF9oiH6snXx+ZIa7aEvtABZhas0S7v+0meHpe5XInhcQBEyGcTkGmNN1h2NT8ErH vZgp7BQXtgUIT0ClVuiYmkYiPBDk2L4ld6sas6Z70cnl0U3yzFqoJK2sbCNAOlL0 U+QadKCL4ObzIsz/MyrShpMY/1jpBOiyQgr4geHX33G9v3WwcUw1oGILzD+jNrYB zCtcbSJB/0pAbQWnNxXRVM8SaWEMP0YL346YRLHZa9xRCqG2miNZhJKToEqq5inx hpoMytjEpK3qkxdrmakZi1NbiPJY4Ck= -----END CERTIFICATE-----Generated at Sat Oct 11 03:33:44 2025 by rpki-client