$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/129d7373-3a90-398c-a761-a7b9f06d6d3d.roa File: 129d7373-3a90-398c-a761-a7b9f06d6d3d.roa (raw, json) Hash identifier: QE9PEjW8cyyNOf0SDeynCiwRLhMbSTrenS7O/DfuJdk= Subject key identifier: F9:11:B7:94:2B:5F:21:6E:2D:3A:5D:F3:0D:96:07:C0:BD:87:82:09 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584A67145E0C6C97F8AC5DF18A80 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/129d7373-3a90-398c-a761-a7b9f06d6d3d.roa Signing time: Fri 04 Jul 2025 03:50:04 +0000 ROA not before: Fri 04 Jul 2025 03:50:04 +0000 ROA not after: Thu 02 Oct 2025 03:50:04 +0000 asID: 26658 IP address blocks: 104.232.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:67:14:5e:0c:6c:97:f8:ac:5d:f1:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Jul 4 03:50:04 2025 GMT Not After : Oct 2 03:50:04 2025 GMT Subject: CN=66b37e8f-ea64-4524-8d41-7e252c5be6df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1d:8d:74:3c:4e:c4:50:a1:0e:ed:3b:1b:34: cb:86:3d:de:dd:99:1c:b4:a5:d8:8e:de:c7:d9:9d: 1a:04:b4:a0:43:f2:25:2e:23:f1:cd:88:b8:d4:d2: 7b:f9:22:9a:5e:d3:a1:30:87:46:69:d1:ab:fe:43: a5:21:6d:8d:f9:b8:40:89:fb:0b:ca:ff:a3:bf:05: 84:ec:bc:ac:a9:93:46:94:1b:90:f6:ad:6f:81:44: d3:3d:84:24:1b:be:fc:4f:70:19:a6:41:a0:fc:48: 1f:e7:24:ac:1b:7d:64:30:59:42:7c:38:f7:21:7f: 52:fb:69:a5:2c:30:ad:09:a0:50:bb:b4:a2:ad:79: 32:fe:7a:fc:28:a7:bc:e6:ca:57:4d:74:47:7b:ec: 1b:8b:e7:b3:0c:c6:62:4b:f1:06:ab:a4:c5:01:13: 10:52:67:0b:48:26:42:df:3a:f1:12:b0:53:ef:b5: 7a:38:6f:e6:ea:61:54:f1:14:29:16:0a:4d:00:4b: 8e:fd:6c:2d:dc:90:84:93:eb:7b:bd:d7:c2:45:7b: 94:05:4e:a5:c3:1c:33:f2:9e:de:68:54:6d:d6:3f: c7:26:ad:00:1f:6a:45:c4:d1:73:3e:4f:6d:93:9d: 52:1a:d9:f8:74:6d:3b:7e:37:6a:f9:ba:e5:08:a8: 1d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:11:B7:94:2B:5F:21:6E:2D:3A:5D:F3:0D:96:07:C0:BD:87:82:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/129d7373-3a90-398c-a761-a7b9f06d6d3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.232.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:6b:c5:0a:26:39:8f:26:bd:3a:a9:4c:e5:29:1a:77:6b:43: 72:16:20:8a:e1:f4:f6:1e:df:ae:05:f7:16:cf:a8:bb:ab:94: f5:18:68:35:52:f1:5e:db:d5:a1:3b:57:8d:19:87:9c:48:e4: 57:97:24:38:3c:89:3a:e8:c3:a9:d8:4e:0f:59:30:93:02:a7: 9e:f5:50:74:dd:2c:d7:a0:f8:c5:3f:23:6a:27:e3:f3:8b:ed: f6:f4:13:71:9c:93:f4:2e:b1:5c:de:43:0a:fa:8f:e2:bc:a3: 2b:63:ba:e5:6b:14:2c:37:30:51:ca:c1:c5:5d:37:46:52:f2: 2b:b7:58:d4:dd:03:03:8a:bd:b1:73:f0:00:74:2a:ae:b3:17: 79:9b:4a:9c:a7:00:49:3f:38:79:e3:bb:4c:bd:70:c7:77:bd: 54:3f:72:04:c3:0e:30:cf:29:1f:d4:f4:c4:65:b0:62:b3:53: f6:b1:e3:e9:6b:15:4e:a5:a5:e8:16:2f:23:9d:25:3f:14:f2: 07:b6:e2:ef:38:6f:a5:56:71:16:b4:89:5a:fd:3f:ee:dd:11: a0:2d:77:a4:20:2a:c8:f8:6e:f1:9e:32:54:29:9f:63:d3:63: 7e:b4:bc:cf:20:85:32:a0:2c:16:65:d2:49:d9:dc:a6:f0:36: bd:ef:dd:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpnFF4MbJf4rF3xioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDcwNDAzNTAwNFoXDTI1MTAwMjAzNTAwNFowLzEtMCsGA1UEAxMk NjZiMzdlOGYtZWE2NC00NTI0LThkNDEtN2UyNTJjNWJlNmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgh2NdDxOxFChDu07GzTLhj3e3ZkctKXYjt7H 2Z0aBLSgQ/IlLiPxzYi41NJ7+SKaXtOhMIdGadGr/kOlIW2N+bhAifsLyv+jvwWE 7LysqZNGlBuQ9q1vgUTTPYQkG778T3AZpkGg/Egf5ySsG31kMFlCfDj3IX9S+2ml LDCtCaBQu7SirXky/nr8KKe85spXTXRHe+wbi+ezDMZiS/EGq6TFARMQUmcLSCZC 3zrxErBT77V6OG/m6mFU8RQpFgpNAEuO/Wwt3JCEk+t7vdfCRXuUBU6lwxwz8p7e aFRt1j/HJq0AH2pFxNFzPk9tk51SGtn4dG07fjdq+brlCKgdbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkRt5QrXyFuLTpd8w2WB8C9h4IJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvMTI5ZDczNzMtM2E5MC0z OThjLWE3NjEtYTdiOWYwNmQ2ZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaOhIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5rxQomOY8mvTqpTOUpGndrQ3IWIIrh9PYe364F9xbPqLurlPUYaDVS 8V7b1aE7V40Zh5xI5FeXJDg8iTrow6nYTg9ZMJMCp571UHTdLNeg+MU/I2on4/OL 7fb0E3Gck/QusVzeQwr6j+K8oytjuuVrFCw3MFHKwcVdN0ZS8iu3WNTdAwOKvbFz 8AB0Kq6zF3mbSpynAEk/OHnju0y9cMd3vVQ/cgTDDjDPKR/U9MRlsGKzU/ax4+lr FU6lpegWLyOdJT8U8ge24u84b6VWcRa0iVr9P+7dEaAtd6QgKsj4bvGeMlQpn2PT Y360vM8ghTKgLBZl0knZ3KbwNr3v3dE= -----END CERTIFICATE-----Generated at Sun Jul 20 11:11:12 2025 by rpki-client