$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa File: a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa (raw, json) Hash identifier: KJYZAkhXVdMCbWKHPz4U3+hAVoQ4RKg+zlC3fjWLScc= Subject key identifier: 17:B1:94:2D:E2:44:3B:34:C2:35:2A:CE:97:D2:C4:72:24:52:C8:73 Certificate issuer: /CN=4d929512-7541-4207-be46-8af4cc4a4800 Certificate serial: 010D0C9F4328584B4081B331FAE26366F9566510 Authority key identifier: 50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 26658 IP address blocks: 104.232.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:b3:31:fa:e2:63:66:f9:56:65:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d929512-7541-4207-be46-8af4cc4a4800 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=a381dd87-f7ca-43fd-9219-100a80098fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c7:1b:a9:fa:d4:b3:6f:f1:df:a1:9d:24:69: 2f:e6:33:41:ef:7d:52:7c:4d:88:08:53:ed:f0:2a: 43:b6:86:55:71:a8:a9:2c:3c:55:d3:77:16:67:d6: 19:3d:e4:07:20:ff:bc:52:64:5d:98:d5:16:71:c7: 19:80:af:8b:e4:cb:54:16:9b:2e:e3:5d:b4:8f:83: 3e:ad:1d:dc:75:fd:22:ce:ca:4c:3d:b0:83:4e:c4: e7:43:7c:02:29:f7:9c:28:42:19:a9:3f:ef:44:db: c5:cd:80:d9:43:77:57:81:36:ca:56:63:1e:88:18: 30:be:f9:61:e7:0c:3b:40:60:e5:8c:36:fa:b5:03: ca:84:df:b9:fc:7c:ae:07:6c:05:d0:75:f4:b2:e8: 90:27:45:52:73:d9:34:fe:bb:2b:95:47:a1:f4:07: 80:4c:d2:47:8a:a0:52:fd:8c:f1:e7:21:b2:02:41: 88:ed:31:e2:ea:97:22:31:11:57:ff:9e:18:bd:b6: 40:ae:d2:9f:d9:a5:65:17:59:37:84:66:92:0b:8d: 68:08:c4:42:76:c4:ff:5a:bd:eb:31:7d:b9:d9:f0: 8f:2a:af:70:70:da:64:e0:66:95:ca:8a:6e:92:17: c1:52:31:0d:e5:38:87:3c:41:7e:5f:7a:90:c8:fb: 80:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B1:94:2D:E2:44:3B:34:C2:35:2A:CE:97:D2:C4:72:24:52:C8:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.crl X509v3 Authority Key Identifier: keyid:50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer sbgp-ipAddrBlock: critical IPv4: 104.232.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:7c:7b:69:40:b5:12:98:84:ea:4c:07:f2:eb:86:9e:49:b3: 92:bc:a4:35:5d:79:22:8e:53:e2:9f:d7:76:0e:1d:4b:43:3f: 9a:ca:72:f3:7c:02:78:9d:19:b6:09:df:de:b5:a3:55:c2:fe: 90:92:d4:69:3e:9e:60:60:9d:a2:e0:1e:39:a1:5e:97:99:b0: f3:4d:1e:5b:d4:62:61:b8:6e:11:ca:bf:1f:05:84:4e:4c:ae: 90:c6:f6:91:15:73:bb:5b:e8:14:63:f6:cc:16:86:6e:07:f5: 1f:a1:9f:fc:e0:7d:97:32:6e:80:e4:61:e9:49:e3:a9:56:6a: 37:ff:a6:1f:49:d8:b3:6d:5b:8f:d4:e8:2f:73:75:6b:6f:81: fe:87:90:2b:88:e2:fd:c3:11:1f:55:55:60:4f:2c:03:a9:48: 7e:2a:50:e0:b9:5c:31:4c:46:fa:c9:bf:a3:14:ff:37:7c:ce: 65:bc:c1:48:32:30:f2:2a:56:c8:ea:d5:ca:b8:e0:83:53:dd: 28:b2:af:a9:26:3f:56:b8:c5:24:66:d2:17:15:60:43:a3:4e: 7c:02:02:3c:50:bb:dc:31:ec:5c:35:72:e0:da:66:4c:b0:06: 98:03:9f:90:de:fc:35:c6:61:78:03:13:fc:9d:0a:f2:0e:8c: 5b:fa:bd:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgbMx+uJjZvlWZRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ5Mjk1MTItNzU0MS00MjA3LWJlNDYtOGFmNGNjNGE0 ODAwMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk YTM4MWRkODctZjdjYS00M2ZkLTkyMTktMTAwYTgwMDk4ZmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApscbqfrUs2/x36GdJGkv5jNB731SfE2ICFPt 8CpDtoZVcaipLDxV03cWZ9YZPeQHIP+8UmRdmNUWcccZgK+L5MtUFpsu4120j4M+ rR3cdf0izspMPbCDTsTnQ3wCKfecKEIZqT/vRNvFzYDZQ3dXgTbKVmMeiBgwvvlh 5ww7QGDljDb6tQPKhN+5/HyuB2wF0HX0suiQJ0VSc9k0/rsrlUeh9AeATNJHiqBS /Yzx5yGyAkGI7THi6pciMRFX/54YvbZArtKf2aVlF1k3hGaSC41oCMRCdsT/Wr3r MX252fCPKq9wcNpk4GaVyopukhfBUjEN5TiHPEF+X3qQyPuAWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBexlC3iRDs0wjUqzpfSxHIkUshzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80ZDky OTUxMi03NTQxLTQyMDctYmU0Ni04YWY0Y2M0YTQ4MDAvYTFhMjA2MGEtNjg4MS0z ZWY1LWFhN2MtMWMzOWY4MzliMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGQ5Mjk1MTItNzU0MS00MjA3LWJl NDYtOGFmNGNjNGE0ODAwLzRkOTI5NTEyLTc1NDEtNDIwNy1iZTQ2LThhZjRjYzRh NDgwMC5jcmwwHwYDVR0jBBgwFoAUUHbGsA5Pv93rRfzEAudPVstdNTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80ZDkyOTUxMi03NTQxLTQyMDctYmU0Ni04YWY0 Y2M0YTQ4MDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaOhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABR8e2lAtRKYhOpMB/Lrhp5Js5K8pDVdeSKOU+Kf13YOHUtDP5rKcvN8 AnidGbYJ3961o1XC/pCS1Gk+nmBgnaLgHjmhXpeZsPNNHlvUYmG4bhHKvx8FhE5M rpDG9pEVc7tb6BRj9swWhm4H9R+hn/zgfZcyboDkYelJ46lWajf/ph9J2LNtW4/U 6C9zdWtvgf6HkCuI4v3DER9VVWBPLAOpSH4qUOC5XDFMRvrJv6MU/zd8zmW8wUgy MPIqVsjq1cq44INT3Siyr6kmP1a4xSRm0hcVYEOjTnwCAjxQu9wx7Fw1cuDaZkyw BpgDn5De/DXGYXgDE/ydCvIOjFv6vUU= -----END CERTIFICATE-----Generated at Fri Oct 10 03:57:02 2025 by rpki-client