$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/bf32a41d-c41b-39f6-baf6-ab0c6fa8f238.roa File: bf32a41d-c41b-39f6-baf6-ab0c6fa8f238.roa (raw, json) Hash identifier: aaty5xrRHDN2BxjMVT7K++oK9M5sFyHfsoS7musj7bg= Subject key identifier: 20:2B:87:CA:F0:A8:71:79:07:65:41:05:69:73:60:C8:07:AB:29:8D Certificate issuer: /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c Certificate serial: 010D0C9F4328584B13D6C87B9979E53A014148C0 Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/bf32a41d-c41b-39f6-baf6-ab0c6fa8f238.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 393653 IP address blocks: 104.128.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c8:7b:99:79:e5:3a:01:41:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=6867142c-2602-4020-8270-ddc49bb3feef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4f:f2:c7:ee:06:45:1f:3d:9e:2b:31:95:27: 6a:45:bf:c3:46:0f:2e:6f:a4:8f:c9:e4:0c:af:5b: 7c:a2:f4:97:26:bf:f8:65:9c:bd:a4:e9:82:64:21: fb:cf:04:37:f8:b1:83:5d:31:b2:a9:46:82:4c:0b: 26:19:9e:a5:7e:7b:fa:28:63:96:75:6c:fd:b5:6a: 86:ce:8b:29:79:c9:d4:b9:23:6e:7a:1c:98:61:78: 13:d2:a8:63:ac:76:68:48:79:ef:0e:ff:23:22:d2: 18:0b:34:3a:ea:54:a0:79:b3:4e:df:df:76:49:ba: b4:ce:55:54:7b:80:81:e0:11:af:90:48:98:f2:d2: 15:82:35:a1:de:13:f6:f1:ec:f2:57:77:e2:4a:30: 0c:b9:c2:1c:9c:1d:0a:75:34:21:34:fb:b4:4d:73: 32:b1:d8:31:ae:1b:08:41:1c:04:cb:96:dd:de:fb: 53:0f:ef:36:95:3a:6e:cb:57:ed:3e:d0:b1:12:27: 19:33:26:ef:a6:aa:ba:8c:a6:d6:c7:77:67:6c:b1: a8:b4:f4:4e:0d:44:aa:62:ff:fd:6d:c6:dd:17:87: 9c:5a:c4:f1:80:c6:10:41:45:0c:bc:df:da:ed:ab: 5f:c2:fa:25:16:fc:0f:9f:9b:c5:68:7e:48:0e:88: d3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2B:87:CA:F0:A8:71:79:07:65:41:05:69:73:60:C8:07:AB:29:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/bf32a41d-c41b-39f6-baf6-ab0c6fa8f238.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl X509v3 Authority Key Identifier: keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer sbgp-ipAddrBlock: critical IPv4: 104.128.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:7d:f0:84:b8:34:a6:0a:87:51:92:06:fd:2a:0b:25:d0:88: e0:94:f2:67:a5:10:98:9c:79:88:65:a2:c2:c8:4c:35:80:c6: 82:bd:69:9b:86:8a:47:f7:4d:43:99:2f:93:67:8f:09:8a:21: 98:35:2a:e4:4b:ce:f1:cb:d9:7c:b3:c9:05:62:98:77:06:30: b4:0b:d1:48:da:6e:76:92:cd:65:0f:58:46:d5:7a:ab:99:38: f2:f4:61:55:2d:da:05:fa:e7:4c:87:26:d1:74:b1:a8:b2:49: 6e:6b:54:af:ae:f5:9c:b3:ea:db:b1:98:d8:8b:c7:87:df:71: d4:03:18:71:e4:2d:9d:00:ce:be:d5:a1:61:8f:3a:20:f2:8b: 9c:49:63:27:ad:f3:93:80:9f:d6:f8:8f:9b:40:3b:c4:4e:b5: 21:24:4d:5c:24:1c:0f:df:ee:93:1f:0d:df:1a:d6:bf:dc:5f: 81:a6:38:2e:ac:74:12:11:f6:cb:7a:93:ad:c5:31:ce:11:23: 95:1d:e0:e3:f4:6a:97:15:43:0d:e4:48:19:6a:3c:b9:7f:f5: 48:f8:ef:de:97:55:87:c2:ae:21:01:00:34:32:08:39:f8:27: e5:3e:54:71:05:ed:8d:92:ef:9b:35:7b:a2:0a:1f:5a:1c:1d: eb:16:b6:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sh7mXnlOgFBSMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzViMmU5YjUtZjFhYS00MWRlLThiZGMtNzA1OGU1OGVm ODFjMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk Njg2NzE0MmMtMjYwMi00MDIwLTgyNzAtZGRjNDliYjNmZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU/yx+4GRR89nisxlSdqRb/DRg8ub6SPyeQM r1t8ovSXJr/4ZZy9pOmCZCH7zwQ3+LGDXTGyqUaCTAsmGZ6lfnv6KGOWdWz9tWqG zospecnUuSNuehyYYXgT0qhjrHZoSHnvDv8jItIYCzQ66lSgebNO3992Sbq0zlVU e4CB4BGvkEiY8tIVgjWh3hP28ezyV3fiSjAMucIcnB0KdTQhNPu0TXMysdgxrhsI QRwEy5bd3vtTD+82lTpuy1ftPtCxEicZMybvpqq6jKbWx3dnbLGotPRODUSqYv/9 bcbdF4ecWsTxgMYQQUUMvN/a7atfwvolFvwPn5vFaH5IDojTWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCArh8rwqHF5B2VBBWlzYMgHqymNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83NWIy ZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4ZTU4ZWY4MWMvYmYzMmE0MWQtYzQxYi0z OWY2LWJhZjYtYWIwYzZmYThmMjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzViMmU5YjUtZjFhYS00MWRlLThi ZGMtNzA1OGU1OGVmODFjLzc1YjJlOWI1LWYxYWEtNDFkZS04YmRjLTcwNThlNThl ZjgxYy5jcmwwHwYDVR0jBBgwFoAU56eLhm6ePsel2+WMY0Cly0mpS40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83NWIyZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4 ZTU4ZWY4MWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaICRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC598IS4NKYKh1GSBv0qCyXQiOCU8melEJiceYhlosLITDWAxoK9aZuG ikf3TUOZL5NnjwmKIZg1KuRLzvHL2XyzyQVimHcGMLQL0UjabnaSzWUPWEbVequZ OPL0YVUt2gX650yHJtF0saiySW5rVK+u9Zyz6tuxmNiLx4ffcdQDGHHkLZ0Azr7V oWGPOiDyi5xJYyet85OAn9b4j5tAO8ROtSEkTVwkHA/f7pMfDd8a1r/cX4GmOC6s dBIR9st6k63FMc4RI5Ud4OP0apcVQw3kSBlqPLl/9Uj4796XVYfCriEBADQyCDn4 J+U+VHEF7Y2S75s1e6IKH1ocHesWtpU= -----END CERTIFICATE-----Generated at Fri Oct 10 03:52:18 2025 by rpki-client