$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/ad3cac97-50c6-306d-a306-8a017943b7f3.roa File: ad3cac97-50c6-306d-a306-8a017943b7f3.roa (raw, json) Hash identifier: diFhChZn4y8SemgD8uZOQgf0jY4uMnX7KCdCYgEt2sw= Subject key identifier: 44:43:67:9B:55:65:F4:9C:B6:C6:8A:ED:EA:AB:3B:52:23:EF:0F:B2 Certificate issuer: /CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c Certificate serial: 010D0C9F4328584B2B9199804C84D509426AC240 Authority key identifier: E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/ad3cac97-50c6-306d-a306-8a017943b7f3.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 40244 IP address blocks: 104.129.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:99:80:4c:84:d5:09:42:6a:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=a97d6619-f927-43a6-846f-254406cbafaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e0:00:91:ce:6f:42:53:60:f7:cf:ff:71:68: b9:9b:e0:f1:4c:e8:c8:fb:7e:3c:0f:67:de:29:bd: 18:cc:85:85:6b:78:aa:bf:a0:b9:4a:59:cb:b2:35: 28:ea:24:b4:89:ff:44:ee:67:16:bb:03:ac:45:91: 14:5d:1b:78:08:96:4d:e3:61:8b:f0:b6:61:41:29: 02:88:e4:70:7b:45:79:ad:8f:ef:df:b7:dd:05:4d: 28:e5:32:e4:3d:d1:24:f2:ac:a4:0f:2c:83:34:d4: af:4f:fa:95:0d:04:3a:3e:10:92:3f:74:07:bc:d3: 48:10:fe:d9:8a:2d:9b:15:4e:f6:91:48:d6:85:c8: 12:06:cc:50:75:7f:7c:07:82:a9:3c:94:a1:ce:c1: 02:71:34:1d:27:18:81:09:9f:c2:ec:e5:78:e5:50: 6d:76:69:26:e0:b4:ce:fc:52:61:f1:b9:f6:b2:48: df:93:fe:0f:49:7e:a7:89:3c:ea:ee:5b:4d:78:83: 01:78:5f:09:8c:1d:ea:37:1c:58:8e:35:03:80:93: 6d:41:74:34:87:27:3d:81:a6:7a:1b:ee:cc:9e:c3: 8f:b5:a2:c5:d8:48:ff:dc:94:53:b9:e0:50:26:03: ad:b3:cc:d0:fa:e2:2d:68:b1:17:fb:e4:40:19:8e: dc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:43:67:9B:55:65:F4:9C:B6:C6:8A:ED:EA:AB:3B:52:23:EF:0F:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/ad3cac97-50c6-306d-a306-8a017943b7f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl X509v3 Authority Key Identifier: keyid:E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer sbgp-ipAddrBlock: critical IPv4: 104.129.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:9c:9d:8d:ce:17:a4:b3:b8:44:cf:88:29:4e:e5:29:2c:30: 45:db:c8:97:19:00:ea:b9:b2:e6:2f:6e:de:78:ef:d5:46:58: 2a:89:6e:1d:0c:10:6a:7b:bf:1a:e7:c6:70:14:59:e2:71:b5: 66:5b:3d:31:3b:9c:19:8b:f2:a9:99:c0:64:5b:e0:45:69:72: 3f:d3:0b:36:6f:be:fd:0e:50:53:66:f5:ec:ff:f9:2d:43:79: 4f:4c:0e:3b:c6:72:26:d6:a4:b3:e7:72:3e:2d:86:f1:a7:d1: ad:02:17:f4:77:86:36:13:27:69:47:e2:76:1b:39:dd:f9:84: ec:83:40:e8:c4:5f:3b:f2:e3:9e:42:16:73:4a:00:30:d7:e7: 86:93:8f:1e:28:36:bc:a7:5b:ad:95:49:ca:03:ab:38:37:47: 18:f8:56:c7:7c:1f:46:3f:2f:44:4f:bc:e0:91:ea:66:73:45: ab:05:f6:c7:44:70:62:99:a5:c1:f4:c2:6e:3b:f2:4e:64:00: 76:e4:8c:cf:5c:ac:35:8b:6f:8c:8e:ef:8b:b3:d4:4f:3b:c1: 60:65:bd:80:2c:e1:27:0f:2f:f0:50:92:c8:54:5f:21:4d:1c: cd:d1:b1:8f:0f:0e:a8:f3:32:19:f4:9b:74:d7:bc:30:16:ea: 8d:66:96:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkZmATITVCUJqwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc0OTdhM2ItYTBmOS00NWJkLWFiMGItNGU3MzdjODgw NjNjMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk YTk3ZDY2MTktZjkyNy00M2E2LTg0NmYtMjU0NDA2Y2JhZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+AAkc5vQlNg98//cWi5m+DxTOjI+348D2fe Kb0YzIWFa3iqv6C5SlnLsjUo6iS0if9E7mcWuwOsRZEUXRt4CJZN42GL8LZhQSkC iORwe0V5rY/v37fdBU0o5TLkPdEk8qykDyyDNNSvT/qVDQQ6PhCSP3QHvNNIEP7Z ii2bFU72kUjWhcgSBsxQdX98B4KpPJShzsECcTQdJxiBCZ/C7OV45VBtdmkm4LTO /FJh8bn2skjfk/4PSX6niTzq7ltNeIMBeF8JjB3qNxxYjjUDgJNtQXQ0hyc9gaZ6 G+7MnsOPtaLF2Ej/3JRTueBQJgOts8zQ+uItaLEX++RAGY7cYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERDZ5tVZfSctsaK7eqrO1Ij7w+yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzQ5 N2EzYi1hMGY5LTQ1YmQtYWIwYi00ZTczN2M4ODA2M2MvYWQzY2FjOTctNTBjNi0z MDZkLWEzMDYtOGEwMTc5NDNiN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjc0OTdhM2ItYTBmOS00NWJkLWFi MGItNGU3MzdjODgwNjNjL2I3NDk3YTNiLWEwZjktNDViZC1hYjBiLTRlNzM3Yzg4 MDYzYy5jcmwwHwYDVR0jBBgwFoAU5diIGp8HiJED/JAy72HfTKkW/RYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzQ5N2EzYi1hMGY5LTQ1YmQtYWIwYi00ZTcz N2M4ODA2M2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHicnY3OF6SzuETPiClO5SksMEXbyJcZAOq5suYvbt5479VGWCqJbh0M EGp7vxrnxnAUWeJxtWZbPTE7nBmL8qmZwGRb4EVpcj/TCzZvvv0OUFNm9ez/+S1D eU9MDjvGcibWpLPncj4thvGn0a0CF/R3hjYTJ2lH4nYbOd35hOyDQOjEXzvy455C FnNKADDX54aTjx4oNrynW62VScoDqzg3Rxj4Vsd8H0Y/L0RPvOCR6mZzRasF9sdE cGKZpcH0wm478k5kAHbkjM9crDWLb4yO74uz1E87wWBlvYAs4ScPL/BQkshUXyFN HM3RsY8PDqjzMhn0m3TXvDAW6o1mll8= -----END CERTIFICATE-----Generated at Fri Oct 10 21:33:57 2025 by rpki-client