$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/068bf0f2-5ac3-35b6-9338-d46e998042f4.roa File: 068bf0f2-5ac3-35b6-9338-d46e998042f4.roa (raw, json) Hash identifier: 9obhsUVcDb5uJ+ABsDCOVMBZ4r2qu11uHxSw1e6AZpQ= Subject key identifier: E7:50:02:AC:B3:56:A3:FC:F4:46:20:59:CE:DA:47:71:7D:9A:88:F8 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584B6ED2BB0ADF2AF49DA88B4A80 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/068bf0f2-5ac3-35b6-9338-d46e998042f4.roa Signing time: Mon 06 Oct 2025 15:11:13 +0000 ROA not before: Mon 06 Oct 2025 15:11:13 +0000 ROA not after: Sun 04 Jan 2026 16:11:13 +0000 asID: 834 IP address blocks: 104.241.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:d2:bb:0a:df:2a:f4:9d:a8:8b:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Oct 6 15:11:13 2025 GMT Not After : Jan 4 16:11:13 2026 GMT Subject: CN=7cbc7a4a-3312-47bc-8492-6c678277e002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:12:c4:76:1b:37:9c:c6:9d:36:6e:1b:71:3d: 8a:dd:52:85:de:fb:81:84:4f:f8:bc:c8:96:f3:f6: 81:1b:ed:44:ee:66:66:49:a9:a0:2c:d6:ec:bf:76: f0:d3:39:8b:cf:66:8c:97:7e:b8:b2:4a:88:a1:07: 11:05:b3:06:c8:ac:88:15:3a:25:c5:f6:9c:ef:b7: 73:c2:b3:f5:8c:4f:b4:e0:ef:29:8d:db:a4:0c:ab: d1:73:2d:3d:2d:d2:a9:07:08:3e:1d:fc:4d:7f:63: 84:8b:1f:bc:29:db:9d:01:fa:87:a3:9a:74:51:b9: 28:67:4c:29:3c:cc:88:80:f1:42:9e:48:3c:48:6a: 84:a5:f6:f6:5a:e3:46:ae:1a:26:3c:9b:fd:17:6b: f4:6a:dc:3c:54:67:c0:71:06:80:f8:4b:9a:d2:a3: 40:4e:ec:c2:30:a2:00:22:97:f9:f6:85:c4:f1:fc: 17:f1:f7:fd:b3:95:cd:9f:1a:0d:3e:3a:f6:e6:ed: 16:11:f6:5c:ca:5a:50:c1:96:32:4e:68:5e:58:e1: 86:7d:c6:5f:e0:71:5c:61:4c:05:7e:10:de:3e:f4: 96:0b:99:1c:a3:01:e0:7e:06:b2:59:64:e6:1a:c9: 8d:4a:9e:f3:d7:89:55:44:c7:3f:34:93:82:ed:e3: 90:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:50:02:AC:B3:56:A3:FC:F4:46:20:59:CE:DA:47:71:7D:9A:88:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/068bf0f2-5ac3-35b6-9338-d46e998042f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 104.241.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ab:ab:22:1a:31:70:b7:4a:61:c2:21:32:e9:33:16:41:f6: dc:85:62:15:dd:7e:85:98:6a:1d:44:71:39:4f:db:10:e9:13: b6:93:91:84:88:f6:ef:d4:62:e7:6b:47:5f:d2:f8:82:16:b1: 42:2d:43:9a:e6:7c:ec:0e:68:aa:af:74:97:0f:46:aa:95:1f: 7d:77:51:6c:f7:1e:50:c0:05:e7:f5:89:db:9d:93:ce:7f:07: 94:a0:80:27:a0:28:58:74:cd:af:43:46:c3:1b:9f:2d:ad:9e: 08:75:fc:af:1e:a5:f4:2e:99:82:81:36:be:95:1c:ad:15:4d: 5a:1b:c1:d8:0b:32:72:52:46:15:d8:f7:a4:6c:a9:a6:f7:93: cd:4c:5c:bc:b0:a1:3f:93:35:2e:26:da:20:91:6f:70:91:78: 11:68:33:fc:e5:e4:9e:0c:22:7d:1d:03:c2:61:d3:b5:cc:1a: b0:02:f7:8c:a0:4f:05:3e:d1:36:7d:05:3e:56:80:ca:4a:82: 6a:7e:39:dc:e0:96:48:69:14:fb:08:25:94:b1:89:f0:29:3c: d2:f5:da:ee:a5:0a:94:97:a5:7c:42:ce:09:1b:9e:c4:01:6f: 65:b2:6d:44:67:60:cc:0d:7c:ba:b6:44:72:89:af:70:c9:b6: c1:c7:4d:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtu0rsK3yr0naiLSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MTAwNjE1MTExM1oXDTI2MDEwNDE2MTExM1owLzEtMCsGA1UEAxMk N2NiYzdhNGEtMzMxMi00N2JjLTg0OTItNmM2NzgyNzdlMDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhLEdhs3nMadNm4bcT2K3VKF3vuBhE/4vMiW 8/aBG+1E7mZmSamgLNbsv3bw0zmLz2aMl364skqIoQcRBbMGyKyIFTolxfac77dz wrP1jE+04O8pjdukDKvRcy09LdKpBwg+HfxNf2OEix+8KdudAfqHo5p0UbkoZ0wp PMyIgPFCnkg8SGqEpfb2WuNGrhomPJv9F2v0atw8VGfAcQaA+Eua0qNATuzCMKIA Ipf59oXE8fwX8ff9s5XNnxoNPjr25u0WEfZcylpQwZYyTmheWOGGfcZf4HFcYUwF fhDePvSWC5kcowHgfgayWWTmGsmNSp7z14lVRMc/NJOC7eOQyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdQAqyzVqP89EYgWc7aR3F9moj4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMDY4YmYwZjItNWFjMy0z NWI2LTkzMzgtZDQ2ZTk5ODA0MmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPGDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOrqyIaMXC3SmHCITLpMxZB9tyFYhXdfoWYah1EcTlP2xDpE7aTkYSI 9u/UYudrR1/S+IIWsUItQ5rmfOwOaKqvdJcPRqqVH313UWz3HlDABef1idudk85/ B5SggCegKFh0za9DRsMbny2tngh1/K8epfQumYKBNr6VHK0VTVobwdgLMnJSRhXY 96Rsqab3k81MXLywoT+TNS4m2iCRb3CReBFoM/zl5J4MIn0dA8Jh07XMGrAC94yg TwU+0TZ9BT5WgMpKgmp+OdzglkhpFPsIJZSxifApPNL12u6lCpSXpXxCzgkbnsQB b2WybURnYMwNfLq2RHKJr3DJtsHHTcc= -----END CERTIFICATE-----Generated at Fri Oct 10 17:47:32 2025 by rpki-client