$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/caafa691-29e7-3acd-9bec-67691a876be2.roa File: caafa691-29e7-3acd-9bec-67691a876be2.roa (raw, json) Hash identifier: 7Fw3aUmFbFqPg4Ip2ko6J9pkA6G6QcjyqIskG3jcxKU= Subject key identifier: 83:FB:FA:C3:AF:1B:22:B7:D3:DC:45:4B:1C:FA:34:38:9D:1F:B7:1D Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Certificate serial: 010D0C9F4328584B0E4152108B6CD0EF0C859D40 Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/caafa691-29e7-3acd-9bec-67691a876be2.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 23470 IP address blocks: 104.128.72.0/24 maxlen: 24 104.128.73.0/24 maxlen: 24 104.128.74.0/24 maxlen: 24 104.128.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:52:10:8b:6c:d0:ef:0c:85:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=c8c3f9ec-cc25-47f3-ae9a-5e20f66949e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:87:d2:62:bc:4f:77:f6:de:aa:56:3c:1b:38: 5d:96:ae:b4:7b:27:7f:4f:79:fb:4e:ae:ba:d8:74: cd:ee:96:a3:09:b5:ab:b4:2e:33:1d:65:8e:1f:f3: 59:e3:b8:00:d2:b6:2d:5c:f7:0b:c1:9c:b5:4b:84: 8a:b4:33:2e:2e:d8:08:e5:6c:0e:44:39:c9:6e:7f: bd:bf:fd:5e:af:a7:a2:78:20:c4:c4:20:80:da:2e: 3b:ce:3b:23:b2:94:6f:65:3b:2c:88:d7:6e:e7:8a: 51:37:78:8a:be:69:14:9b:a5:fe:1f:c2:6f:fb:e7: 61:7c:44:f0:f0:66:4a:1d:e9:4a:0f:b6:ca:98:91: 95:ad:78:79:70:95:d7:2e:96:19:76:4e:82:66:3f: fc:b8:e3:71:29:e9:3e:09:29:6a:6d:af:d0:66:31: f0:94:aa:3e:ce:5d:b0:3d:2e:a6:33:38:22:dc:11: fc:3d:f7:e9:13:d4:e9:84:80:2f:a1:39:7b:34:eb: ff:19:63:de:24:c4:b1:37:95:a9:58:ed:f7:67:23: 49:5c:ce:05:e0:11:d3:b2:5a:64:0a:0e:43:a0:f3: 0e:95:f9:da:90:bd:7d:b9:29:f1:2d:87:60:6d:93: dc:51:06:b5:00:32:17:4e:aa:45:dd:99:ea:07:40: 5e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FB:FA:C3:AF:1B:22:B7:D3:DC:45:4B:1C:FA:34:38:9D:1F:B7:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/caafa691-29e7-3acd-9bec-67691a876be2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl X509v3 Authority Key Identifier: keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer sbgp-ipAddrBlock: critical IPv4: 104.128.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:5e:2e:14:d6:45:16:7a:b2:78:74:47:8a:13:89:7a:29:76: bf:52:58:2a:79:0f:fd:a8:89:2d:98:ef:ac:ab:51:6f:4f:63: fc:f0:3c:b9:0b:ac:af:e7:2c:a1:f7:c2:0f:3b:0e:f1:ea:dd: 38:28:b1:cc:75:a9:84:03:94:58:ce:de:a0:40:ce:6b:ae:92: b1:5f:d0:8e:a7:1d:d2:d6:81:36:8e:21:f5:a5:53:55:5e:87: 5e:6e:5f:1c:77:0b:b8:e8:2e:61:14:55:60:14:a5:a9:45:dd: fc:8b:06:1d:df:48:6c:34:45:80:8f:ae:9e:87:e9:6a:c0:d8: 52:12:3b:7d:31:d3:67:cf:9a:70:04:b8:7e:81:0d:09:3d:f1: 23:f6:62:9e:20:7f:95:93:56:d7:ea:05:f8:e8:f0:97:b7:ea: 32:76:1f:28:ac:b3:18:99:38:72:5f:42:9b:f8:db:91:9b:20: cc:b2:9e:ca:cf:02:40:36:9c:a2:69:ea:37:b5:e9:23:fd:2f: c6:79:bb:c5:83:d2:40:3d:fd:e3:8e:c7:ee:40:f8:a9:21:da: 1c:e8:1b:63:05:4e:62:fa:2d:9c:b5:3b:25:34:43:0c:ac:82: ef:30:62:31:1d:6a:90:12:23:e8:55:a1:6b:1c:eb:4e:d3:d9: ec:f5:6d:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQVIQi2zQ7wyFnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy NTQ0MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk YzhjM2Y5ZWMtY2MyNS00N2YzLWFlOWEtNWUyMGY2Njk0OWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiofSYrxPd/beqlY8Gzhdlq60eyd/T3n7Tq66 2HTN7pajCbWrtC4zHWWOH/NZ47gA0rYtXPcLwZy1S4SKtDMuLtgI5WwORDnJbn+9 v/1er6eieCDExCCA2i47zjsjspRvZTssiNdu54pRN3iKvmkUm6X+H8Jv++dhfETw 8GZKHelKD7bKmJGVrXh5cJXXLpYZdk6CZj/8uONxKek+CSlqba/QZjHwlKo+zl2w PS6mMzgi3BH8PffpE9TphIAvoTl7NOv/GWPeJMSxN5WpWO33ZyNJXM4F4BHTslpk Cg5DoPMOlfnakL19uSnxLYdgbZPcUQa1ADIXTqpF3ZnqB0BeaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIP7+sOvGyK309xFSxz6NDidH7cdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5 YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvY2FhZmE2OTEtMjllNy0z YWNkLTliZWMtNjc2OTFhODc2YmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2 ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx ZGJmYzI1NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADReLhTWRRZ6snh0R4oTiXopdr9SWCp5D/2oiS2Y76yrUW9PY/zwPLkL rK/nLKH3wg87DvHq3Tgoscx1qYQDlFjO3qBAzmuukrFf0I6nHdLWgTaOIfWlU1Ve h15uXxx3C7joLmEUVWAUpalF3fyLBh3fSGw0RYCPrp6H6WrA2FISO30x02fPmnAE uH6BDQk98SP2Yp4gf5WTVtfqBfjo8Je36jJ2HyissxiZOHJfQpv425GbIMyynsrP AkA2nKJp6je16SP9L8Z5u8WD0kA9/eOOx+5A+Kkh2hzoG2MFTmL6LZy1OyU0Qwys gu8wYjEdapASI+hVoWsc607T2ez1beA= -----END CERTIFICATE-----Generated at Thu Oct 9 01:22:51 2025 by rpki-client