$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/baee71ad-3baa-3dab-8533-57d28b98781b.roa File: baee71ad-3baa-3dab-8533-57d28b98781b.roa (raw, json) Hash identifier: 1lcAa5J1j4RR8LbxrKARzk947ufEK0UO2HTEJpR1zmM= Subject key identifier: 84:EF:81:82:D9:21:C1:12:B6:F6:E6:47:91:29:E5:57:EB:EC:22:FA Certificate issuer: /CN=39b2626e-a40d-46fc-b3c3-ff5a12195939 Certificate serial: 010D0C9F4328584AE9F6806EED1E1002DB0A4F70 Authority key identifier: 16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/baee71ad-3baa-3dab-8533-57d28b98781b.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 401707 IP address blocks: 104.232.11.0/24 maxlen: 24 2602:f899:fe::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:80:6e:ed:1e:10:02:db:0a:4f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39b2626e-a40d-46fc-b3c3-ff5a12195939 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=44e078f3-076c-4ac9-8a80-7fdb0eecfbb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:73:a9:ee:a8:cd:4e:ff:9b:bb:32:83:4a:37: 8f:ba:67:45:13:b5:14:be:c2:a4:30:d2:41:1b:c5: 63:70:6c:ef:d6:54:38:63:1a:c9:59:44:5e:76:45: 42:d0:41:00:f8:f7:a7:65:b1:d8:d8:d0:93:75:90: 40:99:32:19:1f:a8:86:47:d2:0b:dd:c1:15:8c:7e: 98:a1:9d:b0:af:51:b1:c6:16:95:59:a7:57:59:ca: e5:db:de:6f:58:ad:ac:fb:01:12:54:b4:ff:b8:6e: b9:42:7e:b8:01:56:c8:7b:49:17:b6:da:09:0f:0b: eb:64:6f:57:05:b4:06:b2:54:01:54:1d:c4:09:bc: 7b:41:e8:09:04:14:92:47:2e:a6:d8:ea:0b:d4:84: 3a:b7:76:54:1d:fe:f0:1d:76:74:81:3c:83:14:81: 4e:07:52:4f:a2:4e:42:09:8c:77:08:b6:86:80:3c: 54:13:8b:f0:32:04:a2:7b:ba:05:20:57:5d:4c:61: 19:b2:89:8d:49:6d:13:3f:e6:a9:c0:12:40:f4:05: 61:4c:30:e7:ac:96:5f:8d:5d:4b:cf:77:1e:65:f6: 92:f4:a0:f6:50:2b:e7:1d:1d:6e:8f:8a:aa:76:a1: 36:b5:28:63:b3:25:7d:2d:0c:21:97:fb:7e:f9:b7: 70:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:EF:81:82:D9:21:C1:12:B6:F6:E6:47:91:29:E5:57:EB:EC:22:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/baee71ad-3baa-3dab-8533-57d28b98781b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.crl X509v3 Authority Key Identifier: keyid:16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer sbgp-ipAddrBlock: critical IPv4: 104.232.11.0/24 IPv6: 2602:f899:fe::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:5d:84:c0:70:b4:c8:44:cd:4c:68:5a:9b:3d:01:ad:bf:98: 9f:40:20:50:47:41:06:05:fb:e6:d9:18:ad:b6:d2:57:4c:f1: 17:ee:cd:82:84:41:02:c8:ac:ba:b7:66:89:4d:56:de:dc:7a: ff:89:fb:04:fa:67:b5:ae:e1:9b:77:76:4b:90:d9:13:58:9d: 5b:b9:46:12:09:c3:6c:19:c5:0c:7f:9e:2e:5f:63:45:e9:d2: 94:97:59:12:d9:9d:cb:42:1d:90:99:ad:4c:14:90:38:3c:c3: 1f:04:75:45:8f:ce:8d:c2:92:17:e1:31:f5:eb:f3:86:10:82: 14:c8:20:38:35:31:0f:bb:dc:c6:b8:a6:bd:c0:28:ca:6e:7f: 29:fa:2f:40:cc:6e:d8:af:c3:3c:91:f7:5b:17:54:79:c4:fb: 2e:cc:be:0a:5f:47:62:20:25:a0:37:43:1c:d6:5e:7b:a8:bb: d1:5d:23:86:a9:33:11:60:84:f7:33:cd:52:9e:07:73:11:75: 70:3f:b8:50:26:97:fd:06:07:6c:a4:6c:5d:45:56:21:1b:2b: aa:d6:2d:d1:3e:92:80:41:85:96:b3:82:2e:d1:b9:03:84:d1: 10:21:7e:d4:f9:49:53:a8:89:c7:b8:22:6a:ea:75:e3:7a:d9: 98:bf:e2:2d -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWErp9oBu7R4QAtsKT3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzliMjYyNmUtYTQwZC00NmZjLWIzYzMtZmY1YTEyMTk1 OTM5MB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk NDRlMDc4ZjMtMDc2Yy00YWM5LThhODAtN2ZkYjBlZWNmYmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHOp7qjNTv+buzKDSjePumdFE7UUvsKkMNJB G8VjcGzv1lQ4YxrJWURedkVC0EEA+PenZbHY2NCTdZBAmTIZH6iGR9IL3cEVjH6Y oZ2wr1GxxhaVWadXWcrl295vWK2s+wESVLT/uG65Qn64AVbIe0kXttoJDwvrZG9X BbQGslQBVB3ECbx7QegJBBSSRy6m2OoL1IQ6t3ZUHf7wHXZ0gTyDFIFOB1JPok5C CYx3CLaGgDxUE4vwMgSie7oFIFddTGEZsomNSW0TP+apwBJA9AVhTDDnrJZfjV1L z3ceZfaS9KD2UCvnHR1uj4qqdqE2tShjsyV9LQwhl/t++bdwMwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFITvgYLZIcEStvbmR5Ep5Vfr7CL6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOWIy NjI2ZS1hNDBkLTQ2ZmMtYjNjMy1mZjVhMTIxOTU5MzkvYmFlZTcxYWQtM2JhYS0z ZGFiLTg1MzMtNTdkMjhiOTg3ODFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzliMjYyNmUtYTQwZC00NmZjLWIz YzMtZmY1YTEyMTk1OTM5LzM5YjI2MjZlLWE0MGQtNDZmYy1iM2MzLWZmNWExMjE5 NTkzOS5jcmwwHwYDVR0jBBgwFoAUFlk2LKpBOBxjTu4FUkfAgNzA2YAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOWIyNjI2ZS1hNDBkLTQ2ZmMtYjNjMy1mZjVh MTIxOTU5MzkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAaOgLMA8E AgACMAkDBwEmAviZAP4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQV2EwHC0yETNTGhamz0Brb+Yn0AgUEdB BgX75tkYrbbSV0zxF+7NgoRBAsisurdmiU1W3tx6/4n7BPpnta7hm3d2S5DZE1id W7lGEgnDbBnFDH+eLl9jRenSlJdZEtmdy0IdkJmtTBSQODzDHwR1RY/OjcKSF+Ex 9evzhhCCFMggODUxD7vcxrimvcAoym5/KfovQMxu2K/DPJH3WxdUecT7Lsy+Cl9H YiAloDdDHNZee6i70V0jhqkzEWCE9zPNUp4HcxF1cD+4UCaX/QYHbKRsXUVWIRsr qtYt0T6SgEGFlrOCLtG5A4TRECF+1PlJU6iJx7giaup143rZmL/iLQ== -----END CERTIFICATE-----Generated at Mon Nov 3 04:37:52 2025 by rpki-client