$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/36dd5070-b711-3751-b1e2-9dd1191cbfdd.roa File: 36dd5070-b711-3751-b1e2-9dd1191cbfdd.roa (raw, json) Hash identifier: 2qPonzwh8SvcSgKOa09TAfRRHab6tvsW080T2PTB8cs= Subject key identifier: 48:13:0C:42:2A:9E:AD:D0:0D:85:95:2F:96:CB:20:4B:C3:35:E9:90 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584ADECBB63AF248F8F3A2618280 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/36dd5070-b711-3751-b1e2-9dd1191cbfdd.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 13414 IP address blocks: 104.244.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:b6:3a:f2:48:f8:f3:a2:61:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=cfcdafc3-89ad-4433-aac3-bf5b765a3c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:42:56:d8:0c:cd:4b:87:6f:1a:6e:2a:b8:e1: 99:fe:5c:ae:e0:ff:0d:e3:d2:66:30:80:61:e3:4d: e0:79:4d:62:f7:6c:a4:0a:f5:cc:25:fa:38:1e:7b: d4:44:83:42:b5:08:2b:39:dc:60:dd:1d:be:42:a4: f5:3a:b5:5f:27:bc:7e:d3:bf:49:d8:2a:b1:ae:68: e5:63:ea:db:3c:83:73:69:5c:6c:47:c9:32:ba:38: db:83:d3:a9:c3:5e:19:e3:b1:94:c0:c9:f4:f3:36: 06:79:78:9b:18:e8:c9:5d:f1:df:dd:96:90:29:7b: 9e:7b:2f:c8:95:41:4c:04:0b:4f:d7:a9:55:1f:bd: 23:0a:55:61:2f:93:ec:3c:7a:da:49:f7:d3:bf:33: ad:16:e7:15:74:e7:78:fa:ae:0e:36:0f:58:ca:34: 1b:bb:5f:83:3c:51:45:01:fa:fd:81:02:22:30:7d: 97:e2:9f:08:72:bb:70:91:de:ea:25:8d:02:b3:94: 6b:d7:9a:84:9e:3b:16:93:95:91:90:81:7e:08:77: ce:74:a5:cd:a0:eb:e9:d8:c8:56:3a:6d:38:78:8a: f1:30:89:a5:db:c8:52:68:f6:d6:82:e4:f5:b4:fa: 55:5c:01:d2:67:4d:fb:0f:ca:17:d1:e2:09:34:64: a7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:13:0C:42:2A:9E:AD:D0:0D:85:95:2F:96:CB:20:4B:C3:35:E9:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/36dd5070-b711-3751-b1e2-9dd1191cbfdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 104.244.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:cd:46:ad:f0:66:df:28:95:bd:0b:91:a7:64:f9:0e:e2:fd: 00:a5:79:e8:c4:d7:7f:9d:30:43:72:d7:99:be:38:68:3c:22: 24:5b:24:5c:d1:e1:48:0b:d7:a5:4b:58:81:3b:d4:52:7e:08: 15:af:2a:9b:7f:6a:bd:eb:ed:10:97:bd:ab:a9:3c:4d:e4:b1: 53:3b:bf:fa:35:f7:38:44:17:d9:f0:d8:60:ee:8c:a5:3a:c7: 85:72:8e:83:bc:f4:00:c2:a0:5e:ed:9e:90:c9:fe:1a:9a:0a: dd:99:db:cf:3a:4b:ca:55:6a:06:bf:d6:67:74:6b:65:8a:1b: 2b:89:52:ce:c1:04:29:25:1f:3e:b9:dd:45:7c:d9:4a:8a:76: 17:6e:1f:ba:23:9c:ca:81:4f:17:5c:49:84:be:54:31:90:e3: 1c:d2:b7:57:33:b6:f7:cb:d5:6d:e2:aa:7e:1a:aa:57:53:fe: 7d:fa:72:66:b6:11:7c:c6:9f:10:4d:e9:b6:23:4c:61:27:41: 9e:7d:33:36:ed:e5:cd:08:bd:54:ee:9b:f1:60:2c:d8:1b:ed: a6:c2:c5:b9:90:ef:19:38:e1:b5:b6:db:62:14:41:cb:e4:49: e8:11:35:cc:2b:32:4c:40:48:c3:94:d0:27:13:8f:c0:b4:8a: b2:72:1a:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey7Y68kj486JhgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk Y2ZjZGFmYzMtODlhZC00NDMzLWFhYzMtYmY1Yjc2NWEzYzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0JW2AzNS4dvGm4quOGZ/lyu4P8N49JmMIBh 403geU1i92ykCvXMJfo4HnvURINCtQgrOdxg3R2+QqT1OrVfJ7x+079J2Cqxrmjl Y+rbPINzaVxsR8kyujjbg9Opw14Z47GUwMn08zYGeXibGOjJXfHf3ZaQKXueey/I lUFMBAtP16lVH70jClVhL5PsPHraSffTvzOtFucVdOd4+q4ONg9YyjQbu1+DPFFF Afr9gQIiMH2X4p8Icrtwkd7qJY0Cs5Rr15qEnjsWk5WRkIF+CHfOdKXNoOvp2MhW Om04eIrxMIml28hSaPbWguT1tPpVXAHSZ037D8oX0eIJNGSnQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgTDEIqnq3QDYWVL5bLIEvDNemQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMzZkZDUwNzAtYjcxMS0z NzUxLWIxZTItOWRkMTE5MWNiZmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPQpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHNRq3wZt8olb0Lkadk+Q7i/QCleejE13+dMENy15m+OGg8IiRbJFzR 4UgL16VLWIE71FJ+CBWvKpt/ar3r7RCXvaupPE3ksVM7v/o19zhEF9nw2GDujKU6 x4VyjoO89ADCoF7tnpDJ/hqaCt2Z2886S8pVaga/1md0a2WKGyuJUs7BBCklHz65 3UV82UqKdhduH7ojnMqBTxdcSYS+VDGQ4xzSt1cztvfL1W3iqn4aqldT/n36cma2 EXzGnxBN6bYjTGEnQZ59Mzbt5c0IvVTum/FgLNgb7abCxbmQ7xk44bW222IUQcvk SegRNcwrMkxASMOU0CcTj8C0irJyGtQ= -----END CERTIFICATE-----Generated at Sun Nov 2 13:45:54 2025 by rpki-client