$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/29112fc4-2b50-3130-b410-4162d45a355e.roa File: 29112fc4-2b50-3130-b410-4162d45a355e.roa (raw, json) Hash identifier: d63ixWlqrvB81/9Jga5aFldByDQ6Nak+SC6Nn8Xtdyw= Subject key identifier: 50:B1:C2:4D:E6:62:80:7F:D7:64:76:6A:F9:0F:3F:D9:61:63:E0:5F Certificate issuer: /CN=146a096d-134a-4c52-9243-da3981810107 Certificate serial: 010D0C9F4328584B1806EEC0846728D40B150540 Authority key identifier: 8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/29112fc4-2b50-3130-b410-4162d45a355e.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 26658 IP address blocks: 104.243.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:ee:c0:84:67:28:d4:0b:15:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146a096d-134a-4c52-9243-da3981810107 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=3b4a0a5f-7696-4c30-843f-cc27498e2577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:aa:57:2c:a6:21:49:0f:07:82:7c:56:ae:f5: 76:d4:79:3f:34:ee:9b:0b:1a:53:2d:34:4b:cc:b1: ab:ba:9d:4a:07:f5:b7:1a:2c:0f:d7:18:50:f6:42: c1:4d:10:d7:a0:1c:dd:14:da:41:50:bf:0f:6b:72: 3d:f8:81:b3:82:a8:90:7a:a2:c2:83:61:59:da:4b: a5:c6:7d:2c:41:a5:59:5b:6d:d0:95:ce:63:a2:c8: c0:5e:86:c5:24:9d:93:d5:5a:59:cf:aa:a4:bf:5f: e8:ec:e1:3d:81:d6:5e:e3:b7:07:17:12:48:cc:c6: 32:5f:96:f4:d6:4c:ba:6d:12:42:23:b0:29:f5:79: e8:25:ed:87:a6:53:f4:59:5b:db:01:6f:13:10:b9: ad:65:c7:41:fd:53:ed:00:34:1a:5e:3e:b3:4a:e0: 63:ed:9d:ad:95:01:7b:94:d7:a6:43:f1:fe:bb:2b: 53:97:a6:da:9d:de:a0:7c:3f:a2:b0:47:c0:45:ef: 16:30:17:fe:c8:2c:8e:e7:16:d6:13:d0:0b:6c:76: dd:51:cb:bc:b7:58:21:eb:d4:86:4e:74:f0:18:f5: 97:d7:65:a6:c9:3c:47:ff:85:5a:14:87:cd:04:39: 13:1a:84:dd:47:98:2f:62:d7:11:cb:23:c1:fe:f0: a1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B1:C2:4D:E6:62:80:7F:D7:64:76:6A:F9:0F:3F:D9:61:63:E0:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/29112fc4-2b50-3130-b410-4162d45a355e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl X509v3 Authority Key Identifier: keyid:8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer sbgp-ipAddrBlock: critical IPv4: 104.243.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:fa:03:89:16:46:30:72:09:28:f1:80:bd:a3:bc:52:65:67: 19:8c:a1:79:eb:48:09:53:9d:d7:3d:be:ca:b9:af:11:62:0e: 05:4a:0f:40:40:a7:eb:a3:46:59:0e:5f:dd:2d:6e:65:21:e4: 24:9f:01:e0:ac:a6:03:5a:97:b3:36:41:e3:4b:87:5a:79:0b: 85:6e:aa:8c:eb:5a:b4:3b:8d:f7:22:50:a6:7b:f7:d1:d3:5c: 30:e7:ef:72:78:c6:a8:42:15:7b:99:b2:be:44:2f:d3:8a:4c: 24:6e:95:70:99:5d:89:fb:63:39:c8:ba:ee:22:90:1b:d9:d2: 24:68:2f:84:11:61:bd:ad:86:d5:80:d2:da:5f:9a:aa:e7:d1: e1:d4:0f:30:38:0b:87:92:91:2c:a3:fd:26:c7:fe:be:ae:6c: 76:f6:f2:c6:f6:c3:99:ca:3f:e5:7a:60:18:52:e3:c1:cb:c7: 12:d6:dd:ac:1f:c6:95:a2:2f:40:1e:3f:c9:cd:36:e7:e3:32: 54:24:b9:62:85:74:ef:6c:ee:a9:51:18:61:b2:2b:02:bd:67: 43:5b:d8:a8:56:fc:0c:85:4e:cf:6d:a6:6e:64:8c:01:b2:6b: 25:2d:7b:fb:fa:37:eb:0c:72:24:96:a4:79:85:71:3d:4c:d2: 8e:56:e3:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBu7AhGco1AsVBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ2YTA5NmQtMTM0YS00YzUyLTkyNDMtZGEzOTgxODEw MTA3MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk M2I0YTBhNWYtNzY5Ni00YzMwLTg0M2YtY2MyNzQ5OGUyNTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6pXLKYhSQ8HgnxWrvV21Hk/NO6bCxpTLTRL zLGrup1KB/W3GiwP1xhQ9kLBTRDXoBzdFNpBUL8Pa3I9+IGzgqiQeqLCg2FZ2kul xn0sQaVZW23Qlc5josjAXobFJJ2T1VpZz6qkv1/o7OE9gdZe47cHFxJIzMYyX5b0 1ky6bRJCI7Ap9XnoJe2HplP0WVvbAW8TELmtZcdB/VPtADQaXj6zSuBj7Z2tlQF7 lNemQ/H+uytTl6band6gfD+isEfARe8WMBf+yCyO5xbWE9ALbHbdUcu8t1gh69SG TnTwGPWX12WmyTxH/4VaFIfNBDkTGoTdR5gvYtcRyyPB/vChewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCxwk3mYoB/12R2avkPP9lhY+BfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNDZh MDk2ZC0xMzRhLTRjNTItOTI0My1kYTM5ODE4MTAxMDcvMjkxMTJmYzQtMmI1MC0z MTMwLWI0MTAtNDE2MmQ0NWEzNTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTQ2YTA5NmQtMTM0YS00YzUyLTky NDMtZGEzOTgxODEwMTA3LzE0NmEwOTZkLTEzNGEtNGM1Mi05MjQzLWRhMzk4MTgx MDEwNy5jcmwwHwYDVR0jBBgwFoAUjxFRuzwlQGrHT+tlydg8NNKjo5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNDZhMDk2ZC0xMzRhLTRjNTItOTI0My1kYTM5 ODE4MTAxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPOJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACv6A4kWRjByCSjxgL2jvFJlZxmMoXnrSAlTndc9vsq5rxFiDgVKD0BA p+ujRlkOX90tbmUh5CSfAeCspgNal7M2QeNLh1p5C4VuqozrWrQ7jfciUKZ799HT XDDn73J4xqhCFXuZsr5EL9OKTCRulXCZXYn7YznIuu4ikBvZ0iRoL4QRYb2thtWA 0tpfmqrn0eHUDzA4C4eSkSyj/SbH/r6ubHb28sb2w5nKP+V6YBhS48HLxxLW3awf xpWiL0AeP8nNNufjMlQkuWKFdO9s7qlRGGGyKwK9Z0Nb2KhW/AyFTs9tpm5kjAGy ayUte/v6N+sMciSWpHmFcT1M0o5W4+A= -----END CERTIFICATE-----Generated at Tue Sep 9 09:02:37 2025 by rpki-client