$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/33337fb2-686e-3e09-9d00-5dfb4bdee7a5.roa File: 33337fb2-686e-3e09-9d00-5dfb4bdee7a5.roa (raw, json) Hash identifier: +vnWgIgj2r4H46T8eTsOHtkT6IL+zo1gK92osk/N1cE= Subject key identifier: C1:C8:57:60:E9:77:60:61:A7:3C:DF:15:D9:31:53:27:02:9E:85:0E Certificate issuer: /CN=146a096d-134a-4c52-9243-da3981810107 Certificate serial: 010D0C9F4328584B1806EE7C3D39314F41D93A80 Authority key identifier: 8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/33337fb2-686e-3e09-9d00-5dfb4bdee7a5.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 26658 IP address blocks: 104.243.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:ee:7c:3d:39:31:4f:41:d9:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146a096d-134a-4c52-9243-da3981810107 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=ff48faa5-ab9a-4448-8138-1021266b9130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:06:a4:39:8d:1c:6e:74:a8:f8:a8:b4:5d:c4: 76:ae:4b:ff:0e:39:27:d9:97:ef:52:71:56:b3:f2: 55:77:bf:ac:31:0c:b8:eb:34:26:1c:8e:b1:98:45: 62:ae:1e:be:f7:a9:aa:93:67:a2:92:01:20:91:43: c0:87:5c:61:61:b4:07:f2:fc:db:36:3f:52:09:3d: 2d:49:ae:ce:c3:b8:60:a7:4e:f5:63:5d:b4:a0:4f: 4f:4e:9e:8d:c5:a6:f1:9a:da:2b:62:5e:e2:29:be: 76:f8:e1:d4:5b:ae:8d:c8:5f:33:fc:1a:33:09:bf: f6:8d:5c:c7:2a:63:55:5a:dc:da:8a:ef:79:ff:22: 98:67:62:bd:dc:c1:0e:9e:ba:15:51:c2:63:fb:bc: 32:7b:77:9b:01:ba:36:34:b3:9d:7f:41:a3:9f:00: 8c:29:d7:5e:83:e4:b3:37:e5:d1:56:43:d0:bb:85: f6:76:ea:76:65:cb:fa:6d:a4:64:ad:db:4e:cd:26: 47:fe:0f:17:8c:1c:b9:07:a4:26:ae:ea:0c:ec:e1: 2f:17:f5:c9:16:e1:d3:06:bf:9a:40:c4:f8:f9:6a: f3:4f:31:03:10:e5:e5:21:cd:59:cf:37:9b:5d:97: cd:59:15:39:5a:21:0d:45:d0:a9:4e:01:ab:b2:69: fd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C8:57:60:E9:77:60:61:A7:3C:DF:15:D9:31:53:27:02:9E:85:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/33337fb2-686e-3e09-9d00-5dfb4bdee7a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl X509v3 Authority Key Identifier: keyid:8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer sbgp-ipAddrBlock: critical IPv4: 104.243.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:0d:8d:90:59:32:35:0d:d3:0f:47:5d:53:1f:bc:11:f8:e4: 8a:05:54:77:3b:aa:7f:b0:1f:a7:71:96:ff:83:7b:7e:71:79: f4:ea:48:58:df:e5:cb:2a:82:f8:54:f8:c5:af:2c:d1:35:87: 9c:da:9d:ff:4d:47:db:4d:15:43:03:9f:19:e2:bd:57:fb:9b: 49:e6:b4:2f:6d:9e:b5:4b:6e:76:bd:8e:ad:8f:e9:95:c2:6c: b0:51:10:33:60:9e:6d:44:2f:b8:5d:28:85:0d:c9:94:b9:93: 7c:71:39:a9:36:6a:d7:d7:14:d5:96:2d:5c:ae:db:bf:cd:76: 9d:b7:35:41:23:81:06:85:e6:f1:87:ad:cf:5f:19:70:e5:b3: 1c:80:51:67:f4:14:3b:66:a1:c0:b7:97:02:2a:37:9b:83:42: 21:28:f5:02:26:5d:97:29:38:d3:c5:36:11:57:64:45:36:9f: 82:b2:51:3e:1e:4e:9a:b9:41:35:87:b3:7a:b0:71:74:2b:52: 6f:66:2e:fb:95:e1:d7:1d:2d:49:06:67:a7:e1:e1:7b:25:63: 61:d5:8a:93:41:c8:72:f9:21:9a:ae:3a:f7:4c:64:f6:4b:c9: 7b:ae:1a:31:b1:bd:b5:de:eb:6e:86:7d:16:d1:75:ca:fc:94: 47:7d:d4:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBu58PTkxT0HZOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ2YTA5NmQtMTM0YS00YzUyLTkyNDMtZGEzOTgxODEw MTA3MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZmY0OGZhYTUtYWI5YS00NDQ4LTgxMzgtMTAyMTI2NmI5MTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQakOY0cbnSo+Ki0XcR2rkv/Djkn2ZfvUnFW s/JVd7+sMQy46zQmHI6xmEVirh6+96mqk2eikgEgkUPAh1xhYbQH8vzbNj9SCT0t Sa7Ow7hgp071Y120oE9PTp6NxabxmtorYl7iKb52+OHUW66NyF8z/BozCb/2jVzH KmNVWtzaiu95/yKYZ2K93MEOnroVUcJj+7wye3ebAbo2NLOdf0GjnwCMKddeg+Sz N+XRVkPQu4X2dup2Zcv6baRkrdtOzSZH/g8XjBy5B6QmruoM7OEvF/XJFuHTBr+a QMT4+WrzTzEDEOXlIc1ZzzebXZfNWRU5WiENRdCpTgGrsmn9owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHIV2Dpd2BhpzzfFdkxUycCnoUOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNDZh MDk2ZC0xMzRhLTRjNTItOTI0My1kYTM5ODE4MTAxMDcvMzMzMzdmYjItNjg2ZS0z ZTA5LTlkMDAtNWRmYjRiZGVlN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTQ2YTA5NmQtMTM0YS00YzUyLTky NDMtZGEzOTgxODEwMTA3LzE0NmEwOTZkLTEzNGEtNGM1Mi05MjQzLWRhMzk4MTgx MDEwNy5jcmwwHwYDVR0jBBgwFoAUjxFRuzwlQGrHT+tlydg8NNKjo5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNDZhMDk2ZC0xMzRhLTRjNTItOTI0My1kYTM5 ODE4MTAxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPOCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUNjZBZMjUN0w9HXVMfvBH45IoFVHc7qn+wH6dxlv+De35xefTqSFjf 5csqgvhU+MWvLNE1h5zanf9NR9tNFUMDnxnivVf7m0nmtC9tnrVLbna9jq2P6ZXC bLBREDNgnm1EL7hdKIUNyZS5k3xxOak2atfXFNWWLVyu27/Ndp23NUEjgQaF5vGH rc9fGXDlsxyAUWf0FDtmocC3lwIqN5uDQiEo9QImXZcpONPFNhFXZEU2n4KyUT4e Tpq5QTWHs3qwcXQrUm9mLvuV4dcdLUkGZ6fh4XslY2HVipNByHL5IZquOvdMZPZL yXuuGjGxvbXe626GfRbRdcr8lEd91J8= -----END CERTIFICATE-----Generated at Tue Sep 9 08:55:01 2025 by rpki-client