$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/129d7373-3a90-398c-a761-a7b9f06d6d3d.roa File: 129d7373-3a90-398c-a761-a7b9f06d6d3d.roa (raw, json) Hash identifier: i1cYOTSxAoSZ7zI/upnoQYwIv6oqaYwqRLSqXYgb/M8= Subject key identifier: 4F:B0:96:45:23:73:37:72:82:E0:DD:7B:E7:37:29:21:25:0F:35:3F Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584B477C9EA45EC7614ACB3F0920 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/129d7373-3a90-398c-a761-a7b9f06d6d3d.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 26658 IP address blocks: 104.232.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:9e:a4:5e:c7:61:4a:cb:3f:09:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=f29e7660-4716-45bf-b393-6e123465f2c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1e:cf:2c:a7:50:a7:e3:d2:25:9c:fe:67:e8: af:25:e4:e6:01:48:f5:40:ec:23:0d:d2:d0:af:d9: 18:cb:aa:51:ad:f7:0e:a1:7b:86:11:8d:7f:df:70: 67:68:95:88:79:fa:b5:d5:98:cc:52:60:74:00:32: dc:04:f5:5b:d3:94:32:5a:f0:e0:7f:f1:9a:21:70: 80:f9:c3:cb:2a:95:09:df:b3:3f:19:51:ec:8b:92: 66:c6:4c:a2:0f:99:8c:c8:09:cc:08:67:9c:64:c0: ec:b5:c5:3d:ef:ba:b6:01:87:ba:92:14:5b:2c:f0: 8c:fa:9e:7c:f6:01:42:c5:49:1c:37:cb:92:79:19: 1a:06:1b:98:3c:81:98:b6:fd:c2:01:74:93:d7:c0: 1f:1b:d9:1c:bf:f1:a2:b0:25:80:f4:99:b3:37:1b: 17:11:a9:1b:a9:1a:8f:dc:23:d5:40:95:ee:63:72: 7f:a2:b2:88:3f:bd:80:d7:63:f1:f8:81:f8:dc:0c: a6:5e:c8:7a:0e:dc:6f:5c:65:8a:2f:ef:9a:ec:40: 51:18:82:b0:98:74:26:1c:50:3c:f4:ca:3b:1d:ca: cb:1c:73:4c:bd:c1:10:1c:13:5d:ea:76:92:5d:57: f5:50:c3:60:7f:a9:17:d2:a7:c3:76:f6:b4:7e:17: de:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B0:96:45:23:73:37:72:82:E0:DD:7B:E7:37:29:21:25:0F:35:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/129d7373-3a90-398c-a761-a7b9f06d6d3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.232.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:26:1f:d2:87:2c:50:6e:b3:b5:08:33:66:c8:f2:a5:43:ec: 39:de:b6:02:30:59:68:48:80:41:7a:e0:48:54:dc:e4:cf:60: 9a:bc:5e:b6:ab:91:7b:82:7e:0d:9d:3f:06:a4:67:a8:36:12: df:20:23:d1:04:dc:50:ef:c2:68:de:2f:05:49:ac:a3:4e:37: 27:73:22:06:2b:2a:49:46:39:bb:d7:9f:1f:60:4e:14:6b:0e: b5:8b:9b:b9:5f:2d:9a:e9:48:18:36:86:92:b3:d9:2c:03:da: 3a:8a:1e:71:fb:28:bc:1e:95:cc:3c:33:ce:cc:69:c7:55:ac: af:40:9d:d6:77:14:57:23:5a:58:68:be:f5:3e:e9:16:21:65: 92:fa:84:20:ec:e6:af:5b:7e:53:a7:42:15:94:0c:0c:92:88: 0d:84:0a:4d:80:65:19:1f:b8:72:c8:22:b2:c2:73:50:65:b5: a6:a9:1a:ae:6a:5b:1e:4d:e7:98:d3:c0:39:0b:9e:06:63:a9: 43:d2:27:ad:c6:73:cd:5b:8d:1a:b2:a9:b9:a9:b5:75:be:38: 39:85:d0:e6:8b:e6:0a:37:3e:f6:03:94:71:7a:a5:e5:57:13: a3:2e:4c:c3:63:29:0d:17:e9:21:b1:68:9b:4a:07:35:a2:17: 96:1c:56:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfJ6kXsdhSss/CSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk ZjI5ZTc2NjAtNDcxNi00NWJmLWIzOTMtNmUxMjM0NjVmMmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzh7PLKdQp+PSJZz+Z+ivJeTmAUj1QOwjDdLQ r9kYy6pRrfcOoXuGEY1/33BnaJWIefq11ZjMUmB0ADLcBPVb05QyWvDgf/GaIXCA +cPLKpUJ37M/GVHsi5JmxkyiD5mMyAnMCGecZMDstcU977q2AYe6khRbLPCM+p58 9gFCxUkcN8uSeRkaBhuYPIGYtv3CAXST18AfG9kcv/GisCWA9JmzNxsXEakbqRqP 3CPVQJXuY3J/orKIP72A12Px+IH43AymXsh6DtxvXGWKL++a7EBRGIKwmHQmHFA8 9Mo7HcrLHHNMvcEQHBNd6naSXVf1UMNgf6kX0qfDdva0fhfeSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+wlkUjczdyguDde+c3KSElDzU/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvMTI5ZDczNzMtM2E5MC0z OThjLWE3NjEtYTdiOWYwNmQ2ZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaOhIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsmH9KHLFBus7UIM2bI8qVD7DnetgIwWWhIgEF64EhU3OTPYJq8Xrar kXuCfg2dPwakZ6g2Et8gI9EE3FDvwmjeLwVJrKNONydzIgYrKklGObvXnx9gThRr DrWLm7lfLZrpSBg2hpKz2SwD2jqKHnH7KLwelcw8M87MacdVrK9AndZ3FFcjWlho vvU+6RYhZZL6hCDs5q9bflOnQhWUDAySiA2ECk2AZRkfuHLIIrLCc1BltaapGq5q Wx5N55jTwDkLngZjqUPSJ63Gc81bjRqyqbmptXW+ODmF0OaL5go3PvYDlHF6peVX E6MuTMNjKQ0X6SGxaJtKBzWiF5YcVow= -----END CERTIFICATE-----Generated at Mon Oct 27 09:57:40 2025 by rpki-client