$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa File: 2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa (raw, json) Hash identifier: pd3TNTa/XZTS3lwaEFhD3zBDW1yjEOdypX9ey3hzfkg= Subject key identifier: E8:C7:08:B8:16:F2:E3:BD:08:6F:F7:43:25:4B:B1:C1:CC:AF:BD:7F Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584AECC117D4B76BE17AB07AA240 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 36352 IP address blocks: 104.143.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:17:d4:b7:6b:e1:7a:b0:7a:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=5081dada-dadf-4051-a75a-2d0a36ff40ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4d:fd:6d:90:f3:bc:4a:97:c5:ce:a5:09:a4: 2a:be:fa:00:e5:b7:44:41:9f:52:86:f1:21:7e:25: 6d:57:d8:ba:9c:78:1f:18:e9:56:2a:dc:85:02:a5: 7b:20:24:12:fa:27:49:e4:fc:ff:34:8c:6c:a2:1d: 8a:29:b1:7d:3d:b0:0f:13:f9:c7:ff:fd:10:79:09: 1c:68:01:9e:89:b8:b6:40:05:aa:89:5b:31:c4:66: 3f:8e:88:37:53:79:23:43:ea:36:7e:3a:54:34:d7: 9b:cc:b6:24:c1:51:47:cb:d4:54:4a:db:f3:38:d4: 59:3b:d2:39:41:c4:11:64:50:04:35:b0:73:14:09: 4d:ca:0d:d3:bd:9d:c5:ad:12:96:0f:a2:f6:40:e4: 63:a7:76:73:92:e3:d3:13:b8:5c:40:66:80:92:39: 04:ab:d5:02:7b:2f:69:f8:a0:e2:e8:a7:32:88:96: 64:ff:d6:46:bb:93:da:b9:ba:79:9d:ec:26:9e:8d: 82:fa:6a:87:70:97:7e:e9:8c:b3:b3:76:98:68:96: d3:40:05:fa:76:ea:e2:75:0a:04:27:15:60:12:75: 1c:70:b5:e2:de:28:5e:00:1e:91:55:3b:2a:5c:ae: 85:69:31:d0:f8:93:9f:f4:08:7f:87:13:28:5e:87: ef:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C7:08:B8:16:F2:E3:BD:08:6F:F7:43:25:4B:B1:C1:CC:AF:BD:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:a1:9c:2b:6a:69:27:b7:a9:b9:71:9d:89:ba:c4:f5:12:68: 17:54:03:3d:6c:fc:9d:fe:d5:8d:c0:b4:66:ad:fc:78:8e:54: ea:f9:ce:48:3b:2c:0e:89:63:7f:29:d7:10:50:ae:82:82:7a: b0:dc:3d:1d:30:3e:ec:53:e0:1f:c9:b5:57:ee:7c:53:98:36: e3:33:a7:a1:e3:ab:39:47:6f:6a:0c:63:05:57:36:aa:9f:94: 30:ae:b6:9f:b9:bb:18:1b:1e:0d:df:66:94:e2:db:7c:55:23: cf:48:54:b4:22:21:03:8e:c8:9a:19:f5:e5:90:b9:38:9e:13: f8:e2:42:d4:66:ae:2a:65:60:6d:18:6f:1b:69:57:7a:51:79: e2:68:f2:36:38:14:6a:3c:8f:e1:22:39:ea:e4:de:b7:3c:7b: 12:aa:b4:91:b8:ab:5b:61:67:f9:f7:52:14:ee:08:5b:f3:4d: 7a:ec:98:71:d2:2e:9e:b5:61:52:48:b7:5d:cc:4c:2d:0d:c8: 96:1a:44:03:bd:0c:74:b1:c1:ab:b2:e6:7c:6f:c5:65:e5:3b: 8c:4e:d3:7d:da:f2:87:94:6b:4b:ef:c1:c6:c3:96:1d:c6:03: 27:84:39:d1:93:59:66:ec:b5:5d:09:06:d8:e9:b6:41:2e:d4: b8:25:f8:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswRfUt2vherB6okAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NTA4MWRhZGEtZGFkZi00MDUxLWE3NWEtMmQwYTM2ZmY0MGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj039bZDzvEqXxc6lCaQqvvoA5bdEQZ9ShvEh fiVtV9i6nHgfGOlWKtyFAqV7ICQS+idJ5Pz/NIxsoh2KKbF9PbAPE/nH//0QeQkc aAGeibi2QAWqiVsxxGY/jog3U3kjQ+o2fjpUNNebzLYkwVFHy9RUStvzONRZO9I5 QcQRZFAENbBzFAlNyg3TvZ3FrRKWD6L2QORjp3ZzkuPTE7hcQGaAkjkEq9UCey9p +KDi6KcyiJZk/9ZGu5Paubp5newmno2C+mqHcJd+6Yyzs3aYaJbTQAX6duridQoE JxVgEnUccLXi3iheAB6RVTsqXK6FaTHQ+JOf9Ah/hxMoXofvtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjHCLgW8uO9CG/3QyVLscHMr71/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvMmIxZGQ2NjUtMTk2OC0z YTE0LWIxMWUtNzlhOTFhMzRmY2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACahnCtqaSe3qblxnYm6xPUSaBdUAz1s/J3+1Y3AtGat/HiOVOr5zkg7 LA6JY38p1xBQroKCerDcPR0wPuxT4B/JtVfufFOYNuMzp6HjqzlHb2oMYwVXNqqf lDCutp+5uxgbHg3fZpTi23xVI89IVLQiIQOOyJoZ9eWQuTieE/jiQtRmriplYG0Y bxtpV3pReeJo8jY4FGo8j+EiOerk3rc8exKqtJG4q1thZ/n3UhTuCFvzTXrsmHHS Lp61YVJIt13MTC0NyJYaRAO9DHSxwauy5nxvxWXlO4xO033a8oeUa0vvwcbDlh3G AyeEOdGTWWbstV0JBtjptkEu1Lgl+FE= -----END CERTIFICATE-----Generated at Mon Oct 27 05:01:59 2025 by rpki-client