$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2e5e5f22-1769-3091-9940-b1c8c063a660.roa File: 2e5e5f22-1769-3091-9940-b1c8c063a660.roa (raw, json) Hash identifier: Y+a5z4ZCPnje20Ng60qjq90Ztcm3pQIagOkluqx5v/A= Subject key identifier: CC:F3:87:97:D9:D2:F9:92:B5:97:31:DA:01:06:50:34:06:59:9B:21 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584AECC58F4425D3068EE6A99E80 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2e5e5f22-1769-3091-9940-b1c8c063a660.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 36352 IP address blocks: 104.143.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:8f:44:25:d3:06:8e:e6:a9:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=73671e6f-b245-4087-8432-29a74588a941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c9:a0:54:3e:02:7b:29:2e:e1:05:c9:80:79: de:b5:66:1e:8a:49:ab:7d:71:a0:53:e1:b4:b3:de: 12:a0:d0:48:11:e5:1a:fd:8a:9d:f3:ce:70:10:5c: 3e:42:4f:b3:e0:1d:d3:78:f7:ef:06:c8:81:32:b0: a7:6b:73:98:22:34:96:24:e5:48:12:0d:3b:9c:4e: 74:7c:7c:53:7b:c7:b5:22:c9:e6:b8:2d:8b:5a:6d: 79:80:18:84:de:ed:d1:de:ca:65:36:0f:04:52:11: b1:7c:77:78:01:68:dc:3b:e0:8e:98:8b:0b:87:60: 09:10:0f:16:7f:d0:15:11:e5:d9:39:15:9f:e1:c8: 6d:0d:2d:82:c3:ad:eb:e1:8a:9b:37:22:d1:a0:d1: 79:0d:40:27:48:0c:da:49:67:b4:57:c9:ef:42:07: ee:40:d0:61:18:60:3e:e7:50:bc:1b:92:af:2e:a6: c5:24:4a:ac:36:8f:1e:75:3b:da:c5:a1:5d:3b:68: f1:e9:d0:b0:d6:a3:8f:1f:dc:65:ea:57:35:28:aa: 9f:f1:a9:2a:e2:38:9d:f0:ac:a4:21:34:8f:17:c1: ea:87:94:aa:cf:48:f7:2a:12:3f:c9:1d:cb:7c:58: ff:e2:df:f4:d8:6e:d4:d8:04:74:7a:36:00:cf:c8: 0a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F3:87:97:D9:D2:F9:92:B5:97:31:DA:01:06:50:34:06:59:9B:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2e5e5f22-1769-3091-9940-b1c8c063a660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:16:8d:65:cb:90:5e:e0:05:28:39:b1:3e:e5:9f:e5:b7:bc: 4b:b8:34:45:2b:a9:30:5d:e1:1c:6e:a3:32:fd:e5:ca:0b:79: 5e:81:f8:a0:88:94:00:e5:40:cc:f5:65:c9:b1:72:c9:46:4e: fd:d3:b9:d3:9f:36:09:dd:7e:74:b2:95:82:6e:cb:91:f5:00: ec:bb:ef:d2:8d:94:d0:6c:28:02:a1:ac:b6:56:f1:f8:95:2a: e6:d7:96:7f:bd:a2:89:06:b3:0c:fb:b9:f5:0f:c8:94:d8:86: 2e:fc:30:a1:72:d7:0c:97:eb:b2:1f:47:de:79:ed:04:28:9a: fa:72:06:ae:9d:df:d6:86:69:f7:85:97:d9:fb:52:ac:47:11: 3b:24:1a:05:5f:a0:17:38:c8:4f:a4:26:12:dc:1b:79:a1:8c: 9f:5b:a4:ab:f0:a7:68:cc:9e:8c:f8:a0:82:75:dd:6f:c3:c3: 76:0e:81:e4:d2:62:d1:6d:36:9a:56:81:22:ef:40:ee:5e:81: e0:78:f9:94:c7:65:0c:11:85:c8:b2:db:e3:01:b4:24:6a:c6: 59:90:cd:bc:c2:23:38:91:6b:5b:0f:a2:bf:85:30:41:6c:cc: 78:e7:c2:c3:6d:ec:30:5c:39:db:c6:00:b2:1f:09:ae:4c:2f: 46:60:b3:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxY9EJdMGjuapnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NzM2NzFlNmYtYjI0NS00MDg3LTg0MzItMjlhNzQ1ODhhOTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosmgVD4Ceyku4QXJgHnetWYeikmrfXGgU+G0 s94SoNBIEeUa/Yqd885wEFw+Qk+z4B3TePfvBsiBMrCna3OYIjSWJOVIEg07nE50 fHxTe8e1IsnmuC2LWm15gBiE3u3R3splNg8EUhGxfHd4AWjcO+COmIsLh2AJEA8W f9AVEeXZORWf4chtDS2Cw63r4YqbNyLRoNF5DUAnSAzaSWe0V8nvQgfuQNBhGGA+ 51C8G5KvLqbFJEqsNo8edTvaxaFdO2jx6dCw1qOPH9xl6lc1KKqf8akq4jid8Kyk ITSPF8Hqh5Sqz0j3KhI/yR3LfFj/4t/02G7U2AR0ejYAz8gKiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzzh5fZ0vmStZcx2gEGUDQGWZshMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvMmU1ZTVmMjItMTc2OS0z MDkxLTk5NDAtYjFjOGMwNjNhNjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoWjWXLkF7gBSg5sT7ln+W3vEu4NEUrqTBd4RxuozL95coLeV6B+KCI lADlQMz1ZcmxcslGTv3TudOfNgndfnSylYJuy5H1AOy779KNlNBsKAKhrLZW8fiV KubXln+9ookGswz7ufUPyJTYhi78MKFy1wyX67IfR9557QQomvpyBq6d39aGafeF l9n7UqxHETskGgVfoBc4yE+kJhLcG3mhjJ9bpKvwp2jMnoz4oIJ13W/Dw3YOgeTS YtFtNppWgSLvQO5egeB4+ZTHZQwRhciy2+MBtCRqxlmQzbzCIziRa1sPor+FMEFs zHjnwsNt7DBcOdvGALIfCa5ML0ZgswE= -----END CERTIFICATE-----Generated at Mon Oct 27 04:58:34 2025 by rpki-client