$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/524b59cf-1fb4-32a8-86cb-d7bcd7fad5e6.roa File: 524b59cf-1fb4-32a8-86cb-d7bcd7fad5e6.roa (raw, json) Hash identifier: 8WQ5mbWEc5EaLjtYfGhedY9Iv927M7PQEb42MY0rXBw= Subject key identifier: F7:AF:03:62:24:BC:0A:FA:9E:CA:E2:2B:53:C9:6E:5A:7E:33:03:3F Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584B1F017457D5838B5970FB35C0 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/524b59cf-1fb4-32a8-86cb-d7bcd7fad5e6.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 26658 IP address blocks: 104.128.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:74:57:d5:83:8b:59:70:fb:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=4b0ce320-222c-4f7e-8da9-4b9ac27e4e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ee:64:9e:6e:82:7a:58:71:77:df:b9:e7:a7: 82:dc:d8:b4:a4:41:7b:cf:54:f4:6e:21:bd:b0:01: 6a:92:f8:bd:e7:6a:34:66:7e:f1:3b:b7:c4:8b:d4: 01:fb:22:c0:70:6e:f1:98:79:7a:ad:aa:8c:80:4f: dd:c9:f7:05:46:d6:b8:41:24:d5:1a:8d:d2:1d:b5: e7:14:6b:0a:5d:ef:6d:e8:27:52:2c:e9:13:2b:e8: c6:8f:ad:1b:6a:a4:ae:f5:cf:6c:c1:83:a0:95:38: 40:64:12:fb:85:17:f0:90:a3:1b:67:9f:bc:57:fa: 95:31:0b:2c:0c:52:cb:80:0e:c5:5b:45:52:77:08: f2:cb:94:3e:f2:ed:8e:bc:c9:0d:ac:85:a6:45:4c: 78:b9:64:25:f8:57:01:42:8b:45:9d:e6:24:a4:6f: 69:65:14:5e:36:93:ff:73:2b:d6:ae:c8:9a:46:0d: 1d:44:82:7d:98:9c:c2:f1:b4:c9:da:44:f1:36:b8: 81:ae:47:1e:49:07:5b:99:2a:03:b0:ed:48:cd:8b: 71:ac:2d:0f:67:0d:a0:95:a1:9f:19:f7:9a:78:54: 50:a4:7d:1f:ea:b2:7b:93:da:f8:50:9a:45:55:66: ce:3c:2b:fc:5f:58:96:50:22:4c:49:7b:58:de:fa: 25:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:AF:03:62:24:BC:0A:FA:9E:CA:E2:2B:53:C9:6E:5A:7E:33:03:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/524b59cf-1fb4-32a8-86cb-d7bcd7fad5e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.128.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:aa:5d:7e:69:e4:84:39:22:d8:74:df:99:b3:d2:7e:80:13: e5:8f:c6:3a:6f:fe:37:03:49:ac:ee:3f:b3:b3:74:8c:4f:89: 93:59:f4:78:ef:96:49:25:3d:6f:ae:76:9c:27:13:f4:bf:db: 03:00:ba:81:b3:fe:60:bb:53:6b:6e:cf:d9:1a:10:63:32:fe: 97:ce:53:50:1c:76:6d:04:6b:db:64:30:fe:cf:90:e0:14:34: 9b:5a:21:31:27:ac:5e:f0:fb:dc:b5:5d:71:9c:15:80:9e:8a: 0a:4c:9c:fa:54:10:56:05:bc:92:f5:1b:ed:96:6f:c5:d4:84: 83:1f:cb:80:98:77:1e:49:a9:b8:81:4f:aa:4a:3d:ca:97:80: 44:5f:ca:22:a7:db:99:5c:94:03:ff:0b:44:d7:89:fc:c6:98: 68:d4:b1:45:34:8a:81:7b:e9:0e:15:84:0b:f5:95:f4:d0:d9: 5b:02:2a:df:60:5d:dc:38:06:3c:09:3d:7f:09:f1:d2:25:c8: 90:33:bd:51:40:80:14:e4:e3:0e:76:f8:75:52:3a:52:bd:92: 4d:da:2f:e0:3f:72:e5:3a:81:19:b4:b7:f5:6a:00:86:59:d2: b1:b5:0a:31:11:aa:78:eb:78:a6:07:57:81:23:c5:1e:3c:05: a6:9c:29:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAXRX1YOLWXD7NcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NGIwY2UzMjAtMjIyYy00ZjdlLThkYTktNGI5YWMyN2U0ZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO5knm6Celhxd9+556eC3Ni0pEF7z1T0biG9 sAFqkvi952o0Zn7xO7fEi9QB+yLAcG7xmHl6raqMgE/dyfcFRta4QSTVGo3SHbXn FGsKXe9t6CdSLOkTK+jGj60baqSu9c9swYOglThAZBL7hRfwkKMbZ5+8V/qVMQss DFLLgA7FW0VSdwjyy5Q+8u2OvMkNrIWmRUx4uWQl+FcBQotFneYkpG9pZRReNpP/ cyvWrsiaRg0dRIJ9mJzC8bTJ2kTxNriBrkceSQdbmSoDsO1IzYtxrC0PZw2glaGf GfeaeFRQpH0f6rJ7k9r4UJpFVWbOPCv8X1iWUCJMSXtY3volRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPevA2IkvAr6nsriK1PJblp+MwM/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvNTI0YjU5Y2YtMWZiNC0z MmE4LTg2Y2ItZDdiY2Q3ZmFkNWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaIBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqqXX5p5IQ5Ith035mz0n6AE+WPxjpv/jcDSazuP7OzdIxPiZNZ9Hjv lkklPW+udpwnE/S/2wMAuoGz/mC7U2tuz9kaEGMy/pfOU1Acdm0Ea9tkMP7PkOAU NJtaITEnrF7w+9y1XXGcFYCeigpMnPpUEFYFvJL1G+2Wb8XUhIMfy4CYdx5JqbiB T6pKPcqXgERfyiKn25lclAP/C0TXifzGmGjUsUU0ioF76Q4VhAv1lfTQ2VsCKt9g Xdw4BjwJPX8J8dIlyJAzvVFAgBTk4w52+HVSOlK9kk3aL+A/cuU6gRm0t/VqAIZZ 0rG1CjERqnjreKYHV4EjxR48BaacKZ0= -----END CERTIFICATE-----Generated at Tue Sep 9 05:56:51 2025 by rpki-client