$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/6f712e23-0be5-3fd2-9cb7-dc83decfba88.roa File: 6f712e23-0be5-3fd2-9cb7-dc83decfba88.roa (raw, json) Hash identifier: S88RPT32AeL4uoIGLARxwbAANesAOpZRlNODffOG4ns= Subject key identifier: ED:2D:75:9A:AA:AC:28:F2:C9:FD:F0:1D:44:B7:FD:1E:76:8F:35:49 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584AECC58F66D2C27D226A2D1B40 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/6f712e23-0be5-3fd2-9cb7-dc83decfba88.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 36352 IP address blocks: 104.143.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:8f:66:d2:c2:7d:22:6a:2d:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=38fc3e26-cc0b-4db4-a335-ebc7a43ac5eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9a:e5:8b:a2:8e:31:84:25:d7:21:46:3d:d7: 34:96:e7:88:9d:e3:cd:f8:94:39:57:29:2c:23:56: 18:d4:7d:94:09:45:a8:43:ba:f3:4c:99:cd:76:ff: 73:1a:67:8c:91:91:d3:fc:76:f9:6a:ed:67:3c:5e: db:d7:f2:cd:95:ad:a6:f8:47:a8:a5:89:2e:7f:38: 1e:b0:8a:09:f1:2a:0d:56:43:1c:a7:78:f5:08:a8: 39:87:8c:f9:61:2c:5e:c7:66:1c:59:eb:97:ba:fe: b3:49:fb:8e:f7:99:75:41:40:6e:98:e2:70:26:c2: e4:00:c3:16:08:7b:b6:01:3d:20:08:34:3a:d2:08: 61:49:42:2f:2f:b6:ca:ae:0e:47:77:7e:61:d6:23: 82:7d:e2:80:d4:b9:7f:90:10:9a:4f:68:ec:bd:f8: 8c:2a:49:8e:c9:05:fe:e4:c6:1e:b7:66:6e:27:4d: af:4e:47:b3:bf:4c:ac:5f:35:88:33:fa:32:d7:29: 42:33:1d:5c:c9:03:11:f5:42:7a:1f:f1:e7:ce:ef: 26:22:51:01:01:41:cf:c8:89:c0:ef:67:22:85:9b: c1:9f:24:4d:28:c6:aa:69:05:15:d0:f8:6c:10:1f: 0e:d9:c6:d1:dc:27:e0:14:b9:43:74:9a:3d:ac:8a: 60:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2D:75:9A:AA:AC:28:F2:C9:FD:F0:1D:44:B7:FD:1E:76:8F:35:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/6f712e23-0be5-3fd2-9cb7-dc83decfba88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:99:05:eb:12:6d:0a:40:77:5a:76:98:97:4c:ea:48:a9:26: e7:f2:4a:11:01:3a:84:c1:c2:0d:50:75:a7:9d:3c:66:20:fd: 7a:35:45:a9:b8:0c:d8:39:86:7d:60:3e:4b:07:96:ec:5a:a6: d1:97:f0:2b:fa:5b:a1:fd:72:1d:1b:77:a3:04:c2:47:29:01: f1:07:1f:61:34:d2:64:de:e3:f1:28:5f:56:cd:d9:54:83:c0: 09:16:05:9f:60:9a:a9:0a:66:bc:17:2e:9d:a0:03:0e:e2:22: ad:6f:83:85:58:09:2a:ea:d8:98:1a:e1:e0:aa:8f:b3:9a:4c: 8b:86:15:9b:fb:54:22:76:95:72:f0:d0:5d:4f:b0:2c:df:1a: 59:87:65:5c:42:b5:31:2d:36:e7:87:1b:26:f9:3c:b5:18:88: de:19:b3:7f:fb:31:62:78:e3:0b:a3:54:30:35:32:23:f8:1b: 1f:92:dd:0e:5c:b2:59:16:4b:2e:3d:87:f9:03:4b:47:f3:98: 23:b6:81:bf:07:37:19:00:84:ff:a1:56:f9:96:de:57:ce:94: ca:ad:24:3e:78:38:79:a5:86:c8:40:c3:d9:59:be:ac:e8:cf: 1f:dd:3c:f3:9f:64:1f:f4:e3:7f:09:13:cd:f7:4a:4f:70:c0: b8:65:6e:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxY9m0sJ9ImotG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MzhmYzNlMjYtY2MwYi00ZGI0LWEzMzUtZWJjN2E0M2FjNWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnprli6KOMYQl1yFGPdc0lueInePN+JQ5Vyks I1YY1H2UCUWoQ7rzTJnNdv9zGmeMkZHT/Hb5au1nPF7b1/LNla2m+EeopYkufzge sIoJ8SoNVkMcp3j1CKg5h4z5YSxex2YcWeuXuv6zSfuO95l1QUBumOJwJsLkAMMW CHu2AT0gCDQ60ghhSUIvL7bKrg5Hd35h1iOCfeKA1Ll/kBCaT2jsvfiMKkmOyQX+ 5MYet2ZuJ02vTkezv0ysXzWIM/oy1ylCMx1cyQMR9UJ6H/Hnzu8mIlEBAUHPyInA 72cihZvBnyRNKMaqaQUV0PhsEB8O2cbR3CfgFLlDdJo9rIpgEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0tdZqqrCjyyf3wHUS3/R52jzVJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvNmY3MTJlMjMtMGJlNS0z ZmQyLTljYjctZGM4M2RlY2ZiYTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2ZBesSbQpAd1p2mJdM6kipJufyShEBOoTBwg1QdaedPGYg/Xo1Ram4 DNg5hn1gPksHluxaptGX8Cv6W6H9ch0bd6MEwkcpAfEHH2E00mTe4/EoX1bN2VSD wAkWBZ9gmqkKZrwXLp2gAw7iIq1vg4VYCSrq2Jga4eCqj7OaTIuGFZv7VCJ2lXLw 0F1PsCzfGlmHZVxCtTEtNueHGyb5PLUYiN4Zs3/7MWJ44wujVDA1MiP4Gx+S3Q5c slkWSy49h/kDS0fzmCO2gb8HNxkAhP+hVvmW3lfOlMqtJD54OHmlhshAw9lZvqzo zx/dPPOfZB/0438JE833Sk9wwLhlbo8= -----END CERTIFICATE-----Generated at Mon Oct 27 04:58:36 2025 by rpki-client