$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/41328e68-ff82-3c8b-9891-06303124501c.roa File: 41328e68-ff82-3c8b-9891-06303124501c.roa (raw, json) Hash identifier: 0vu4PBbM5aFzH9nOXGsEKk+LwEyLExWd7XvdgCg9yh0= Subject key identifier: 11:36:7B:40:FD:DF:29:A5:0F:AA:09:14:31:2A:18:CE:F5:0A:66:E1 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584A3E4594055FD1748E44F06A80 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/41328e68-ff82-3c8b-9891-06303124501c.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 26658 IP address blocks: 104.232.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:94:05:5f:d1:74:8e:44:f0:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=d5d512d3-7d7a-43bc-9ae5-9e04167a79d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:36:b6:a2:7d:2e:e7:9d:08:69:10:9f:f2:b2: bb:16:2e:a0:a8:41:79:5a:1a:7a:34:2c:54:2f:07: e5:76:fc:c5:1f:07:dd:64:08:02:3f:63:c7:32:6f: 6b:78:21:e8:07:b3:f9:03:6b:e9:c9:ac:13:7c:5b: 3d:58:a4:af:46:1c:97:4d:e0:88:6d:db:23:a7:53: 27:c5:9b:09:11:5b:f1:97:5f:6a:e4:05:e4:fb:0d: 14:20:1e:49:e8:69:02:e1:aa:61:d3:2e:c7:61:24: 67:eb:43:50:44:a1:49:09:70:a2:28:5d:a9:16:1c: 6b:9c:9f:78:07:28:49:fa:a5:66:9d:d2:4e:b7:99: 1e:0a:ca:de:59:09:69:cc:09:76:0e:bb:24:e4:a9: 2b:5c:56:18:d0:a2:52:01:ae:cf:d4:aa:82:fb:c2: 4c:bf:e7:01:51:0d:6f:5f:52:cb:bf:8b:41:d8:44: 7c:68:a8:2d:da:e7:44:0e:d1:0f:00:4b:d3:d1:9d: 70:ef:ca:c9:9f:8d:ae:17:8b:b2:78:3e:4e:9c:92: da:be:72:97:ab:92:04:6b:12:08:92:e6:a9:04:4d: 0b:c5:cf:4d:c6:8a:90:99:dc:9f:78:cb:b1:ad:6a: 5b:ed:ed:10:7b:d5:6e:cc:84:d4:76:a5:00:b7:be: 53:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:36:7B:40:FD:DF:29:A5:0F:AA:09:14:31:2A:18:CE:F5:0A:66:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/41328e68-ff82-3c8b-9891-06303124501c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.232.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:0a:b1:6f:d4:4e:36:3e:26:cb:6f:63:5f:40:d9:52:b7:c5: 9f:6e:c2:33:d5:c9:24:03:8c:dd:37:66:3f:5d:ce:b1:51:02: f3:7d:5e:f8:b9:a4:4e:98:f3:f7:db:ee:42:51:b6:1a:51:90: bc:47:85:a1:d2:c7:0a:6b:e7:d3:23:ce:72:e0:a7:22:6e:ff: 5a:dd:62:67:43:6a:26:a3:5b:80:27:d3:78:18:e5:58:88:fd: cc:c6:aa:b5:a3:1b:f0:84:01:b3:ae:b2:24:b6:5d:8d:82:7f: 04:a6:09:62:0b:58:8c:56:12:b8:34:a6:26:2c:12:d0:66:49: 83:67:43:90:f6:bc:96:a2:c5:31:8d:ac:36:82:41:44:81:34: 38:e1:2d:1e:85:2d:37:59:ee:3c:ab:2e:5c:52:0d:68:bd:b4: 6a:60:93:46:87:64:30:9a:28:d7:57:75:a2:fa:67:23:66:b0: 42:c1:5f:c9:3e:6b:8f:33:8b:54:98:70:b8:55:6c:db:14:ab: ed:55:43:8d:4c:e9:08:8d:43:5b:1a:99:7e:dc:3f:30:1c:e4: 49:28:45:4d:fe:d1:0c:8b:63:57:7b:df:42:12:5d:10:32:f8: 8b:fa:9c:3e:81:87:06:96:8d:d5:ab:ac:25:c7:48:9f:c5:7e: 7c:bb:b2:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RZQFX9F0jkTwaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk ZDVkNTEyZDMtN2Q3YS00M2JjLTlhZTUtOWUwNDE2N2E3OWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTa2on0u550IaRCf8rK7Fi6gqEF5Whp6NCxU LwfldvzFHwfdZAgCP2PHMm9reCHoB7P5A2vpyawTfFs9WKSvRhyXTeCIbdsjp1Mn xZsJEVvxl19q5AXk+w0UIB5J6GkC4aph0y7HYSRn60NQRKFJCXCiKF2pFhxrnJ94 ByhJ+qVmndJOt5keCsreWQlpzAl2Drsk5KkrXFYY0KJSAa7P1KqC+8JMv+cBUQ1v X1LLv4tB2ER8aKgt2udEDtEPAEvT0Z1w78rJn42uF4uyeD5OnJLavnKXq5IEaxII kuapBE0Lxc9NxoqQmdyfeMuxrWpb7e0Qe9VuzITUdqUAt75TYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBE2e0D93ymlD6oJFDEqGM71CmbhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvNDEzMjhlNjgtZmY4Mi0z YzhiLTk4OTEtMDYzMDMxMjQ1MDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaOhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcKsW/UTjY+JstvY19A2VK3xZ9uwjPVySQDjN03Zj9dzrFRAvN9Xvi5 pE6Y8/fb7kJRthpRkLxHhaHSxwpr59MjznLgpyJu/1rdYmdDaiajW4An03gY5ViI /czGqrWjG/CEAbOusiS2XY2CfwSmCWILWIxWErg0piYsEtBmSYNnQ5D2vJaixTGN rDaCQUSBNDjhLR6FLTdZ7jyrLlxSDWi9tGpgk0aHZDCaKNdXdaL6ZyNmsELBX8k+ a48zi1SYcLhVbNsUq+1VQ41M6QiNQ1samX7cPzAc5EkoRU3+0QyLY1d730ISXRAy +Iv6nD6BhwaWjdWrrCXHSJ/Ffny7smw= -----END CERTIFICATE-----Generated at Sun Jun 29 14:27:37 2025 by rpki-client