$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/699655ff-aa2d-39e7-955c-544e3645c5e8.roa File: 699655ff-aa2d-39e7-955c-544e3645c5e8.roa (raw, json) Hash identifier: mmtcyZnKvdLpyb3ejxne0+2awEIVf8YfG2KCGhPfAxo= Subject key identifier: FD:D6:B4:3F:A9:34:94:56:16:57:A6:C0:9A:FF:AC:CB:D4:9A:7D:BF Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584AECC58F3463C73213D04EF680 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/699655ff-aa2d-39e7-955c-544e3645c5e8.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 36352 IP address blocks: 104.143.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:8f:34:63:c7:32:13:d0:4e:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=5bda0600-8938-4f74-bf28-e033f0925cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ef:b5:ee:52:46:db:a5:d1:96:c4:56:ce:b4: 63:8f:00:7c:bc:25:dd:fa:33:ed:e3:85:93:d6:41: 49:4f:5d:93:df:f7:7d:eb:8b:26:82:1d:37:ac:83: 23:b6:ae:ea:d7:16:4f:48:f1:5c:e1:62:e7:d2:bf: 59:a2:b3:57:ae:cb:04:b7:a2:f7:6b:7d:df:08:fd: dd:51:c3:98:fc:1f:14:35:95:14:05:b5:f6:55:c8: d7:77:95:fe:db:cd:79:85:c7:5e:6b:25:c4:8d:6e: b5:5d:b7:c4:51:af:ee:15:af:4a:65:69:03:d1:3d: 59:c3:8d:bc:fa:43:5e:0e:88:2c:1f:6d:fa:ac:fd: 28:a9:e8:f2:4b:e7:be:50:ca:ac:93:94:76:91:09: 82:06:21:a1:a8:03:77:6d:a9:e3:7b:fe:4d:5f:2f: 6b:a6:d2:ef:15:73:5f:be:59:02:9d:4e:89:85:10: d6:6b:4c:d8:03:d2:d0:dd:a0:e1:03:4c:6c:2d:76: d0:6a:31:39:95:62:a6:c3:6d:33:af:f7:5a:41:50: 83:ed:74:e1:50:97:b0:c7:5a:ce:ec:7e:9a:f0:d4: 87:c8:f8:0c:83:05:f9:7e:44:33:83:ed:dc:9a:d4: 7e:2f:8f:d6:3d:8c:c2:8b:73:66:b1:3b:e4:c4:cc: f0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D6:B4:3F:A9:34:94:56:16:57:A6:C0:9A:FF:AC:CB:D4:9A:7D:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/699655ff-aa2d-39e7-955c-544e3645c5e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:42:65:dd:2f:d3:4c:e4:10:fc:83:53:7c:ca:0e:7b:21:35: 51:fd:be:95:f0:b7:0e:bb:6b:b3:33:cc:ed:59:bd:39:de:f5: 3b:53:76:f2:bc:da:e0:f1:5b:89:9f:0c:2b:07:ec:33:e3:af: 55:cd:fb:47:98:cf:eb:c9:89:19:30:b0:a3:46:6a:31:4f:1e: 5c:4e:2a:a8:cb:94:b1:ad:7e:d4:67:eb:56:5c:df:b1:44:04: 82:5d:78:3e:3d:c9:8f:d6:41:18:70:7f:54:e3:07:2f:25:71: 6e:9e:00:a0:c6:6e:82:c6:f2:14:a0:47:1a:e9:e9:73:13:2c: 5c:d1:0f:d5:58:e4:82:95:0b:cf:8d:f5:78:81:6d:42:66:01: a4:28:4c:c5:8b:e7:6f:16:f8:7c:07:df:22:92:51:c2:1d:0e: f8:c5:cc:2a:81:6a:a6:22:cf:8a:91:cb:4f:9f:c4:48:a5:c7: e8:4b:35:0c:e4:4a:e6:47:8c:27:24:71:48:85:44:d3:af:34: da:96:8b:90:12:02:13:42:24:eb:97:3f:47:47:65:39:9e:2d: dd:7b:85:6b:da:32:77:db:b7:40:01:df:0e:e6:95:ff:80:65: 90:1d:4b:60:44:35:8f:fa:aa:1f:82:97:31:2f:59:f2:05:b9: 27:6c:68:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxY80Y8cyE9BO9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NWJkYTA2MDAtODkzOC00Zjc0LWJmMjgtZTAzM2YwOTI1Y2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu+17lJG26XRlsRWzrRjjwB8vCXd+jPt44WT 1kFJT12T3/d964smgh03rIMjtq7q1xZPSPFc4WLn0r9ZorNXrssEt6L3a33fCP3d UcOY/B8UNZUUBbX2VcjXd5X+2815hcdeayXEjW61XbfEUa/uFa9KZWkD0T1Zw428 +kNeDogsH236rP0oqejyS+e+UMqsk5R2kQmCBiGhqAN3banje/5NXy9rptLvFXNf vlkCnU6JhRDWa0zYA9LQ3aDhA0xsLXbQajE5lWKmw20zr/daQVCD7XThUJewx1rO 7H6a8NSHyPgMgwX5fkQzg+3cmtR+L4/WPYzCi3NmsTvkxMzwAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3WtD+pNJRWFlemwJr/rMvUmn2/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvNjk5NjU1ZmYtYWEyZC0z OWU3LTk1NWMtNTQ0ZTM2NDVjNWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaI+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNCZd0v00zkEPyDU3zKDnshNVH9vpXwtw67a7MzzO1ZvTne9TtTdvK8 2uDxW4mfDCsH7DPjr1XN+0eYz+vJiRkwsKNGajFPHlxOKqjLlLGtftRn61Zc37FE BIJdeD49yY/WQRhwf1TjBy8lcW6eAKDGboLG8hSgRxrp6XMTLFzRD9VY5IKVC8+N 9XiBbUJmAaQoTMWL528W+HwH3yKSUcIdDvjFzCqBaqYiz4qRy0+fxEilx+hLNQzk SuZHjCckcUiFRNOvNNqWi5ASAhNCJOuXP0dHZTmeLd17hWvaMnfbt0AB3w7mlf+A ZZAdS2BENY/6qh+ClzEvWfIFuSdsaKg= -----END CERTIFICATE-----Generated at Sun Aug 24 05:38:05 2025 by rpki-client