$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/91d10d04-d56b-3251-ab6a-17d723896f38.roa File: 91d10d04-d56b-3251-ab6a-17d723896f38.roa (raw, json) Hash identifier: 6UJUHXs3r0alBmQf/T9bYMZ82rqxmrFalHppwATuO6A= Subject key identifier: 73:84:5D:CD:2B:13:0A:7B:F7:00:0D:BA:F9:44:7B:DC:45:14:E6:55 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584AE72BB519973D1BB37EA22BC0 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/91d10d04-d56b-3251-ab6a-17d723896f38.roa Signing time: Tue 19 Aug 2025 01:00:32 +0000 ROA not before: Tue 19 Aug 2025 01:00:32 +0000 ROA not after: Mon 17 Nov 2025 02:00:32 +0000 asID: 18779 IP address blocks: 104.143.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e7:2b:b5:19:97:3d:1b:b3:7e:a2:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Aug 19 01:00:32 2025 GMT Not After : Nov 17 02:00:32 2025 GMT Subject: CN=b955fcee-c685-49fb-8996-2d0938a27585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:dd:bf:d5:c9:99:a5:75:c5:42:d4:61:7c:b0: e8:52:c9:ed:86:34:d9:b2:18:17:db:5e:b5:b0:ad: 58:10:f9:bd:e5:12:a2:25:d0:6d:49:58:24:2a:95: 11:d3:7e:6e:32:bc:98:02:b9:77:6d:33:d5:e3:0a: ca:c9:fb:a7:4c:9a:14:6a:63:51:05:20:22:db:7e: f3:c5:6d:2d:21:a7:68:fe:e7:2b:fc:42:a1:01:02: 6a:0c:cf:b5:62:2b:82:0e:ba:2e:55:7f:92:0d:7e: 9f:9c:9d:93:19:75:6c:74:03:61:b0:f4:89:8d:48: 91:cc:ba:8d:b6:08:22:73:04:b1:7c:23:2a:8f:40: 16:65:d8:16:90:b2:34:e9:5a:bc:c1:4a:23:1c:bf: ee:26:67:9a:6d:51:35:a5:cc:f8:a4:0a:21:87:af: a4:29:70:da:4b:69:26:3a:81:86:24:cb:9d:a9:de: a3:ae:47:9a:16:40:5a:18:a7:31:f1:f8:96:b8:7f: 9c:cc:b9:f8:67:05:1e:d9:04:1c:76:7c:44:9a:86: ee:e2:a0:47:25:66:77:69:7c:6b:9a:81:d3:78:b8: ed:58:bc:96:f3:26:34:2e:5d:1c:06:84:5a:8e:aa: 6b:29:f5:35:0d:2c:ee:d1:0e:dc:62:d8:bb:c5:44: 71:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:84:5D:CD:2B:13:0A:7B:F7:00:0D:BA:F9:44:7B:DC:45:14:E6:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/91d10d04-d56b-3251-ab6a-17d723896f38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:41:98:97:01:79:71:2c:af:21:ed:1a:96:90:08:9c:d6:6e: 1a:2e:13:5b:a8:e8:68:41:c1:29:29:4f:26:45:19:3c:33:4c: 73:6b:0a:3b:c1:5a:00:b0:c3:ed:61:58:f0:9e:fd:c2:58:34: 2f:e8:be:29:16:85:5a:18:64:62:98:29:c4:12:87:27:21:ed: b8:eb:4f:e0:59:63:c8:3c:29:5f:ee:ec:a4:6c:da:89:21:20: e6:f1:ef:f4:a3:68:9f:76:d5:c1:ab:6a:bf:b2:07:26:e6:30: f2:c0:c2:f9:cb:95:12:9f:ed:58:cb:9d:4c:71:27:14:9d:3c: 07:fb:ce:09:93:48:96:f7:79:d4:11:40:d5:ad:5a:e5:17:8d: 7b:43:cd:25:e9:ea:be:45:e0:72:29:bd:2a:3a:f3:45:04:95: b9:31:44:f2:2c:27:86:d1:d8:97:ec:31:50:6a:2f:36:97:57: 06:c6:d0:f1:f9:06:e8:ef:90:59:3d:ea:b3:09:18:02:c4:1b: c3:f4:b9:e7:bb:1d:1c:c4:28:eb:e2:30:fc:8d:01:d0:1a:6a: 5f:fc:70:10:8b:8b:95:af:bf:50:6a:1c:d8:5a:cc:6e:04:e4: 39:e6:69:5c:97:5f:54:7e:b3:80:85:97:3c:2f:7b:b1:da:6c: 92:d0:83:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErnK7UZlz0bs36iK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDgxOTAxMDAzMloXDTI1MTExNzAyMDAzMlowLzEtMCsGA1UEAxMk Yjk1NWZjZWUtYzY4NS00OWZiLTg5OTYtMmQwOTM4YTI3NTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN2/1cmZpXXFQtRhfLDoUsnthjTZshgX2161 sK1YEPm95RKiJdBtSVgkKpUR035uMryYArl3bTPV4wrKyfunTJoUamNRBSAi237z xW0tIado/ucr/EKhAQJqDM+1YiuCDrouVX+SDX6fnJ2TGXVsdANhsPSJjUiRzLqN tggicwSxfCMqj0AWZdgWkLI06Vq8wUojHL/uJmeabVE1pcz4pAohh6+kKXDaS2km OoGGJMudqd6jrkeaFkBaGKcx8fiWuH+czLn4ZwUe2QQcdnxEmobu4qBHJWZ3aXxr moHTeLjtWLyW8yY0Ll0cBoRajqprKfU1DSzu0Q7cYti7xURxkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOEXc0rEwp79wANuvlEe9xFFOZVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvOTFkMTBkMDQtZDU2Yi0z MjUxLWFiNmEtMTdkNzIzODk2ZjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINBmJcBeXEsryHtGpaQCJzWbhouE1uo6GhBwSkpTyZFGTwzTHNrCjvB WgCww+1hWPCe/cJYNC/ovikWhVoYZGKYKcQShych7bjrT+BZY8g8KV/u7KRs2okh IObx7/SjaJ921cGrar+yBybmMPLAwvnLlRKf7VjLnUxxJxSdPAf7zgmTSJb3edQR QNWtWuUXjXtDzSXp6r5F4HIpvSo680UElbkxRPIsJ4bR2JfsMVBqLzaXVwbG0PH5 BujvkFk96rMJGALEG8P0uee7HRzEKOviMPyNAdAaal/8cBCLi5Wvv1BqHNhazG4E 5DnmaVyXX1R+s4CFlzwve7HabJLQg6o= -----END CERTIFICATE-----Generated at Sat Aug 23 21:15:39 2025 by rpki-client