$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b028e0f9-478e-3e38-a8c5-5789ee4f7e32.roa File: b028e0f9-478e-3e38-a8c5-5789ee4f7e32.roa (raw, json) Hash identifier: Kbpfnl7MMuaPesgFJ7hVo/SvB6vUI0yz01If+V9RGGc= Subject key identifier: 65:A8:E1:21:A0:18:5D:19:DF:FF:52:97:C7:D0:6F:95:29:24:F4:80 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584AECC1181B2DFDCF72FFB14260 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b028e0f9-478e-3e38-a8c5-5789ee4f7e32.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 36352 IP address blocks: 104.143.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:18:1b:2d:fd:cf:72:ff:b1:42:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=1d4f19d3-1ebc-4f8a-be9e-bbc67a55bcdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:15:ed:15:70:29:da:84:74:fc:9c:fc:5c:e7: d9:6e:8f:f5:41:24:81:14:3c:b1:d1:4f:44:16:fa: 91:f0:1f:7b:cf:3f:9b:1e:48:c9:ed:1b:34:be:37: c5:fb:e0:8d:7d:15:4f:b9:9e:33:cd:5e:8d:5a:21: 0a:f8:f0:5d:7e:55:1d:48:3c:95:a6:42:3d:33:a4: 21:e7:e4:0b:fa:5c:3a:33:b4:33:f5:d9:6e:fb:39: 16:40:13:2d:95:57:d2:04:9f:6f:59:7c:79:8a:51: 2b:9d:7d:70:65:bf:74:b4:78:95:6f:64:4d:06:86: c3:42:c7:f4:24:b7:72:2e:05:d8:aa:bb:fe:86:09: c3:1c:d8:84:2c:fe:da:cc:6b:4f:81:db:96:a8:7e: 5a:0f:d2:70:b6:3f:2c:9e:1e:1b:92:7c:9d:fb:a3: b2:21:eb:77:c1:7b:b9:4b:69:bc:46:c1:a6:89:e7: 5e:6f:99:02:b0:85:1a:69:bf:98:b2:7a:27:9e:0f: a4:32:fe:66:02:78:92:00:51:9e:1f:bf:a7:7a:35: 2f:44:ba:b1:f6:fe:d1:b0:e0:7b:f9:88:f6:74:07: f7:1f:ea:c7:75:8f:7d:26:ef:01:b7:ba:18:69:9c: fb:63:a2:36:02:96:97:12:9d:f3:02:97:fd:b7:3d: bf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A8:E1:21:A0:18:5D:19:DF:FF:52:97:C7:D0:6F:95:29:24:F4:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b028e0f9-478e-3e38-a8c5-5789ee4f7e32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:7b:54:78:b3:dc:48:16:b7:be:9b:31:fc:13:a2:43:97:04: 97:9f:15:06:40:43:df:0c:8c:2f:de:1c:a3:0a:b5:92:80:41: fe:ab:d6:d8:01:73:04:01:15:ad:20:ed:14:f9:8a:cc:fb:b9: 57:89:bb:05:3e:b8:4d:6c:73:ce:b2:05:05:19:30:af:e3:40: 4c:76:7f:63:87:4b:9f:3a:cc:83:00:b4:71:49:80:13:7b:36: 12:3e:16:16:73:91:ee:0d:8c:e8:5b:8a:71:61:9e:a3:7e:82: c9:c6:f1:6b:5b:a7:ce:56:47:25:72:fa:c0:2f:9d:64:fe:c0: 00:3a:db:94:f4:63:e1:c7:48:09:09:22:8b:e5:2e:f5:af:e1: ad:b6:0d:b9:6f:b1:f7:85:6a:88:16:d4:4a:d2:d9:ae:61:29: c3:6f:49:3d:d6:8f:bb:af:ef:48:e0:fc:2b:91:10:9c:a4:80: fe:7e:f6:f8:c0:d1:1e:c2:58:1a:7d:3d:d4:a6:34:e0:0d:35: 54:8d:99:a8:b2:32:af:10:96:81:c0:e3:0d:76:d1:ee:e9:96: 5c:d2:7a:56:7e:58:c1:88:2e:5e:2b:a2:e2:8c:52:a0:5a:48: 1d:c4:b2:69:dd:4b:c3:98:9b:90:2c:f8:73:d9:f2:79:a8:88: b5:af:80:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswRgbLf3Pcv+xQmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MWQ0ZjE5ZDMtMWViYy00ZjhhLWJlOWUtYmJjNjdhNTViY2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRXtFXAp2oR0/Jz8XOfZbo/1QSSBFDyx0U9E FvqR8B97zz+bHkjJ7Rs0vjfF++CNfRVPuZ4zzV6NWiEK+PBdflUdSDyVpkI9M6Qh 5+QL+lw6M7Qz9dlu+zkWQBMtlVfSBJ9vWXx5ilErnX1wZb90tHiVb2RNBobDQsf0 JLdyLgXYqrv+hgnDHNiELP7azGtPgduWqH5aD9Jwtj8snh4bknyd+6OyIet3wXu5 S2m8RsGmiedeb5kCsIUaab+Ysnonng+kMv5mAniSAFGeH7+nejUvRLqx9v7RsOB7 +Yj2dAf3H+rHdY99Ju8Bt7oYaZz7Y6I2ApaXEp3zApf9tz2/uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWo4SGgGF0Z3/9Sl8fQb5UpJPSAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvYjAyOGUwZjktNDc4ZS0z ZTM4LWE4YzUtNTc4OWVlNGY3ZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFV7VHiz3EgWt76bMfwTokOXBJefFQZAQ98MjC/eHKMKtZKAQf6r1tgB cwQBFa0g7RT5isz7uVeJuwU+uE1sc86yBQUZMK/jQEx2f2OHS586zIMAtHFJgBN7 NhI+FhZzke4NjOhbinFhnqN+gsnG8Wtbp85WRyVy+sAvnWT+wAA625T0Y+HHSAkJ IovlLvWv4a22DblvsfeFaogW1ErS2a5hKcNvST3Wj7uv70jg/CuREJykgP5+9vjA 0R7CWBp9PdSmNOANNVSNmaiyMq8QloHA4w120e7pllzSelZ+WMGILl4rouKMUqBa SB3EsmndS8OYm5As+HPZ8nmoiLWvgP0= -----END CERTIFICATE-----Generated at Sat Aug 23 21:14:11 2025 by rpki-client