$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b9bf8681-9025-360c-820c-2d5bb3dbb16c.roa File: b9bf8681-9025-360c-820c-2d5bb3dbb16c.roa (raw, json) Hash identifier: xaOUxW0yVgEjwsGn4S5EJ4LP+GMB7g6Tf1ujpod8D2Q= Subject key identifier: 4C:6B:79:61:3D:19:B2:E9:56:92:54:9B:F4:C3:24:F6:4F:46:CC:2D Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584B477C9E8241992E6551628B80 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b9bf8681-9025-360c-820c-2d5bb3dbb16c.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 26658 IP address blocks: 104.232.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:9e:82:41:99:2e:65:51:62:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=3d510c74-5aa6-4200-a150-f617498c3788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4b:08:24:12:a5:7f:9c:2e:9c:54:76:07:b6: f5:81:54:3c:e2:e4:5d:ed:e9:86:84:58:e2:2e:f8: 55:dc:a7:68:8f:e9:37:f2:7c:84:c3:91:fe:8c:3f: 2e:94:05:4d:4d:1f:b4:50:d9:55:06:fc:3c:49:2f: ff:65:e4:2b:bd:0c:f5:8c:03:60:6a:35:b1:83:6b: cc:6f:98:12:fb:9b:47:bc:92:6b:df:bc:b4:c5:8c: 8c:b7:bb:bb:0d:42:93:4d:3a:1a:90:82:29:97:2a: 60:94:b9:bf:ed:ed:79:8b:94:49:0a:54:31:c9:fc: 0c:4a:0e:56:4a:11:2c:0d:07:cc:da:9a:6e:37:de: 36:b6:db:d7:0a:d5:a1:49:88:18:12:0a:d1:45:85: 4f:9d:cd:ce:df:e3:0e:e8:a8:54:16:da:53:0d:8c: 8a:d1:53:b7:4b:82:ca:b0:d9:17:7b:21:06:71:77: 36:e2:0e:c9:2a:29:53:94:fb:eb:fc:ba:96:e3:a3: 64:3d:b0:0a:86:d7:92:24:be:44:e4:39:f2:04:b6: 91:bc:f3:25:a6:08:67:74:0c:79:2b:8b:05:9e:37: 03:71:db:dd:98:66:a9:4b:3f:24:53:46:77:40:5e: 89:3c:e9:7e:c9:b8:b2:1b:40:80:d4:16:f3:00:81: f9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6B:79:61:3D:19:B2:E9:56:92:54:9B:F4:C3:24:F6:4F:46:CC:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b9bf8681-9025-360c-820c-2d5bb3dbb16c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.232.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:f3:4c:61:71:1a:a5:c5:0f:d8:be:6e:4e:bc:f7:89:81:c7: 3b:dd:38:0a:a7:00:23:0e:d7:d4:a3:fd:e6:b4:69:5e:67:85: 2a:a9:ac:8c:c7:24:73:b3:f8:9a:6c:45:c6:ff:e4:d5:0c:5c: fc:1e:87:70:e6:f2:a8:23:8e:27:29:9b:81:25:9c:e9:f9:7a: 4e:0e:2c:42:18:ce:89:ee:1a:b1:59:a7:99:b8:cd:6b:38:5e: 7d:4e:7e:a3:64:17:58:2c:5e:30:eb:e0:f8:fb:71:0b:5c:a4: 43:b0:1e:c3:f0:da:44:c8:ee:94:0e:5b:aa:16:aa:18:97:5d: 3e:ba:fe:46:34:80:05:13:a9:89:35:62:21:f4:f3:86:ee:45: 57:2a:b6:27:27:a1:2d:a2:c3:eb:36:26:6a:6b:69:af:85:c5: d1:8c:a4:bd:02:fd:80:19:bc:89:46:46:3c:1a:ff:d5:3f:9d: 12:c8:da:69:4c:20:c6:18:ba:6b:c4:f2:a4:ec:2a:49:fe:97: a5:95:b1:15:b0:2c:6a:31:b5:04:a8:d9:42:c9:ca:38:16:24: a5:c7:8f:68:75:50:e3:b7:ab:b6:0b:ca:52:6f:49:2f:2c:0d: 02:02:74:9e:10:ac:31:1c:1a:01:5e:a8:f0:2e:02:99:4d:2a: 2d:14:bb:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfJ6CQZkuZVFii4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk M2Q1MTBjNzQtNWFhNi00MjAwLWExNTAtZjYxNzQ5OGMzNzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUsIJBKlf5wunFR2B7b1gVQ84uRd7emGhFji LvhV3Kdoj+k38nyEw5H+jD8ulAVNTR+0UNlVBvw8SS//ZeQrvQz1jANgajWxg2vM b5gS+5tHvJJr37y0xYyMt7u7DUKTTToakIIplypglLm/7e15i5RJClQxyfwMSg5W ShEsDQfM2ppuN942ttvXCtWhSYgYEgrRRYVPnc3O3+MO6KhUFtpTDYyK0VO3S4LK sNkXeyEGcXc24g7JKilTlPvr/LqW46NkPbAKhteSJL5E5DnyBLaRvPMlpghndAx5 K4sFnjcDcdvdmGapSz8kU0Z3QF6JPOl+ybiyG0CA1BbzAIH5bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExreWE9GbLpVpJUm/TDJPZPRswtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvYjliZjg2ODEtOTAyNS0z NjBjLTgyMGMtMmQ1YmIzZGJiMTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOhGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHzTGFxGqXFD9i+bk6894mBxzvdOAqnACMO19Sj/ea0aV5nhSqprIzH JHOz+JpsRcb/5NUMXPweh3Dm8qgjjicpm4ElnOn5ek4OLEIYzonuGrFZp5m4zWs4 Xn1OfqNkF1gsXjDr4Pj7cQtcpEOwHsPw2kTI7pQOW6oWqhiXXT66/kY0gAUTqYk1 YiH084buRVcqticnoS2iw+s2Jmpraa+FxdGMpL0C/YAZvIlGRjwa/9U/nRLI2mlM IMYYumvE8qTsKkn+l6WVsRWwLGoxtQSo2ULJyjgWJKXHj2h1UOO3q7YLylJvSS8s DQICdJ4QrDEcGgFeqPAuAplNKi0Uu3U= -----END CERTIFICATE-----Generated at Mon Oct 20 11:20:39 2025 by rpki-client