$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/e7755914-25ca-35df-a094-4a498038a6c3.roa File: e7755914-25ca-35df-a094-4a498038a6c3.roa (raw, json) Hash identifier: xN1sNtR+1yPkWATORRYkUVLTWhGaBmvnRbuI4S2hlCA= Subject key identifier: 71:27:9D:00:5D:53:48:25:0D:42:62:EB:55:0C:5E:13:8E:05:86:28 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584B477C9E6F3CE3B22DEE25BAC0 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/e7755914-25ca-35df-a094-4a498038a6c3.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 26658 IP address blocks: 104.232.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:9e:6f:3c:e3:b2:2d:ee:25:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=ac58b756-13cd-428d-bf52-cc298ddd1520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b1:61:4c:ab:a5:de:9c:51:c4:af:1d:45:cf: 76:bd:94:41:2c:eb:57:4f:30:4c:b2:e0:c9:12:8e: 23:22:6f:06:6e:bd:69:9c:75:17:a2:94:66:ca:27: 25:53:65:c6:d2:94:39:18:95:03:29:4c:d2:4c:a3: 55:b1:9f:12:cf:ca:38:c0:a4:46:0d:c3:32:4c:51: 91:3d:de:87:c8:7a:5d:6c:95:45:dd:b1:36:01:7c: e1:da:98:9a:84:9d:80:ff:8a:db:ca:08:df:39:bf: 42:a8:33:00:27:0a:8b:5b:06:e0:07:97:8a:b2:87: 92:d0:5e:0e:e9:fe:0c:18:0d:be:66:0b:6f:13:0f: 46:c2:e5:63:c6:0b:50:74:90:7d:d7:12:f0:b1:48: cf:0b:55:5e:d8:03:d9:02:bc:cc:c2:60:20:b5:4b: f2:b2:50:9e:73:27:9d:c9:4b:34:9e:9d:bd:73:ce: 41:51:b5:5a:51:05:8f:5c:d1:fa:0b:a4:86:ff:9e: c6:73:71:27:5a:c5:f3:aa:8b:86:80:ea:3e:62:ba: 71:87:98:80:ba:ac:b4:05:46:a2:a1:79:dd:be:6b: 11:82:b4:53:8c:33:ca:5d:5b:e0:47:30:62:b5:88: d5:06:60:2e:a3:a5:42:b8:9a:48:5d:6f:79:87:f6: 24:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:27:9D:00:5D:53:48:25:0D:42:62:EB:55:0C:5E:13:8E:05:86:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/e7755914-25ca-35df-a094-4a498038a6c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.232.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:42:be:86:a2:4c:62:13:a9:18:40:89:06:43:96:30:b9:38: 02:db:58:3c:92:78:c0:02:e4:d1:32:d7:c1:76:a1:13:1a:81: 97:69:35:ad:3b:7b:e9:9b:2b:07:ca:98:27:d3:d2:64:10:c5: 9f:90:df:6b:6f:61:d7:f4:19:1b:b9:cb:40:b5:a4:d8:f7:88: 9d:4a:64:a1:99:44:e8:26:e8:0c:13:88:16:08:9a:35:c3:7a: e9:60:6b:5a:44:3f:12:be:9b:5b:08:fe:35:a8:42:07:c4:48: 92:5a:f4:57:8a:4c:90:91:8d:9c:c4:d3:46:77:b3:53:fc:d2: a7:76:d6:8a:b0:8d:14:3f:1a:0f:90:09:d6:33:c6:78:79:73: 5a:18:d6:85:68:7d:6f:55:b5:0a:b7:76:bc:0d:d6:41:98:aa: 49:f5:15:4a:00:c0:cb:d5:bd:4d:8e:cc:a0:d8:fc:36:8f:13: 8b:41:ca:8f:6d:3d:81:2c:1f:88:29:2d:d2:6d:1c:ee:03:b4: 88:b8:b9:e3:5b:8c:8c:a8:25:a1:59:75:ce:a9:0b:76:77:30: 5b:13:d0:b8:80:1d:63:5f:7f:79:fc:29:74:ac:ca:90:72:29: c1:2f:b6:53:bf:8c:09:cb:6d:03:3b:ab:bf:e7:02:aa:98:25: 4f:85:9c:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfJ5vPOOyLe4lusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk YWM1OGI3NTYtMTNjZC00MjhkLWJmNTItY2MyOThkZGQxNTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7FhTKul3pxRxK8dRc92vZRBLOtXTzBMsuDJ Eo4jIm8Gbr1pnHUXopRmyiclU2XG0pQ5GJUDKUzSTKNVsZ8Sz8o4wKRGDcMyTFGR Pd6HyHpdbJVF3bE2AXzh2piahJ2A/4rbygjfOb9CqDMAJwqLWwbgB5eKsoeS0F4O 6f4MGA2+ZgtvEw9GwuVjxgtQdJB91xLwsUjPC1Ve2APZArzMwmAgtUvyslCecyed yUs0np29c85BUbVaUQWPXNH6C6SG/57Gc3EnWsXzqouGgOo+Yrpxh5iAuqy0BUai oXndvmsRgrRTjDPKXVvgRzBitYjVBmAuo6VCuJpIXW95h/YkPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEnnQBdU0glDUJi61UMXhOOBYYoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvZTc3NTU5MTQtMjVjYS0z NWRmLWEwOTQtNGE0OTgwMzhhNmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaOhEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpCvoaiTGITqRhAiQZDljC5OALbWDySeMAC5NEy18F2oRMagZdpNa07 e+mbKwfKmCfT0mQQxZ+Q32tvYdf0GRu5y0C1pNj3iJ1KZKGZROgm6AwTiBYImjXD eulga1pEPxK+m1sI/jWoQgfESJJa9FeKTJCRjZzE00Z3s1P80qd21oqwjRQ/Gg+Q CdYzxnh5c1oY1oVofW9VtQq3drwN1kGYqkn1FUoAwMvVvU2OzKDY/DaPE4tByo9t PYEsH4gpLdJtHO4DtIi4ueNbjIyoJaFZdc6pC3Z3MFsT0LiAHWNff3n8KXSsypBy KcEvtlO/jAnLbQM7q7/nAqqYJU+FnOk= -----END CERTIFICATE-----Generated at Mon Oct 20 11:14:58 2025 by rpki-client