$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/d126c33e-9a10-3dd2-867e-fd2b14dabe5f.roa File: d126c33e-9a10-3dd2-867e-fd2b14dabe5f.roa (raw, json) Hash identifier: 5joGVELxt+/lvu8A4J52bHxINbonVtkDepAPgcHI/bs= Subject key identifier: 6A:4A:29:D8:90:46:AE:D4:E0:56:1E:E6:F2:46:53:A5:E5:86:92:6E Certificate issuer: /CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580 Certificate serial: 010D0C9F4328584B0B76BB983AFBB1CB2320A180 Authority key identifier: 93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/d126c33e-9a10-3dd2-867e-fd2b14dabe5f.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 395950 IP address blocks: 104.232.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:bb:98:3a:fb:b1:cb:23:20:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=02a78f1e-c34e-496a-afa2-a67d8d6c09e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:23:d3:bd:bb:14:a4:08:32:dd:26:10:61:d4: 6c:e1:62:c6:10:87:1c:a2:41:b0:3c:31:da:28:86: b9:ac:cb:ca:d5:19:1f:65:ba:8a:fc:21:a2:4a:cf: 5c:0b:85:77:2c:22:03:95:d6:a2:b9:03:85:09:87: da:08:6b:6d:41:6e:51:50:86:7d:0e:e4:40:ef:cd: df:ff:36:de:5e:cc:73:36:cb:46:0f:41:ed:0d:b7: 78:46:ef:9d:27:52:de:14:90:8c:8f:c2:15:fb:53: aa:e3:c5:f7:71:e6:c6:0a:79:54:96:ca:a0:65:52: 04:af:9d:4d:c8:0c:d5:3b:02:b4:91:63:a5:50:94: 1e:e4:99:ba:91:fb:8f:e0:8a:7c:c2:a1:dc:5d:a2: 46:6e:e1:37:d5:97:86:58:a6:e3:f6:ef:2d:42:6a: 3d:41:b2:d7:f1:59:54:6f:9a:d4:e7:c5:29:eb:a6: 39:37:6e:3d:6b:62:60:10:e2:1e:73:0e:20:6e:c2: ca:51:70:6c:32:04:c5:31:86:8c:84:ac:3c:99:62: ec:5d:f4:06:84:66:2f:ce:60:34:8f:e3:17:0d:95: 72:8c:13:21:af:f4:fa:f1:dd:d0:15:e4:fe:f9:78: b1:e8:5b:c8:0d:d9:f1:e2:37:9a:ce:5a:e7:18:2a: ec:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4A:29:D8:90:46:AE:D4:E0:56:1E:E6:F2:46:53:A5:E5:86:92:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/d126c33e-9a10-3dd2-867e-fd2b14dabe5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl X509v3 Authority Key Identifier: keyid:93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer sbgp-ipAddrBlock: critical IPv4: 104.232.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:cb:4f:af:c6:bb:d7:61:4d:2d:6b:22:1f:b6:01:2b:4b:98: c5:33:48:54:b4:e0:90:f1:b9:b7:ab:eb:45:6c:f5:fb:68:e6: 6f:24:b4:42:c8:07:e2:f9:ce:83:aa:67:b7:7f:32:c4:3f:50: d7:60:24:dc:96:c2:5a:ba:74:f0:da:d0:19:4f:d0:00:2c:cd: 46:50:4a:e9:9a:7d:ac:c7:6d:b3:57:33:6f:4b:fe:e2:41:8d: c6:b5:c3:96:2c:81:06:76:94:61:78:12:81:4a:7d:83:6a:ae: 51:df:fc:b6:24:04:c8:21:67:23:a6:b3:a3:bc:5c:84:e1:93: c5:9e:ea:e5:7b:5f:c8:9d:a3:7e:15:ef:04:5b:5a:e5:fa:88: 68:5b:06:5f:4f:6d:84:7d:12:73:cc:e5:f5:70:42:c4:a0:79: 5f:fa:ae:6c:91:a0:d1:c7:e2:80:bd:fa:f5:9c:68:86:ef:13: 27:ae:66:e1:4a:9e:39:0a:02:c0:74:02:8d:43:3b:0a:82:dd: aa:fc:cf:ae:f8:63:fe:d9:d1:ba:26:89:e9:30:3c:0c:97:14: 25:65:4b:7d:53:55:e1:e6:f5:56:7a:a9:3f:e5:77:c1:f5:99: 7f:f7:77:e9:91:be:e9:1a:dd:8c:a0:ff:05:29:91:17:56:9a: 53:34:b2:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdruYOvuxyyMgoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ2OWMyYTctZjdkNy00OGJiLWExNzctN2MwYjY3NjU0 NTgwMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MDJhNzhmMWUtYzM0ZS00OTZhLWFmYTItYTY3ZDhkNmMwOWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryPTvbsUpAgy3SYQYdRs4WLGEIccokGwPDHa KIa5rMvK1RkfZbqK/CGiSs9cC4V3LCIDldaiuQOFCYfaCGttQW5RUIZ9DuRA783f /zbeXsxzNstGD0HtDbd4Ru+dJ1LeFJCMj8IV+1Oq48X3cebGCnlUlsqgZVIEr51N yAzVOwK0kWOlUJQe5Jm6kfuP4Ip8wqHcXaJGbuE31ZeGWKbj9u8tQmo9QbLX8VlU b5rU58Up66Y5N249a2JgEOIecw4gbsLKUXBsMgTFMYaMhKw8mWLsXfQGhGYvzmA0 j+MXDZVyjBMhr/T68d3QFeT++Xix6FvIDdnx4jeazlrnGCrsFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpKKdiQRq7U4FYe5vJGU6XlhpJuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZDY5 YzJhNy1mN2Q3LTQ4YmItYTE3Ny03YzBiNjc2NTQ1ODAvZDEyNmMzM2UtOWExMC0z ZGQyLTg2N2UtZmQyYjE0ZGFiZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWQ2OWMyYTctZjdkNy00OGJiLWEx NzctN2MwYjY3NjU0NTgwLzVkNjljMmE3LWY3ZDctNDhiYi1hMTc3LTdjMGI2NzY1 NDU4MC5jcmwwHwYDVR0jBBgwFoAUk9EPQIKTK6+/siB9xjyzAANfANQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZDY5YzJhNy1mN2Q3LTQ4YmItYTE3Ny03YzBi Njc2NTQ1ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaOgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDLT6/Gu9dhTS1rIh+2AStLmMUzSFS04JDxuber60Vs9fto5m8ktELI B+L5zoOqZ7d/MsQ/UNdgJNyWwlq6dPDa0BlP0AAszUZQSumafazHbbNXM29L/uJB jca1w5YsgQZ2lGF4EoFKfYNqrlHf/LYkBMghZyOms6O8XIThk8We6uV7X8ido34V 7wRbWuX6iGhbBl9PbYR9EnPM5fVwQsSgeV/6rmyRoNHH4oC9+vWcaIbvEyeuZuFK njkKAsB0Ao1DOwqC3ar8z674Y/7Z0bomiekwPAyXFCVlS31TVeHm9VZ6qT/ld8H1 mX/3d+mRvuka3Yyg/wUpkRdWmlM0slU= -----END CERTIFICATE-----Generated at Mon Oct 20 12:01:39 2025 by rpki-client