$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/ff7900da-0420-38fc-8569-0df46155e9fa.roa File: ff7900da-0420-38fc-8569-0df46155e9fa.roa (raw, json) Hash identifier: CkWctQ7BYTEYPEvOrSUycBE7XhCzELAUpFN/f6wZVyA= Subject key identifier: 21:41:38:0F:4A:36:BF:FF:E8:E8:00:9E:47:2C:0C:9D:BD:D6:F5:94 Certificate issuer: /CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580 Certificate serial: 010D0C9F4328584B0B76BB74F8B19361D98361C0 Authority key identifier: 93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/ff7900da-0420-38fc-8569-0df46155e9fa.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 14701 IP address blocks: 104.232.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:bb:74:f8:b1:93:61:d9:83:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=62eb47bd-2b35-4386-ac0c-7ddd75a756a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:11:a2:a9:ce:0d:1b:11:6d:9e:5e:bd:00:0d: fe:2e:c7:91:f9:a2:dd:bc:f4:d4:53:1b:90:fb:83: eb:68:4b:25:2e:bc:78:3d:64:2c:b1:5a:61:ef:53: 60:68:9c:03:0d:0b:ba:e1:95:ab:82:bf:d4:af:88: d5:a4:64:d8:8e:8d:e9:68:54:2d:3c:c8:ba:67:4e: ee:ca:a4:bf:e2:7f:55:5c:2d:8e:37:4c:1f:48:9d: 82:b3:45:f9:07:77:e1:5d:35:1b:c6:df:a3:5d:19: 72:32:aa:70:f4:2d:73:64:ee:d3:93:2a:75:5a:be: d2:ab:45:26:c6:28:ff:98:81:2a:51:b1:5a:fa:29: 6f:a6:6d:09:09:c5:2d:50:df:83:3d:2a:ac:8f:37: 27:9f:79:0b:e8:9a:31:f7:53:24:d2:04:01:f2:d0: 11:0c:3f:d4:40:0d:4b:75:60:99:a4:e8:2f:07:a1: 15:a7:1b:5b:f1:83:b5:48:97:3f:8e:99:3e:f2:e5: 92:13:a1:ee:32:d7:bc:98:a4:4c:a1:f5:f7:81:0c: a3:1a:36:97:18:5d:8a:6e:66:db:93:48:a2:61:77: f6:13:bf:3b:23:e0:cb:9d:02:48:ca:ee:8a:56:a4: 2c:93:f1:20:4f:e7:a6:49:ac:18:ce:e1:57:af:3b: 8b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:41:38:0F:4A:36:BF:FF:E8:E8:00:9E:47:2C:0C:9D:BD:D6:F5:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/ff7900da-0420-38fc-8569-0df46155e9fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl X509v3 Authority Key Identifier: keyid:93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer sbgp-ipAddrBlock: critical IPv4: 104.232.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:f6:a1:08:d8:2c:c4:0f:2f:df:3b:92:0f:3c:ce:8b:fd:d1: 11:7f:80:e0:72:ad:33:48:a8:95:59:76:d0:9b:a0:b1:f9:3e: 64:56:95:f5:32:bb:f5:bc:98:41:21:9f:ea:c7:4e:7c:07:fb: 96:1a:c6:ce:57:44:6f:01:af:de:36:e9:8f:3d:ba:ca:ed:3b: 98:e1:8f:10:e5:50:47:9f:8f:4d:a1:54:0d:47:6b:f0:27:66: cd:57:b7:80:63:47:09:36:0b:e3:84:56:00:bd:ba:c1:d6:ce: 96:4b:93:40:c9:0c:36:2a:73:a4:3b:35:00:5e:2b:82:55:cd: 57:cb:b5:92:61:55:2c:7b:3b:77:32:b9:aa:ec:4c:de:16:6d: e1:71:c6:e9:66:92:f8:03:40:6e:a3:53:5b:b5:8d:b5:92:32: 9a:f3:74:36:d5:08:a5:55:6c:bf:37:aa:a6:22:2d:4a:af:05: 3c:6d:ac:43:1b:89:1c:1c:cd:46:9f:34:95:f3:74:9e:cc:71: 26:a6:cb:25:26:6a:f8:4f:e7:02:26:be:e0:9d:db:8f:7a:fa: 7f:0f:6a:2c:48:eb:71:c8:6e:8a:ec:5b:d8:d2:80:c9:61:8f: 44:71:e0:93:1a:a7:58:52:6a:34:3f:23:c3:ac:58:c4:7a:60: 3b:84:b7:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdrt0+LGTYdmDYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ2OWMyYTctZjdkNy00OGJiLWExNzctN2MwYjY3NjU0 NTgwMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NjJlYjQ3YmQtMmIzNS00Mzg2LWFjMGMtN2RkZDc1YTc1NmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRGiqc4NGxFtnl69AA3+LseR+aLdvPTUUxuQ +4PraEslLrx4PWQssVph71NgaJwDDQu64ZWrgr/Ur4jVpGTYjo3paFQtPMi6Z07u yqS/4n9VXC2ON0wfSJ2Cs0X5B3fhXTUbxt+jXRlyMqpw9C1zZO7Tkyp1Wr7Sq0Um xij/mIEqUbFa+ilvpm0JCcUtUN+DPSqsjzcnn3kL6Jox91Mk0gQB8tARDD/UQA1L dWCZpOgvB6EVpxtb8YO1SJc/jpk+8uWSE6HuMte8mKRMofX3gQyjGjaXGF2Kbmbb k0iiYXf2E787I+DLnQJIyu6KVqQsk/EgT+emSawYzuFXrzuL5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFBOA9KNr//6OgAnkcsDJ291vWUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZDY5 YzJhNy1mN2Q3LTQ4YmItYTE3Ny03YzBiNjc2NTQ1ODAvZmY3OTAwZGEtMDQyMC0z OGZjLTg1NjktMGRmNDYxNTVlOWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWQ2OWMyYTctZjdkNy00OGJiLWEx NzctN2MwYjY3NjU0NTgwLzVkNjljMmE3LWY3ZDctNDhiYi1hMTc3LTdjMGI2NzY1 NDU4MC5jcmwwHwYDVR0jBBgwFoAUk9EPQIKTK6+/siB9xjyzAANfANQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZDY5YzJhNy1mN2Q3LTQ4YmItYTE3Ny03YzBi Njc2NTQ1ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaOgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJr2oQjYLMQPL987kg88zov90RF/gOByrTNIqJVZdtCboLH5PmRWlfUy u/W8mEEhn+rHTnwH+5Yaxs5XRG8Br9426Y89usrtO5jhjxDlUEefj02hVA1Ha/An Zs1Xt4BjRwk2C+OEVgC9usHWzpZLk0DJDDYqc6Q7NQBeK4JVzVfLtZJhVSx7O3cy uarsTN4WbeFxxulmkvgDQG6jU1u1jbWSMprzdDbVCKVVbL83qqYiLUqvBTxtrEMb iRwczUafNJXzdJ7McSamyyUmavhP5wImvuCd2496+n8PaixI63HIborsW9jSgMlh j0Rx4JMap1hSajQ/I8OsWMR6YDuEt9Q= -----END CERTIFICATE-----Generated at Mon Oct 20 17:56:18 2025 by rpki-client