$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/42afc059-5ef8-345d-9eb0-509cf5658724.roa File: 42afc059-5ef8-345d-9eb0-509cf5658724.roa (raw, json) Hash identifier: X1p0JxVJYRHLvn1sXvU8Appz1C0Dral4NHTRxRwga+k= Subject key identifier: 7F:B8:9A:50:9E:18:F1:05:AD:23:B9:C8:E0:CD:85:D4:44:15:19:DA Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584B609C92A6E47697701A46F878 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/42afc059-5ef8-345d-9eb0-509cf5658724.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 931 IP address blocks: 104.249.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:92:a6:e4:76:97:70:1a:46:f8:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=30b65cf7-3da9-4a4e-8bcb-99d5657c08d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d6:e3:78:89:af:5f:c7:87:22:3b:03:26:15: fb:33:df:e5:5f:3e:7f:c2:64:39:1c:63:ba:1c:a0: ff:b9:ed:42:04:7d:c8:a4:35:83:75:05:37:67:2a: b3:21:61:69:e0:08:54:44:37:61:8e:f0:46:e2:ff: 50:3a:10:c2:8c:82:32:33:38:7c:8a:59:4f:09:41: 00:d1:f4:3d:e1:f6:47:1d:91:be:26:26:d8:80:f8: 2f:6b:c3:ee:52:09:ef:dd:1c:03:3e:da:4f:b9:8c: d5:7c:c9:07:4c:78:8c:ff:5f:45:c6:5d:13:23:fe: 01:9e:f5:c1:2b:b9:c2:0a:68:02:58:d1:ad:d3:5b: b7:ba:44:fd:fe:cc:cb:c9:74:d3:a3:1d:fb:99:c1: 52:59:52:3e:f9:36:db:f1:18:89:79:2e:3b:b7:75: 19:42:a7:e8:62:e5:81:38:c1:3f:34:56:01:07:b2: 16:4c:3a:66:69:ce:44:aa:38:9d:9f:55:b4:a3:1c: e6:3b:a4:db:c2:ea:43:e8:d1:87:cc:9c:93:85:e9: d2:53:43:4c:90:88:f3:9a:ef:d7:d2:ad:c3:d7:f8: 7b:83:b0:a0:96:05:47:0f:a2:92:9c:ed:59:26:b3: 3e:d3:13:6f:fc:ba:c5:94:f6:41:aa:47:9e:6f:d7: 25:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B8:9A:50:9E:18:F1:05:AD:23:B9:C8:E0:CD:85:D4:44:15:19:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/42afc059-5ef8-345d-9eb0-509cf5658724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.249.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:e9:8e:98:c0:6d:66:41:72:89:c8:ff:63:c4:d7:20:29:33: 3b:5b:bd:94:8a:51:f2:98:a9:14:5f:c2:c4:a1:d7:76:c9:db: cd:53:2d:85:99:77:7c:9e:16:24:68:d7:a8:12:d5:13:33:d8: fb:58:7a:21:75:e0:42:d4:91:65:e2:97:13:f6:c0:1a:d2:ba: e8:5f:8f:d1:9d:24:21:2e:3d:95:08:a3:aa:e8:96:8c:88:4e: 45:77:e2:80:20:46:84:09:e3:b1:42:aa:37:b3:19:4e:26:b8: 4f:32:a0:4d:09:3f:9c:54:8b:cf:83:f6:8f:3e:e6:b8:aa:27: d3:fb:66:3f:92:48:e5:3f:08:80:1e:ce:43:47:27:49:ad:da: 08:57:29:1b:19:1e:9c:36:c7:bb:f1:f7:66:8c:ba:a4:b8:29: 8b:22:cc:8d:55:55:9c:6a:ec:fc:e0:9c:a7:02:de:12:dd:aa: a2:eb:f7:27:3a:5d:03:81:92:72:f6:7c:69:d3:9f:5d:b7:3e: e3:c8:dd:31:bb:cf:39:7e:a7:6a:d8:0f:f8:dc:a5:a2:c4:15: c8:74:27:be:e0:62:52:48:20:25:b8:0a:7e:8e:75:d6:ac:a5: 60:e2:2b:17:01:59:ac:ce:15:1c:e9:b8:6b:49:35:bd:f1:00: 67:b8:f9:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJKm5HaXcBpG+HgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk MzBiNjVjZjctM2RhOS00YTRlLThiY2ItOTlkNTY1N2MwOGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodbjeImvX8eHIjsDJhX7M9/lXz5/wmQ5HGO6 HKD/ue1CBH3IpDWDdQU3ZyqzIWFp4AhURDdhjvBG4v9QOhDCjIIyMzh8illPCUEA 0fQ94fZHHZG+JibYgPgva8PuUgnv3RwDPtpPuYzVfMkHTHiM/19Fxl0TI/4BnvXB K7nCCmgCWNGt01u3ukT9/szLyXTTox37mcFSWVI++Tbb8RiJeS47t3UZQqfoYuWB OME/NFYBB7IWTDpmac5Eqjidn1W0oxzmO6TbwupD6NGHzJyThenSU0NMkIjzmu/X 0q3D1/h7g7CglgVHD6KSnO1ZJrM+0xNv/LrFlPZBqkeeb9clHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+4mlCeGPEFrSO5yODNhdREFRnaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNDJhZmMwNTktNWVmOC0z NDVkLTllYjAtNTA5Y2Y1NjU4NzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPpjpjAbWZBconI/2PE1yApMztbvZSKUfKYqRRfwsSh13bJ281TLYWZ d3yeFiRo16gS1RMz2PtYeiF14ELUkWXilxP2wBrSuuhfj9GdJCEuPZUIo6roloyI TkV34oAgRoQJ47FCqjezGU4muE8yoE0JP5xUi8+D9o8+5riqJ9P7Zj+SSOU/CIAe zkNHJ0mt2ghXKRsZHpw2x7vx92aMuqS4KYsizI1VVZxq7PzgnKcC3hLdqqLr9yc6 XQOBknL2fGnTn123PuPI3TG7zzl+p2rYD/jcpaLEFch0J77gYlJIICW4Cn6Oddas pWDiKxcBWazOFRzpuGtJNb3xAGe4+Rc= -----END CERTIFICATE-----Generated at Mon Oct 20 08:50:03 2025 by rpki-client