$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/424d026a-0a9d-31fd-a322-2da52b63d8a0.roa File: 424d026a-0a9d-31fd-a322-2da52b63d8a0.roa (raw, json) Hash identifier: fIyZrD9BcXN4jzu7P4RJNkF2Wo5kdrm67R7Dmv2ie0o= Subject key identifier: A8:8E:4D:4B:1C:E2:BA:15:FB:DC:13:07:CA:AA:CF:C0:81:FD:BC:84 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CE8EB8E230148CA5BD700 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/424d026a-0a9d-31fd-a322-2da52b63d8a0.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 104.129.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:e8:eb:8e:23:01:48:ca:5b:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=66f866eb-cd99-40dd-917e-a03f03e95513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2a:64:97:62:e2:63:b5:e4:5b:fc:33:df:e8: e1:da:c8:72:69:c2:af:b9:b0:4e:3a:07:f5:c0:d1: 1d:fc:a1:a5:86:2b:31:6c:95:6d:8e:09:35:46:b0: e3:92:c6:2e:e5:85:23:3b:48:5f:01:30:40:57:14: 71:27:22:9f:48:df:5d:ba:88:06:6f:e9:19:21:0f: 36:f1:6e:99:32:47:96:57:1f:6c:64:2a:00:8d:28: 65:12:ae:17:a9:ed:79:d4:fe:60:3c:7a:61:7b:9d: 5e:60:2d:df:44:f6:04:a8:40:87:22:e3:77:65:1c: bf:c3:29:ab:1d:9a:e6:df:0d:fb:af:f8:b5:e2:fb: ea:c4:e4:8f:1c:a7:a8:8c:f9:cb:4a:b0:5b:43:7d: 3e:a1:17:12:d8:24:bd:6b:07:72:03:b7:3e:db:f8: 69:7c:4e:aa:49:23:51:e5:27:1a:0a:cc:e4:4b:d7: fc:bb:e4:58:ef:52:2c:86:02:f4:8e:b1:88:27:e5: 88:ea:8f:fc:4a:42:28:89:1a:86:31:1e:c2:cc:66: 8d:93:42:81:d2:d9:d8:4b:07:12:25:bf:ba:70:68: 87:70:37:e2:1e:15:24:3a:ff:ed:1a:ef:e3:86:d0: 32:73:03:ea:24:fb:6f:98:fa:33:aa:ef:20:26:9e: ba:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8E:4D:4B:1C:E2:BA:15:FB:DC:13:07:CA:AA:CF:C0:81:FD:BC:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/424d026a-0a9d-31fd-a322-2da52b63d8a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 104.129.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:53:02:54:52:e9:a1:b2:23:12:25:98:42:24:57:72:17:f3: 83:39:98:77:f3:0b:6e:b9:1a:04:e9:4e:d2:db:e1:8c:8b:70: f7:87:a4:73:30:1d:51:2b:0a:ff:2a:46:78:1d:a7:6f:72:05: 62:a5:b0:5f:f2:d0:38:4a:2c:52:60:41:08:20:ee:26:57:91: c7:77:c5:eb:7c:82:37:4d:83:eb:7d:02:ff:ed:62:5f:b5:49: 1d:b3:06:a1:6b:1f:fb:df:4b:76:33:f4:28:8f:1c:c7:52:bb: a0:23:45:e9:8e:24:85:7a:43:ab:0b:18:b3:93:7a:ac:05:16: 6d:49:06:e9:9d:0a:70:a4:ff:87:69:ac:ca:be:61:b5:d0:13: 5a:28:6c:0a:41:ea:e2:27:07:08:0b:57:37:be:82:38:4c:2c: ee:08:b8:20:b0:93:08:b8:ed:40:aa:2e:33:c9:9e:06:41:75: e1:73:1b:82:d9:66:75:5d:09:72:8a:14:75:33:5a:09:de:7a: 08:41:6b:9f:5c:e3:51:aa:49:0d:7e:f1:89:dd:8e:30:d8:51: e2:cc:a4:42:7d:84:c3:c0:19:34:cd:6b:54:8a:d7:30:ed:58: 93:c1:c2:f0:c2:c0:97:fa:a8:e2:d7:ad:bf:cf:cf:39:b6:d5: 2d:15:aa:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPOjrjiMBSMpb1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk NjZmODY2ZWItY2Q5OS00MGRkLTkxN2UtYTAzZjAzZTk1NTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Cpkl2LiY7XkW/wz3+jh2shyacKvubBOOgf1 wNEd/KGlhisxbJVtjgk1RrDjksYu5YUjO0hfATBAVxRxJyKfSN9duogGb+kZIQ82 8W6ZMkeWVx9sZCoAjShlEq4Xqe151P5gPHphe51eYC3fRPYEqECHIuN3ZRy/wymr HZrm3w37r/i14vvqxOSPHKeojPnLSrBbQ30+oRcS2CS9awdyA7c+2/hpfE6qSSNR 5ScaCszkS9f8u+RY71IshgL0jrGIJ+WI6o/8SkIoiRqGMR7CzGaNk0KB0tnYSwcS Jb+6cGiHcDfiHhUkOv/tGu/jhtAycwPqJPtvmPozqu8gJp665wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiOTUsc4roV+9wTB8qqz8CB/byEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNDI0ZDAyNmEtMGE5ZC0z MWZkLWEzMjItMmRhNTJiNjNkOGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRTAlRS6aGyIxIlmEIkV3IX84M5mHfzC265GgTpTtLb4YyLcPeHpHMw HVErCv8qRngdp29yBWKlsF/y0DhKLFJgQQgg7iZXkcd3xet8gjdNg+t9Av/tYl+1 SR2zBqFrH/vfS3Yz9CiPHMdSu6AjRemOJIV6Q6sLGLOTeqwFFm1JBumdCnCk/4dp rMq+YbXQE1oobApB6uInBwgLVze+gjhMLO4IuCCwkwi47UCqLjPJngZBdeFzG4LZ ZnVdCXKKFHUzWgneeghBa59c41GqSQ1+8YndjjDYUeLMpEJ9hMPAGTTNa1SK1zDt WJPBwvDCwJf6qOLXrb/Pzzm21S0Vqhc= -----END CERTIFICATE-----Generated at Wed Nov 5 08:41:21 2025 by rpki-client