$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/10efc89a-37bc-334c-99a6-377bcd91ae70.roa File: 10efc89a-37bc-334c-99a6-377bcd91ae70.roa (raw, json) Hash identifier: RzQhEcmiu+5Kc/Gl7cG3OMkl0By7vCH3IaPQhB7E1xM= Subject key identifier: 21:23:3B:A5:4D:30:5D:51:7A:03:7B:6D:05:5B:42:C4:49:FE:5D:E6 Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F4328584BB2F7A99E45F6FA75B4054200 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/10efc89a-37bc-334c-99a6-377bcd91ae70.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 398395 IP address blocks: 104.128.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:a9:9e:45:f6:fa:75:b4:05:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=af932ee4-df0d-42a2-8dbf-ba89d0941fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:62:01:0e:d6:91:0c:35:0a:45:f3:7e:62:81: 7a:5a:92:21:1a:44:76:7b:e3:d8:32:ae:37:2d:14: fb:3f:e2:e9:6f:53:f3:bb:7e:61:a1:06:b4:a8:51: c8:69:21:df:ae:67:c0:9e:07:b6:f3:1a:6f:f9:ea: ea:3a:f0:fb:fc:4c:96:3e:1b:b7:c6:60:07:ba:91: 24:be:bb:46:5b:ee:87:90:ae:bf:a1:8f:13:dd:cc: d2:40:5a:66:2d:0f:cd:75:9a:cb:89:58:eb:b0:ac: ac:95:cc:83:5a:dc:c7:05:de:6f:7c:db:e9:ac:5b: 75:e6:e1:52:40:ba:8b:d0:01:69:db:36:4e:3b:fc: 23:b0:68:ba:68:02:29:8d:eb:04:0c:d8:bf:49:2a: ab:32:0e:dc:2c:5d:a1:d3:1e:56:e4:63:ab:83:28: 83:d1:9b:5b:55:25:58:87:b0:22:5e:6d:21:d1:c9: 64:04:a8:78:97:97:a3:46:3c:4f:b8:85:9b:61:fa: 2c:fa:be:60:b6:2a:06:fa:41:d3:01:ba:f3:fd:00: 65:ea:92:59:f5:3a:3d:e5:42:02:aa:8f:2a:50:ec: db:1a:56:d0:db:2b:19:e1:0b:9e:aa:dc:24:f4:71: ce:44:27:47:ad:21:52:d1:8a:37:4f:e5:b9:9b:3b: bd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:23:3B:A5:4D:30:5D:51:7A:03:7B:6D:05:5B:42:C4:49:FE:5D:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/10efc89a-37bc-334c-99a6-377bcd91ae70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv4: 104.128.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:5d:e9:50:b2:2b:71:d5:14:0c:4f:12:c2:c9:38:e1:3a:f7: ea:96:02:3b:1c:cc:e8:04:4b:2e:a6:39:45:93:5b:31:bc:7f: 53:6e:cb:dd:54:b2:10:b9:20:f1:05:65:29:ba:d4:7b:a0:9b: e5:71:60:17:07:71:f3:9b:ff:74:da:63:fa:5c:91:e8:4a:f0: 8f:13:51:96:7a:73:bd:0a:95:4b:43:32:58:df:cd:10:32:9c: 23:30:2e:6a:a8:b0:26:0c:68:fb:16:3c:0e:1b:61:7d:a6:88: ae:fb:bf:9b:14:9b:3f:4d:7a:10:e8:d7:bc:3e:1a:c2:c1:4c: 7b:27:4b:a4:30:04:9c:d3:67:86:e0:5a:cb:b8:fc:92:8b:bc: bf:c1:70:bc:e2:a8:26:64:e7:3f:b8:3b:d0:82:49:00:3c:a0: 32:7f:b3:4e:59:ab:20:8c:0c:53:a0:d4:74:6b:06:38:ae:c5: 8b:11:a7:83:ce:0e:74:02:25:14:14:af:dc:13:b9:57:00:ac: 5c:7f:60:f1:14:c2:2e:95:c4:58:e3:0e:f5:82:2e:2b:1f:34: db:18:ef:94:4d:4e:c5:a1:a1:d6:63:66:9a:d6:ee:9a:fd:43: e8:8e:30:fa:13:6e:79:8a:93:91:ac:0f:3a:6c:b6:4c:22:21: c8:c4:2e:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy96meRfb6dbQFQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YWY5MzJlZTQtZGYwZC00MmEyLThkYmYtYmE4OWQwOTQxZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmIBDtaRDDUKRfN+YoF6WpIhGkR2e+PYMq43 LRT7P+Lpb1Pzu35hoQa0qFHIaSHfrmfAnge28xpv+erqOvD7/EyWPhu3xmAHupEk vrtGW+6HkK6/oY8T3czSQFpmLQ/NdZrLiVjrsKyslcyDWtzHBd5vfNvprFt15uFS QLqL0AFp2zZOO/wjsGi6aAIpjesEDNi/SSqrMg7cLF2h0x5W5GOrgyiD0ZtbVSVY h7AiXm0h0clkBKh4l5ejRjxPuIWbYfos+r5gtioG+kHTAbrz/QBl6pJZ9To95UIC qo8qUOzbGlbQ2ysZ4Queqtwk9HHORCdHrSFS0Yo3T+W5mzu9SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEjO6VNMF1RegN7bQVbQsRJ/l3mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvMTBlZmM4OWEtMzdiYy0z MzRjLTk5YTYtMzc3YmNkOTFhZTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIDoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBd6VCyK3HVFAxPEsLJOOE69+qWAjsczOgESy6mOUWTWzG8f1Nuy91U shC5IPEFZSm61Hugm+VxYBcHcfOb/3TaY/pckehK8I8TUZZ6c70KlUtDMljfzRAy nCMwLmqosCYMaPsWPA4bYX2miK77v5sUmz9NehDo17w+GsLBTHsnS6QwBJzTZ4bg Wsu4/JKLvL/BcLziqCZk5z+4O9CCSQA8oDJ/s05ZqyCMDFOg1HRrBjiuxYsRp4PO DnQCJRQUr9wTuVcArFx/YPEUwi6VxFjjDvWCLisfNNsY75RNTsWhodZjZprW7pr9 Q+iOMPoTbnmKk5GsDzpstkwiIcjELgo= -----END CERTIFICATE-----Generated at Tue Nov 4 19:43:54 2025 by rpki-client