$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/4107624b-20aa-32db-a283-7fb5f300cb08.roa File: 4107624b-20aa-32db-a283-7fb5f300cb08.roa (raw, json) Hash identifier: aiawWoJK6SHwAVCnS9aEFWSHvpwjoIIAtnvCbnU7H4c= Subject key identifier: FA:01:7D:36:5A:0B:81:45:72:C4:DF:00:E1:5A:8E:1E:B3:23:DF:4A Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F4328584AEE268C9F61AA64E3F89EBD80 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/4107624b-20aa-32db-a283-7fb5f300cb08.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 26548 IP address blocks: 104.128.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:8c:9f:61:aa:64:e3:f8:9e:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=74bc25a0-ea97-4da2-88fb-eecede3dcc25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:52:be:e3:9c:13:8d:55:a5:f3:4d:c8:bb:59: fc:99:0a:20:06:87:1d:d8:fc:fe:86:2d:39:98:0e: 66:fa:a6:68:1e:64:0a:75:6b:55:88:bc:3b:af:bf: 0d:e9:0b:e9:d5:e4:d4:e7:fc:1e:e7:d1:44:9f:21: 37:8b:5b:14:60:b1:de:0b:fc:ec:22:c7:0e:f8:b5: 18:5b:69:5b:67:81:07:b6:7a:0b:71:64:1c:0e:cc: fb:e1:d4:6a:3b:26:51:27:07:83:e6:70:c4:82:b0: 97:1d:63:09:50:de:f8:e8:bc:73:df:b6:f0:c9:a8: bd:a5:1d:2e:8a:8f:d3:8b:69:69:e5:b8:ef:ea:e2: eb:09:8e:0f:4a:23:9a:63:d1:3f:69:77:ed:6c:c2: d0:48:d8:d2:8f:11:90:31:09:b5:8f:b5:06:e4:15: 5a:45:6d:f5:f4:87:a1:43:4f:8f:5a:ef:e3:8f:50: 1f:6e:ff:45:d7:03:39:3f:89:90:d5:70:a6:a8:27: 99:fa:b4:cc:73:22:75:19:28:12:aa:9d:60:d2:94: ed:be:bc:d8:89:a1:c9:71:b5:19:b1:76:42:fa:8f: 2a:c1:81:80:be:f3:ef:e7:b4:3b:53:cf:f0:0b:4f: 64:0f:8f:87:df:16:ca:06:f4:93:29:92:97:ad:82: 2e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:01:7D:36:5A:0B:81:45:72:C4:DF:00:E1:5A:8E:1E:B3:23:DF:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/4107624b-20aa-32db-a283-7fb5f300cb08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv4: 104.128.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:be:2c:a2:33:47:ed:d5:e1:32:7b:b3:ab:89:64:cd:99:8e: c9:c4:e3:54:a6:41:f8:7e:59:42:db:84:94:fd:bb:a1:fb:64: be:d6:cd:a2:53:53:2d:54:6c:12:58:70:40:e6:f0:ba:15:32: a5:59:c0:ad:d4:43:83:94:1e:e5:05:c0:6e:12:d7:31:f3:80: 3b:e2:28:92:48:0d:fc:3d:4f:7b:77:09:e6:f0:11:75:ca:a3: a1:3b:10:ae:f1:1d:79:48:5e:f2:db:42:ad:b9:f5:92:04:ab: 12:be:36:07:1c:6e:39:f9:97:33:51:a5:6d:74:94:0a:7f:d2: a8:52:38:d7:38:19:d1:5d:6f:f8:18:2f:e1:f8:a4:5a:b1:27: 90:b1:a9:8a:be:79:a2:e0:17:4e:93:4c:35:35:4b:11:15:eb: 91:9d:dd:58:bf:ef:d7:85:c5:80:71:0e:76:9f:a6:1e:4b:0d: 53:ab:2f:4a:01:94:de:71:41:0d:20:5d:31:14:f7:3c:c4:5f: 4c:ce:86:43:94:81:95:1b:ed:cb:76:49:f4:3f:f8:d6:ce:30: 83:cb:f3:2e:46:86:74:5c:fd:06:42:9b:a4:48:5a:ed:ff:31: 0e:2c:da:67:15:18:f3:b6:a0:e2:84:fc:e9:c2:fd:d6:0b:72: 58:2a:2d:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJoyfYapk4/ievYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk NzRiYzI1YTAtZWE5Ny00ZGEyLTg4ZmItZWVjZWRlM2RjYzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlK+45wTjVWl803Iu1n8mQogBocd2Pz+hi05 mA5m+qZoHmQKdWtViLw7r78N6Qvp1eTU5/we59FEnyE3i1sUYLHeC/zsIscO+LUY W2lbZ4EHtnoLcWQcDsz74dRqOyZRJweD5nDEgrCXHWMJUN746Lxz37bwyai9pR0u io/Ti2lp5bjv6uLrCY4PSiOaY9E/aXftbMLQSNjSjxGQMQm1j7UG5BVaRW319Ieh Q0+PWu/jj1Afbv9F1wM5P4mQ1XCmqCeZ+rTMcyJ1GSgSqp1g0pTtvrzYiaHJcbUZ sXZC+o8qwYGAvvPv57Q7U8/wC09kD4+H3xbKBvSTKZKXrYIutQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoBfTZaC4FFcsTfAOFajh6zI99KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvNDEwNzYyNGItMjBhYS0z MmRiLWEyODMtN2ZiNWYzMDBjYjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIDnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJG+LKIzR+3V4TJ7s6uJZM2ZjsnE41SmQfh+WULbhJT9u6H7ZL7WzaJT Uy1UbBJYcEDm8LoVMqVZwK3UQ4OUHuUFwG4S1zHzgDviKJJIDfw9T3t3CebwEXXK o6E7EK7xHXlIXvLbQq259ZIEqxK+Ngccbjn5lzNRpW10lAp/0qhSONc4GdFdb/gY L+H4pFqxJ5CxqYq+eaLgF06TTDU1SxEV65Gd3Vi/79eFxYBxDnafph5LDVOrL0oB lN5xQQ0gXTEU9zzEX0zOhkOUgZUb7ct2SfQ/+NbOMIPL8y5GhnRc/QZCm6RIWu3/ MQ4s2mcVGPO2oOKE/OnC/dYLclgqLQ0= -----END CERTIFICATE-----Generated at Tue Nov 4 19:43:49 2025 by rpki-client