$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa File: a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa (raw, json) Hash identifier: BYtne0kehpYPFpQ2Hzr3QR/6NFl0td1iLjf3M2HBHjs= Subject key identifier: 73:68:93:46:D2:58:E1:51:09:74:33:FE:E6:71:FC:92:81:D1:E4:51 Certificate issuer: /CN=4d929512-7541-4207-be46-8af4cc4a4800 Certificate serial: 010D0C9F4328584A5FC5EB37810800C5402FDE40 Authority key identifier: 50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 26658 IP address blocks: 104.232.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:eb:37:81:08:00:c5:40:2f:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d929512-7541-4207-be46-8af4cc4a4800 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=3b846a38-1d52-49bb-a251-12b324ef07fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:be:08:bf:47:80:f7:6f:f0:16:e0:d2:09:18: b4:d3:d1:f5:a5:0b:7d:d8:e7:e7:9f:1c:10:77:23: e4:3a:4e:38:37:a1:16:bf:13:ac:12:8e:f5:df:9c: 67:db:96:ed:db:1b:61:db:0d:f8:e5:c9:4e:34:8b: f3:94:b1:ae:e1:2e:29:e5:98:65:7b:86:09:e3:f5: 7a:03:95:83:50:df:e8:4e:16:6a:ad:38:3a:8b:00: 56:18:58:bb:ab:51:88:21:de:ce:79:d7:f0:5a:00: d0:3b:eb:df:60:a9:4f:92:18:70:94:08:86:42:d3: 33:51:07:17:50:f2:ce:5a:44:49:1a:f5:ca:6d:73: e9:4d:e2:2c:54:b3:78:5e:1a:4f:78:41:25:75:49: a4:f5:bf:2e:30:f1:45:0d:26:a3:46:c6:65:b4:3a: 9a:2c:fe:da:d2:46:8f:da:fb:ec:3d:8b:cb:54:d3: d1:32:56:0e:3d:10:8b:b0:21:0e:d2:bc:26:17:1e: ef:4f:1b:01:af:ea:fa:57:9c:bf:81:05:15:a1:6d: 8f:3e:98:5f:76:91:b3:ac:df:0b:6c:24:2c:77:d0: 1d:81:68:b0:6e:07:52:5f:f5:c7:e7:89:91:7f:a5: a8:41:b9:cf:7a:46:d0:3f:13:3a:8b:53:07:de:54: a0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:68:93:46:D2:58:E1:51:09:74:33:FE:E6:71:FC:92:81:D1:E4:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.crl X509v3 Authority Key Identifier: keyid:50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer sbgp-ipAddrBlock: critical IPv4: 104.232.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:96:3b:79:4a:28:56:72:ab:a7:76:28:ca:51:2b:b8:bc:cb: 9c:29:8a:37:fd:34:d7:24:28:e2:da:88:3d:b4:44:e3:e5:38: c1:f3:83:66:78:46:fa:13:01:ea:63:97:53:ec:f5:3d:bb:55: fc:d3:96:41:7e:5e:b5:9a:7a:77:73:28:c1:81:b8:e1:4c:7d: 79:a5:62:82:5a:07:60:ce:a7:81:ca:36:7f:74:30:85:7d:e1: 9d:b0:bb:91:fb:55:c5:a4:8c:64:fb:a8:8a:75:d5:0b:ef:cd: 6f:01:61:cc:dd:7d:7d:f9:7e:03:dd:46:fc:40:59:f5:39:8d: df:18:7c:b3:73:fb:d2:44:16:f9:e9:15:5a:21:df:1c:15:81: 9b:0f:bb:0f:83:43:1a:7e:9d:33:d5:72:45:23:cf:d9:4c:20: 2e:4b:61:68:64:07:51:6c:19:af:c5:31:85:b6:8a:2c:43:48: ba:b8:50:5e:c6:86:be:4e:dd:86:8b:0a:9f:d7:ea:0d:cd:9b: 35:ae:52:4f:68:59:11:e2:c0:d9:76:7c:cc:3c:52:43:79:28: e9:d7:fc:5a:ef:e1:c3:86:98:d9:95:eb:9a:b0:ca:08:27:2f: 78:78:7d:9c:f0:d4:10:22:f4:9d:7a:e6:ea:fe:f5:e0:6e:0a: 00:80:06:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxes3gQgAxUAv3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ5Mjk1MTItNzU0MS00MjA3LWJlNDYtOGFmNGNjNGE0 ODAwMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk M2I4NDZhMzgtMWQ1Mi00OWJiLWEyNTEtMTJiMzI0ZWYwN2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr4Iv0eA92/wFuDSCRi009H1pQt92OfnnxwQ dyPkOk44N6EWvxOsEo7135xn25bt2xth2w345clONIvzlLGu4S4p5Zhle4YJ4/V6 A5WDUN/oThZqrTg6iwBWGFi7q1GIId7OedfwWgDQO+vfYKlPkhhwlAiGQtMzUQcX UPLOWkRJGvXKbXPpTeIsVLN4XhpPeEEldUmk9b8uMPFFDSajRsZltDqaLP7a0kaP 2vvsPYvLVNPRMlYOPRCLsCEO0rwmFx7vTxsBr+r6V5y/gQUVoW2PPphfdpGzrN8L bCQsd9AdgWiwbgdSX/XH54mRf6WoQbnPekbQPxM6i1MH3lSgdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNok0bSWOFRCXQz/uZx/JKB0eRRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80ZDky OTUxMi03NTQxLTQyMDctYmU0Ni04YWY0Y2M0YTQ4MDAvYTFhMjA2MGEtNjg4MS0z ZWY1LWFhN2MtMWMzOWY4MzliMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGQ5Mjk1MTItNzU0MS00MjA3LWJl NDYtOGFmNGNjNGE0ODAwLzRkOTI5NTEyLTc1NDEtNDIwNy1iZTQ2LThhZjRjYzRh NDgwMC5jcmwwHwYDVR0jBBgwFoAUUHbGsA5Pv93rRfzEAudPVstdNTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80ZDkyOTUxMi03NTQxLTQyMDctYmU0Ni04YWY0 Y2M0YTQ4MDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaOhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGWO3lKKFZyq6d2KMpRK7i8y5wpijf9NNckKOLaiD20ROPlOMHzg2Z4 RvoTAepjl1Ps9T27VfzTlkF+XrWaendzKMGBuOFMfXmlYoJaB2DOp4HKNn90MIV9 4Z2wu5H7VcWkjGT7qIp11QvvzW8BYczdfX35fgPdRvxAWfU5jd8YfLNz+9JEFvnp FVoh3xwVgZsPuw+DQxp+nTPVckUjz9lMIC5LYWhkB1FsGa/FMYW2iixDSLq4UF7G hr5O3YaLCp/X6g3NmzWuUk9oWRHiwNl2fMw8UkN5KOnX/Frv4cOGmNmV65qwyggn L3h4fZzw1BAi9J165ur+9eBuCgCABmQ= -----END CERTIFICATE-----Generated at Wed Aug 6 12:43:34 2025 by rpki-client