$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/81f766cc-e7d1-391d-bb13-9792ad47c246.roa File: 81f766cc-e7d1-391d-bb13-9792ad47c246.roa (raw, json) Hash identifier: DORyiGJFUzqCnsKVUDuFzz10LK3o42+LrcQg1l9/wT8= Subject key identifier: 83:B5:E8:BA:D9:63:57:9B:07:08:09:21:60:E8:D4:6A:AD:02:6A:CB Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584B609C94A61CAAEC9A3AFB83C0 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/81f766cc-e7d1-391d-bb13-9792ad47c246.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 213122 IP address blocks: 104.249.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:94:a6:1c:aa:ec:9a:3a:fb:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=4a3fccd1-3e1c-43f3-969f-460591a4888c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:49:87:cd:76:04:fe:7a:59:03:cf:6e:bc:16: 38:8f:c3:ac:4e:46:10:42:ce:a3:4e:f5:ad:38:a3: 35:55:db:59:f9:b7:b2:67:ca:b4:56:c6:d9:e3:51: 53:27:fb:e6:17:28:1b:54:b5:20:c1:aa:ef:a2:5b: 01:cf:5a:9b:2d:af:07:f9:06:ff:32:37:9b:3e:03: 72:7b:35:96:54:dc:d1:8a:00:3e:81:e0:fa:16:15: 0e:bd:8e:16:9d:09:d1:d4:32:27:7c:e4:4e:51:07: 55:91:27:9c:bc:4f:af:e3:ef:5b:56:25:c3:31:50: c5:a7:c9:70:fa:56:f0:af:66:11:e6:8a:02:fb:74: 9a:dc:1a:ab:a6:30:a9:68:09:b1:f3:f7:1f:4c:e4: 02:27:03:19:74:58:54:bc:49:8b:36:4a:c4:3e:da: 62:86:db:da:3b:3a:a4:2d:fb:8f:d1:83:39:4a:41: 00:52:dd:2d:3e:e4:ab:01:ff:bf:30:b1:36:48:16: 67:64:c5:5d:49:e1:17:f0:3c:ec:8a:0a:5c:37:ce: f0:55:e3:4b:73:bf:43:d5:a5:cf:93:59:7b:49:65: 6b:02:e3:ad:e5:e4:78:53:db:2a:de:cc:c1:04:61: f0:61:0b:b8:da:7a:1f:fa:3c:bf:72:5b:7b:e7:8e: fc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B5:E8:BA:D9:63:57:9B:07:08:09:21:60:E8:D4:6A:AD:02:6A:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/81f766cc-e7d1-391d-bb13-9792ad47c246.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.249.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:60:80:58:92:d1:5a:66:86:99:8b:65:18:cc:17:6d:ea:4e: c6:41:7b:7e:70:cd:25:70:27:0e:14:60:a8:da:14:83:64:96: 3b:0e:4b:29:35:a1:de:2b:e0:14:25:32:57:99:42:b8:6f:4f: 11:37:01:8a:e1:47:27:32:e5:da:f7:ef:83:9d:46:13:58:76: 80:38:67:34:dc:37:b4:4f:df:af:db:54:36:4a:86:88:3f:b9: 43:bb:00:22:71:fa:8c:62:75:71:e3:0c:36:26:a1:ef:b8:2a: 39:b4:27:72:fa:68:84:b2:ca:e5:2f:b3:f1:2e:b9:ed:4a:c0: b2:cc:35:8f:c1:07:e0:37:7c:d8:fe:91:df:48:72:3e:2c:20: df:8e:b1:26:3f:c9:52:cf:38:29:d2:6d:80:5e:2e:f6:90:f9: e2:4d:d3:2f:4d:eb:11:0d:e6:68:3d:ab:39:51:a3:bb:c5:7c: 8c:aa:ee:e2:70:bf:d0:45:a2:f8:89:0d:37:cc:4d:f4:be:5a: ea:f1:e1:4f:39:7f:06:0e:5f:15:c1:d5:8c:e3:f2:a4:22:50: 7f:3b:a3:3e:c9:f6:94:9a:68:e0:65:8d:33:b1:97:ef:3e:6d: 37:c6:ca:1d:bf:0d:ac:f5:7d:ef:16:c0:2d:cc:9b:29:b6:3f: df:39:50:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJSmHKrsmjr7g8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk NGEzZmNjZDEtM2UxYy00M2YzLTk2OWYtNDYwNTkxYTQ4ODhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkmHzXYE/npZA89uvBY4j8OsTkYQQs6jTvWt OKM1VdtZ+beyZ8q0VsbZ41FTJ/vmFygbVLUgwarvolsBz1qbLa8H+Qb/MjebPgNy ezWWVNzRigA+geD6FhUOvY4WnQnR1DInfOROUQdVkSecvE+v4+9bViXDMVDFp8lw +lbwr2YR5ooC+3Sa3BqrpjCpaAmx8/cfTOQCJwMZdFhUvEmLNkrEPtpihtvaOzqk LfuP0YM5SkEAUt0tPuSrAf+/MLE2SBZnZMVdSeEX8DzsigpcN87wVeNLc79D1aXP k1l7SWVrAuOt5eR4U9sq3szBBGHwYQu42nof+jy/clt75478XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIO16LrZY1ebBwgJIWDo1GqtAmrLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvODFmNzY2Y2MtZTdkMS0z OTFkLWJiMTMtOTc5MmFkNDdjMjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJggFiS0VpmhpmLZRjMF23qTsZBe35wzSVwJw4UYKjaFINkljsOSyk1 od4r4BQlMleZQrhvTxE3AYrhRycy5dr374OdRhNYdoA4ZzTcN7RP36/bVDZKhog/ uUO7ACJx+oxidXHjDDYmoe+4Kjm0J3L6aISyyuUvs/Euue1KwLLMNY/BB+A3fNj+ kd9Icj4sIN+OsSY/yVLPOCnSbYBeLvaQ+eJN0y9N6xEN5mg9qzlRo7vFfIyq7uJw v9BFoviJDTfMTfS+Wurx4U85fwYOXxXB1Yzj8qQiUH87oz7J9pSaaOBljTOxl+8+ bTfGyh2/Daz1fe8WwC3Mmym2P985UKA= -----END CERTIFICATE-----Generated at Wed Nov 5 17:49:18 2025 by rpki-client