$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a76a38d7-efa4-3450-9774-2046e431cfb8.roa File: a76a38d7-efa4-3450-9774-2046e431cfb8.roa (raw, json) Hash identifier: i8bfMpolwFJyVvWDtoeze0WxyC/AWw4T4Km+k4oe2EM= Subject key identifier: FD:71:63:DE:39:58:10:C5:57:C1:62:F9:C2:E2:E9:DA:83:DC:45:EB Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584B609C92CF080B97F96A5352C0 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a76a38d7-efa4-3450-9774-2046e431cfb8.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 931 IP address blocks: 104.249.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:92:cf:08:0b:97:f9:6a:53:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=52ffe462-add8-4078-8f5f-7fc75c6dcc75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:35:cc:e9:bb:d0:65:63:d6:0e:45:24:ef:0c: c9:8d:e0:d2:1f:18:83:fe:4f:7c:3c:53:c2:bc:46: 53:f7:04:75:5c:3b:c4:9f:b1:17:b3:95:f5:c2:20: 06:08:83:d9:8f:92:40:22:8d:97:26:26:56:b7:14: 05:0e:4a:fc:b0:48:06:e7:c1:d3:23:b6:9d:cd:bd: 12:0f:80:15:f0:36:fc:42:7b:c3:f0:85:67:f7:26: 61:6b:ff:b0:3b:b8:03:78:33:18:a9:0d:64:a5:dc: 7b:4f:93:40:d4:fc:69:5e:ab:5c:35:e4:86:de:2a: ee:9f:86:a6:c8:63:07:2c:bf:0b:9a:0d:92:a2:8f: 62:46:5d:9e:7d:08:96:83:99:1a:ff:26:89:54:f0: f4:91:f5:e5:3c:47:59:7f:ae:af:34:25:54:4c:26: e7:be:79:54:13:9c:cf:b3:e8:c1:66:71:86:ba:8d: 3a:91:41:a4:71:25:8d:55:3a:11:c2:a4:48:ac:5a: b8:60:ff:70:bf:f3:b5:bf:e9:eb:a9:04:83:b9:34: ed:a8:3a:69:b1:f7:8d:8a:4a:67:2b:f2:93:ff:b6: 3e:95:20:56:0f:f1:30:41:3d:94:97:05:f6:17:aa: f6:e0:ae:b6:38:34:1e:99:93:3c:75:c7:1d:a0:f3: a0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:71:63:DE:39:58:10:C5:57:C1:62:F9:C2:E2:E9:DA:83:DC:45:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a76a38d7-efa4-3450-9774-2046e431cfb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.249.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:29:2f:65:ef:41:b1:a6:f0:12:dd:83:d6:3d:66:e1:2d:c3: b3:87:99:bc:e7:21:a7:d8:dc:e3:9c:a1:b5:54:eb:ad:c8:78: 5a:94:0c:5f:8f:4a:81:fb:69:c6:7e:b3:8c:72:d3:13:05:07: 93:73:69:8a:4a:bc:98:a2:5e:05:f9:9b:61:b4:db:6f:87:1e: fd:92:a6:8f:b3:c2:84:2d:21:d7:49:71:8c:07:e3:2e:93:99: fc:8f:20:d2:de:77:6f:e9:9d:7e:ec:db:20:ab:0f:9c:92:e8: 96:61:d9:f3:82:ff:ba:eb:f9:c9:dd:fd:08:a0:35:01:ce:a1: 8e:97:43:b2:e1:b6:d2:11:6b:2a:01:32:f1:b7:76:a7:fd:c5: 66:8b:ed:6e:c5:4c:c7:6d:de:48:0b:53:10:79:05:16:ae:08: 23:5d:01:bd:89:3b:de:e5:28:27:84:ab:de:05:c7:de:e4:ca: 04:d6:a1:54:b8:dd:a3:ed:d3:15:b0:6f:2a:dc:05:09:0e:ee: 8c:a6:c6:50:55:f7:39:2a:e6:19:39:81:1f:a4:6f:4b:bb:06: ee:a5:4e:b4:df:0a:78:50:7e:51:a7:17:4f:3a:dd:33:3f:4c: a0:76:62:cc:6a:57:f2:dd:cb:ad:c0:65:3d:25:fe:20:10:d5: 2d:6e:90:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJLPCAuX+WpTUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk NTJmZmU0NjItYWRkOC00MDc4LThmNWYtN2ZjNzVjNmRjYzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTXM6bvQZWPWDkUk7wzJjeDSHxiD/k98PFPC vEZT9wR1XDvEn7EXs5X1wiAGCIPZj5JAIo2XJiZWtxQFDkr8sEgG58HTI7adzb0S D4AV8Db8QnvD8IVn9yZha/+wO7gDeDMYqQ1kpdx7T5NA1PxpXqtcNeSG3irun4am yGMHLL8Lmg2Soo9iRl2efQiWg5ka/yaJVPD0kfXlPEdZf66vNCVUTCbnvnlUE5zP s+jBZnGGuo06kUGkcSWNVToRwqRIrFq4YP9wv/O1v+nrqQSDuTTtqDppsfeNikpn K/KT/7Y+lSBWD/EwQT2UlwX2F6r24K62ODQemZM8dccdoPOgzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1xY945WBDFV8Fi+cLi6dqD3EXrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYTc2YTM4ZDctZWZhNC0z NDUwLTk3NzQtMjA0NmU0MzFjZmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQpL2XvQbGm8BLdg9Y9ZuEtw7OHmbznIafY3OOcobVU663IeFqUDF+P SoH7acZ+s4xy0xMFB5NzaYpKvJiiXgX5m2G022+HHv2Spo+zwoQtIddJcYwH4y6T mfyPINLed2/pnX7s2yCrD5yS6JZh2fOC/7rr+cnd/QigNQHOoY6XQ7LhttIRayoB MvG3dqf9xWaL7W7FTMdt3kgLUxB5BRauCCNdAb2JO97lKCeEq94Fx97kygTWoVS4 3aPt0xWwbyrcBQkO7oymxlBV9zkq5hk5gR+kb0u7Bu6lTrTfCnhQflGnF0863TM/ TKB2YsxqV/Ldy63AZT0l/iAQ1S1ukIk= -----END CERTIFICATE-----Generated at Wed Nov 5 13:04:28 2025 by rpki-client