$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/8156f173-c530-3489-b066-72053b3b7ac9.roa File: 8156f173-c530-3489-b066-72053b3b7ac9.roa (raw, json) Hash identifier: g1o2Oth82qXeP36O+BQVwn6kaHnwFAo33fn1tmmnf4w= Subject key identifier: A5:B9:EB:1F:A9:63:AC:D5:95:E8:80:02:7E:C6:A2:00:59:E5:32:A9 Certificate issuer: /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483 Certificate serial: 010D0C9F4328584BA0D260E7C036766B7DA7C800 Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/8156f173-c530-3489-b066-72053b3b7ac9.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 26863 IP address blocks: 104.129.132.0/23 maxlen: 23 104.129.132.0/24 maxlen: 24 104.129.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:60:e7:c0:36:76:6b:7d:a7:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=7f36beee-2d91-4f38-a087-fe26af0483f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:06:41:00:31:f4:70:12:45:e2:c1:3b:80:70: a1:eb:3d:be:3e:74:94:17:44:ab:15:16:97:ee:a8: ea:2a:8d:32:bf:3f:8b:ca:83:47:9b:08:54:67:95: da:79:07:f8:a6:c7:ce:82:d2:07:d5:0e:74:e8:04: 15:45:3c:70:df:4a:1c:c8:18:29:6e:ad:fe:c8:fc: aa:40:01:65:08:f2:99:83:7e:e0:fe:19:03:40:10: 7c:36:8d:a2:d7:27:4b:e2:60:ea:4a:e9:7d:1c:8e: d6:b6:05:6f:c2:73:a2:0d:4a:bb:92:66:f2:dc:3b: df:d9:54:f0:55:0c:e6:df:4c:57:4b:de:7d:9c:28: 77:2c:7f:e0:4e:8c:2c:e7:ec:82:f2:45:ca:ae:18: 3c:ca:94:e9:3e:25:5e:e5:19:8d:46:5b:40:a4:71: a8:3a:ad:b7:5d:b9:7c:4f:e5:5a:ce:7a:6b:3d:0a: 9f:02:82:8b:7b:08:4b:5b:03:b3:ba:dc:97:06:3a: 01:4d:8c:77:34:05:dc:42:57:e6:35:c3:77:d3:86: 39:98:27:13:a3:bc:1d:92:e4:69:a8:9d:26:43:ca: bb:ef:50:37:e4:9a:0b:ec:98:d4:62:64:75:7d:20: 2a:29:c1:62:d1:9b:4b:52:16:91:13:36:19:c2:d0: d4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B9:EB:1F:A9:63:AC:D5:95:E8:80:02:7E:C6:A2:00:59:E5:32:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/8156f173-c530-3489-b066-72053b3b7ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl X509v3 Authority Key Identifier: keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer sbgp-ipAddrBlock: critical IPv4: 104.129.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ef:0c:a9:fb:5a:3a:aa:51:fb:e5:ef:c8:e6:39:fc:08:38: 29:21:c1:fc:18:7a:c5:ce:e1:e6:d6:77:30:c1:9c:3a:57:cf: 65:26:68:ab:e3:2f:bc:f5:9f:7b:70:00:40:d5:77:0c:b0:aa: b3:4f:c2:b4:9a:d6:0d:b5:0d:59:39:89:45:4e:d4:10:b3:75: e0:f3:58:43:13:18:d8:f6:e7:38:94:8d:6a:3d:a1:9c:ed:51: 76:a6:99:af:67:6d:96:51:dc:f2:2c:42:3c:37:eb:b9:6b:b3: 13:d3:d3:2e:7f:04:ee:ca:53:c7:8b:aa:b4:c3:b6:1d:8b:da: b3:d0:98:49:2d:90:ac:5f:ee:91:72:06:21:6c:50:22:56:a1: 93:f4:ba:0a:db:e5:1d:97:63:b0:f0:3f:1b:0e:dc:2e:0b:20: e9:fc:76:cf:87:90:7d:65:1d:d0:77:14:59:a8:f1:ec:b2:98: 50:b8:19:2e:0f:22:d5:85:7c:ac:cf:a2:58:7b:a5:01:84:50: 0b:33:e5:e2:1a:64:c1:07:1c:5c:27:81:d7:97:8a:9f:28:e2: 66:54:62:20:73:45:b8:ea:06:23:b8:5e:5b:5d:cb:fd:47:b0: 26:8e:41:4d:38:75:65:d1:ad:ee:75:50:c8:cd:70:a2:23:53: 4e:9c:40:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mDnwDZ2a32nyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzFjMTllNTctYTZmNS00YzQ4LWI0ZGYtYjhkNDJkN2I3 NDgzMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk N2YzNmJlZWUtMmQ5MS00ZjM4LWEwODctZmUyNmFmMDQ4M2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQZBADH0cBJF4sE7gHCh6z2+PnSUF0SrFRaX 7qjqKo0yvz+LyoNHmwhUZ5XaeQf4psfOgtIH1Q506AQVRTxw30ocyBgpbq3+yPyq QAFlCPKZg37g/hkDQBB8No2i1ydL4mDqSul9HI7WtgVvwnOiDUq7kmby3Dvf2VTw VQzm30xXS959nCh3LH/gTows5+yC8kXKrhg8ypTpPiVe5RmNRltApHGoOq23Xbl8 T+VaznprPQqfAoKLewhLWwOzutyXBjoBTYx3NAXcQlfmNcN304Y5mCcTo7wdkuRp qJ0mQ8q771A35JoL7JjUYmR1fSAqKcFi0ZtLUhaREzYZwtDUkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKW56x+pY6zVleiAAn7GogBZ5TKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMx OWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0MmQ3Yjc0ODMvODE1NmYxNzMtYzUzMC0z NDg5LWIwNjYtNzIwNTNiM2I3YWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzFjMTllNTctYTZmNS00YzQ4LWI0 ZGYtYjhkNDJkN2I3NDgzLzMxYzE5ZTU3LWE2ZjUtNGM0OC1iNGRmLWI4ZDQyZDdi NzQ4My5jcmwwHwYDVR0jBBgwFoAU/pJi5eJ2pwPKSRroNOSF02JXoFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMxOWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0 MmQ3Yjc0ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIGEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbvDKn7WjqqUfvl78jmOfwIOCkhwfwYesXO4ebWdzDBnDpXz2UmaKvj L7z1n3twAEDVdwywqrNPwrSa1g21DVk5iUVO1BCzdeDzWEMTGNj25ziUjWo9oZzt UXamma9nbZZR3PIsQjw367lrsxPT0y5/BO7KU8eLqrTDth2L2rPQmEktkKxf7pFy BiFsUCJWoZP0ugrb5R2XY7DwPxsO3C4LIOn8ds+HkH1lHdB3FFmo8eyymFC4GS4P ItWFfKzPolh7pQGEUAsz5eIaZMEHHFwngdeXip8o4mZUYiBzRbjqBiO4Xltdy/1H sCaOQU04dWXRre51UMjNcKIjU06cQMk= -----END CERTIFICATE-----Generated at Wed Nov 5 03:20:07 2025 by rpki-client