$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/70f0d2e5-f571-34d1-a278-88605dcf02db.roa File: 70f0d2e5-f571-34d1-a278-88605dcf02db.roa (raw, json) Hash identifier: 6u9PyjOwZmXvCAuGxbNYBh+tFu07WLq7p/4987zRQh8= Subject key identifier: 4B:1D:EC:1E:75:A2:F5:4D:E9:68:50:9B:1A:60:54:E0:50:62:AC:3A Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b Certificate serial: 010D0C9F4328584B970CD2DE8A9DCDD6276FD440 Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/70f0d2e5-f571-34d1-a278-88605dcf02db.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 52.129.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:d2:de:8a:9d:cd:d6:27:6f:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=4a75bbd2-77c2-4c83-87d6-a13e31e77c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7e:a2:62:c4:f6:df:d4:6c:22:bd:0c:25:6b: ed:cd:cf:45:ce:36:a1:97:be:2a:ea:11:7d:94:ca: 11:7e:bf:eb:dc:eb:4c:7e:a2:f0:a0:a5:3d:52:eb: 80:76:99:6e:f5:99:4c:b0:57:49:ae:0f:fe:47:f8: 97:45:d4:05:9d:88:4f:63:63:9c:ea:f0:48:31:b8: ff:92:32:2d:f4:a8:f2:9c:33:de:01:07:f7:78:8c: 16:f8:56:3e:e5:73:b8:f7:75:34:75:e6:78:83:36: 6c:92:b4:a1:3b:f5:3e:39:c2:59:88:dc:9e:66:b7: 22:6c:40:f3:d0:41:63:f5:74:1b:42:46:1e:e8:76: 0b:08:d6:8f:d4:32:21:b7:2e:03:d7:c2:f8:03:a1: e2:92:f2:72:64:50:cf:b5:6b:d4:e2:58:8d:54:c3: 42:f6:28:a5:2a:37:32:b0:1c:0e:73:18:e2:b5:88: 65:8f:f8:00:1a:9e:28:00:e1:8b:0c:c1:6b:5c:09: 11:17:81:bb:25:e3:2d:3e:1e:eb:e8:dc:16:70:e8: 19:36:7b:23:e6:f0:1c:83:cf:c2:9c:a7:c1:34:cb: 39:79:1b:e1:e6:d5:a4:37:0e:ca:ad:ee:a9:16:45: 9d:4c:2a:06:4a:2a:ed:8f:93:11:16:64:ef:d1:2b: 49:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1D:EC:1E:75:A2:F5:4D:E9:68:50:9B:1A:60:54:E0:50:62:AC:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/70f0d2e5-f571-34d1-a278-88605dcf02db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl X509v3 Authority Key Identifier: keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer sbgp-ipAddrBlock: critical IPv4: 52.129.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:f7:66:5b:08:62:1a:73:c1:9c:a7:ed:b8:7b:00:1a:cd:6f: b6:46:a2:bf:39:80:37:f9:d4:f5:56:79:dd:c2:20:c1:65:83: 11:fb:50:32:8b:10:70:15:50:47:c0:2a:64:a9:fc:f9:fd:4b: f1:e5:da:b3:ad:cf:00:32:c8:1d:43:2d:f6:77:1c:a6:62:a4: 45:7a:e5:c5:ca:70:77:8e:fa:92:65:9d:74:91:f9:d7:81:37: 63:f4:14:9a:54:72:74:6e:70:45:37:ad:3a:01:a4:a1:15:d9: 2b:78:7c:ba:74:45:e6:61:ba:bb:60:d7:d8:2d:e6:35:58:e5: 4c:b4:38:a5:12:d4:79:59:4a:f0:a4:9f:f3:2f:cc:b4:27:f9: 01:fe:dd:34:80:16:b9:7f:53:fd:15:2f:6b:ec:c4:02:00:25: 14:c4:d4:7f:1b:14:e3:bc:0b:6f:0e:23:e9:1e:f2:4a:78:b4: ba:a7:49:1a:56:89:fc:83:7c:d7:39:da:de:ab:d7:94:7b:00: 59:af:a9:08:fd:72:3f:e6:93:36:c4:40:c6:52:ad:ea:c7:63: 5c:55:ae:ef:d6:ad:61:ee:41:eb:3f:d1:f5:ad:a8:6c:38:a9: 6e:e7:44:bf:c8:2e:80:62:25:2b:13:80:9b:24:1b:61:ae:f2: da:97:02:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDNLeip3N1idv1EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw YzRiMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NGE3NWJiZDItNzdjMi00YzgzLTg3ZDYtYTEzZTMxZTc3YzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH6iYsT239RsIr0MJWvtzc9Fzjahl74q6hF9 lMoRfr/r3OtMfqLwoKU9UuuAdplu9ZlMsFdJrg/+R/iXRdQFnYhPY2Oc6vBIMbj/ kjIt9KjynDPeAQf3eIwW+FY+5XO493U0deZ4gzZskrShO/U+OcJZiNyeZrcibEDz 0EFj9XQbQkYe6HYLCNaP1DIhty4D18L4A6HikvJyZFDPtWvU4liNVMNC9iilKjcy sBwOcxjitYhlj/gAGp4oAOGLDMFrXAkRF4G7JeMtPh7r6NwWcOgZNnsj5vAcg8/C nKfBNMs5eRvh5tWkNw7Kre6pFkWdTCoGSirtj5MRFmTv0StJyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsd7B51ovVN6WhQmxpgVOBQYqw6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvNzBmMGQyZTUtZjU3MS0z NGQxLWEyNzgtODg2MDVkY2YwMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1 MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4 ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/3ZlsIYhpzwZyn7bh7ABrNb7ZGor85gDf51PVWed3CIMFlgxH7UDKL EHAVUEfAKmSp/Pn9S/Hl2rOtzwAyyB1DLfZ3HKZipEV65cXKcHeO+pJlnXSR+deB N2P0FJpUcnRucEU3rToBpKEV2St4fLp0ReZhurtg19gt5jVY5Uy0OKUS1HlZSvCk n/MvzLQn+QH+3TSAFrl/U/0VL2vsxAIAJRTE1H8bFOO8C28OI+ke8kp4tLqnSRpW ifyDfNc52t6r15R7AFmvqQj9cj/mkzbEQMZSrerHY1xVru/WrWHuQes/0fWtqGw4 qW7nRL/ILoBiJSsTgJskG2Gu8tqXAmw= -----END CERTIFICATE-----Generated at Wed Nov 5 05:48:42 2025 by rpki-client