$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/3e2fbd50-7212-31b5-b944-be9ef7c52b2b.roa File: 3e2fbd50-7212-31b5-b944-be9ef7c52b2b.roa (raw, json) Hash identifier: 8Ky9UcwEwGgIqwZRydiZ5dcXH7xN8+dFwPtqhluV2GM= Subject key identifier: 38:53:9A:74:2C:FC:6F:71:5F:E5:20:E7:B4:E2:C0:05:D4:9F:62:B2 Certificate issuer: /CN=c3cd4625-6034-4b3b-9d8b-5417ca97c839 Certificate serial: 010D0C9F4328584B1D9C21A9E9B4D10052D2AAC0 Authority key identifier: 96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/3e2fbd50-7212-31b5-b944-be9ef7c52b2b.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 13438 IP address blocks: 104.232.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:21:a9:e9:b4:d1:00:52:d2:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3cd4625-6034-4b3b-9d8b-5417ca97c839 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=d333e575-f307-45d0-a34c-49e1d9559250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:31:6b:54:91:73:a7:14:fc:5f:8f:f1:2c:fa: ae:06:3f:6e:31:0e:10:6e:5c:6c:5e:5f:a0:22:ec: cf:5e:b3:41:ae:e3:c4:30:00:37:db:b6:7e:0b:e7: da:5f:2d:0f:22:0f:24:90:a6:73:3a:7e:c9:53:07: d4:7c:80:3a:b0:16:bd:07:69:1e:47:be:07:ea:dc: 7b:86:45:f8:75:dd:0a:89:95:14:29:44:cd:8a:7b: 82:13:2c:06:41:78:50:77:47:82:91:6b:c8:27:37: 4b:51:4c:7e:4b:b3:62:31:56:a5:6e:14:3c:c8:5e: fe:be:f1:82:27:7c:d5:12:a0:c5:90:d7:69:33:ac: d6:bc:6f:45:9d:ab:48:c6:0e:bc:ac:13:28:12:65: 02:2d:8f:40:55:98:73:e8:1f:f3:2a:de:28:6a:a1: 14:af:db:52:a1:f8:60:83:d8:31:e4:3a:46:2f:a9: 22:e5:9a:19:88:9e:a4:08:65:1f:73:20:ce:a7:45: 66:89:90:56:9d:c3:be:32:a4:ef:49:62:55:dd:a3: 80:52:f8:58:06:5a:03:e9:6f:9b:1c:5d:45:c5:19: 01:0e:8f:a7:88:af:dc:50:ec:c5:14:51:5b:98:90: 64:89:0f:e5:9b:2b:ab:4b:de:e0:92:45:32:87:bd: d4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:53:9A:74:2C:FC:6F:71:5F:E5:20:E7:B4:E2:C0:05:D4:9F:62:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/3e2fbd50-7212-31b5-b944-be9ef7c52b2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.crl X509v3 Authority Key Identifier: keyid:96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer sbgp-ipAddrBlock: critical IPv4: 104.232.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:42:92:7f:67:ec:d9:79:4f:1b:e3:c6:d7:b7:5a:9a:ae:95: ee:6b:3d:92:6e:04:fd:cf:0c:66:68:5b:67:d7:5b:b5:b8:09: 9c:48:40:28:d2:5a:6d:0b:b0:3a:3e:56:f4:d7:51:62:1f:fa: e3:69:87:8d:d7:68:af:2a:89:71:39:33:ac:1e:54:88:a8:07: a8:1f:63:70:71:4b:2a:e7:90:4d:3b:b5:f5:26:c6:67:62:d4: 82:43:df:4b:7b:d1:81:32:b5:87:8a:91:c6:e6:2f:1b:0c:45: e3:fd:db:96:47:ef:dd:59:0c:09:67:b3:d2:b1:5e:27:33:52: db:fd:f2:f5:09:bd:25:9c:55:35:1d:9d:6f:e6:92:30:65:1c: 9b:b4:13:cb:f4:66:75:4a:ec:11:4b:c0:bd:e0:22:8b:69:5d: 6f:59:95:ae:46:3a:d5:1e:1c:b7:a5:24:d0:b1:ca:4b:a7:ae: b3:91:24:7d:9a:54:83:0e:77:4e:eb:d9:ee:e6:fd:2c:77:83: cd:e1:ef:ef:54:1e:3b:42:bd:82:cd:f6:00:d0:d8:4c:cc:8c: c1:86:91:7e:98:c0:81:a0:77:e0:64:1a:6a:d9:27:a1:3e:c4: 26:79:bf:ff:b4:96:6d:f2:f7:63:e5:3c:57:e4:4c:00:5c:0c: 10:38:4d:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnCGp6bTRAFLSqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNjZDQ2MjUtNjAzNC00YjNiLTlkOGItNTQxN2NhOTdj ODM5MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZDMzM2U1NzUtZjMwNy00NWQwLWEzNGMtNDllMWQ5NTU5MjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjFrVJFzpxT8X4/xLPquBj9uMQ4QblxsXl+g IuzPXrNBruPEMAA327Z+C+faXy0PIg8kkKZzOn7JUwfUfIA6sBa9B2keR74H6tx7 hkX4dd0KiZUUKUTNinuCEywGQXhQd0eCkWvIJzdLUUx+S7NiMValbhQ8yF7+vvGC J3zVEqDFkNdpM6zWvG9FnatIxg68rBMoEmUCLY9AVZhz6B/zKt4oaqEUr9tSofhg g9gx5DpGL6ki5ZoZiJ6kCGUfcyDOp0VmiZBWncO+MqTvSWJV3aOAUvhYBloD6W+b HF1FxRkBDo+niK/cUOzFFFFbmJBkiQ/lmyurS97gkkUyh73UBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhTmnQs/G9xX+Ug57TiwAXUn2KyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jM2Nk NDYyNS02MDM0LTRiM2ItOWQ4Yi01NDE3Y2E5N2M4MzkvM2UyZmJkNTAtNzIxMi0z MWI1LWI5NDQtYmU5ZWY3YzUyYjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzNjZDQ2MjUtNjAzNC00YjNiLTlk OGItNTQxN2NhOTdjODM5L2MzY2Q0NjI1LTYwMzQtNGIzYi05ZDhiLTU0MTdjYTk3 YzgzOS5jcmwwHwYDVR0jBBgwFoAUluTtbp4/i42uv7q7CCGjw5vRbtgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jM2NkNDYyNS02MDM0LTRiM2ItOWQ4Yi01NDE3 Y2E5N2M4MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOgqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFCkn9n7Nl5Txvjxte3Wpqule5rPZJuBP3PDGZoW2fXW7W4CZxIQCjS Wm0LsDo+VvTXUWIf+uNph43XaK8qiXE5M6weVIioB6gfY3BxSyrnkE07tfUmxmdi 1IJD30t70YEytYeKkcbmLxsMReP925ZH791ZDAlns9KxXiczUtv98vUJvSWcVTUd nW/mkjBlHJu0E8v0ZnVK7BFLwL3gIotpXW9Zla5GOtUeHLelJNCxykunrrORJH2a VIMOd07r2e7m/Sx3g83h7+9UHjtCvYLN9gDQ2EzMjMGGkX6YwIGgd+BkGmrZJ6E+ xCZ5v/+0lm3y92PlPFfkTABcDBA4TRQ= -----END CERTIFICATE-----Generated at Wed Nov 5 09:03:43 2025 by rpki-client