$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/1504f5da-3087-3949-99ea-e1109e260ad2.roa File: 1504f5da-3087-3949-99ea-e1109e260ad2.roa (raw, json) Hash identifier: t92bN/Gcj3gVY9prvHdODV6JK27pjCnUfkFpO8o0ZiU= Subject key identifier: 84:C0:C0:92:CB:17:9F:60:53:6F:94:0F:AB:7A:89:51:1F:5A:98:DB Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584AB650F97EB39B9E77EE48F700 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/1504f5da-3087-3949-99ea-e1109e260ad2.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 16789 IP address blocks: 104.156.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f9:7e:b3:9b:9e:77:ee:48:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=569cad3f-8b53-416c-b0d4-eabba394a8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:68:b5:e3:9f:b5:d2:8b:67:8a:b2:ab:63:31: dd:b9:6e:3e:2c:3c:30:76:99:94:f8:0a:2e:63:c3: 2d:0a:4e:5e:4a:98:60:72:ed:a0:f7:ad:3a:69:fd: 6c:a8:9c:5f:33:e7:2a:1d:26:24:65:b3:f2:1c:83: 7f:48:98:d4:f8:ad:33:f7:a8:8c:bd:ac:d7:39:60: f7:e1:83:4c:8c:ed:cd:ee:51:b9:86:76:58:8d:d0: 59:13:fd:86:80:7f:2d:bb:f2:bf:92:2c:f6:cc:79: be:e6:08:a6:2d:b2:d5:ad:7f:0e:a5:50:1f:89:e3: 58:60:79:73:b0:07:6a:55:93:1c:e1:49:d9:c5:bf: a6:94:0e:d9:d6:3e:ba:45:7c:5d:5b:37:f3:d2:d1: bd:af:67:cc:02:43:47:a0:db:ff:a3:b7:4d:84:a0: f3:47:3b:3c:7c:7c:1a:6d:c8:19:86:81:a0:66:71: 27:96:56:49:e1:97:7c:62:08:6e:28:c6:d0:06:56: f2:35:56:97:4a:62:38:45:76:00:12:b8:ef:2c:06: 8b:67:e9:07:24:06:53:89:e6:51:13:30:b3:26:d5: 20:9f:3f:0c:c1:c1:a4:24:b8:06:cb:e9:e5:0f:73: ca:23:7d:d3:f8:d9:cd:49:5b:92:f3:1d:5d:58:1d: c5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C0:C0:92:CB:17:9F:60:53:6F:94:0F:AB:7A:89:51:1F:5A:98:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/1504f5da-3087-3949-99ea-e1109e260ad2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:06:ed:a3:d5:14:61:fc:29:5a:66:f8:8b:f5:62:59:a2:7e: fc:5e:08:38:a8:ff:98:8c:8f:1a:1e:08:07:22:00:6e:80:f1: 86:61:46:33:7a:7e:97:8a:31:65:13:66:a3:6b:a3:07:46:10: 14:9c:65:0a:d0:93:e9:9c:bc:b7:5e:f2:de:13:d6:0c:11:19: a5:12:5e:a0:5e:37:2b:70:8e:e7:b1:cc:c5:04:d1:af:5d:72: c0:90:55:ed:a4:32:ba:39:59:ca:39:42:74:b9:31:49:9a:34: 84:75:63:21:6b:42:6e:59:dc:44:56:b9:e9:28:ce:18:2f:07: 93:48:7a:b7:92:2a:7d:7d:87:d5:96:e2:04:ff:62:8e:a2:9d: 4a:48:0d:1b:8e:5a:8e:65:8e:4a:19:5b:0e:2e:69:91:26:01: 40:6c:2c:a1:30:b9:83:4b:10:ab:78:52:76:22:8e:fc:7b:15: d6:3c:2d:47:cc:97:c1:3c:a8:04:a3:37:33:80:73:62:af:ba: 16:9d:c3:f9:a4:da:64:5b:49:bb:31:45:7d:38:ac:58:d6:e9: 3a:1e:5c:f6:f0:53:3e:b9:db:e7:7b:25:b1:49:96:be:c8:de: f2:c2:8f:fb:ff:b3:95:93:c4:c8:35:35:e7:ae:ca:52:93:ba: c1:d2:2c:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UPl+s5ued+5I9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk NTY5Y2FkM2YtOGI1My00MTZjLWIwZDQtZWFiYmEzOTRhOGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymi145+10otnirKrYzHduW4+LDwwdpmU+Aou Y8MtCk5eSphgcu2g9606af1sqJxfM+cqHSYkZbPyHIN/SJjU+K0z96iMvazXOWD3 4YNMjO3N7lG5hnZYjdBZE/2GgH8tu/K/kiz2zHm+5gimLbLVrX8OpVAfieNYYHlz sAdqVZMc4UnZxb+mlA7Z1j66RXxdWzfz0tG9r2fMAkNHoNv/o7dNhKDzRzs8fHwa bcgZhoGgZnEnllZJ4Zd8YghuKMbQBlbyNVaXSmI4RXYAErjvLAaLZ+kHJAZTieZR EzCzJtUgnz8MwcGkJLgGy+nlD3PKI33T+NnNSVuS8x1dWB3F+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITAwJLLF59gU2+UD6t6iVEfWpjbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvMTUwNGY1ZGEtMzA4Ny0z OTQ5LTk5ZWEtZTExMDllMjYwYWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJy/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEG7aPVFGH8KVpm+Iv1YlmifvxeCDio/5iMjxoeCAciAG6A8YZhRjN6 fpeKMWUTZqNrowdGEBScZQrQk+mcvLde8t4T1gwRGaUSXqBeNytwjuexzMUE0a9d csCQVe2kMro5Wco5QnS5MUmaNIR1YyFrQm5Z3ERWuekozhgvB5NIereSKn19h9WW 4gT/Yo6inUpIDRuOWo5ljkoZWw4uaZEmAUBsLKEwuYNLEKt4UnYijvx7FdY8LUfM l8E8qASjNzOAc2Kvuhadw/mk2mRbSbsxRX04rFjW6ToeXPbwUz652+d7JbFJlr7I 3vLCj/v/s5WTxMg1NeeuylKTusHSLBc= -----END CERTIFICATE-----Generated at Fri Aug 8 00:45:48 2025 by rpki-client