$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3e3b5b42-836a-34e7-badf-cdb1abc030ea.roa File: 3e3b5b42-836a-34e7-badf-cdb1abc030ea.roa (raw, json) Hash identifier: J4rq/10S+mHFLiOxN1OJVbG8bS9mceTnOaHAq62tB6E= Subject key identifier: BF:FA:64:47:B2:0D:18:83:ED:EC:DE:C6:E8:6B:72:1F:36:96:DE:7F Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584AB650F9A2FF09BB564475B308 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3e3b5b42-836a-34e7-badf-cdb1abc030ea.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 16789 IP address blocks: 104.156.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f9:a2:ff:09:bb:56:44:75:b3:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=078ba227-7473-448b-9649-b9e556f2b9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e7:2c:3a:8f:12:60:94:69:92:42:6c:33:58: 32:1a:cb:af:91:11:0e:4d:33:2f:90:45:90:eb:34: 18:f8:67:d8:58:ef:dc:65:68:99:92:1b:00:5f:5f: 1c:3e:d2:d5:d2:34:f1:c9:67:b0:75:e8:da:f3:17: f2:13:2c:4d:ed:8c:b8:70:d1:ed:08:c3:4b:57:7d: d3:90:77:62:da:91:a5:b9:6a:1d:af:e9:7e:2b:31: b2:b9:bb:28:a9:81:e0:68:55:00:4c:91:dc:be:b1: ef:d7:b2:96:3d:40:1d:ff:98:e6:8e:8b:5e:66:15: 13:56:79:59:0f:b8:78:04:88:6e:6b:cd:ad:ed:15: 35:a3:07:7b:f7:39:54:a7:13:5b:ec:76:8e:58:1a: 90:88:78:9b:6f:a7:41:78:a9:c7:b3:87:aa:72:f7: d3:29:ef:29:f0:05:3f:20:13:2a:d7:c5:23:18:c3: 77:e9:41:be:d3:68:db:9b:e3:c9:bf:fa:a3:5d:23: 61:6a:cd:f0:c1:24:0b:b5:70:a4:d6:2a:0c:f8:57: ed:5c:db:99:8b:ca:a1:97:32:94:2d:c4:f7:49:4b: 63:91:ef:ab:62:6c:c8:29:30:0a:4e:43:e0:d9:14: 11:73:48:ae:c1:6b:13:f0:ff:40:82:73:31:d0:66: 2f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FA:64:47:B2:0D:18:83:ED:EC:DE:C6:E8:6B:72:1F:36:96:DE:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3e3b5b42-836a-34e7-badf-cdb1abc030ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:2b:62:8e:f0:b7:f9:c9:8f:c1:72:28:73:06:86:ee:72:b3: 8d:4a:34:63:b0:35:4d:ef:be:85:0a:b9:7d:2e:6e:0c:08:70: 95:c6:64:a3:e2:bf:b2:41:6e:7d:db:87:d0:51:be:78:ff:10: 5a:03:1d:77:93:28:f5:9e:c0:eb:25:bb:f3:9e:b7:ef:0f:00: f4:b6:1f:aa:6e:d6:49:d3:ed:a0:05:24:74:c3:ae:08:40:88: 9b:60:8c:47:4c:81:ca:18:70:c3:19:b7:f2:92:0e:8e:19:6f: df:1d:4c:83:ff:8d:a7:e8:fc:9b:ae:e2:32:8d:3a:fd:22:9b: 05:34:cf:93:9a:37:40:47:ea:ca:08:73:41:75:cb:f7:3a:47: 10:97:4f:5b:b4:34:f9:e6:c4:cb:f5:b4:16:89:4a:9e:41:79: 67:19:30:ba:3a:b7:fa:9f:20:0f:b0:7d:db:0c:a6:18:9a:7c: af:c0:fa:eb:8b:c2:53:95:d1:5e:8c:e7:0e:a2:4b:3e:ec:06: a1:9c:c1:cf:1e:8c:1c:24:b5:be:38:d7:17:7e:92:b0:3b:33: dd:b8:a4:62:28:19:7c:1e:df:c8:f8:19:a2:ea:d1:96:d0:90: 06:18:21:f6:eb:e3:f5:5e:3f:3a:37:ca:d4:2c:96:7b:58:cc: d9:94:a0:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UPmi/wm7VkR1swgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk MDc4YmEyMjctNzQ3My00NDhiLTk2NDktYjllNTU2ZjJiOWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+csOo8SYJRpkkJsM1gyGsuvkREOTTMvkEWQ 6zQY+GfYWO/cZWiZkhsAX18cPtLV0jTxyWewdeja8xfyEyxN7Yy4cNHtCMNLV33T kHdi2pGluWodr+l+KzGyubsoqYHgaFUATJHcvrHv17KWPUAd/5jmjoteZhUTVnlZ D7h4BIhua82t7RU1owd79zlUpxNb7HaOWBqQiHibb6dBeKnHs4eqcvfTKe8p8AU/ IBMq18UjGMN36UG+02jbm+PJv/qjXSNhas3wwSQLtXCk1ioM+FftXNuZi8qhlzKU LcT3SUtjke+rYmzIKTAKTkPg2RQRc0iuwWsT8P9AgnMx0GYvIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/6ZEeyDRiD7ezexuhrch82lt5/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvM2UzYjViNDItODM2YS0z NGU3LWJhZGYtY2RiMWFiYzAzMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaJyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALorYo7wt/nJj8FyKHMGhu5ys41KNGOwNU3vvoUKuX0ubgwIcJXGZKPi v7JBbn3bh9BRvnj/EFoDHXeTKPWewOslu/Oet+8PAPS2H6pu1knT7aAFJHTDrghA iJtgjEdMgcoYcMMZt/KSDo4Zb98dTIP/jafo/Juu4jKNOv0imwU0z5OaN0BH6soI c0F1y/c6RxCXT1u0NPnmxMv1tBaJSp5BeWcZMLo6t/qfIA+wfdsMphiafK/A+uuL wlOV0V6M5w6iSz7sBqGcwc8ejBwktb441xd+krA7M924pGIoGXwe38j4GaLq0ZbQ kAYYIfbr4/VePzo3ytQslntYzNmUoLg= -----END CERTIFICATE-----Generated at Mon Aug 4 07:44:42 2025 by rpki-client