$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/dce78afd-226b-3759-b311-de9486192567.roa File: dce78afd-226b-3759-b311-de9486192567.roa (raw, json) Hash identifier: zUYnuFvvIRtZrTrn/oLBe0ijDRWIZCY/I+Yf5hY57A4= Subject key identifier: 31:EF:52:0A:4C:83:CE:5B:77:50:E3:3C:50:1F:B0:D7:CE:DB:D4:89 Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584ABBE62BDDDF260DB918ED4000 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/dce78afd-226b-3759-b311-de9486192567.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 16789 IP address blocks: 104.156.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:2b:dd:df:26:0d:b9:18:ed:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=20971a06-d586-4c20-a56f-fc03a4595801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:cc:3e:bd:20:24:32:89:0c:ba:1e:37:5f:b3: 71:8b:42:05:25:0d:28:ef:2e:ee:d2:94:73:c3:49: b2:c2:8e:09:0f:4e:3e:a2:59:07:ad:80:b7:60:f1: 6d:c6:cc:f9:7f:4e:22:3f:50:bb:e5:62:3f:25:c6: 7a:15:bc:96:a4:83:8d:47:96:f0:dd:05:5b:8f:08: b0:9a:f4:46:d3:0b:ce:be:a0:27:a1:5f:48:9f:e3: 9a:69:5f:4b:29:a6:cb:16:c6:00:ad:61:c6:95:84: c8:6c:0c:15:a8:d0:ce:e0:0c:80:78:e1:29:8f:66: 42:35:9d:94:29:4a:88:da:7d:6e:82:35:2a:1a:ca: a0:3f:4a:1f:ac:f4:92:8f:db:31:e4:51:29:8f:20: 9c:96:02:4e:19:17:96:e9:43:74:df:f8:27:5d:70: 43:79:46:71:ac:04:f3:99:f3:52:3c:f0:88:57:74: 03:c0:59:58:3a:9a:be:79:4d:cc:97:00:a5:cf:88: 1f:d3:f1:af:4f:32:cc:c1:13:dc:1e:93:33:25:be: c7:f9:ee:b5:39:eb:1f:f6:97:7e:35:2c:bc:c9:5a: 27:d5:af:07:cc:6b:cb:58:f2:6a:a7:8d:2a:b2:1d: 83:b1:a8:15:ff:89:01:53:14:12:96:3d:95:df:8d: 7a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:EF:52:0A:4C:83:CE:5B:77:50:E3:3C:50:1F:B0:D7:CE:DB:D4:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/dce78afd-226b-3759-b311-de9486192567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:2d:96:a2:33:9e:75:99:cd:0b:f7:89:8b:51:9f:7f:73:f2: e0:9a:6e:a6:75:71:15:13:b5:f9:d7:54:8e:b1:57:cc:8f:41: 65:34:7f:c8:cb:6e:42:a0:aa:40:90:2e:3c:81:83:aa:5c:67: 6a:de:9c:6e:95:83:24:a0:26:ec:85:84:57:0f:0d:00:9f:69: 0d:87:eb:97:42:82:1f:b5:de:ad:a7:6f:16:61:c0:aa:7e:62: bf:64:62:7e:3a:01:50:21:a9:85:e2:d4:7a:b2:20:4a:69:c3: d7:09:2d:13:a5:2d:98:68:1a:17:1e:f3:c4:f9:20:f0:05:e3: c1:49:8f:f5:30:7a:10:f0:f7:99:39:8f:73:16:c6:29:22:55: 58:14:c4:63:56:7b:5c:c1:ad:34:bf:5f:3f:ff:93:b9:d8:6c: a5:51:31:7b:81:ce:62:d5:af:5a:06:83:72:91:5e:ea:7f:1c: 7f:99:73:02:a4:49:17:55:6f:13:c1:9a:0f:97:77:2d:54:dd: ce:a7:99:7d:c6:b4:7b:8b:b7:11:d3:c3:ba:82:9d:e0:65:78: cb:98:b7:a3:19:05:95:5c:6b:2a:41:f3:b9:ae:19:be:0f:f5: d8:f7:62:17:d1:63:6c:c3:31:3e:c8:fa:5c:21:1b:a8:fc:1d: ef:84:d4:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq75ivd3yYNuRjtQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk MjA5NzFhMDYtZDU4Ni00YzIwLWE1NmYtZmMwM2E0NTk1ODAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcw+vSAkMokMuh43X7Nxi0IFJQ0o7y7u0pRz w0mywo4JD04+olkHrYC3YPFtxsz5f04iP1C75WI/JcZ6FbyWpIONR5bw3QVbjwiw mvRG0wvOvqAnoV9In+OaaV9LKabLFsYArWHGlYTIbAwVqNDO4AyAeOEpj2ZCNZ2U KUqI2n1ugjUqGsqgP0ofrPSSj9sx5FEpjyCclgJOGReW6UN03/gnXXBDeUZxrATz mfNSPPCIV3QDwFlYOpq+eU3MlwClz4gf0/GvTzLMwRPcHpMzJb7H+e61Oesf9pd+ NSy8yVon1a8HzGvLWPJqp40qsh2DsagV/4kBUxQSlj2V3416nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHvUgpMg85bd1DjPFAfsNfO29SJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvZGNlNzhhZmQtMjI2Yi0z NzU5LWIzMTEtZGU5NDg2MTkyNTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaJyqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgtlqIznnWZzQv3iYtRn39z8uCabqZ1cRUTtfnXVI6xV8yPQWU0f8jL bkKgqkCQLjyBg6pcZ2renG6VgySgJuyFhFcPDQCfaQ2H65dCgh+13q2nbxZhwKp+ Yr9kYn46AVAhqYXi1HqyIEppw9cJLROlLZhoGhce88T5IPAF48FJj/UwehDw95k5 j3MWxikiVVgUxGNWe1zBrTS/Xz//k7nYbKVRMXuBzmLVr1oGg3KRXup/HH+ZcwKk SRdVbxPBmg+Xdy1U3c6nmX3GtHuLtxHTw7qCneBleMuYt6MZBZVcaypB87muGb4P 9dj3YhfRY2zDMT7I+lwhG6j8He+E1JE= -----END CERTIFICATE-----Generated at Wed Aug 6 14:14:46 2025 by rpki-client