$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa File: aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa (raw, json) Hash identifier: 6fK2eWgDSTOwJyYymyYN5uMgrS6t5sO7kna99Kfyz8c= Subject key identifier: 14:9A:D6:FD:82:E7:F9:1B:AA:F9:6C:DB:3A:40:AD:54:29:C3:BE:77 Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F4328584A14655A2DA6B9E9DA19631240 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 63023 IP address blocks: 104.156.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:5a:2d:a6:b9:e9:da:19:63:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=3bbd1e59-8c08-48cd-864d-f50e7444b0a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2d:d5:92:3f:7b:f3:3d:e0:ec:b3:21:74:72: 5e:cf:e2:c6:b7:4c:c7:86:1a:c6:d1:ff:f9:63:8e: d4:60:59:46:f1:87:95:ac:3e:57:52:ac:e9:0b:8b: 58:be:b8:5e:ff:ee:83:4a:9a:21:76:fa:6a:64:29: 6a:34:29:0a:46:3a:a7:df:38:ca:23:91:d9:54:80: 3b:e9:6c:5d:ad:72:8f:78:52:b7:65:27:18:cb:49: 47:de:be:52:fc:25:3a:cd:95:fb:e6:3c:48:2d:f9: d2:2b:6d:a9:9b:14:51:45:48:dc:83:16:92:f8:a0: d5:08:55:f0:95:14:6b:92:5c:5c:0b:b5:de:16:1d: 66:0f:15:e4:62:5d:1d:1b:57:72:ed:b7:bd:33:ef: 7f:62:99:fb:9e:84:83:60:f1:db:29:c1:90:c9:7b: 40:0e:2d:11:1a:f7:6a:28:2f:d9:75:96:ff:51:68: ea:cf:b8:3e:e5:5d:fb:41:ea:6d:ed:06:4f:f9:a2: 96:a3:1e:84:e8:20:c3:5f:de:b6:d8:ad:57:56:11: 08:59:a6:bf:12:db:83:45:dd:4c:34:a4:6a:8a:75: 36:69:e4:ae:b7:5f:68:ea:80:93:29:75:99:80:71: f5:07:ac:ea:56:92:5d:26:98:9b:1b:de:67:fc:4f: 2c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9A:D6:FD:82:E7:F9:1B:AA:F9:6C:DB:3A:40:AD:54:29:C3:BE:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 104.156.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:80:61:54:8a:cd:a3:63:3f:ef:75:bf:90:69:9f:54:6e:60: d7:2c:8d:ba:6f:68:30:0e:a8:8f:2c:e8:8e:1c:74:31:98:b6: 26:f9:12:a9:20:f3:aa:f2:bb:d4:0b:d7:e1:60:e9:41:6a:81: ef:48:f2:8f:7b:b9:18:95:9a:1b:db:65:08:64:21:a1:b1:9e: 94:84:06:bd:4e:d6:b6:90:de:40:4b:38:d2:02:dc:ae:5b:64: f3:6e:c1:cb:e1:6b:f4:ab:86:9f:70:a4:ba:1b:c6:a7:04:a3: 69:10:b1:3f:e7:f5:e9:d1:5d:75:2d:27:6e:06:ee:4c:e9:3f: 14:25:71:01:41:c7:37:50:cd:4c:3c:84:c5:59:b8:fa:aa:43: 45:12:e0:9f:68:3d:b8:65:72:f6:eb:7f:22:ae:6d:bd:03:68: 0a:81:1d:ac:f6:6b:1a:dc:86:0a:90:53:b5:cd:c0:10:38:f9: fa:17:e6:97:17:f8:91:ad:23:fd:a1:25:99:76:f5:c8:e2:b3: ec:64:5f:e2:18:00:46:84:f2:4c:8c:c9:19:30:cb:72:5c:ed: 64:2f:95:74:39:83:eb:12:04:4f:f0:26:93:24:6d:e7:62:7d: 52:78:74:0b:82:ad:16:74:34:34:44:c5:89:e1:a0:be:78:4c: 8a:82:b3:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZVotprnp2hljEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk M2JiZDFlNTktOGMwOC00OGNkLTg2NGQtZjUwZTc0NDRiMGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS3Vkj978z3g7LMhdHJez+LGt0zHhhrG0f/5 Y47UYFlG8YeVrD5XUqzpC4tYvrhe/+6DSpohdvpqZClqNCkKRjqn3zjKI5HZVIA7 6WxdrXKPeFK3ZScYy0lH3r5S/CU6zZX75jxILfnSK22pmxRRRUjcgxaS+KDVCFXw lRRrklxcC7XeFh1mDxXkYl0dG1dy7be9M+9/Ypn7noSDYPHbKcGQyXtADi0RGvdq KC/ZdZb/UWjqz7g+5V37Qept7QZP+aKWox6E6CDDX9622K1XVhEIWaa/EtuDRd1M NKRqinU2aeSut19o6oCTKXWZgHH1B6zqVpJdJpibG95n/E8sbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSa1v2C5/kbqvls2zpArVQpw753MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvYWJhNWE2YTEtZWFkOS0z M2ZlLWExYjQtYTllMmZiOTAwODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeAYVSKzaNjP+91v5Bpn1RuYNcsjbpvaDAOqI8s6I4cdDGYtib5Eqkg 86ryu9QL1+Fg6UFqge9I8o97uRiVmhvbZQhkIaGxnpSEBr1O1raQ3kBLONIC3K5b ZPNuwcvha/Srhp9wpLobxqcEo2kQsT/n9enRXXUtJ24G7kzpPxQlcQFBxzdQzUw8 hMVZuPqqQ0US4J9oPbhlcvbrfyKubb0DaAqBHaz2axrchgqQU7XNwBA4+foX5pcX +JGtI/2hJZl29cjis+xkX+IYAEaE8kyMyRkwy3Jc7WQvlXQ5g+sSBE/wJpMkbedi fVJ4dAuCrRZ0NDRExYnhoL54TIqCs4Y= -----END CERTIFICATE-----Generated at Mon Jun 16 03:28:50 2025 by rpki-client