$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/e9b96ed2-1e64-3545-9615-bd5797a3295c.roa File: e9b96ed2-1e64-3545-9615-bd5797a3295c.roa (raw, json) Hash identifier: ek//Q6+q7zXfUaYTOLWj5aGjOuIRl156dFWvVHxxAT4= Subject key identifier: 6E:9E:E1:1C:7B:9F:A9:42:30:FA:41:27:C0:F1:78:C6:F1:6E:6F:F0 Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F4328584B2FC1BA985BC8B69F423F9B80 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/e9b96ed2-1e64-3545-9615-bd5797a3295c.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 27395 IP address blocks: 104.156.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:ba:98:5b:c8:b6:9f:42:3f:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=fce619cd-0d7c-46b4-915f-3bc73c9a8d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:43:33:5e:dc:0f:d1:30:0c:28:1c:24:51:ef: 16:d7:1e:a5:ed:61:3a:d2:87:76:9d:0f:dd:e4:13: 85:7e:4e:ef:0b:a5:35:ff:81:bb:b9:6c:cb:ba:bb: c1:db:91:29:7e:f7:ea:50:25:c2:8c:c8:da:6d:33: 06:21:fa:ee:4f:9a:86:e0:3c:40:23:7a:39:92:52: cc:ce:2a:10:ec:2b:51:3e:32:73:0a:30:58:d2:ce: 54:2b:92:81:78:42:b9:d7:b7:da:a4:5d:bf:91:89: 63:75:32:48:a4:7f:3a:32:1b:46:a3:ad:71:12:e0: 37:66:e3:f8:3f:64:95:03:80:1c:55:10:90:41:3f: a0:29:2a:dd:67:80:71:62:e7:6f:f3:fa:43:7d:e8: a4:3d:ed:94:2b:7a:43:33:10:b5:74:8d:2f:15:d8: 7b:29:65:d0:2a:12:a0:1d:0e:e0:26:96:65:93:d6: 75:b6:b8:c8:e0:ff:b0:da:ec:3b:1c:20:11:59:48: a1:d8:81:b8:cd:65:9c:8d:43:2a:52:7c:36:98:a0: 79:cd:07:a8:51:c2:8d:7a:1b:35:8f:84:d4:0a:3b: 8f:79:a4:9c:a5:f1:9b:5c:96:4d:9c:c0:a7:64:b1: 97:6b:df:57:8f:d0:5d:1b:21:20:65:44:be:3e:28: 95:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9E:E1:1C:7B:9F:A9:42:30:FA:41:27:C0:F1:78:C6:F1:6E:6F:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/e9b96ed2-1e64-3545-9615-bd5797a3295c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 104.156.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b0:9d:61:58:cf:dc:6c:e3:38:61:ac:7e:bb:b2:28:74:b5: a6:c9:b0:d7:7c:5e:b7:9c:75:5a:f7:5f:03:5f:95:3d:0c:6b: 51:a2:fa:1b:c7:ce:2c:86:6d:26:0e:4f:c3:13:3c:74:11:8e: 0c:7c:d1:dd:a4:c8:7c:37:e8:f4:02:2e:0a:5d:1c:c1:83:82: 0e:cb:ae:4c:af:33:10:ea:fc:2e:a0:40:be:7a:09:f7:d5:7e: 88:f4:cb:25:20:e4:38:cf:f2:4e:83:98:ee:1a:22:40:42:fb: e5:f3:16:82:da:4b:51:12:0a:b5:5d:d4:8d:a1:52:b3:96:2f: 7e:2c:99:06:ab:e8:5b:0d:cf:15:df:19:49:6b:60:a6:e7:1f: a1:ee:1c:65:8b:f6:94:06:4a:15:c4:dc:b0:fe:5b:92:2c:bd: 54:52:14:06:fd:a6:55:06:66:17:05:c1:5c:da:5d:b0:12:eb: 39:60:b0:6e:f8:60:a1:a9:4c:f4:f0:62:6f:9b:8f:a9:fe:2b: 6a:b1:c5:cd:63:ae:29:85:53:36:0e:db:37:09:ed:05:69:b4: c4:a6:8d:33:00:33:15:f4:fa:7b:68:91:66:b1:8a:95:1a:d2: 88:2a:f4:87:83:9f:bf:67:95:c9:1b:d1:e9:85:e4:ed:1e:ea: 61:ee:9f:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwbqYW8i2n0I/m4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk ZmNlNjE5Y2QtMGQ3Yy00NmI0LTkxNWYtM2JjNzNjOWE4ZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EMzXtwP0TAMKBwkUe8W1x6l7WE60od2nQ/d 5BOFfk7vC6U1/4G7uWzLurvB25EpfvfqUCXCjMjabTMGIfruT5qG4DxAI3o5klLM zioQ7CtRPjJzCjBY0s5UK5KBeEK517fapF2/kYljdTJIpH86MhtGo61xEuA3ZuP4 P2SVA4AcVRCQQT+gKSrdZ4BxYudv8/pDfeikPe2UK3pDMxC1dI0vFdh7KWXQKhKg HQ7gJpZlk9Z1trjI4P+w2uw7HCARWUih2IG4zWWcjUMqUnw2mKB5zQeoUcKNehs1 j4TUCjuPeaScpfGbXJZNnMCnZLGXa99Xj9BdGyEgZUS+PiiVjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6e4Rx7n6lCMPpBJ8DxeMbxbm/wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvZTliOTZlZDItMWU2NC0z NTQ1LTk2MTUtYmQ1Nzk3YTMyOTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuwnWFYz9xs4zhhrH67sih0tabJsNd8XrecdVr3XwNflT0Ma1Gi+hvH ziyGbSYOT8MTPHQRjgx80d2kyHw36PQCLgpdHMGDgg7LrkyvMxDq/C6gQL56CffV foj0yyUg5DjP8k6DmO4aIkBC++XzFoLaS1ESCrVd1I2hUrOWL34smQar6FsNzxXf GUlrYKbnH6HuHGWL9pQGShXE3LD+W5IsvVRSFAb9plUGZhcFwVzaXbAS6zlgsG74 YKGpTPTwYm+bj6n+K2qxxc1jrimFUzYO2zcJ7QVptMSmjTMAMxX0+ntokWaxipUa 0ogq9IeDn79nlckb0emF5O0e6mHunzg= -----END CERTIFICATE-----Generated at Tue Nov 4 19:30:10 2025 by rpki-client