$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/ebbab8ca-563f-37de-a229-2fad1f5fe2e2.roa File: ebbab8ca-563f-37de-a229-2fad1f5fe2e2.roa (raw, json) Hash identifier: mJUQiH/Dol+J+7yaJBMIvCWShNoG4Aqlu1Rluem9ImA= Subject key identifier: 98:CD:19:F3:A3:FF:52:16:C1:8C:F4:85:99:B6:CE:36:A2:29:EC:9D Certificate issuer: /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c Certificate serial: 010D0C9F4328584A331AFB5B3E6DD0F566B65980 Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/ebbab8ca-563f-37de-a229-2fad1f5fe2e2.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 393653 IP address blocks: 104.128.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:fb:5b:3e:6d:d0:f5:66:b6:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=0e701285-b22c-47e4-aaab-c59760d010dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:06:e7:9e:24:ce:d3:30:09:a4:79:d1:07:75: 87:52:68:23:b8:46:5b:2b:f6:f3:d8:3f:41:84:70: 58:da:dd:c1:f5:fa:e1:92:11:86:15:13:1b:0b:35: c9:f3:a9:e6:2f:ea:b2:11:22:fc:58:62:b9:c6:d5: b4:10:90:58:94:f3:d0:72:6a:de:5c:d1:b9:b2:d8: 83:60:a0:68:4a:9b:55:16:08:40:2a:b3:4b:0c:78: 7e:4c:2b:e0:34:c4:2d:dd:f7:8e:ec:67:4f:ef:f1: a3:90:7f:66:de:04:ef:ad:66:d1:7f:f3:6b:52:f5: 01:dc:96:6b:c7:b0:dd:e5:5b:69:4d:5b:65:89:a1: 88:d8:ec:f2:58:03:7a:6a:47:51:50:ba:8f:1a:bd: c3:61:45:f0:c6:b4:db:e2:7a:ef:4b:52:5b:0f:85: e3:c6:cf:d0:5d:ca:05:d5:a6:8e:51:8f:68:01:ba: cf:18:0b:6b:bd:89:d6:23:41:2a:b8:34:35:13:be: a8:76:63:69:2a:a4:c6:a2:2c:5f:d5:1a:dd:ec:49: 7d:26:da:73:52:2b:ad:ca:42:ad:59:c0:2c:79:13: cb:df:ff:59:7e:85:2b:ae:91:10:ce:be:59:a2:9f: 95:e2:9d:ce:1b:48:98:10:ce:35:1d:a4:48:ae:e7: ea:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:CD:19:F3:A3:FF:52:16:C1:8C:F4:85:99:B6:CE:36:A2:29:EC:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/ebbab8ca-563f-37de-a229-2fad1f5fe2e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl X509v3 Authority Key Identifier: keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer sbgp-ipAddrBlock: critical IPv4: 104.128.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:31:32:95:84:62:d9:22:89:b9:9d:4c:fc:34:42:6f:8b:81: 76:23:b2:b0:3b:69:b9:fe:54:63:7c:ce:4b:71:91:1e:70:5c: 7c:86:e9:5b:84:76:3d:d7:f2:78:df:91:38:10:50:ed:f7:69: 5b:81:bf:aa:ca:07:c0:af:20:ce:61:c4:b5:7b:bb:bb:e9:4d: 6f:56:da:93:ed:1d:e7:fc:bf:73:bd:7b:ad:5f:c6:cf:8b:02: c0:91:20:e8:6e:30:ce:4f:d5:a2:ff:1a:b9:71:95:d7:ab:1c: 0f:55:46:97:98:7a:c0:4b:44:dd:de:24:3b:f5:c8:79:81:5f: 41:9d:6d:ce:8a:5a:5e:1f:2d:51:22:9f:7a:43:1f:11:65:c8: 7b:79:76:e4:8c:96:4e:61:a8:ec:33:93:b9:2a:27:c2:ac:8c: 45:4f:c4:cc:6b:3a:fe:96:54:d3:68:94:9f:c0:65:ae:4d:4a: 54:73:19:ad:91:72:15:fd:5a:be:d9:88:f6:e7:19:7c:84:6a: 59:46:8a:ce:12:30:ec:c6:cf:f1:7b:fc:8f:a1:fa:9d:58:d5: aa:33:56:e4:3a:30:da:f5:d4:f9:56:d3:19:8b:d8:6f:ca:bb: 21:fc:7b:13:ca:90:23:b2:9c:10:1f:25:e5:cb:ae:ab:dc:7d: cf:48:27:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGvtbPm3Q9Wa2WYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzViMmU5YjUtZjFhYS00MWRlLThiZGMtNzA1OGU1OGVm ODFjMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk MGU3MDEyODUtYjIyYy00N2U0LWFhYWItYzU5NzYwZDAxMGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwbnniTO0zAJpHnRB3WHUmgjuEZbK/bz2D9B hHBY2t3B9frhkhGGFRMbCzXJ86nmL+qyESL8WGK5xtW0EJBYlPPQcmreXNG5stiD YKBoSptVFghAKrNLDHh+TCvgNMQt3feO7GdP7/GjkH9m3gTvrWbRf/NrUvUB3JZr x7Dd5VtpTVtliaGI2OzyWAN6akdRULqPGr3DYUXwxrTb4nrvS1JbD4Xjxs/QXcoF 1aaOUY9oAbrPGAtrvYnWI0EquDQ1E76odmNpKqTGoixf1Rrd7El9JtpzUiutykKt WcAseRPL3/9ZfoUrrpEQzr5Zop+V4p3OG0iYEM41HaRIrufq2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjNGfOj/1IWwYz0hZm2zjaiKeydMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83NWIy ZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4ZTU4ZWY4MWMvZWJiYWI4Y2EtNTYzZi0z N2RlLWEyMjktMmZhZDFmNWZlMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzViMmU5YjUtZjFhYS00MWRlLThi ZGMtNzA1OGU1OGVmODFjLzc1YjJlOWI1LWYxYWEtNDFkZS04YmRjLTcwNThlNThl ZjgxYy5jcmwwHwYDVR0jBBgwFoAU56eLhm6ePsel2+WMY0Cly0mpS40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83NWIyZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4 ZTU4ZWY4MWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaICYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMxMpWEYtkiibmdTPw0Qm+LgXYjsrA7abn+VGN8zktxkR5wXHyG6VuE dj3X8njfkTgQUO33aVuBv6rKB8CvIM5hxLV7u7vpTW9W2pPtHef8v3O9e61fxs+L AsCRIOhuMM5P1aL/GrlxlderHA9VRpeYesBLRN3eJDv1yHmBX0Gdbc6KWl4fLVEi n3pDHxFlyHt5duSMlk5hqOwzk7kqJ8KsjEVPxMxrOv6WVNNolJ/AZa5NSlRzGa2R chX9Wr7ZiPbnGXyEallGis4SMOzGz/F7/I+h+p1Y1aozVuQ6MNr11PlW0xmL2G/K uyH8exPKkCOynBAfJeXLrqvcfc9IJ0M= -----END CERTIFICATE-----Generated at Tue Jun 17 09:49:40 2025 by rpki-client