$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/a9de4f19-b042-31bc-b04a-dbfd3f28c3e7.roa File: a9de4f19-b042-31bc-b04a-dbfd3f28c3e7.roa (raw, json) Hash identifier: ZEM1J40u+19a0TT223lg7zczv/ApDiyET+HLTOOam04= Subject key identifier: 3F:14:57:8E:88:00:DE:9A:69:92:24:20:46:C2:0B:ED:5E:61:F3:06 Certificate issuer: /CN=954e2959-b160-4ffa-86b4-aaa94863154c Certificate serial: 010D0C9F4328584ABD4B7FF10DB4941799DE3B00 Authority key identifier: 7A:0D:9D:66:5A:CD:4F:54:DB:65:04:14:29:CB:05:0D:D9:7D:51:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/a9de4f19-b042-31bc-b04a-dbfd3f28c3e7.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 3801 IP address blocks: 104.156.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:7f:f1:0d:b4:94:17:99:de:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954e2959-b160-4ffa-86b4-aaa94863154c Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=ac855f24-0d40-43e4-a650-29489b0644a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:48:d6:70:07:f9:c8:e3:ea:f4:cd:91:0d:14: f3:7f:49:d6:91:45:4f:4b:c0:92:1f:02:45:98:77: 5d:ef:f5:d7:5e:de:76:d4:3a:6e:8f:a6:31:e3:21: 58:40:04:c0:7b:ae:2c:1c:f2:51:f4:b8:92:51:95: 76:ee:f6:41:d3:36:16:62:f2:b8:9b:57:3c:c8:09: 4c:e2:29:f8:dd:58:73:4c:b7:2e:cc:0b:39:f9:de: e7:5d:e5:c8:85:fa:22:ca:c9:81:1e:86:af:45:d4: 5a:a0:f4:35:03:88:7d:17:66:88:05:b3:7e:c7:01: b9:4b:93:fa:35:d8:99:86:44:f4:6d:5a:8b:dd:fe: 91:b2:6b:fc:aa:7c:b3:b1:30:29:49:cf:b0:bb:a9: 7d:e0:df:9e:a9:1a:67:b5:37:f4:3a:f9:dc:fb:61: 6e:39:c0:66:d9:40:45:42:59:e3:1c:0e:55:ed:0e: 47:ae:79:18:38:6c:df:59:f8:81:da:2e:76:1f:e2: 41:6e:a4:e0:b5:f1:15:7b:f5:e1:ee:03:4e:98:1f: 5b:18:84:1a:89:9b:e7:96:bd:94:61:50:83:20:6e: fb:44:b4:96:62:90:c8:5c:ca:11:59:66:92:5a:24: f1:78:7b:79:af:b8:27:c3:69:05:9f:f6:7a:6f:0a: a7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:14:57:8E:88:00:DE:9A:69:92:24:20:46:C2:0B:ED:5E:61:F3:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/a9de4f19-b042-31bc-b04a-dbfd3f28c3e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.crl X509v3 Authority Key Identifier: keyid:7A:0D:9D:66:5A:CD:4F:54:DB:65:04:14:29:CB:05:0D:D9:7D:51:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer sbgp-ipAddrBlock: critical IPv4: 104.156.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:91:23:f9:a8:f5:76:f0:69:3e:11:89:0a:58:bd:06:61:ce: 1a:9b:92:10:80:5b:00:f7:63:da:97:91:d9:a8:c3:1b:3e:5c: f0:7a:47:a1:f7:04:1b:e2:db:68:df:68:f4:d8:69:37:5f:b2: 6f:2b:cd:52:3e:bd:25:2f:7e:c7:bd:5e:04:ed:38:71:67:f6: 3e:34:8a:fd:df:f4:34:de:05:a0:1c:11:51:7d:34:8b:72:cd: d1:a4:db:d1:19:bf:7f:c6:1b:72:3f:e1:a2:32:70:6d:67:13: 5d:89:83:b9:b6:d4:b0:24:ba:f0:0a:b1:28:e2:a9:ce:6d:38: 34:bf:af:f2:22:4e:53:b8:00:06:36:15:74:71:2a:96:c0:3d: f0:6c:e3:a4:e0:84:33:eb:9a:e2:c7:03:bb:da:60:02:9b:d1: 02:f5:31:b7:b5:b6:cb:10:da:b3:8b:92:bc:af:60:28:4e:84: d1:5f:80:1f:7f:89:89:80:57:eb:8b:6b:c8:ca:e0:d2:d9:9f: 10:40:b4:3f:c1:a8:87:d9:f5:52:23:2e:fa:e5:40:ab:28:dd: 59:fd:e3:83:e1:df:59:f7:d3:ab:73:30:9b:c9:8a:79:d2:9a: 0a:f5:a3:c2:21:b5:60:29:0d:55:82:8f:8e:36:97:ac:4e:41: fd:9d:ed:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S3/xDbSUF5neOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU0ZTI5NTktYjE2MC00ZmZhLTg2YjQtYWFhOTQ4NjMx NTRjMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk YWM4NTVmMjQtMGQ0MC00M2U0LWE2NTAtMjk0ODliMDY0NGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEjWcAf5yOPq9M2RDRTzf0nWkUVPS8CSHwJF mHdd7/XXXt521Dpuj6Yx4yFYQATAe64sHPJR9LiSUZV27vZB0zYWYvK4m1c8yAlM 4in43VhzTLcuzAs5+d7nXeXIhfoiysmBHoavRdRaoPQ1A4h9F2aIBbN+xwG5S5P6 NdiZhkT0bVqL3f6Rsmv8qnyzsTApSc+wu6l94N+eqRpntTf0Ovnc+2FuOcBm2UBF QlnjHA5V7Q5HrnkYOGzfWfiB2i52H+JBbqTgtfEVe/Xh7gNOmB9bGIQaiZvnlr2U YVCDIG77RLSWYpDIXMoRWWaSWiTxeHt5r7gnw2kFn/Z6bwqnxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8UV46IAN6aaZIkIEbCC+1eYfMGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NTRl Mjk1OS1iMTYwLTRmZmEtODZiNC1hYWE5NDg2MzE1NGMvYTlkZTRmMTktYjA0Mi0z MWJjLWIwNGEtZGJmZDNmMjhjM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTU0ZTI5NTktYjE2MC00ZmZhLTg2 YjQtYWFhOTQ4NjMxNTRjLzk1NGUyOTU5LWIxNjAtNGZmYS04NmI0LWFhYTk0ODYz MTU0Yy5jcmwwHwYDVR0jBBgwFoAUeg2dZlrNT1TbZQQUKcsFDdl9UbwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NTRlMjk1OS1iMTYwLTRmZmEtODZiNC1hYWE5 NDg2MzE1NGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmRI/mo9XbwaT4RiQpYvQZhzhqbkhCAWwD3Y9qXkdmowxs+XPB6R6H3 BBvi22jfaPTYaTdfsm8rzVI+vSUvfse9XgTtOHFn9j40iv3f9DTeBaAcEVF9NIty zdGk29EZv3/GG3I/4aIycG1nE12Jg7m21LAkuvAKsSjiqc5tODS/r/IiTlO4AAY2 FXRxKpbAPfBs46TghDPrmuLHA7vaYAKb0QL1Mbe1tssQ2rOLkryvYChOhNFfgB9/ iYmAV+uLa8jK4NLZnxBAtD/BqIfZ9VIjLvrlQKso3Vn944Ph31n306tzMJvJinnS mgr1o8IhtWApDVWCj442l6xOQf2d7cQ= -----END CERTIFICATE-----Generated at Tue Aug 5 17:18:09 2025 by rpki-client