$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d2acbc52-bb00-38b2-a37a-cb954cf5453b.roa File: d2acbc52-bb00-38b2-a37a-cb954cf5453b.roa (raw, json) Hash identifier: lk7Dt81LrLuUKu1C/J/1dhcnMXxkvRxblEzZnIoO+L0= Subject key identifier: 5F:FF:FC:01:F5:98:08:AF:26:85:03:42:ED:AF:8A:FA:70:03:2D:95 Certificate issuer: /CN=d25f3fa9-8b52-4f17-8aca-6740ded73683 Certificate serial: 010D0C9F4328584A85AFE230446AAA2425EA3680 Authority key identifier: 8E:B5:84:9A:70:4E:11:B0:46:6B:AD:9D:D3:5B:7B:FC:11:F0:B1:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d2acbc52-bb00-38b2-a37a-cb954cf5453b.roa Signing time: Tue 15 Jul 2025 02:57:39 +0000 ROA not before: Tue 15 Jul 2025 02:57:39 +0000 ROA not after: Mon 13 Oct 2025 02:57:39 +0000 asID: 16509 IP address blocks: 104.166.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d25f3fa9-8b52-4f17-8aca-6740ded73683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d25f3fa9-8b52-4f17-8aca-6740ded73683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:af:e2:30:44:6a:aa:24:25:ea:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d25f3fa9-8b52-4f17-8aca-6740ded73683 Validity Not Before: Jul 15 02:57:39 2025 GMT Not After : Oct 13 02:57:39 2025 GMT Subject: CN=155c008c-7f14-49a2-b7ff-3b5155e0ad2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:be:8f:65:d5:46:15:a5:a7:0d:9b:e6:bd:f8: f3:ca:51:30:b2:d2:28:10:53:dd:29:3b:a6:2f:9d: 92:d5:53:24:81:18:97:b4:1a:6d:cd:34:23:08:51: 4b:d6:4c:f1:f0:42:0b:14:fa:40:c3:5a:fb:77:71: 7d:8b:3a:c2:f3:5e:53:78:58:96:de:18:f5:fa:e5: 25:60:4b:64:83:14:71:a4:49:00:79:a3:41:c4:5c: ae:7d:6b:26:62:6b:38:2c:34:6e:6a:f2:0f:18:76: 59:14:d9:fc:01:90:2f:e8:4e:b4:04:71:61:d9:2e: b8:f6:d2:bc:0b:f6:98:84:a1:01:d9:64:56:80:7d: 20:09:a1:00:14:a2:d7:8e:11:f4:d4:84:9c:2c:09: 68:62:8c:81:c1:59:0d:ae:f8:be:b8:6d:07:55:1a: dc:85:d0:e0:57:8e:2b:eb:68:6a:07:dd:1a:7c:9c: d8:17:93:db:8c:e2:bf:82:5a:ba:6e:09:1a:f1:23: cc:2e:bc:da:1a:b6:9c:d2:6a:8e:46:a2:70:4f:26: 3f:d3:5a:6f:74:2e:70:01:54:3f:cf:ae:6c:0f:60: b0:39:37:4a:81:0d:ae:ed:37:27:25:06:4c:8e:67: 2a:c7:9e:46:bb:2f:c9:35:2b:e2:2a:60:18:16:dd: e0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FF:FC:01:F5:98:08:AF:26:85:03:42:ED:AF:8A:FA:70:03:2D:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d2acbc52-bb00-38b2-a37a-cb954cf5453b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d25f3fa9-8b52-4f17-8aca-6740ded73683.crl X509v3 Authority Key Identifier: keyid:8E:B5:84:9A:70:4E:11:B0:46:6B:AD:9D:D3:5B:7B:FC:11:F0:B1:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683.cer sbgp-ipAddrBlock: critical IPv4: 104.166.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:4f:78:f4:b8:4c:37:4b:50:bc:8d:ff:08:ee:66:15:3a:58: d7:52:31:e6:48:01:08:9d:04:9c:13:85:95:d3:45:d1:f2:31: 0c:d1:e5:e9:3c:47:c0:b8:6c:b6:03:03:fd:c4:77:5d:67:75: 4d:73:63:96:62:f9:b2:ba:3c:d1:78:1b:90:df:0c:81:88:7d: 5f:4c:b6:33:e5:88:a5:ca:49:99:1d:86:45:34:7e:dd:c9:3f: f0:0a:78:47:1b:5d:52:c2:8a:52:e0:bb:4a:f5:b4:24:f4:a7: f3:12:8a:ad:2c:78:9d:aa:46:a7:37:18:38:09:32:11:54:5b: 49:25:9a:b0:bc:b2:6a:b4:0e:4e:80:7a:1e:c3:fb:46:8e:ef: 4b:cf:13:f2:0e:e0:d4:90:5a:b7:a7:22:b8:52:71:51:ce:44: 19:a6:8c:9d:3f:27:db:9d:9e:1b:15:a0:cd:39:cf:dd:37:88: c9:bd:c1:64:c4:58:ab:a0:a0:a2:5d:c8:34:9f:34:04:d5:45: e3:58:77:22:57:09:cb:cd:2a:52:a7:f4:e6:8d:13:67:a6:bc: fb:b0:31:98:db:84:1d:f9:72:ea:53:33:c8:9d:5c:ca:f1:ba: 81:e5:5c:f0:f7:e3:a8:e2:cf:9a:3b:d6:c2:66:1d:c6:80:78: af:bc:28:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFr+IwRGqqJCXqNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI1ZjNmYTktOGI1Mi00ZjE3LThhY2EtNjc0MGRlZDcz NjgzMB4XDTI1MDcxNTAyNTczOVoXDTI1MTAxMzAyNTczOVowLzEtMCsGA1UEAxMk MTU1YzAwOGMtN2YxNC00OWEyLWI3ZmYtM2I1MTU1ZTBhZDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib6PZdVGFaWnDZvmvfjzylEwstIoEFPdKTum L52S1VMkgRiXtBptzTQjCFFL1kzx8EILFPpAw1r7d3F9izrC815TeFiW3hj1+uUl YEtkgxRxpEkAeaNBxFyufWsmYms4LDRuavIPGHZZFNn8AZAv6E60BHFh2S649tK8 C/aYhKEB2WRWgH0gCaEAFKLXjhH01IScLAloYoyBwVkNrvi+uG0HVRrchdDgV44r 62hqB90afJzYF5PbjOK/glq6bgka8SPMLrzaGrac0mqORqJwTyY/01pvdC5wAVQ/ z65sD2CwOTdKgQ2u7TcnJQZMjmcqx55Guy/JNSviKmAYFt3gbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF///AH1mAivJoUDQu2vivpwAy2VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjVm M2ZhOS04YjUyLTRmMTctOGFjYS02NzQwZGVkNzM2ODMvZDJhY2JjNTItYmIwMC0z OGIyLWEzN2EtY2I5NTRjZjU0NTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDI1ZjNmYTktOGI1Mi00ZjE3LThh Y2EtNjc0MGRlZDczNjgzL2QyNWYzZmE5LThiNTItNGYxNy04YWNhLTY3NDBkZWQ3 MzY4My5jcmwwHwYDVR0jBBgwFoAUjrWEmnBOEbBGa62d01t7/BHwsTYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjVmM2ZhOS04YjUyLTRmMTctOGFjYS02NzQw ZGVkNzM2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKZtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALxPePS4TDdLULyN/wjuZhU6WNdSMeZIAQidBJwThZXTRdHyMQzR5ek8 R8C4bLYDA/3Ed11ndU1zY5Zi+bK6PNF4G5DfDIGIfV9MtjPliKXKSZkdhkU0ft3J P/AKeEcbXVLCilLgu0r1tCT0p/MSiq0seJ2qRqc3GDgJMhFUW0klmrC8smq0Dk6A eh7D+0aO70vPE/IO4NSQWrenIrhScVHORBmmjJ0/J9udnhsVoM05z903iMm9wWTE WKugoKJdyDSfNATVReNYdyJXCcvNKlKn9OaNE2emvPuwMZjbhB35cupTM8idXMrx uoHlXPD346jiz5o71sJmHcaAeK+8KE8= -----END CERTIFICATE-----Generated at Wed Aug 6 11:22:32 2025 by rpki-client