$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/0b9c6ff5-d158-396b-adb7-de82805ec20c.roa File: 0b9c6ff5-d158-396b-adb7-de82805ec20c.roa (raw, json) Hash identifier: dI/3TO7E83/6YGHPe//oMSCWyJEt3ehHndrySDEJdM0= Subject key identifier: 2F:26:08:81:E7:B6:DA:81:0C:D2:BB:E6:B7:B5:6A:D0:B2:89:2D:E5 Certificate issuer: /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c Certificate serial: 010D0C9F4328584B13D6C8C783CC6BF6F975A200 Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/0b9c6ff5-d158-396b-adb7-de82805ec20c.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 393653 IP address blocks: 104.128.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c8:c7:83:cc:6b:f6:f9:75:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=d6c81e1e-5c45-481f-83ab-efd60c1483a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:54:eb:ff:01:ab:de:72:ac:9c:92:7d:55:db: 41:c6:d6:5a:b4:52:fc:d6:96:d0:6d:b7:37:f2:3b: 9b:67:45:4b:12:bc:05:b1:d9:2f:0e:12:90:f2:b6: 6a:83:ab:5e:72:0c:30:45:47:35:c2:4c:e3:ca:40: ea:b9:54:ff:cc:be:1a:5d:b2:75:96:05:ea:11:f2: d4:df:72:41:a3:cf:42:69:b1:91:55:fb:9d:34:02: f3:a8:50:cb:71:9c:7a:7d:ef:7c:89:cc:57:3b:06: b1:05:a3:57:eb:9a:cd:24:be:ae:0c:63:4a:69:ca: 6a:3e:01:78:ed:22:fb:57:33:f2:ec:c7:da:b4:61: db:b1:bc:65:c0:62:43:f5:3b:6e:59:86:c3:be:9c: 52:cb:06:35:f3:a3:35:cb:f6:02:71:e0:72:f6:d6: fc:eb:35:c2:44:12:99:3d:d2:8a:58:c6:b4:18:80: 4c:f4:68:c2:3e:c6:7f:d5:3e:1e:65:70:46:07:84: 2d:1c:10:5a:03:7a:be:a7:fb:6b:ad:36:b6:c0:7c: 10:7d:de:95:11:ea:41:d1:18:b5:2b:40:bb:f6:14: 3b:2e:c5:bc:6d:d9:27:69:0c:93:9a:1c:58:7d:99: 5d:2f:73:83:1a:d5:98:a2:40:52:f1:c5:95:46:0a: 9b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:26:08:81:E7:B6:DA:81:0C:D2:BB:E6:B7:B5:6A:D0:B2:89:2D:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/0b9c6ff5-d158-396b-adb7-de82805ec20c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl X509v3 Authority Key Identifier: keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer sbgp-ipAddrBlock: critical IPv4: 104.128.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:76:40:6d:bd:1f:7f:8a:9f:50:fc:e4:1b:6b:0e:9c:3b:71: 31:55:96:4f:f6:57:d5:7f:e0:01:5c:6d:9c:0c:40:1a:7a:14: 16:eb:0b:61:38:64:0c:5d:df:8e:79:c2:88:a0:0f:01:86:b7: d8:7f:a5:3d:a1:af:c8:13:b4:a7:3b:4b:82:89:54:9e:39:d1: 2c:14:20:01:ce:6a:44:de:33:85:c1:81:22:77:91:29:85:39: 12:75:e0:15:42:1c:57:32:39:7f:43:33:95:06:3c:34:fe:75: ca:80:a1:50:38:1b:b0:44:15:e0:76:fb:c2:45:f4:1d:fe:7d: 75:9c:50:ac:94:62:86:18:e2:7f:fd:11:97:6f:49:04:d3:ed: 06:1c:ba:f1:9e:d4:01:b9:43:04:ed:62:ca:f3:77:d0:c5:8c: 48:38:9b:9f:f3:74:29:34:fe:be:57:b4:66:ea:55:12:6a:47: 50:88:11:ca:d6:29:77:76:ef:2d:75:a2:f8:44:ac:7e:0e:09: e3:39:ca:20:8d:e6:bb:f5:2a:a7:8d:fc:51:60:f0:13:47:97: 44:f2:91:de:06:f5:38:91:78:23:37:ab:61:42:59:cf:8c:75: 76:0a:d7:ef:5b:01:df:42:e7:60:8c:13:57:31:1b:68:9b:8d: 21:3a:0e:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sjHg8xr9vl1ogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzViMmU5YjUtZjFhYS00MWRlLThiZGMtNzA1OGU1OGVm ODFjMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk ZDZjODFlMWUtNWM0NS00ODFmLTgzYWItZWZkNjBjMTQ4M2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplTr/wGr3nKsnJJ9VdtBxtZatFL81pbQbbc3 8jubZ0VLErwFsdkvDhKQ8rZqg6tecgwwRUc1wkzjykDquVT/zL4aXbJ1lgXqEfLU 33JBo89CabGRVfudNALzqFDLcZx6fe98icxXOwaxBaNX65rNJL6uDGNKacpqPgF4 7SL7VzPy7MfatGHbsbxlwGJD9TtuWYbDvpxSywY186M1y/YCceBy9tb86zXCRBKZ PdKKWMa0GIBM9GjCPsZ/1T4eZXBGB4QtHBBaA3q+p/trrTa2wHwQfd6VEepB0Ri1 K0C79hQ7LsW8bdknaQyTmhxYfZldL3ODGtWYokBS8cWVRgqbuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8mCIHnttqBDNK75re1atCyiS3lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83NWIy ZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4ZTU4ZWY4MWMvMGI5YzZmZjUtZDE1OC0z OTZiLWFkYjctZGU4MjgwNWVjMjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzViMmU5YjUtZjFhYS00MWRlLThi ZGMtNzA1OGU1OGVmODFjLzc1YjJlOWI1LWYxYWEtNDFkZS04YmRjLTcwNThlNThl ZjgxYy5jcmwwHwYDVR0jBBgwFoAU56eLhm6ePsel2+WMY0Cly0mpS40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83NWIyZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4 ZTU4ZWY4MWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaICZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD92QG29H3+Kn1D85BtrDpw7cTFVlk/2V9V/4AFcbZwMQBp6FBbrC2E4 ZAxd3455woigDwGGt9h/pT2hr8gTtKc7S4KJVJ450SwUIAHOakTeM4XBgSJ3kSmF ORJ14BVCHFcyOX9DM5UGPDT+dcqAoVA4G7BEFeB2+8JF9B3+fXWcUKyUYoYY4n/9 EZdvSQTT7QYcuvGe1AG5QwTtYsrzd9DFjEg4m5/zdCk0/r5XtGbqVRJqR1CIEcrW KXd27y11ovhErH4OCeM5yiCN5rv1KqeN/FFg8BNHl0Tykd4G9TiReCM3q2FCWc+M dXYK1+9bAd9C52CME1cxG2ibjSE6Drw= -----END CERTIFICATE-----Generated at Fri Oct 10 03:52:18 2025 by rpki-client