$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/ebbab8ca-563f-37de-a229-2fad1f5fe2e2.roa File: ebbab8ca-563f-37de-a229-2fad1f5fe2e2.roa (raw, json) Hash identifier: DWlawch3I3HLdhYo3KgU0IXU37u1pdbmQ/QIjbWJR3g= Subject key identifier: B9:B3:82:E4:F1:DA:99:DC:6F:8D:39:44:71:01:4F:F0:0E:82:49:5A Certificate issuer: /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c Certificate serial: 010D0C9F4328584B13D6C8A0FD6F6C5710BAB440 Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/ebbab8ca-563f-37de-a229-2fad1f5fe2e2.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 393653 IP address blocks: 104.128.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c8:a0:fd:6f:6c:57:10:ba:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=935a7874-a41d-47da-a44f-0003e7aab765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:14:23:b6:a4:c4:df:af:4d:63:c6:9e:6c:de: fa:20:3b:c3:4f:0f:00:2d:06:ed:4d:3d:57:6d:f9: 46:1a:69:51:23:19:ca:c0:1a:4a:11:5f:e0:b4:3a: 72:94:bc:28:8a:4f:ba:5d:6e:8b:66:d5:68:9d:ff: a4:15:e5:72:fb:64:af:40:1e:92:9d:ed:d0:d3:df: 72:97:f2:f8:4d:48:6b:d1:ef:90:2a:95:23:35:97: 6f:48:b6:57:3d:d4:30:d8:f5:fe:f0:32:32:7b:47: 37:f8:d7:d3:e8:90:9f:ad:f3:0d:5e:d2:86:fd:2f: eb:a7:b2:7d:b6:fa:c8:05:4a:3e:a0:44:67:10:3f: 84:ab:ab:44:05:96:c6:5e:c1:e9:f9:12:60:d0:a5: 48:08:82:22:40:0f:f7:9e:18:74:5a:66:f5:8f:4d: f3:32:1b:6c:99:cb:2e:45:de:76:c7:63:50:cb:8d: 6c:5b:57:ce:21:3a:28:b1:74:c2:9a:bb:aa:d2:bb: 13:6b:01:8d:2e:da:5b:a2:6c:55:93:6d:4f:65:3d: be:f8:6f:bc:fe:d8:d0:6e:00:a5:1e:4c:8b:39:71: 27:13:70:e1:b3:5d:22:89:22:6e:0e:5b:5a:df:84: 47:94:04:cc:15:71:08:5f:24:bc:1f:b7:8b:f6:72: f1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B3:82:E4:F1:DA:99:DC:6F:8D:39:44:71:01:4F:F0:0E:82:49:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/ebbab8ca-563f-37de-a229-2fad1f5fe2e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl X509v3 Authority Key Identifier: keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer sbgp-ipAddrBlock: critical IPv4: 104.128.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:b2:3c:37:90:f2:3a:3b:6c:5a:53:22:05:e8:5b:17:74:47: d0:15:4d:da:de:bb:db:d9:5f:e2:a0:92:6e:c5:08:bf:f1:68: 0b:83:eb:63:dc:b9:0a:ea:84:64:e8:4b:36:bb:ad:3c:f4:9e: cd:4e:3b:26:1a:9b:0b:76:4e:0c:4e:68:d8:b5:af:a6:e7:9e: e9:3f:cb:87:52:f3:fb:79:41:a1:73:08:59:7a:f1:e9:86:80: 3f:91:c3:65:8e:5a:02:f4:ce:0c:d1:c6:7e:ea:8c:46:b7:af: a8:d4:44:d1:ef:55:7d:1d:94:5d:4e:14:f8:3b:06:be:6d:96: ff:a3:cf:90:fe:ba:94:0a:e6:34:2e:4e:28:67:ca:68:d0:b1: f2:ab:99:a8:1e:e8:3a:97:17:a8:9c:67:91:6f:d3:07:ec:5f: 7a:6b:f7:10:f4:2e:2d:fe:9f:68:83:1a:8c:cd:29:e2:af:2c: 5a:f3:38:a0:de:96:4e:02:cb:fd:a1:d5:20:38:8f:99:df:8d: 6f:ee:0c:80:b0:0f:62:2d:f8:e0:d4:3f:c7:81:6d:b6:99:9d: 20:7d:56:79:12:a3:6f:95:ab:56:fe:ee:de:aa:3b:84:bd:2d: 4a:87:df:bb:1a:5f:cb:3e:3f:cc:3c:c7:0f:84:c6:66:01:bb: 79:a0:b8:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sig/W9sVxC6tEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzViMmU5YjUtZjFhYS00MWRlLThiZGMtNzA1OGU1OGVm ODFjMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk OTM1YTc4NzQtYTQxZC00N2RhLWE0NGYtMDAwM2U3YWFiNzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhQjtqTE369NY8aebN76IDvDTw8ALQbtTT1X bflGGmlRIxnKwBpKEV/gtDpylLwoik+6XW6LZtVonf+kFeVy+2SvQB6Sne3Q099y l/L4TUhr0e+QKpUjNZdvSLZXPdQw2PX+8DIye0c3+NfT6JCfrfMNXtKG/S/rp7J9 tvrIBUo+oERnED+Eq6tEBZbGXsHp+RJg0KVICIIiQA/3nhh0Wmb1j03zMhtsmcsu Rd52x2NQy41sW1fOIToosXTCmruq0rsTawGNLtpbomxVk21PZT2++G+8/tjQbgCl HkyLOXEnE3Dhs10iiSJuDlta34RHlATMFXEIXyS8H7eL9nLx1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmzguTx2pncb405RHEBT/AOgklaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83NWIy ZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4ZTU4ZWY4MWMvZWJiYWI4Y2EtNTYzZi0z N2RlLWEyMjktMmZhZDFmNWZlMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzViMmU5YjUtZjFhYS00MWRlLThi ZGMtNzA1OGU1OGVmODFjLzc1YjJlOWI1LWYxYWEtNDFkZS04YmRjLTcwNThlNThl ZjgxYy5jcmwwHwYDVR0jBBgwFoAU56eLhm6ePsel2+WMY0Cly0mpS40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83NWIyZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4 ZTU4ZWY4MWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaICYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2yPDeQ8jo7bFpTIgXoWxd0R9AVTdreu9vZX+Kgkm7FCL/xaAuD62Pc uQrqhGToSza7rTz0ns1OOyYamwt2TgxOaNi1r6bnnuk/y4dS8/t5QaFzCFl68emG gD+Rw2WOWgL0zgzRxn7qjEa3r6jURNHvVX0dlF1OFPg7Br5tlv+jz5D+upQK5jQu TihnymjQsfKrmage6DqXF6icZ5Fv0wfsX3pr9xD0Li3+n2iDGozNKeKvLFrzOKDe lk4Cy/2h1SA4j5nfjW/uDICwD2It+ODUP8eBbbaZnSB9VnkSo2+Vq1b+7t6qO4S9 LUqH37saX8s+P8w8xw+ExmYBu3mguHI= -----END CERTIFICATE-----Generated at Fri Oct 10 03:57:20 2025 by rpki-client