$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/82d53773-6500-3ecc-aefc-f215f184f97f.roa File: 82d53773-6500-3ecc-aefc-f215f184f97f.roa (raw, json) Hash identifier: iAnQlziOOfmBq0u4Qu3TcyUynZyuWs7m5SmXkRIgzVc= Subject key identifier: A6:75:9F:0A:9A:D8:65:EC:65:13:05:C6:F7:54:0A:91:CE:23:64:35 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76C1895F1609D1C3AE5680 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/82d53773-6500-3ecc-aefc-f215f184f97f.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 54858 IP address blocks: 104.156.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:c1:89:5f:16:09:d1:c3:ae:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=5d3c8417-49d2-4edc-9d44-b97c155fd635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:52:62:a8:50:64:e0:a6:61:9c:14:ca:d1:8d: 5b:22:2b:a6:ec:a1:77:21:d2:f9:73:8f:fb:47:69: 21:fe:f8:21:fc:71:85:b6:96:7a:46:ad:6f:56:30: 97:a4:af:da:4a:8f:a1:ba:fe:e3:fa:36:0e:14:ae: b2:7a:f6:a0:ae:55:ba:ce:47:26:63:11:fa:08:5f: 6a:d0:19:6a:e3:c5:af:42:c7:95:8d:c3:5b:a8:79: d2:0d:9c:b7:92:31:89:ab:fd:b0:81:4e:24:2d:8c: 09:aa:40:d5:5d:3f:02:91:2a:5f:27:af:9e:9d:d2: 26:e9:c5:30:12:44:5b:41:02:e6:a0:83:4a:89:f5: 93:df:23:59:5a:1f:92:41:f7:a7:7a:d7:19:1a:51: 9f:d8:9b:07:39:43:b3:32:1f:74:18:c4:88:ca:11: fc:07:ad:4a:ef:25:6e:eb:2e:56:2a:3c:ec:fa:22: ef:7a:2a:17:83:23:1c:cd:11:57:38:66:f8:f0:17: f9:f5:fb:cf:dc:9f:6b:8d:f3:dc:c5:dc:36:6d:fa: 90:39:e9:81:40:2c:ff:8f:ea:02:d0:99:c2:6a:5b: 44:1d:a6:be:75:a5:b1:b8:47:99:06:73:35:80:ea: a0:1c:da:7c:59:f1:75:a0:98:64:f4:01:7a:c8:c3: f4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:75:9F:0A:9A:D8:65:EC:65:13:05:C6:F7:54:0A:91:CE:23:64:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/82d53773-6500-3ecc-aefc-f215f184f97f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.156.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:42:a6:6d:83:d0:97:08:5c:d0:e7:b4:91:8e:1f:67:0e:98: 0b:b4:e8:d6:4a:7d:de:f6:34:ce:0b:03:77:6d:53:a8:ae:5b: 52:25:10:f6:d2:b7:3e:69:85:dd:8f:f2:3f:96:e8:cc:3b:5f: c1:a8:33:79:67:4a:7a:8b:4b:86:26:a7:9c:a5:1d:2c:e1:fd: 78:94:e3:e6:7e:e7:87:bb:82:a5:ef:2a:3a:7c:ca:43:e2:95: 88:b3:b7:84:3b:d0:44:af:0a:3e:3b:43:11:81:68:33:85:9b: 75:a0:b5:12:d4:27:52:f2:45:fb:17:e8:ed:67:96:dc:ec:9b: 9c:c9:13:75:05:87:86:d2:5a:a6:91:c9:c4:fb:48:57:dd:d7: 09:b0:0b:bc:af:8a:92:9d:e5:8a:ce:72:c1:bc:e5:e0:b9:e0: 45:a2:52:2a:7e:3d:ed:b7:d6:57:86:4b:cf:4b:1c:f7:a4:2a: 61:41:79:f8:ee:18:d1:46:97:9a:f9:b5:48:21:2e:38:9e:9e: 3b:dc:6b:9a:84:ff:d0:ac:50:ee:5b:df:e1:4c:ec:6e:4c:d1: 9c:fc:a6:20:0f:1b:06:95:85:11:d0:ae:ed:68:3b:ac:d8:09: f7:b3:50:4a:f9:97:c2:1a:ed:b0:71:cb:82:a6:67:43:62:96: 05:72:8c:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdsGJXxYJ0cOuVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NWQzYzg0MTctNDlkMi00ZWRjLTlkNDQtYjk3YzE1NWZkNjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1JiqFBk4KZhnBTK0Y1bIium7KF3IdL5c4/7 R2kh/vgh/HGFtpZ6Rq1vVjCXpK/aSo+huv7j+jYOFK6yevagrlW6zkcmYxH6CF9q 0Blq48WvQseVjcNbqHnSDZy3kjGJq/2wgU4kLYwJqkDVXT8CkSpfJ6+endIm6cUw EkRbQQLmoINKifWT3yNZWh+SQfenetcZGlGf2JsHOUOzMh90GMSIyhH8B61K7yVu 6y5WKjzs+iLveioXgyMczRFXOGb48Bf59fvP3J9rjfPcxdw2bfqQOemBQCz/j+oC 0JnCaltEHaa+daWxuEeZBnM1gOqgHNp8WfF1oJhk9AF6yMP0CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZ1nwqa2GXsZRMFxvdUCpHOI2Q1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvODJkNTM3NzMtNjUwMC0z ZWNjLWFlZmMtZjIxNWYxODRmOTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5Cpm2D0JcIXNDntJGOH2cOmAu06NZKfd72NM4LA3dtU6iuW1IlEPbS tz5phd2P8j+W6Mw7X8GoM3lnSnqLS4Ymp5ylHSzh/XiU4+Z+54e7gqXvKjp8ykPi lYizt4Q70ESvCj47QxGBaDOFm3WgtRLUJ1LyRfsX6O1nltzsm5zJE3UFh4bSWqaR ycT7SFfd1wmwC7yvipKd5YrOcsG85eC54EWiUip+Pe231leGS89LHPekKmFBefju GNFGl5r5tUghLjienjvca5qE/9CsUO5b3+FM7G5M0Zz8piAPGwaVhRHQru1oO6zY CfezUEr5l8Ia7bBxy4KmZ0NilgVyjJg= -----END CERTIFICATE-----Generated at Fri Oct 10 21:33:54 2025 by rpki-client