$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/83065e09-f2df-31b4-9bdb-4b9a4c000582.roa File: 83065e09-f2df-31b4-9bdb-4b9a4c000582.roa (raw, json) Hash identifier: sYDgHEq+Mwy2LglZYERG+pr91InZxyNJjZOwN5fZYEs= Subject key identifier: 27:55:4E:18:E7:40:2C:1B:45:70:16:46:80:16:58:A1:09:DD:EA:41 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76CEE1A91AFC6F07276FC0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/83065e09-f2df-31b4-9bdb-4b9a4c000582.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 104.152.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:ce:e1:a9:1a:fc:6f:07:27:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=080be678-5c8b-42f9-80b8-8a74e146ce57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ee:82:c5:64:ef:47:de:f0:53:eb:81:e4:60: 4d:a5:05:39:b0:2d:3e:43:96:9b:0d:55:db:c2:cf: 33:5c:28:b9:ae:05:2f:92:8a:89:e7:a4:c6:5c:a6: 03:89:6c:88:4f:8b:ce:cf:f0:e7:9f:1f:ab:ae:f2: 00:2e:ab:5d:c7:f2:4a:44:a0:62:3a:73:e7:7e:3b: b1:46:24:b6:a5:a7:98:b9:91:72:5c:29:63:0d:e1: ba:12:23:19:33:41:38:ff:28:2b:43:74:89:96:2f: 44:44:3f:61:65:db:25:c0:66:d2:16:84:15:70:78: d6:b4:fc:37:ea:2f:c8:3f:99:37:51:25:6a:db:83: fb:57:da:eb:66:13:0f:7a:c1:01:78:5b:da:4d:e1: 78:e4:12:88:c2:9c:92:35:08:25:ca:f2:67:f2:94: 1b:c3:6a:cf:bd:6a:db:65:03:fb:23:cd:a9:b0:bd: 85:9c:c4:41:01:43:73:21:a0:bc:0b:f8:44:e9:ba: e1:75:00:91:5f:cd:30:dc:60:da:d5:6e:35:e8:ce: 02:9c:70:8d:87:40:b5:aa:a7:ce:56:55:3d:48:2c: e8:67:ae:44:f9:89:1f:18:46:00:4b:a3:c3:cf:2a: 93:38:7b:24:55:2b:1e:3f:21:f5:e9:d4:db:7b:a7: e4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:55:4E:18:E7:40:2C:1B:45:70:16:46:80:16:58:A1:09:DD:EA:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/83065e09-f2df-31b4-9bdb-4b9a4c000582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.152.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ca:01:9d:46:87:30:d6:a4:e3:d1:c4:61:bd:06:45:95:1a: 78:36:80:65:10:7e:a7:98:6b:0d:e8:e4:2d:26:fd:89:1b:c7: e4:ce:ea:5f:2c:b4:c6:f0:9c:fc:6e:e5:7e:de:0b:6c:2e:a5: cb:97:77:ad:04:70:cd:50:b8:3d:bb:72:a2:ef:0f:bb:ef:14: 6d:f1:54:23:01:f0:1c:97:b9:65:11:5e:11:e9:82:1d:34:65: f2:60:e2:62:2e:65:45:04:6e:2d:9c:00:2f:21:cc:1b:8a:91: 30:c8:ef:04:c8:36:33:c4:ac:34:62:06:86:75:5c:2b:62:3b: 74:8a:10:54:67:2a:f1:4c:a5:6e:36:e9:41:ab:a0:86:79:c9: 9b:28:d1:0e:3e:3b:48:22:c0:33:2e:31:37:36:3a:da:02:4f: f1:2c:0e:c8:b6:70:62:ee:d9:53:c5:ee:db:01:13:6f:e9:66: 56:2b:10:05:8f:6d:52:12:ff:0e:04:11:45:05:89:0b:02:c0: 7d:8b:33:d8:c2:26:72:8a:10:39:d3:97:4f:5b:17:0c:39:f6: 1b:c3:ea:19:5d:ee:33:39:bf:35:64:7a:fb:d6:fc:a4:a0:3f: 48:71:67:49:e0:b0:5b:ca:b8:e0:15:84:b0:71:3c:40:65:a5: 43:0e:23:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLds7hqRr8bwcnb8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MDgwYmU2NzgtNWM4Yi00MmY5LTgwYjgtOGE3NGUxNDZjZTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1u6CxWTvR97wU+uB5GBNpQU5sC0+Q5abDVXb ws8zXCi5rgUvkoqJ56TGXKYDiWyIT4vOz/Dnnx+rrvIALqtdx/JKRKBiOnPnfjux RiS2paeYuZFyXCljDeG6EiMZM0E4/ygrQ3SJli9ERD9hZdslwGbSFoQVcHjWtPw3 6i/IP5k3USVq24P7V9rrZhMPesEBeFvaTeF45BKIwpySNQglyvJn8pQbw2rPvWrb ZQP7I82psL2FnMRBAUNzIaC8C/hE6brhdQCRX80w3GDa1W416M4CnHCNh0C1qqfO VlU9SCzoZ65E+YkfGEYAS6PDzyqTOHskVSsePyH16dTbe6fkLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdVThjnQCwbRXAWRoAWWKEJ3epBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvODMwNjVlMDktZjJkZi0z MWI0LTliZGItNGI5YTRjMDAwNTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJhoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7KAZ1GhzDWpOPRxGG9BkWVGng2gGUQfqeYaw3o5C0m/Ykbx+TO6l8s tMbwnPxu5X7eC2wupcuXd60EcM1QuD27cqLvD7vvFG3xVCMB8ByXuWURXhHpgh00 ZfJg4mIuZUUEbi2cAC8hzBuKkTDI7wTINjPErDRiBoZ1XCtiO3SKEFRnKvFMpW42 6UGroIZ5yZso0Q4+O0giwDMuMTc2OtoCT/EsDsi2cGLu2VPF7tsBE2/pZlYrEAWP bVIS/w4EEUUFiQsCwH2LM9jCJnKKEDnTl09bFww59hvD6hld7jM5vzVkevvW/KSg P0hxZ0ngsFvKuOAVhLBxPEBlpUMOIwA= -----END CERTIFICATE-----Generated at Fri Oct 10 21:31:14 2025 by rpki-client