$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e67dd3ed-cf9f-34ce-88f3-e5be54a98174.roa File: e67dd3ed-cf9f-34ce-88f3-e5be54a98174.roa (raw, json) Hash identifier: cwyg54IofINv4SQQRS70NO2Rllcti92SJlEJIuPKCzo= Subject key identifier: 3F:1C:32:1D:F8:A7:43:4B:F9:FC:FF:8B:F5:FE:1B:90:AA:00:19:41 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76BECD81137FA252492640 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e67dd3ed-cf9f-34ce-88f3-e5be54a98174.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 104.156.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:be:cd:81:13:7f:a2:52:49:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=38b6d263-8530-4a06-b2a3-4a018cfc579e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3d:84:cf:05:63:48:10:ff:4a:81:b6:b1:7d: 13:12:3a:5d:b2:03:55:78:00:e9:49:39:d0:25:17: 43:5c:8e:f9:9f:f1:6f:41:d6:3a:40:92:cf:99:2b: 78:8f:d7:05:7a:1d:65:96:0f:09:e1:4e:49:64:8e: c6:6d:20:25:22:12:87:82:0d:6a:82:54:ed:5a:e7: 0c:32:26:18:7f:76:96:5b:f0:43:82:14:4e:5d:90: 0f:63:60:6f:18:14:2e:db:8e:52:d6:85:8a:9f:d0: e1:9c:16:a3:bf:06:00:36:a3:67:ae:c6:f4:1f:e9: 98:ac:7f:c4:54:4a:b6:b0:cf:b9:17:63:83:d5:fc: 6b:18:ad:08:87:e1:65:4c:4a:53:1b:dc:ac:8c:fc: 38:d6:11:e8:32:25:e8:36:ea:93:c7:75:b1:00:c6: 93:4d:da:42:07:f0:2e:79:47:3f:17:ff:be:14:81: b6:23:89:8e:b4:76:5b:0c:02:92:ed:66:94:fd:9f: 4f:4f:d7:95:d3:6a:36:59:ee:12:db:f2:ce:89:24: ce:48:2b:81:f6:92:9b:ca:a1:68:72:51:ba:a1:2e: ad:98:62:f8:f4:3d:06:e1:01:06:8e:48:c7:32:09: d9:39:3a:99:73:f7:7d:af:c8:02:62:16:2b:f4:55: c3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1C:32:1D:F8:A7:43:4B:F9:FC:FF:8B:F5:FE:1B:90:AA:00:19:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e67dd3ed-cf9f-34ce-88f3-e5be54a98174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.156.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:ca:31:61:ad:08:cb:31:c3:11:28:92:c0:8d:31:09:a0:db: 58:4d:33:04:0e:eb:cc:1e:b4:1c:3e:d0:a4:53:21:f5:ef:6a: 35:19:72:01:5e:f9:d4:a1:08:c9:72:d0:91:49:f3:79:6e:58: df:c5:f6:76:4c:f5:00:71:45:56:73:32:e8:6d:12:4d:3e:55: 9e:45:ed:1a:80:21:d4:99:f7:9b:69:8d:6d:61:7d:05:c7:2f: 32:82:2f:66:5f:8f:bb:28:1d:d1:a7:b6:62:a8:24:35:07:26: 40:47:37:4b:9d:fb:25:29:70:e5:e4:56:17:93:59:ea:2e:20: 4c:d6:34:ef:08:f4:da:3c:f5:d4:4d:2b:ff:02:44:64:fe:f1: 25:c8:0c:6d:fc:1b:90:39:03:07:12:b9:8a:e2:ed:a7:1c:c6: d2:1a:31:7e:bd:96:95:67:7f:e8:39:6b:db:53:06:a9:ae:8c: 2c:c1:b2:a4:40:86:05:12:21:38:1f:9f:09:93:42:ed:63:db: ec:f4:92:e7:b6:1f:d4:9d:32:b9:0d:ee:bc:ee:2f:79:3d:c9: d9:a3:00:5a:e5:40:87:9c:e7:11:a2:fa:95:96:9e:9b:45:f9: 70:2f:c9:17:98:cf:42:94:2a:2b:79:1a:be:69:58:e8:13:f7: 08:15:c9:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdr7NgRN/olJJJkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MzhiNmQyNjMtODUzMC00YTA2LWIyYTMtNGEwMThjZmM1NzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz2EzwVjSBD/SoG2sX0TEjpdsgNVeADpSTnQ JRdDXI75n/FvQdY6QJLPmSt4j9cFeh1llg8J4U5JZI7GbSAlIhKHgg1qglTtWucM MiYYf3aWW/BDghROXZAPY2BvGBQu245S1oWKn9DhnBajvwYANqNnrsb0H+mYrH/E VEq2sM+5F2OD1fxrGK0Ih+FlTEpTG9ysjPw41hHoMiXoNuqTx3WxAMaTTdpCB/Au eUc/F/++FIG2I4mOtHZbDAKS7WaU/Z9PT9eV02o2We4S2/LOiSTOSCuB9pKbyqFo clG6oS6tmGL49D0G4QEGjkjHMgnZOTqZc/d9r8gCYhYr9FXDXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8cMh34p0NL+fz/i/X+G5CqABlBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZTY3ZGQzZWQtY2Y5Zi0z NGNlLTg4ZjMtZTViZTU0YTk4MTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/KMWGtCMsxwxEoksCNMQmg21hNMwQO68wetBw+0KRTIfXvajUZcgFe +dShCMly0JFJ83luWN/F9nZM9QBxRVZzMuhtEk0+VZ5F7RqAIdSZ95tpjW1hfQXH LzKCL2Zfj7soHdGntmKoJDUHJkBHN0ud+yUpcOXkVheTWeouIEzWNO8I9No89dRN K/8CRGT+8SXIDG38G5A5AwcSuYri7accxtIaMX69lpVnf+g5a9tTBqmujCzBsqRA hgUSITgfnwmTQu1j2+z0kue2H9SdMrkN7rzuL3k9ydmjAFrlQIec5xGi+pWWnptF +XAvyReYz0KUKit5Gr5pWOgT9wgVycM= -----END CERTIFICATE-----Generated at Fri Oct 10 21:31:17 2025 by rpki-client