$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/02428725-ed1c-30d9-94fc-cfdafe1ec168.roa File: 02428725-ed1c-30d9-94fc-cfdafe1ec168.roa (raw, json) Hash identifier: dXg4hx6nOIF3zN1dTUgwwydJyJTsJuy6pwiEk2KNTy4= Subject key identifier: 2F:D1:25:34:7D:D4:5D:D0:49:18:A0:91:1A:3C:70:56:E2:A4:95:22 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B13D6E6F129DA7BCAD41CCC20 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/02428725-ed1c-30d9-94fc-cfdafe1ec168.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 104.156.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:e6:f1:29:da:7b:ca:d4:1c:cc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=05b6316f-1549-4c26-92df-32009aa37227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ba:9c:5e:1b:e4:ec:48:c2:dc:1e:6a:d6:fd: fa:76:e8:64:e0:e9:6a:03:ab:41:10:67:cc:8a:e6: c7:86:91:0a:5d:d5:db:66:25:23:5c:60:b4:a5:e5: 18:5a:a8:70:a8:eb:6a:cf:37:de:68:b2:58:65:a0: 81:06:cc:55:a0:6c:fe:31:04:03:76:d1:15:e2:f0: 8c:51:f5:0a:ca:77:e1:90:28:02:1f:3f:fa:ad:d7: a7:b9:30:14:f1:50:2c:d5:f2:7f:f3:b3:9f:28:42: be:78:60:b8:e8:8d:bc:30:88:cd:22:18:36:2d:a3: 18:9c:c0:b9:b2:d8:3d:03:44:ed:b0:16:f9:38:27: 54:2f:d2:40:a1:d9:72:b7:1c:5f:26:71:c5:ed:cc: ac:a0:57:f4:ad:a8:83:63:e4:9c:f5:49:98:34:0c: 84:33:a0:55:3b:b4:cb:06:bb:7b:8e:e2:2b:0f:5d: 15:9b:11:15:db:e8:05:48:6b:50:6d:65:4d:31:6a: 6b:30:72:29:2e:b6:c6:28:2a:79:9a:12:9f:50:9e: 4c:05:f7:09:39:f8:c5:fd:50:97:24:15:6d:17:ce: 45:9d:ad:56:66:0b:cc:da:dc:0a:07:98:0c:28:c3: 00:34:04:da:88:c4:5d:62:3a:60:6a:bc:94:74:bc: 0c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D1:25:34:7D:D4:5D:D0:49:18:A0:91:1A:3C:70:56:E2:A4:95:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/02428725-ed1c-30d9-94fc-cfdafe1ec168.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 104.156.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:81:15:e1:c3:3e:8a:50:c0:7e:10:43:1a:48:93:2b:e9:b7: 9f:37:81:da:13:e9:78:72:3e:69:b0:95:75:94:e2:3a:09:69: 0a:25:a6:d8:1d:d0:21:48:56:7e:fd:35:19:98:8b:f5:8b:50: 09:c8:05:c1:96:e6:38:44:c7:cd:d6:5b:4f:d3:e0:90:b9:8f: 0c:1a:58:c2:2f:a8:4d:38:ab:5f:82:ea:a8:72:4a:5f:6f:bd: 69:44:1a:8d:6d:97:85:37:e3:57:8c:a8:1a:74:a9:60:61:30: 23:9b:3a:3d:01:1c:6f:2b:a0:61:d5:ed:84:4f:f1:6c:91:8a: 3d:9d:9b:63:f6:d5:72:cd:93:f0:68:ea:23:23:7f:16:d0:af: 91:e6:2c:1e:4b:11:82:f5:c1:99:d4:5b:8d:e2:84:e7:90:ef: 89:70:b3:f4:62:37:f4:13:03:8b:1a:bc:5c:71:2d:ca:da:47: 49:67:67:6e:e9:69:f8:37:f1:79:9c:41:9f:fa:b7:dd:f3:3c: 90:2d:1a:3b:97:28:00:6a:3e:c4:49:9d:8c:40:df:4e:84:59: 82:2c:4a:72:97:1f:3c:ed:e2:6f:16:f2:08:50:e5:99:b2:5c: 9c:62:aa:92:a3:b6:41:db:e1:31:12:ec:59:8e:5b:80:3d:f4: a1:1d:77:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1ubxKdp7ytQczCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk MDViNjMxNmYtMTU0OS00YzI2LTkyZGYtMzIwMDlhYTM3MjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLqcXhvk7EjC3B5q1v36duhk4OlqA6tBEGfM iubHhpEKXdXbZiUjXGC0peUYWqhwqOtqzzfeaLJYZaCBBsxVoGz+MQQDdtEV4vCM UfUKynfhkCgCHz/6rdenuTAU8VAs1fJ/87OfKEK+eGC46I28MIjNIhg2LaMYnMC5 stg9A0TtsBb5OCdUL9JAodlytxxfJnHF7cysoFf0raiDY+Sc9UmYNAyEM6BVO7TL Brt7juIrD10VmxEV2+gFSGtQbWVNMWprMHIpLrbGKCp5mhKfUJ5MBfcJOfjF/VCX JBVtF85Fna1WZgvM2twKB5gMKMMANATaiMRdYjpgaryUdLwM6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/RJTR91F3QSRigkRo8cFbipJUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMDI0Mjg3MjUtZWQxYy0z MGQ5LTk0ZmMtY2ZkYWZlMWVjMTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJxWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeBFeHDPopQwH4QQxpIkyvpt583gdoT6XhyPmmwlXWU4joJaQolptgd 0CFIVn79NRmYi/WLUAnIBcGW5jhEx83WW0/T4JC5jwwaWMIvqE04q1+C6qhySl9v vWlEGo1tl4U341eMqBp0qWBhMCObOj0BHG8roGHV7YRP8WyRij2dm2P21XLNk/Bo 6iMjfxbQr5HmLB5LEYL1wZnUW43ihOeQ74lws/RiN/QTA4savFxxLcraR0lnZ27p afg38XmcQZ/6t93zPJAtGjuXKABqPsRJnYxA306EWYIsSnKXHzzt4m8W8ghQ5Zmy XJxiqpKjtkHb4TES7FmOW4A99KEddyw= -----END CERTIFICATE-----Generated at Thu Oct 9 05:43:18 2025 by rpki-client