$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aaf31aab-4b95-35a5-8785-33e89424e316.roa File: aaf31aab-4b95-35a5-8785-33e89424e316.roa (raw, json) Hash identifier: XWZzUVJqHL4ylNxWF8FYxO3voJtRrzN3N0WTOFaEi3k= Subject key identifier: 0C:2A:08:EC:AD:47:78:E4:AE:5E:DF:85:D1:C1:C3:C0:32:80:E4:E8 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B13D6E6D022D10982B3C0E480 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aaf31aab-4b95-35a5-8785-33e89424e316.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 104.156.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:e6:d0:22:d1:09:82:b3:c0:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=3db9dd40-d687-43e1-bca7-39bbffba1952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:93:47:31:18:70:bb:68:fb:ec:ef:12:3d:80: 5d:21:77:a3:fa:5f:28:de:bb:2e:52:b6:be:41:53: 3e:2e:2a:72:1d:fb:81:c7:68:90:57:37:f7:30:2c: e3:69:6a:7f:e0:b3:1d:24:8f:e2:e4:d6:f6:fc:15: bb:9c:0b:27:2a:17:62:e1:f9:67:66:64:9b:f7:25: 65:bc:51:df:34:79:72:b0:28:8e:3e:8e:cd:e4:db: 2e:1a:26:d2:a2:b2:fd:e4:9f:73:47:b6:fe:ce:6a: f2:4e:68:9a:c0:ce:3f:8c:37:47:19:c1:43:af:b5: b1:0a:6f:9a:6c:0c:6e:b6:47:04:3a:f8:22:7b:3d: a6:27:17:4e:cf:59:be:d6:58:d7:b6:ae:04:0c:3c: 25:22:b9:fd:35:04:f8:a8:00:91:b4:59:45:f8:87: 5f:d4:3c:e0:17:dd:99:87:f0:6f:d8:c3:2c:6e:21: 0f:20:a6:ff:21:77:2c:d5:bf:25:cc:dd:d5:e6:82: 02:48:a6:6a:ee:ea:50:ae:3c:75:9a:8f:92:a7:fc: 45:52:92:9d:de:28:af:c7:5a:d0:81:61:0a:98:f3: b6:d7:01:8d:27:7c:27:82:5e:c2:46:c1:ff:ac:fe: f6:d5:ac:a0:99:f6:1a:bd:be:66:93:4c:ae:b3:4d: c6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2A:08:EC:AD:47:78:E4:AE:5E:DF:85:D1:C1:C3:C0:32:80:E4:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aaf31aab-4b95-35a5-8785-33e89424e316.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 104.156.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:1f:46:24:fb:44:a3:94:78:78:61:7a:78:e0:26:b6:dc:69: 28:5c:a5:cc:02:31:b0:0e:9d:e4:1f:b5:88:53:45:ef:c1:d9: e4:19:45:56:5d:83:26:93:a0:92:33:1d:71:be:d9:1a:ea:7e: 44:35:c1:52:ba:85:04:f1:50:6e:2d:d8:95:af:85:7f:40:f4: 82:b7:63:fc:ca:fe:83:40:5f:a5:d7:37:bb:08:2c:10:02:93: a0:91:b3:c3:08:74:50:4c:0b:20:ba:ff:89:c3:31:c6:29:f6: 12:cc:b8:c5:42:4a:6f:58:70:f7:f6:61:a1:ff:77:5f:1a:f3: 0a:3c:6f:c2:ca:86:c2:96:8c:15:89:5a:83:ba:9d:ce:db:d1: 91:46:7a:67:a3:22:37:43:bf:7e:3a:08:63:94:93:c5:94:4b: 34:e3:46:d1:f0:15:92:10:68:c8:1e:38:a1:a4:23:be:8a:1e: b3:bf:bc:c8:7d:24:2e:82:01:d0:4e:93:b2:62:5c:6c:54:0b: 5a:ab:d1:88:bd:62:92:2c:77:6a:c0:66:e2:73:e5:25:74:27: bb:b8:78:d0:6f:e2:22:f8:80:35:0a:71:48:63:99:04:66:0f: ce:c6:64:fa:47:1c:81:08:b8:18:57:bf:98:1c:35:29:ad:5c: 8e:88:4b:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1ubQItEJgrPA5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk M2RiOWRkNDAtZDY4Ny00M2UxLWJjYTctMzliYmZmYmExOTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5NHMRhwu2j77O8SPYBdIXej+l8o3rsuUra+ QVM+LipyHfuBx2iQVzf3MCzjaWp/4LMdJI/i5Nb2/BW7nAsnKhdi4flnZmSb9yVl vFHfNHlysCiOPo7N5NsuGibSorL95J9zR7b+zmryTmiawM4/jDdHGcFDr7WxCm+a bAxutkcEOvgiez2mJxdOz1m+1ljXtq4EDDwlIrn9NQT4qACRtFlF+Idf1DzgF92Z h/Bv2MMsbiEPIKb/IXcs1b8lzN3V5oICSKZq7upQrjx1mo+Sp/xFUpKd3iivx1rQ gWEKmPO21wGNJ3wngl7CRsH/rP721aygmfYavb5mk0yus03G2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwqCOytR3jkrl7fhdHBw8AygOToMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYWFmMzFhYWItNGI5NS0z NWE1LTg3ODUtMzNlODk0MjRlMzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJxUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAfRiT7RKOUeHhhenjgJrbcaShcpcwCMbAOneQftYhTRe/B2eQZRVZd gyaToJIzHXG+2RrqfkQ1wVK6hQTxUG4t2JWvhX9A9IK3Y/zK/oNAX6XXN7sILBAC k6CRs8MIdFBMCyC6/4nDMcYp9hLMuMVCSm9YcPf2YaH/d18a8wo8b8LKhsKWjBWJ WoO6nc7b0ZFGemejIjdDv346CGOUk8WUSzTjRtHwFZIQaMgeOKGkI76KHrO/vMh9 JC6CAdBOk7JiXGxUC1qr0Yi9YpIsd2rAZuJz5SV0J7u4eNBv4iL4gDUKcUhjmQRm D87GZPpHHIEIuBhXv5gcNSmtXI6IS30= -----END CERTIFICATE-----Generated at Thu Oct 9 05:46:54 2025 by rpki-client