$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ee720b3a-47e7-320b-bd97-f38b195c0068.roa File: ee720b3a-47e7-320b-bd97-f38b195c0068.roa (raw, json) Hash identifier: L9lgGetndki9NpYProGLDy3ff8nV8lWUWTjonRfxvHQ= Subject key identifier: A3:8A:1A:6D:88:E4:B1:B0:E7:3F:DB:2E:15:2A:8F:41:0C:BD:D8:F2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B2719A7D40A34A02D24FCC580 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ee720b3a-47e7-320b-bd97-f38b195c0068.roa Signing time: Wed 10 Sep 2025 22:35:55 +0000 ROA not before: Wed 10 Sep 2025 22:35:55 +0000 ROA not after: Tue 09 Dec 2025 23:35:55 +0000 asID: 54253 IP address blocks: 151.104.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:19:a7:d4:0a:34:a0:2d:24:fc:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 22:35:55 2025 GMT Not After : Dec 9 23:35:55 2025 GMT Subject: CN=ddc0c3ce-9561-409e-91c2-37e017d792c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:90:35:5f:96:b0:31:f0:a3:cb:74:00:de:2c: e1:e3:56:51:88:c1:c2:dd:45:0b:9f:a4:41:3a:8b: e1:88:95:14:b0:3c:42:40:0e:fa:9a:02:63:18:a9: c4:f8:33:f9:ac:8f:59:dc:e4:28:c0:05:ea:cb:d2: 7b:2a:08:60:a9:9e:a8:21:57:5c:63:61:2b:a6:4d: ce:4d:ab:a6:81:a2:6a:05:e2:82:c1:2f:f6:05:7d: fa:ed:ce:9c:75:61:99:91:df:68:2e:c9:d3:86:5d: 84:10:b1:4b:3c:53:d9:c1:6d:52:0d:0c:67:32:7b: 03:b8:67:04:c7:c2:26:ff:8e:d3:5e:48:05:d2:42: c9:fc:61:6d:d6:17:48:59:11:57:b7:26:b6:41:7d: df:e8:7d:83:e0:70:07:ba:65:30:fe:d8:da:66:7f: 82:de:96:e6:44:94:c2:b3:be:28:07:11:57:af:ae: 90:bb:a1:32:2a:f2:64:a4:ce:5f:45:b3:21:f9:b8: b4:15:df:77:cc:26:cd:56:b1:5e:9b:2e:22:86:f0: 04:56:ae:c0:0a:20:6e:46:29:b4:86:14:69:c2:df: f6:b0:5a:ae:67:d2:ec:b4:a0:c0:1b:55:07:9b:a3: 8d:9a:79:ef:a9:79:c5:52:58:da:32:3f:a7:e7:52: b5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8A:1A:6D:88:E4:B1:B0:E7:3F:DB:2E:15:2A:8F:41:0C:BD:D8:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ee720b3a-47e7-320b-bd97-f38b195c0068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 151.104.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:a9:2f:77:8d:26:26:86:0d:fd:7a:22:aa:cf:d2:30:23:f3: 97:10:a0:2a:48:f3:41:3e:f9:68:f6:00:5f:d2:93:61:92:d0: 17:8c:d1:4f:25:0d:89:59:60:0d:7d:e3:f3:63:96:10:6c:32: c9:97:3c:81:c3:ce:03:cf:b4:60:e5:26:7d:19:f3:f1:ba:d2: 21:9e:43:47:59:ed:65:c0:4a:f2:52:b4:59:17:0d:56:dc:af: cd:5e:80:b0:91:a9:58:85:3e:ff:2d:c1:27:78:f4:f4:15:26: e7:5b:f0:99:e6:ec:79:58:ab:1b:1a:97:b4:99:42:fb:70:34: 7c:7f:cd:d2:f6:42:88:00:75:ff:13:76:a4:df:80:00:23:c8: f3:43:1b:04:86:11:ca:1d:08:75:44:9f:e5:02:56:7d:39:e5: 55:2c:70:a7:26:5d:c3:5f:a0:93:37:5c:a8:2e:31:61:7c:dc: fc:a5:ea:ae:02:ba:a0:06:fc:5b:e4:c9:fb:f9:45:4c:f0:24: 24:e3:02:ca:ac:21:22:3c:a5:5a:46:21:b5:44:9f:43:68:bf: 61:62:83:13:d8:f6:31:da:e8:82:64:e4:22:84:2b:91:0a:c0: cd:67:b8:33:31:36:84:ef:1d:f3:49:ae:5f:f0:48:fd:92:0a: b4:ca:5c:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnGafUCjSgLST8xYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDIyMzU1NVoXDTI1MTIwOTIzMzU1NVowLzEtMCsGA1UEAxMk ZGRjMGMzY2UtOTU2MS00MDllLTkxYzItMzdlMDE3ZDc5MmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5A1X5awMfCjy3QA3izh41ZRiMHC3UULn6RB OovhiJUUsDxCQA76mgJjGKnE+DP5rI9Z3OQowAXqy9J7KghgqZ6oIVdcY2Erpk3O TaumgaJqBeKCwS/2BX367c6cdWGZkd9oLsnThl2EELFLPFPZwW1SDQxnMnsDuGcE x8Im/47TXkgF0kLJ/GFt1hdIWRFXtya2QX3f6H2D4HAHumUw/tjaZn+C3pbmRJTC s74oBxFXr66Qu6EyKvJkpM5fRbMh+bi0Fd93zCbNVrFemy4ihvAEVq7ACiBuRim0 hhRpwt/2sFquZ9LstKDAG1UHm6ONmnnvqXnFUljaMj+n51K1mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOKGm2I5LGw5z/bLhUqj0EMvdjyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWU3MjBiM2EtNDdlNy0z MjBiLWJkOTctZjM4YjE5NWMwMDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl2icMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJepL3eNJiaGDf16IqrP0jAj85cQoCpI80E++Wj2AF/Sk2GS0BeM0U8l DYlZYA194/NjlhBsMsmXPIHDzgPPtGDlJn0Z8/G60iGeQ0dZ7WXASvJStFkXDVbc r81egLCRqViFPv8twSd49PQVJudb8Jnm7HlYqxsal7SZQvtwNHx/zdL2QogAdf8T dqTfgAAjyPNDGwSGEcodCHVEn+UCVn055VUscKcmXcNfoJM3XKguMWF83Pyl6q4C uqAG/Fvkyfv5RUzwJCTjAsqsISI8pVpGIbVEn0Nov2FigxPY9jHa6IJk5CKEK5EK wM1nuDMxNoTvHfNJrl/wSP2SCrTKXHY= -----END CERTIFICATE-----Generated at Thu Oct 9 03:12:46 2025 by rpki-client