$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/a35ca9db-353e-3cf3-9e78-e41bdff6dd91.roa File: a35ca9db-353e-3cf3-9e78-e41bdff6dd91.roa (raw, json) Hash identifier: Qvw/sLd13lBUlTf2caC4ztPfFz0USN0lfCnILBDRW0U= Subject key identifier: 08:9F:BF:0B:85:F8:55:1D:4D:71:32:43:59:DC:5F:24:01:77:30:10 Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Certificate serial: 010D0C9F4328584AF52144DA7735C52006F49C10 Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/a35ca9db-353e-3cf3-9e78-e41bdff6dd91.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 36231 IP address blocks: 104.152.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:44:da:77:35:c5:20:06:f4:9c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=1d4ba0d4-e2c5-4c29-8135-d9abf9a6210b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:76:57:38:e9:73:d8:4e:82:1a:d2:3f:ae:b5: 45:85:ce:d2:c6:82:41:b8:ff:3a:9b:74:c3:18:fa: 43:40:28:74:0f:59:30:5e:d4:f1:39:2c:e7:4d:aa: 0a:da:47:eb:b9:39:ce:b7:59:b0:8c:3f:87:31:85: e5:4b:2e:2e:82:85:2f:2e:9c:63:ab:43:a0:73:e5: a9:e2:cd:d0:c9:be:28:41:6c:d9:7c:ca:59:62:41: 6f:f7:78:3f:ad:b0:ef:56:c7:60:8b:4d:ae:05:a9: 6e:6a:39:05:67:9b:ba:f3:ea:30:e4:8e:0e:dc:15: 99:4e:8c:67:ae:78:cd:1f:e0:75:4e:0f:2f:6e:bc: 2e:f5:b9:ac:d8:02:a5:4a:66:58:79:ed:46:09:75: 48:96:68:4a:67:b1:5a:b9:f5:67:90:00:a3:90:dd: dc:cc:d3:6d:88:de:f6:f0:b3:9c:64:7d:54:9a:48: a1:9c:df:07:f6:d2:63:1f:1e:f5:82:19:04:32:1d: ba:dc:5e:14:2a:d9:73:88:2a:38:44:3f:01:ca:19: 32:a7:d2:42:e4:10:c5:74:17:ae:c5:a1:85:1f:1e: 51:26:c9:c8:74:7d:eb:83:10:d9:f3:5d:a1:93:33: eb:0a:79:83:59:d4:1b:11:af:3e:1b:f9:95:61:d5: 4f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9F:BF:0B:85:F8:55:1D:4D:71:32:43:59:DC:5F:24:01:77:30:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/a35ca9db-353e-3cf3-9e78-e41bdff6dd91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl X509v3 Authority Key Identifier: keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer sbgp-ipAddrBlock: critical IPv4: 104.152.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:17:bc:f6:b1:2d:30:2a:68:3a:dd:b9:f4:90:1c:92:de:5f: 94:75:12:57:18:65:9c:52:d4:18:f5:6c:65:17:f3:22:c3:a8: eb:08:21:46:dc:95:5a:61:91:21:3a:5c:0b:43:62:1e:98:1d: ae:fc:79:52:cd:87:f6:3a:83:df:bf:c5:47:6b:fd:7a:64:06: 8b:71:49:42:0a:01:74:e0:86:1f:71:2d:36:5c:7b:e3:68:74: 0b:37:29:d2:a9:81:ec:41:1d:f7:08:8b:83:08:a3:cc:23:54: 4e:1b:97:45:77:bb:20:24:04:ad:13:55:06:44:76:69:9b:05: 4b:8b:e3:60:fe:39:12:14:d6:be:2f:d2:46:12:2d:1d:c4:16: 4d:af:12:e3:8e:19:6b:38:3c:ad:56:aa:68:aa:b9:77:a9:ae: c0:72:20:2d:f1:48:e6:1d:8c:e5:c0:d3:d5:08:71:8d:5c:83: cf:5f:d9:d7:4e:77:5c:6d:75:90:92:de:ff:71:a7:1c:a0:a0: d0:4c:8e:e3:69:58:be:41:0d:cf:75:4f:a0:eb:51:3f:05:ce: 14:df:da:d8:b2:9e:71:23:e8:61:b8:b2:ec:e3:56:9e:d3:8b: ed:4d:9d:b6:6e:a0:39:7a:85:99:5f:7f:41:a9:e0:8c:4b:b4: 65:fb:9e:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IUTadzXFIAb0nBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk2YjI0YzQtYjY5Mi00Yjk0LTgzZjUtMWRhNTQ5MGI4 ZjNjMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MWQ0YmEwZDQtZTJjNS00YzI5LTgxMzUtZDlhYmY5YTYyMTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXZXOOlz2E6CGtI/rrVFhc7SxoJBuP86m3TD GPpDQCh0D1kwXtTxOSznTaoK2kfruTnOt1mwjD+HMYXlSy4ugoUvLpxjq0Ogc+Wp 4s3Qyb4oQWzZfMpZYkFv93g/rbDvVsdgi02uBaluajkFZ5u68+ow5I4O3BWZToxn rnjNH+B1Tg8vbrwu9bms2AKlSmZYee1GCXVIlmhKZ7FaufVnkACjkN3czNNtiN72 8LOcZH1UmkihnN8H9tJjHx71ghkEMh263F4UKtlziCo4RD8Byhkyp9JC5BDFdBeu xaGFHx5RJsnIdH3rgxDZ812hkzPrCnmDWdQbEa8+G/mVYdVP9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAifvwuF+FUdTXEyQ1ncXyQBdzAQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZi MjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1NDkwYjhmM2MvYTM1Y2E5ZGItMzUzZS0z Y2YzLTllNzgtZTQxYmRmZjZkZDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk2YjI0YzQtYjY5Mi00Yjk0LTgz ZjUtMWRhNTQ5MGI4ZjNjL2U5NmIyNGM0LWI2OTItNGI5NC04M2Y1LTFkYTU0OTBi OGYzYy5jcmwwHwYDVR0jBBgwFoAUq7bjkDZGS9ALmtUiWl6jYHyd1XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZiMjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1 NDkwYjhmM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJiNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoXvPaxLTAqaDrdufSQHJLeX5R1ElcYZZxS1Bj1bGUX8yLDqOsIIUbc lVphkSE6XAtDYh6YHa78eVLNh/Y6g9+/xUdr/XpkBotxSUIKAXTghh9xLTZce+No dAs3KdKpgexBHfcIi4MIo8wjVE4bl0V3uyAkBK0TVQZEdmmbBUuL42D+ORIU1r4v 0kYSLR3EFk2vEuOOGWs4PK1WqmiquXeprsByIC3xSOYdjOXA09UIcY1cg89f2ddO d1xtdZCS3v9xpxygoNBMjuNpWL5BDc91T6DrUT8FzhTf2tiynnEj6GG4suzjVp7T i+1NnbZuoDl6hZlff0Gp4IxLtGX7nvg= -----END CERTIFICATE-----Generated at Mon Aug 25 21:24:07 2025 by rpki-client