$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/5a5236fa-372e-334f-bc5c-2fc8b6ec894b.roa File: 5a5236fa-372e-334f-bc5c-2fc8b6ec894b.roa (raw, json) Hash identifier: 2DBg7Ie+nl8+mnTjGYtdJjJRFOJ8fRwkAUNcb5uFxbc= Subject key identifier: 9B:B7:31:67:8E:1C:39:19:39:61:99:38:B9:93:C5:8A:41:9D:97:ED Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F4328584BCF0047203427A23DDB1E3740 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/5a5236fa-372e-334f-bc5c-2fc8b6ec894b.roa Signing time: Mon 10 Nov 2025 02:00:31 +0000 ROA not before: Mon 10 Nov 2025 02:00:31 +0000 ROA not after: Sun 08 Feb 2026 02:00:31 +0000 asID: 63023 IP address blocks: 104.156.156.0/24 maxlen: 24 104.156.157.0/24 maxlen: 24 104.156.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cf:00:47:20:34:27:a2:3d:db:1e:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: Nov 10 02:00:31 2025 GMT Not After : Feb 8 02:00:31 2026 GMT Subject: CN=1d322a8d-cd15-40c2-ad6d-df782cd745e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1c:a7:a4:8b:18:6d:05:0b:a3:d6:74:85:85: bd:ac:83:05:28:8f:0e:5a:f3:21:43:1a:50:ce:08: e9:22:7e:00:6b:e5:5a:7a:b8:72:1c:f1:f8:6f:a8: f9:82:ba:65:e3:f4:15:0e:2f:b3:82:63:93:cb:d7: 17:9b:82:2e:b1:c0:25:18:5b:d4:c0:62:9b:e0:3b: 76:83:c1:1f:29:3a:ea:ee:0c:56:4f:14:55:06:95: a7:b2:88:09:b8:87:25:80:ce:45:42:f3:10:9e:a2: 66:9a:dc:d1:e7:5b:99:c9:c2:92:09:0e:cc:8d:0a: 64:ea:65:80:60:e8:bf:08:fd:f6:eb:ed:52:09:5e: 0a:54:3b:25:5f:89:3c:ed:fb:55:b2:f6:69:d7:48: c5:4d:26:59:7e:11:46:b3:14:1f:0b:84:2c:a5:17: 92:b2:f3:d3:b7:2b:35:24:98:fa:d2:b2:81:ca:90: 5f:1e:dc:6a:ae:70:bf:bd:24:3e:2c:2f:64:54:15: 25:9b:2f:2d:e4:df:83:69:99:b1:ff:93:f3:fe:f1: ef:97:5f:a9:b6:cf:38:bb:7a:62:72:9e:90:9e:77: ea:75:e8:4b:68:e1:42:df:ad:03:ae:5c:20:37:01: 2a:cd:41:8f:a9:84:e4:36:89:2c:b6:54:10:7c:33: b0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B7:31:67:8E:1C:39:19:39:61:99:38:B9:93:C5:8A:41:9D:97:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/5a5236fa-372e-334f-bc5c-2fc8b6ec894b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 104.156.156.0-104.156.158.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:e2:d2:aa:cd:39:bf:c7:a3:5f:24:2a:19:d3:16:05:50:6e: 61:25:dc:ef:77:58:72:f8:2d:f0:04:bc:0c:f6:ec:46:03:36: 64:8c:42:76:42:1a:68:df:d7:a8:36:7f:12:f1:ce:13:96:ac: 44:8d:34:95:20:ca:43:00:86:17:9c:07:69:2b:2c:b9:0e:db: f9:2c:89:d1:2f:89:52:02:f0:b3:ad:02:31:46:a9:6a:14:0e: e4:1d:9d:8e:33:03:74:52:ca:49:99:c4:cd:02:0e:2f:03:d1: 31:e4:8f:40:0e:b8:e9:a3:68:cb:88:7d:7d:b4:93:c7:e2:31: 7b:32:a8:31:5f:40:ec:ab:64:a0:45:ac:05:33:15:b9:67:a4: 90:04:51:0c:08:b4:19:cf:55:ab:3c:4e:58:aa:76:df:fc:2a: e2:8b:75:a4:e4:04:e3:9e:a3:b1:23:7e:fc:c2:01:96:ec:0b: ea:9f:85:f4:7b:06:07:4d:16:3f:85:85:b5:db:60:01:f5:01: 92:fa:4c:e7:e2:f3:c7:9f:91:46:3a:c9:4f:4f:44:46:4e:70: b5:7a:6f:d3:d9:cf:92:41:e2:6f:23:08:53:f4:ee:74:5d:d2: 1e:ce:b8:a1:b4:65:4d:3d:43:87:19:12:82:3b:89:13:16:c6: ce:3b:16:c5 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEvPAEcgNCeiPdseN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk MWQzMjJhOGQtY2QxNS00MGMyLWFkNmQtZGY3ODJjZDc0NWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhynpIsYbQULo9Z0hYW9rIMFKI8OWvMhQxpQ zgjpIn4Aa+VaerhyHPH4b6j5grpl4/QVDi+zgmOTy9cXm4IuscAlGFvUwGKb4Dt2 g8EfKTrq7gxWTxRVBpWnsogJuIclgM5FQvMQnqJmmtzR51uZycKSCQ7MjQpk6mWA YOi/CP326+1SCV4KVDslX4k87ftVsvZp10jFTSZZfhFGsxQfC4QspReSsvPTtys1 JJj60rKBypBfHtxqrnC/vSQ+LC9kVBUlmy8t5N+DaZmx/5Pz/vHvl1+pts84u3pi cp6QnnfqdehLaOFC360DrlwgNwEqzUGPqYTkNokstlQQfDOwCQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJu3MWeOHDkZOWGZOLmTxYpBnZftMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvNWE1MjM2ZmEtMzcyZS0z MzRmLWJjNWMtMmZjOGI2ZWM4OTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJonJwD BABonJ4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEApeLSqs05v8ejXyQqGdMWBVBuYSXc73dYcvgt8AS8DPbs RgM2ZIxCdkIaaN/XqDZ/EvHOE5asRI00lSDKQwCGF5wHaSssuQ7b+SyJ0S+JUgLw s60CMUapahQO5B2djjMDdFLKSZnEzQIOLwPRMeSPQA646aNoy4h9fbSTx+IxezKo MV9A7KtkoEWsBTMVuWekkARRDAi0Gc9VqzxOWKp23/wq4ot1pOQE456jsSN+/MIB luwL6p+F9HsGB00WP4WFtdtgAfUBkvpM5+Lzx5+RRjrJT09ERk5wtXpv09nPkkHi byMIU/TudF3SHs64obRlTT1DhxkSgjuJExbGzjsWxQ== -----END CERTIFICATE-----Generated at Mon Nov 17 13:22:40 2025 by rpki-client