$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa File: aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa (raw, json) Hash identifier: dS34imJho+YwOVeisJ0MJMIuaOmk502kiraZwp5fIyY= Subject key identifier: EE:6F:57:0B:B4:05:B2:B6:41:C1:D9:4B:9E:4D:72:0F:22:CF:CA:D6 Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F4328584AF521284CC7C37C59C26C7320 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 63023 IP address blocks: 104.156.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 10 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:28:4c:c7:c3:7c:59:c2:6c:73:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=1767e801-918f-40a8-94c9-3f26a8569255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ee:76:9c:12:28:d7:f9:66:ff:64:83:34:cf: 04:dd:37:e9:34:90:74:c9:21:39:7f:cb:4a:2a:62: 56:84:40:8f:8e:4b:ee:e7:18:a8:04:26:6f:e6:be: 0b:79:6f:4e:c6:45:65:43:49:c9:32:d7:80:a5:4a: 64:54:10:77:c3:93:fb:bb:fc:f8:59:a5:eb:59:bd: fe:7e:0e:c3:50:19:63:21:b4:d5:38:8d:04:b2:6c: 22:5e:f8:37:dd:fd:bc:a9:d2:a8:eb:52:7d:d2:6d: f5:11:1f:29:fc:b2:f1:56:77:e2:0f:9d:7c:be:ce: e9:30:a0:3e:9b:9f:9e:15:6c:75:33:d1:ab:65:9b: 3b:d3:78:90:d9:73:1e:c2:aa:d6:7f:71:75:ee:0a: 12:e6:15:94:ed:ed:ed:31:a6:0b:b8:93:fc:28:2d: 73:2f:6b:a4:1d:2b:41:e9:19:87:2b:46:a6:f7:af: 73:fb:20:b0:4a:42:34:20:5e:08:1c:64:06:73:81: c1:bb:7c:6b:4b:06:ce:8e:4f:f7:89:a2:c7:24:fb: e7:dc:6d:fc:c7:f0:35:7f:d1:d1:06:ae:4d:c2:cc: 21:6b:a1:3b:98:af:38:83:e5:7b:26:13:85:5a:d8: 96:0c:05:c5:9c:0b:47:75:60:89:d0:f3:43:53:6d: ad:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6F:57:0B:B4:05:B2:B6:41:C1:D9:4B:9E:4D:72:0F:22:CF:CA:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 104.156.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:15:5c:bd:19:d2:bc:d5:84:41:c6:97:cd:6d:bf:57:f4:69: 0d:fa:d4:77:86:92:ba:c2:37:a4:a5:ac:31:44:1d:ae:9e:0f: 7e:12:55:a2:52:fa:f1:87:8b:a1:d2:b4:4f:84:fc:bf:f2:1d: 3a:fa:7b:e4:14:22:36:4f:42:e8:33:8a:b3:f3:82:09:05:5a: 4a:20:be:84:46:c4:06:4a:47:0e:ac:e8:2b:0c:cd:e4:f9:64: 5e:31:19:64:3f:a9:ca:3d:b5:a6:3a:0b:12:46:f5:bb:9f:89: 9b:9a:24:c7:e8:e2:33:11:2f:4a:bc:22:c2:71:41:a7:3a:11: aa:96:d0:9a:b3:d0:17:07:86:86:5a:85:2c:f6:83:49:78:65: dd:89:d7:2d:1c:6d:eb:ab:5a:bd:68:98:47:f1:5b:c6:6b:ac: e8:13:c9:e2:8d:0c:bd:c2:a7:08:f4:01:22:9b:64:62:fe:b3: 6b:f5:7b:89:b1:f6:a0:13:a8:4e:3f:37:26:ed:37:f3:1e:18: 8a:8f:9a:c0:59:ac:04:ee:62:29:ba:aa:c2:fe:9b:54:2f:50: 42:77:9a:b1:fb:79:26:80:a2:ef:20:c6:a5:db:19:25:11:5e: 53:a2:ed:03:c0:1a:54:14:3f:a3:35:b2:23:b0:00:be:66:53: 44:d1:85:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IShMx8N8WcJscyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MTc2N2U4MDEtOTE4Zi00MGE4LTk0YzktM2YyNmE4NTY5MjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO52nBIo1/lm/2SDNM8E3TfpNJB0ySE5f8tK KmJWhECPjkvu5xioBCZv5r4LeW9OxkVlQ0nJMteApUpkVBB3w5P7u/z4WaXrWb3+ fg7DUBljIbTVOI0EsmwiXvg33f28qdKo61J90m31ER8p/LLxVnfiD518vs7pMKA+ m5+eFWx1M9GrZZs703iQ2XMewqrWf3F17goS5hWU7e3tMaYLuJP8KC1zL2ukHStB 6RmHK0am969z+yCwSkI0IF4IHGQGc4HBu3xrSwbOjk/3iaLHJPvn3G38x/A1f9HR Bq5Nwswha6E7mK84g+V7JhOFWtiWDAXFnAtHdWCJ0PNDU22tEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5vVwu0BbK2QcHZS55Ncg8iz8rWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvYWJhNWE2YTEtZWFkOS0z M2ZlLWExYjQtYTllMmZiOTAwODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQVXL0Z0rzVhEHGl81tv1f0aQ361HeGkrrCN6SlrDFEHa6eD34SVaJS +vGHi6HStE+E/L/yHTr6e+QUIjZPQugzirPzggkFWkogvoRGxAZKRw6s6CsMzeT5 ZF4xGWQ/qco9taY6CxJG9bufiZuaJMfo4jMRL0q8IsJxQac6EaqW0Jqz0BcHhoZa hSz2g0l4Zd2J1y0cbeurWr1omEfxW8ZrrOgTyeKNDL3Cpwj0ASKbZGL+s2v1e4mx 9qATqE4/NybtN/MeGIqPmsBZrATuYim6qsL+m1QvUEJ3mrH7eSaAou8gxqXbGSUR XlOi7QPAGlQUP6M1siOwAL5mU0TRhes= -----END CERTIFICATE-----Generated at Sun Nov 9 00:50:40 2025 by rpki-client