$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0bfe351d-3e88-3edd-b950-e11a5eb35b94.roa File: 0bfe351d-3e88-3edd-b950-e11a5eb35b94.roa (raw, json) Hash identifier: iK7dEOzUlhRyo8C7QNwFLKaAF0BprEHAVDpwijvCgQA= Subject key identifier: 07:A4:44:F7:2D:4F:16:94:D3:4F:86:F2:7A:EC:62:F1:ED:0B:76:4D Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76BD62DCCB40B602F73500 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0bfe351d-3e88-3edd-b950-e11a5eb35b94.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 104.232.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:bd:62:dc:cb:40:b6:02:f7:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=d5dc3376-f9fa-4594-961e-e602741e0acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d8:f4:66:25:59:c3:59:92:db:77:3f:de:c6: 3f:8c:3f:31:0a:ae:d7:cd:42:67:64:89:fd:ea:ba: 7b:e5:9d:d3:8a:66:fa:85:e5:10:6a:33:9e:72:9a: 79:35:15:f5:4f:a7:2f:b8:39:11:f9:c9:2b:de:23: 95:0f:27:ee:d6:30:cf:b1:97:30:73:a4:bf:dc:cd: 62:b6:6f:93:5b:54:11:b7:17:8f:16:97:6d:a3:f9: 58:91:b9:c8:d0:b8:12:39:72:f2:44:6e:1d:d9:55: 63:1c:ee:32:66:77:e7:e7:10:6e:d9:77:17:31:17: 38:1b:9d:8b:70:55:20:19:a6:28:d8:ac:f0:b4:79: 78:26:2a:1e:21:89:51:99:46:f4:87:67:29:e9:09: fb:d9:b1:14:a0:34:f5:65:21:39:a0:79:2f:a1:85: dc:99:72:21:fa:e7:ab:9e:43:13:4e:ea:91:7c:22: f4:5d:11:6d:c9:0b:cf:d3:94:cf:4b:f1:7f:44:36: 47:f0:90:7e:fa:26:e9:60:bb:22:fe:10:fc:43:a8: c0:a5:4f:0c:b7:20:4c:01:cb:ea:fc:74:00:89:86: a7:da:25:f3:64:aa:d1:66:6a:ba:d9:26:d3:21:49: ab:bb:bb:15:44:d6:fe:42:ce:9b:4b:06:a9:a5:ac: 6e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A4:44:F7:2D:4F:16:94:D3:4F:86:F2:7A:EC:62:F1:ED:0B:76:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0bfe351d-3e88-3edd-b950-e11a5eb35b94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.232.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:c1:0e:2b:60:48:00:fa:19:85:67:d7:9a:a2:f9:69:ab:46: b6:61:cf:f0:a8:e3:08:9f:ad:f6:8b:c1:74:70:54:29:1a:75: 76:9d:a0:68:7a:38:54:e3:f0:f6:5f:4a:2c:5e:20:68:08:c9: dd:71:d3:d5:03:7a:29:be:28:da:f1:5c:b7:52:1f:ed:77:ce: 56:19:82:5d:12:f4:b4:24:ae:f0:39:fc:61:a5:4c:df:43:bd: 5c:5b:1c:92:da:28:09:8e:e8:e0:0a:2b:b7:0a:ac:f4:bd:db: 07:6f:3d:e1:66:c1:74:15:64:33:23:34:b2:dc:e9:25:7c:65: 17:10:d3:48:c4:62:45:13:5b:a4:9f:46:c0:a4:a4:52:56:3f: f6:f0:bd:1c:2c:70:e4:e9:ce:d2:22:d3:94:b9:35:19:5e:bc: 2a:90:9b:84:a9:5f:72:b7:09:57:8a:e9:1d:9b:a6:fc:31:36: 6e:7b:ca:3c:b1:bb:9e:ee:5c:04:17:82:28:e0:e8:79:ed:b9: 68:1b:5e:a6:54:55:71:25:98:b6:ea:a1:ae:0d:7f:f0:d8:d2: 63:c0:3f:a2:84:13:3e:65:5a:cc:af:03:0f:2c:0f:68:43:e3: 64:50:13:64:54:6c:4f:63:7f:1b:71:3b:b8:d3:c4:50:2d:97: 0f:9c:4e:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdr1i3MtAtgL3NQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZDVkYzMzNzYtZjlmYS00NTk0LTk2MWUtZTYwMjc0MWUwYWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9j0ZiVZw1mS23c/3sY/jD8xCq7XzUJnZIn9 6rp75Z3Timb6heUQajOecpp5NRX1T6cvuDkR+ckr3iOVDyfu1jDPsZcwc6S/3M1i tm+TW1QRtxePFpdto/lYkbnI0LgSOXLyRG4d2VVjHO4yZnfn5xBu2XcXMRc4G52L cFUgGaYo2KzwtHl4JioeIYlRmUb0h2cp6Qn72bEUoDT1ZSE5oHkvoYXcmXIh+uer nkMTTuqRfCL0XRFtyQvP05TPS/F/RDZH8JB++ibpYLsi/hD8Q6jApU8MtyBMAcvq /HQAiYan2iXzZKrRZmq62SbTIUmru7sVRNb+Qs6bSwappaxu0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAekRPctTxaU00+G8nrsYvHtC3ZNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMGJmZTM1MWQtM2U4OC0z ZWRkLWI5NTAtZTExYTVlYjM1Yjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaOhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXBDitgSAD6GYVn15qi+WmrRrZhz/Co4wifrfaLwXRwVCkadXadoGh6 OFTj8PZfSixeIGgIyd1x09UDeim+KNrxXLdSH+13zlYZgl0S9LQkrvA5/GGlTN9D vVxbHJLaKAmO6OAKK7cKrPS92wdvPeFmwXQVZDMjNLLc6SV8ZRcQ00jEYkUTW6Sf RsCkpFJWP/bwvRwscOTpztIi05S5NRlevCqQm4SpX3K3CVeK6R2bpvwxNm57yjyx u57uXAQXgijg6HntuWgbXqZUVXElmLbqoa4Nf/DY0mPAP6KEEz5lWsyvAw8sD2hD 42RQE2RUbE9jfxtxO7jTxFAtlw+cTnM= -----END CERTIFICATE-----Generated at Sat Sep 6 23:52:46 2025 by rpki-client