$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/5a5236fa-372e-334f-bc5c-2fc8b6ec894b.roa File: 5a5236fa-372e-334f-bc5c-2fc8b6ec894b.roa (raw, json) Hash identifier: b3Ydq5HEY3N0I5gw8NTWvE+wtcBMIAD7JX8V7Xn/91k= Subject key identifier: D6:79:3B:B2:83:F8:4E:3B:9A:91:84:17:B5:E1:15:2B:3C:E6:E9:93 Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F4328584AEE2684972F1B39E407BF1D80 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/5a5236fa-372e-334f-bc5c-2fc8b6ec894b.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 63023 IP address blocks: 104.156.156.0/24 maxlen: 24 104.156.157.0/24 maxlen: 24 104.156.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:84:97:2f:1b:39:e4:07:bf:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=57a375a8-0bae-4f11-80a9-a48cf2d28bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c4:df:73:75:22:c3:e4:0f:d8:bc:b0:17:6c: 18:7d:db:b7:ed:fb:60:a2:44:fe:23:bd:1e:c6:f0: 49:65:5d:47:e7:d9:17:3e:ca:f9:b5:f0:19:5d:60: 64:e8:c3:e8:58:f7:64:fc:be:b7:7b:1c:cd:29:5d: 5c:60:7e:c4:6e:ff:03:f8:1b:c5:38:4e:bf:cf:80: d7:8b:6a:eb:73:db:19:0d:38:98:09:e0:42:24:cc: 84:8d:f3:b0:96:3f:c5:8d:c3:8b:20:eb:14:91:67: b8:8c:36:ad:c1:a5:6b:9e:9a:72:3f:84:90:48:88: e3:ba:f9:be:c7:41:ee:0c:c7:a9:ae:af:1a:ff:c6: f5:b9:13:c5:f5:73:84:df:dd:73:bd:44:01:95:db: 85:b7:76:dc:0d:17:2e:b8:64:c9:58:d1:ba:8b:fa: 7a:e5:85:39:37:85:92:4b:b1:79:0b:44:a7:76:70: ef:31:e6:0e:19:fe:cf:f4:da:31:f5:da:df:b2:51: e0:cd:8c:34:47:3e:75:d3:3b:55:41:53:bb:45:b7: 53:66:56:79:69:ec:53:58:7f:0a:7c:f9:e3:1f:d6: 8a:f5:a8:f6:3f:41:ac:1a:e6:3e:cf:83:a2:71:e4: b1:2d:84:1b:f0:0e:e4:98:79:55:73:e2:3c:35:31: 11:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:79:3B:B2:83:F8:4E:3B:9A:91:84:17:B5:E1:15:2B:3C:E6:E9:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/5a5236fa-372e-334f-bc5c-2fc8b6ec894b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 104.156.156.0-104.156.158.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ba:5a:a7:57:52:cb:90:0e:b8:01:31:08:01:9a:c2:2a:32: 28:8a:e5:81:e1:21:f8:61:49:5e:2f:93:10:a4:1f:dc:bd:83: 5f:fd:a0:4a:88:71:9b:1e:59:99:d0:63:25:6b:fe:29:70:6d: c3:e4:57:9a:c0:9a:47:06:84:f5:9d:64:95:b9:5c:ed:dd:fa: d7:58:57:08:78:74:46:8d:4c:6c:56:da:b8:f9:c5:58:6a:0f: c3:0a:49:b3:5e:a1:5c:6c:ed:71:8b:ef:c1:4a:72:39:f2:4c: 5f:a8:e7:2b:b4:fb:83:83:93:1b:ff:9b:58:d1:85:38:2f:e3: 81:9c:88:64:f2:f2:30:5b:79:c5:a8:cc:1b:5c:8e:59:65:cb: 2b:ca:6d:ce:18:ed:e5:a1:de:b5:84:ed:d5:8c:c6:26:cd:d1: ae:5d:5b:52:15:87:24:54:0b:ce:f9:77:e0:bd:32:ac:df:c5: cd:80:dd:18:d6:33:48:05:13:08:e8:94:74:e7:03:81:08:32: cb:c0:37:57:c5:55:17:25:e2:63:7c:06:86:96:e9:22:17:23: ba:91:66:58:34:e4:38:2a:0d:ae:be:9a:3f:3d:ce:eb:ac:9d: 94:74:44:b4:26:50:8c:16:35:6e:c4:2b:84:ee:71:32:e7:44: 94:5b:70:c8 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEruJoSXLxs55Ae/HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk NTdhMzc1YTgtMGJhZS00ZjExLTgwYTktYTQ4Y2YyZDI4YmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMTfc3Uiw+QP2LywF2wYfdu37ftgokT+I70e xvBJZV1H59kXPsr5tfAZXWBk6MPoWPdk/L63exzNKV1cYH7Ebv8D+BvFOE6/z4DX i2rrc9sZDTiYCeBCJMyEjfOwlj/FjcOLIOsUkWe4jDatwaVrnppyP4SQSIjjuvm+ x0HuDMeprq8a/8b1uRPF9XOE391zvUQBlduFt3bcDRcuuGTJWNG6i/p65YU5N4WS S7F5C0SndnDvMeYOGf7P9Nox9drfslHgzYw0Rz510ztVQVO7RbdTZlZ5aexTWH8K fPnjH9aK9aj2P0GsGuY+z4OiceSxLYQb8A7kmHlVc+I8NTERGwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFNZ5O7KD+E47mpGEF7XhFSs85umTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvNWE1MjM2ZmEtMzcyZS0z MzRmLWJjNWMtMmZjOGI2ZWM4OTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJonJwD BABonJ4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAGrpap1dSy5AOuAExCAGawioyKIrlgeEh+GFJXi+TEKQf 3L2DX/2gSohxmx5ZmdBjJWv+KXBtw+RXmsCaRwaE9Z1klblc7d3611hXCHh0Ro1M bFbauPnFWGoPwwpJs16hXGztcYvvwUpyOfJMX6jnK7T7g4OTG/+bWNGFOC/jgZyI ZPLyMFt5xajMG1yOWWXLK8ptzhjt5aHetYTt1YzGJs3Rrl1bUhWHJFQLzvl34L0y rN/FzYDdGNYzSAUTCOiUdOcDgQgyy8A3V8VVFyXiY3wGhpbpIhcjupFmWDTkOCoN rr6aPz3O66ydlHREtCZQjBY1bsQrhO5xMudElFtwyA== -----END CERTIFICATE-----Generated at Sat Aug 23 16:51:21 2025 by rpki-client