$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/98e87fce-1a6c-3a59-8454-ebcef8093772.roa File: 98e87fce-1a6c-3a59-8454-ebcef8093772.roa (raw, json) Hash identifier: Ed3SZRmdG0GS5sPHdpjG6LfZqXJkhddrXX6yP0UzA8A= Subject key identifier: 76:1D:FD:43:3D:6E:E2:9E:1E:F4:21:E0:A7:6D:EB:9D:BD:86:66:76 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584B2066DA8EA1800EF530C42840 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/98e87fce-1a6c-3a59-8454-ebcef8093772.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22652 IP address blocks: 104.156.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:da:8e:a1:80:0e:f5:30:c4:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=6dcc05c6-f045-442d-abe8-22cc9a15dbfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b0:fd:8f:4c:b6:64:e6:81:e4:d0:79:6f:98: 4b:ed:c8:f3:33:b6:6d:33:2e:18:62:ce:3a:68:38: 2a:ea:a8:de:2e:ac:52:9e:f4:5b:da:21:76:08:5c: 7a:b9:4c:18:4d:59:a2:2d:12:e1:60:a5:d9:0b:c3: 11:69:68:0c:76:1d:7f:f6:96:83:b1:12:c1:2f:c9: fd:c2:28:f5:a0:8e:1e:bd:d7:00:93:2f:40:ec:a5: 23:af:60:3c:eb:50:a5:1a:1d:22:fc:04:bc:f3:e1: 3d:bc:94:c0:8c:1c:62:08:ae:1b:6d:a1:2e:11:1c: b9:ee:2d:88:bc:fa:e2:fc:c6:3b:42:6f:3d:f7:35: 7f:26:03:29:f6:9d:0a:af:06:5e:da:1f:68:db:2d: 04:a9:d7:2a:d6:a0:96:ac:ac:7a:af:fd:59:8b:90: fe:23:89:57:dd:65:f4:09:91:a9:b0:9a:37:9b:2a: 3e:a0:7e:e6:6b:87:fc:24:3f:b6:f7:f4:b7:54:9a: a8:25:f1:f9:37:4a:b0:9c:99:ae:28:1e:57:47:61: 6f:bb:04:8b:a9:54:63:da:fd:44:4a:3d:9d:61:e3: 99:e5:ea:e2:76:cc:9a:73:b2:95:fd:e5:9e:08:24: fa:84:1f:84:5a:25:36:6e:c7:91:ad:e8:f0:7e:c2: 5f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1D:FD:43:3D:6E:E2:9E:1E:F4:21:E0:A7:6D:EB:9D:BD:86:66:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/98e87fce-1a6c-3a59-8454-ebcef8093772.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 104.156.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:44:63:7f:4f:7f:a3:0d:d6:8b:d6:92:f3:33:89:db:62:aa: 09:f5:97:7c:3e:e8:c9:40:39:22:e4:88:bb:bc:03:c6:04:5e: 5f:5a:d6:28:02:36:05:c8:07:79:ac:dc:a3:5e:a2:71:dc:48: 60:f3:c8:03:38:d9:86:05:0f:19:9d:7d:0d:a0:15:d3:57:b0: 6d:61:60:b4:21:3a:1a:c5:49:9e:90:b1:1e:6c:e0:a1:94:30: ba:db:6d:6c:4e:e5:35:fd:6e:34:87:8e:8a:1a:52:e7:e7:f3: c8:c4:ac:2b:21:d0:00:ba:8d:43:17:ac:dd:d3:82:dc:1c:54: b0:d1:22:62:59:f3:e1:db:60:73:fc:ad:12:ed:10:f0:54:9e: 01:85:8c:53:03:23:8f:a4:83:8e:3e:08:44:e6:a2:b4:79:48: 11:0d:cf:49:1b:d3:1f:48:64:72:78:5c:2d:53:cf:fd:03:3d: d4:a4:67:85:53:2f:96:49:1d:f6:b9:58:1b:b4:66:ea:58:36: 7b:22:2e:c2:ae:94:c6:75:8d:b6:7b:51:2d:f4:f3:d0:68:ef: d9:04:a2:e1:f6:da:95:e1:7f:3d:07:0c:9f:b0:f1:cc:bf:c4: 0e:af:39:6f:c7:f4:61:0b:c3:d5:66:a4:a6:73:39:61:7a:e6: d7:ac:b2:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZtqOoYAO9TDEKEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NmRjYzA1YzYtZjA0NS00NDJkLWFiZTgtMjJjYzlhMTVkYmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17D9j0y2ZOaB5NB5b5hL7cjzM7ZtMy4YYs46 aDgq6qjeLqxSnvRb2iF2CFx6uUwYTVmiLRLhYKXZC8MRaWgMdh1/9paDsRLBL8n9 wij1oI4evdcAky9A7KUjr2A861ClGh0i/AS88+E9vJTAjBxiCK4bbaEuERy57i2I vPri/MY7Qm899zV/JgMp9p0KrwZe2h9o2y0Eqdcq1qCWrKx6r/1Zi5D+I4lX3WX0 CZGpsJo3myo+oH7ma4f8JD+29/S3VJqoJfH5N0qwnJmuKB5XR2FvuwSLqVRj2v1E Sj2dYeOZ5eridsyac7KV/eWeCCT6hB+EWiU2bseRrejwfsJfWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYd/UM9buKeHvQh4Kdt6529hmZ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvOThlODdmY2UtMWE2Yy0z YTU5LTg0NTQtZWJjZWY4MDkzNzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpEY39Pf6MN1ovWkvMzidtiqgn1l3w+6MlAOSLkiLu8A8YEXl9a1igC NgXIB3ms3KNeonHcSGDzyAM42YYFDxmdfQ2gFdNXsG1hYLQhOhrFSZ6QsR5s4KGU MLrbbWxO5TX9bjSHjooaUufn88jErCsh0AC6jUMXrN3TgtwcVLDRImJZ8+HbYHP8 rRLtEPBUngGFjFMDI4+kg44+CETmorR5SBENz0kb0x9IZHJ4XC1Tz/0DPdSkZ4VT L5ZJHfa5WBu0ZupYNnsiLsKulMZ1jbZ7US3089Bo79kEouH22pXhfz0HDJ+w8cy/ xA6vOW/H9GELw9VmpKZzOWF65tessh4= -----END CERTIFICATE-----Generated at Mon Oct 20 08:50:00 2025 by rpki-client