$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/dd95e269-7c40-3c0a-bf42-77a3bf7072c8.roa File: dd95e269-7c40-3c0a-bf42-77a3bf7072c8.roa (raw, json) Hash identifier: +sQ24wrswiDlsh+eXU5EO8z92AW63oj87L1Vz3kuJ7E= Subject key identifier: 79:F4:61:39:FD:50:BA:8D:0E:29:CA:25:7F:D7:B6:68:7D:0C:FF:7D Certificate issuer: /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Certificate serial: 010D0C9F4328584AD23BD24AA56C52317B2A6800 Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/dd95e269-7c40-3c0a-bf42-77a3bf7072c8.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 23470 IP address blocks: 104.156.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:d2:4a:a5:6c:52:31:7b:2a:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=84d6fe4d-ad77-426e-81a4-74050bbc3fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a8:84:e2:df:a3:ec:5d:29:6f:71:7e:13:e7: 57:ae:0e:e8:59:da:cf:d2:ae:80:26:2f:02:73:22: 40:36:17:2b:e0:5c:4a:d1:69:a0:d2:16:c1:ab:9f: 78:24:83:89:59:b8:14:8e:a4:3a:6f:13:65:a0:11: c0:3b:0f:a4:08:73:ee:07:75:7f:32:30:88:19:3b: b4:05:d2:bb:45:8f:9e:5c:36:65:4b:1d:7c:1e:15: f6:60:71:0b:02:74:8c:81:b6:f6:a4:53:c9:66:5f: f6:04:19:30:aa:fb:c9:f2:2b:e2:b5:98:b5:89:58: 01:69:48:09:11:df:05:9a:ff:7f:45:6d:91:7a:45: 56:76:22:91:01:5f:14:fa:82:63:99:a1:6b:2c:d6: 4b:dc:9d:8b:65:2d:24:96:51:7a:31:3a:b2:f0:d9: 54:e3:6d:9d:af:bc:d2:e1:87:57:ad:e5:7b:a8:30: cb:a7:3d:f8:1f:ce:08:60:8d:47:34:eb:7c:e2:f3: 4c:26:b1:1f:e4:dd:93:70:0b:22:d6:fc:ca:62:39: 7f:b7:00:66:cc:05:4e:76:98:c6:00:d6:ab:c0:78: 56:3f:db:99:87:35:b9:9e:f7:7c:67:bd:2a:b0:9b: a5:55:1d:39:13:45:ca:fd:a6:e9:24:95:01:bb:aa: 46:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F4:61:39:FD:50:BA:8D:0E:29:CA:25:7F:D7:B6:68:7D:0C:FF:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/dd95e269-7c40-3c0a-bf42-77a3bf7072c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl X509v3 Authority Key Identifier: keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer sbgp-ipAddrBlock: critical IPv4: 104.156.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:38:7b:b6:93:d6:06:89:18:3f:17:4b:d8:09:16:18:85:c6: 06:8e:1b:2e:1e:13:23:7a:02:f5:a7:b7:33:7d:94:2d:f5:75: bf:23:06:71:21:2b:35:89:eb:e2:6e:66:1c:76:e8:db:a6:af: 51:23:51:f5:9b:90:2e:a3:da:49:c4:65:31:82:d6:7a:26:3f: b2:ed:1e:38:24:b3:b1:34:a1:19:92:7a:fa:dd:db:c6:33:80: 89:f2:dd:39:2f:db:12:77:89:c6:66:5b:f8:cf:96:31:89:fb: 95:8b:ba:bc:4b:ab:01:96:0d:64:d5:2d:b3:83:08:73:51:92: 10:1b:f3:d1:43:9f:29:eb:48:dc:72:73:4d:c4:6e:06:2f:ba: db:2c:f9:fd:c9:dd:15:7f:7f:a7:1f:a7:f6:8a:64:82:60:24: c4:bf:70:9c:da:75:ca:bb:f4:a0:30:1f:6c:08:4b:d3:1d:b4: 47:26:aa:1d:02:96:03:d6:fa:ef:19:e3:07:c9:ca:13:d2:a7: 5d:be:20:ef:f7:9c:9c:6f:39:d6:d9:5b:ed:e6:d4:39:a8:2d: eb:2e:3e:ea:12:81:20:3b:f3:4d:39:22:b9:f6:30:d0:87:18: e3:24:89:de:be:07:e4:28:f4:1e:20:0a:63:ef:3b:05:a0:b4: 3b:92:57:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9JKpWxSMXsqaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjMzhhN2QtMmI1Yy00MzJjLTlkYTAtNzliY2Y5Njc4 MGMzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ODRkNmZlNGQtYWQ3Ny00MjZlLTgxYTQtNzQwNTBiYmMzZmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaiE4t+j7F0pb3F+E+dXrg7oWdrP0q6AJi8C cyJANhcr4FxK0Wmg0hbBq594JIOJWbgUjqQ6bxNloBHAOw+kCHPuB3V/MjCIGTu0 BdK7RY+eXDZlSx18HhX2YHELAnSMgbb2pFPJZl/2BBkwqvvJ8ivitZi1iVgBaUgJ Ed8Fmv9/RW2RekVWdiKRAV8U+oJjmaFrLNZL3J2LZS0kllF6MTqy8NlU422dr7zS 4YdXreV7qDDLpz34H84IYI1HNOt84vNMJrEf5N2TcAsi1vzKYjl/twBmzAVOdpjG ANarwHhWP9uZhzW5nvd8Z70qsJulVR05E0XK/abpJJUBu6pGAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHn0YTn9ULqNDinKJX/Xtmh9DP99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83M2Mz OGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJjZjk2NzgwYzMvZGQ5NWUyNjktN2M0MC0z YzBhLWJmNDItNzdhM2JmNzA3MmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzNjMzhhN2QtMmI1Yy00MzJjLTlk YTAtNzliY2Y5Njc4MGMzLzczYzM4YTdkLTJiNWMtNDMyYy05ZGEwLTc5YmNmOTY3 ODBjMy5jcmwwHwYDVR0jBBgwFoAUkm0CVqEdKJlOuyyRi5298DR4zDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83M2MzOGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJj Zjk2NzgwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ84e7aT1gaJGD8XS9gJFhiFxgaOGy4eEyN6AvWntzN9lC31db8jBnEh KzWJ6+JuZhx26Numr1EjUfWbkC6j2knEZTGC1nomP7LtHjgks7E0oRmSevrd28Yz gIny3Tkv2xJ3icZmW/jPljGJ+5WLurxLqwGWDWTVLbODCHNRkhAb89FDnynrSNxy c03EbgYvutss+f3J3RV/f6cfp/aKZIJgJMS/cJzadcq79KAwH2wIS9MdtEcmqh0C lgPW+u8Z4wfJyhPSp12+IO/3nJxvOdbZW+3m1DmoLesuPuoSgSA78005Irn2MNCH GOMkid6+B+Qo9B4gCmPvOwWgtDuSV0M= -----END CERTIFICATE-----Generated at Sat Aug 23 13:30:42 2025 by rpki-client