$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e8667baa-0392-3948-bde7-1f50c0c5ff7c.roa File: e8667baa-0392-3948-bde7-1f50c0c5ff7c.roa (raw, json) Hash identifier: 1RdGgGBcsfUvOcUCvTGznqSAneHMaJP1/yFtz1CpMUU= Subject key identifier: 1D:6B:43:A4:9A:96:C6:3C:9E:D4:AF:E0:3E:EB:61:14:37:1B:F4:03 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584A331B14AD2E472B3ABEF6FA00 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e8667baa-0392-3948-bde7-1f50c0c5ff7c.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 54113 IP address blocks: 104.156.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1b:14:ad:2e:47:2b:3a:be:f6:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=5f29a387-063e-4fd9-984e-3cbad5790ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d7:c9:26:62:9a:b2:8f:3a:0c:5a:50:e4:e6: b8:01:b2:7f:c1:a1:e9:4b:c6:ac:16:dd:c9:68:07: 9d:22:33:2e:f5:dc:59:76:a6:dc:13:a0:ab:58:4a: 35:c1:72:0f:42:35:75:87:eb:6f:dc:04:18:f7:f3: 64:d6:af:a8:b7:31:b0:18:d5:93:19:77:63:3f:5b: 55:ec:3e:7c:24:84:9a:6b:0b:f5:17:9c:53:5e:e6: 8f:24:7d:aa:89:5b:c9:6e:bf:0c:a2:d3:8e:7f:bb: a5:6a:10:a0:c5:8a:9c:ba:fc:8a:35:89:c9:80:92: 5d:5a:4c:d8:d5:14:6c:9f:d5:39:b9:eb:67:5f:05: 45:76:28:82:76:ac:66:03:c9:c7:bd:48:8c:30:e7: c9:e9:c2:a5:10:d3:5e:8a:1d:cf:9e:e8:d3:df:10: 3a:39:b6:bb:6c:df:14:f5:93:f4:9a:12:b8:8e:5c: 6a:e8:8b:ae:98:a2:38:4c:43:1a:e1:ca:1b:55:c1: 97:a4:2c:76:1f:7f:b3:1d:2a:cc:43:18:28:e4:75: 1e:6f:b6:53:fe:c5:e5:41:30:fa:12:75:b5:45:f9: c6:76:f0:77:1d:11:12:b0:79:62:ae:05:65:a6:e7: 7f:61:7c:a1:7b:dd:d6:88:e8:0a:91:9e:26:84:18: ff:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6B:43:A4:9A:96:C6:3C:9E:D4:AF:E0:3E:EB:61:14:37:1B:F4:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e8667baa-0392-3948-bde7-1f50c0c5ff7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 104.156.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:bc:25:74:79:fa:83:28:06:dd:62:b2:06:77:63:bd:ca:e7: 6a:35:62:4e:84:7d:02:37:87:82:7a:0e:a3:cc:6f:15:96:90: 08:38:29:07:8d:98:b4:14:dc:12:a8:2d:30:28:e3:68:2c:a6: 9f:35:45:67:91:f9:e8:4f:ec:26:ec:45:6b:a4:02:5b:4a:4b: e0:86:9b:0d:ff:ce:84:6c:a0:5b:c4:48:a7:9a:3f:ed:53:03: ba:65:52:4f:39:c6:70:41:48:70:92:44:5c:6d:4c:37:cc:b2: 3a:e1:d1:98:f8:13:ab:28:4e:8a:de:81:ee:60:06:15:57:90: 73:75:97:a6:cf:fc:25:94:d1:33:0e:c7:66:da:69:63:6e:24: 95:f9:88:25:01:a7:03:58:c5:9f:26:cc:cd:61:1d:40:6f:27: fe:7f:d5:6e:74:0c:58:b5:93:b6:13:71:e0:c3:82:0f:dd:8e: 58:1f:93:10:48:65:7b:43:8a:7d:af:61:88:e1:1b:64:ed:df: 8b:42:8f:0f:75:94:18:e6:87:12:21:0f:14:98:b9:3f:c2:59: 83:fb:b8:e0:8b:8c:4d:3c:6f:c9:42:f0:c4:52:d3:39:9c:b7: 9f:24:63:48:4f:db:5e:73:30:51:f4:4d:52:21:02:e5:d4:31: c5:aa:06:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGxStLkcrOr72+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk NWYyOWEzODctMDYzZS00ZmQ5LTk4NGUtM2NiYWQ1NzkwZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidfJJmKaso86DFpQ5Oa4AbJ/waHpS8asFt3J aAedIjMu9dxZdqbcE6CrWEo1wXIPQjV1h+tv3AQY9/Nk1q+otzGwGNWTGXdjP1tV 7D58JISaawv1F5xTXuaPJH2qiVvJbr8MotOOf7ulahCgxYqcuvyKNYnJgJJdWkzY 1RRsn9U5uetnXwVFdiiCdqxmA8nHvUiMMOfJ6cKlENNeih3PnujT3xA6Oba7bN8U 9ZP0mhK4jlxq6IuumKI4TEMa4cobVcGXpCx2H3+zHSrMQxgo5HUeb7ZT/sXlQTD6 EnW1RfnGdvB3HRESsHlirgVlpud/YXyhe93WiOgKkZ4mhBj/YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1rQ6SalsY8ntSv4D7rYRQ3G/QDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZTg2NjdiYWEtMDM5Mi0z OTQ4LWJkZTctMWY1MGMwYzVmZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJxbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABi8JXR5+oMoBt1isgZ3Y73K52o1Yk6EfQI3h4J6DqPMbxWWkAg4KQeN mLQU3BKoLTAo42gspp81RWeR+ehP7CbsRWukAltKS+CGmw3/zoRsoFvESKeaP+1T A7plUk85xnBBSHCSRFxtTDfMsjrh0Zj4E6soTorege5gBhVXkHN1l6bP/CWU0TMO x2baaWNuJJX5iCUBpwNYxZ8mzM1hHUBvJ/5/1W50DFi1k7YTceDDgg/djlgfkxBI ZXtDin2vYYjhG2Tt34tCjw91lBjmhxIhDxSYuT/CWYP7uOCLjE08b8lC8MRS0zmc t58kY0hP215zMFH0TVIhAuXUMcWqBqE= -----END CERTIFICATE-----Generated at Tue Jul 1 00:57:59 2025 by rpki-client