$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/0e5a622b-034c-3a3b-816e-0f51519ea53e.roa File: 0e5a622b-034c-3a3b-816e-0f51519ea53e.roa (raw, json) Hash identifier: 4CKVNvrMrLTMzvALCZZp4CTO1LvzPNmUDx5Vd8NeiEo= Subject key identifier: 5D:63:EC:43:84:65:30:D8:A2:65:01:DE:7B:67:BB:5D:E8:06:53:26 Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584B970CF6F1C5C7F8A98D78B800 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/0e5a622b-034c-3a3b-816e-0f51519ea53e.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 16789 IP address blocks: 104.156.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f6:f1:c5:c7:f8:a9:8d:78:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=9c18b4ba-bf77-4723-9c32-c3e5ef4ee14b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c1:e3:df:ca:a7:f4:91:7a:3a:ae:ae:6d:d8: 87:2f:57:68:cf:7e:b6:40:f6:94:cf:56:21:30:a5: e8:dd:cf:12:bf:c9:44:66:69:62:0d:d3:50:17:e5: 13:34:05:e5:f2:55:85:a1:b1:2d:76:2b:93:ec:34: 07:9b:70:ab:ff:28:c0:6a:c1:cf:d2:3b:f6:f7:d0: 9f:7c:2b:2b:a5:9e:c0:0d:54:57:57:33:f0:07:5c: 41:f2:5f:0a:1b:a9:98:61:78:72:ce:fa:04:c8:f6: 16:d0:36:5e:4d:a9:c1:cc:7c:45:0e:a7:89:55:80: b6:8d:95:77:b1:c9:c9:4e:ea:be:0e:d9:68:09:e0: 31:28:89:c1:ff:ef:2b:a9:ea:f5:da:38:b0:2c:12: 9d:ac:cd:77:b4:52:60:93:98:a8:5b:cd:34:12:cc: 75:36:bf:66:3e:b8:54:41:2c:88:34:af:7d:e2:fe: 91:cb:2a:f0:6a:f3:b2:3a:20:14:86:73:0b:da:b4: 95:ed:1f:9d:36:00:c1:07:d1:dc:9c:1f:47:5d:51: 84:8f:98:a3:00:c4:ef:e9:ce:64:42:f8:51:bf:5d: 36:04:56:8e:51:7e:2b:e9:7c:ef:96:08:e9:5f:0f: 5d:1c:6d:c1:cf:38:4e:a2:8c:53:94:91:f1:0f:84: 2b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:63:EC:43:84:65:30:D8:A2:65:01:DE:7B:67:BB:5D:E8:06:53:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/0e5a622b-034c-3a3b-816e-0f51519ea53e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:51:64:9c:16:c7:df:1c:d8:ec:fb:15:76:42:46:65:5a:89: 60:9e:7b:d3:e1:82:4d:08:26:5e:84:c2:51:01:b8:1b:e7:01: a3:1a:35:51:99:20:cb:89:23:2f:0a:a4:57:7c:26:c8:ee:00: ca:08:26:a7:c7:50:dd:0a:f5:ed:a1:e9:03:7a:85:05:10:b5: 57:5c:b9:34:01:36:4c:34:1e:e6:f7:d0:fc:7a:6b:12:1e:6c: 5f:24:bf:80:f2:4a:fa:d9:b6:38:43:96:3f:43:25:7e:4a:4d: 30:b5:80:37:be:db:0f:1c:c6:31:e5:5f:c2:83:84:fa:28:41: 65:ad:01:c9:42:da:5f:01:32:bb:4d:47:db:5e:78:a4:1d:4d: 7b:30:c4:97:b5:29:3e:8f:d1:95:96:04:0a:2e:eb:18:2a:72: e4:27:c0:7f:48:b9:08:42:33:22:c4:1a:1e:cf:d8:5d:51:01: 01:0b:cf:60:5a:f2:6e:eb:35:21:9e:09:5d:da:2a:56:52:6b: 48:b1:af:bb:95:36:81:6e:c7:66:5c:01:f0:0e:85:ac:02:b0: d5:81:a5:a0:12:45:6a:15:e0:b2:de:2d:4c:16:7b:e1:b5:10: ff:64:81:ce:15:45:17:f5:d5:63:e6:df:84:77:65:94:80:07: d6:7e:5e:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPbxxcf4qY14uAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk OWMxOGI0YmEtYmY3Ny00NzIzLTljMzItYzNlNWVmNGVlMTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MHj38qn9JF6Oq6ubdiHL1doz362QPaUz1Yh MKXo3c8Sv8lEZmliDdNQF+UTNAXl8lWFobEtdiuT7DQHm3Cr/yjAasHP0jv299Cf fCsrpZ7ADVRXVzPwB1xB8l8KG6mYYXhyzvoEyPYW0DZeTanBzHxFDqeJVYC2jZV3 scnJTuq+DtloCeAxKInB/+8rqer12jiwLBKdrM13tFJgk5ioW800Esx1Nr9mPrhU QSyINK994v6RyyrwavOyOiAUhnML2rSV7R+dNgDBB9HcnB9HXVGEj5ijAMTv6c5k QvhRv102BFaOUX4r6XzvlgjpXw9dHG3BzzhOooxTlJHxD4QrKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1j7EOEZTDYomUB3ntnu13oBlMmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvMGU1YTYyMmItMDM0Yy0z YTNiLTgxNmUtMGY1MTUxOWVhNTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJRZJwWx98c2Oz7FXZCRmVaiWCee9Phgk0IJl6EwlEBuBvnAaMaNVGZ IMuJIy8KpFd8JsjuAMoIJqfHUN0K9e2h6QN6hQUQtVdcuTQBNkw0Hub30Px6axIe bF8kv4DySvrZtjhDlj9DJX5KTTC1gDe+2w8cxjHlX8KDhPooQWWtAclC2l8BMrtN R9teeKQdTXswxJe1KT6P0ZWWBAou6xgqcuQnwH9IuQhCMyLEGh7P2F1RAQELz2Ba 8m7rNSGeCV3aKlZSa0ixr7uVNoFux2ZcAfAOhawCsNWBpaASRWoV4LLeLUwWe+G1 EP9kgc4VRRf11WPm34R3ZZSAB9Z+Xpg= -----END CERTIFICATE-----Generated at Mon Nov 3 08:42:09 2025 by rpki-client