$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/1504f5da-3087-3949-99ea-e1109e260ad2.roa File: 1504f5da-3087-3949-99ea-e1109e260ad2.roa (raw, json) Hash identifier: kLQpU86SWy4fgoR3LUAOOfjq4sJoqosP7/o5IlpC6zI= Subject key identifier: 5C:CC:37:A2:E1:5A:E3:BF:C2:77:DB:62:4A:B8:8F:4D:5A:58:D1:7C Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584B970CF6E06FC67F60EAB015C0 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/1504f5da-3087-3949-99ea-e1109e260ad2.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 16789 IP address blocks: 104.156.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f6:e0:6f:c6:7f:60:ea:b0:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=27dc1f37-68ec-4d50-b0d2-bdaf1956a8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d0:d4:08:90:9e:9d:15:f5:12:24:60:db:f4: b6:2f:40:ad:a6:57:4b:7e:88:32:83:38:8a:38:26: 23:00:8f:50:7f:66:65:58:66:c2:ea:d7:21:38:85: ca:db:8c:7e:c8:55:1f:59:ed:f0:0c:2d:da:05:2f: dc:2e:e9:0a:51:b7:79:60:c9:c6:a8:55:78:d9:35: ce:a6:54:48:5c:fc:c4:b3:53:c5:be:8d:38:db:8f: a0:b5:c7:9b:17:7b:9f:d9:dc:ad:e3:d3:d7:2c:79: 9d:a9:27:df:71:2a:cf:4b:89:44:ce:9a:82:a7:73: 11:92:1a:b9:58:a9:3a:71:96:3b:a6:63:f2:26:ae: bf:2b:da:c9:b3:36:c7:d2:c5:d4:b7:f9:3a:ba:2c: 8c:b2:a0:e4:be:34:1c:34:c7:77:1a:f6:71:cc:2a: c4:8f:7e:ed:98:5f:4e:2e:05:06:45:60:55:fd:52: 26:22:97:5c:bf:72:11:e3:f5:e5:e6:4a:a6:f3:b7: 84:27:70:97:3d:38:79:05:7c:b8:55:ac:2f:b7:50: b1:20:5e:1d:16:0e:c3:fe:cd:cc:27:b7:26:2a:b1: aa:8a:b2:75:ee:05:50:b6:74:e8:02:aa:09:bc:f2: ce:4f:1c:f2:b3:8b:e5:ca:11:ec:96:37:85:d8:88: d3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CC:37:A2:E1:5A:E3:BF:C2:77:DB:62:4A:B8:8F:4D:5A:58:D1:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/1504f5da-3087-3949-99ea-e1109e260ad2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:ef:fa:3a:61:0a:d8:b8:ad:10:c1:4b:5b:3d:c9:00:bc:49: 94:f6:69:34:29:6b:ed:b7:f8:64:f8:92:6b:3a:21:e3:f5:ed: bb:40:09:69:64:c8:9d:fb:77:0c:08:5a:6d:1a:9f:66:1e:10: 57:3b:58:11:f2:40:7c:4d:79:30:60:a8:9e:17:d4:d4:3a:57: 9e:08:b1:e0:66:c4:f6:47:fe:bf:21:dd:dd:4c:5a:c5:ff:07: 4d:3e:2a:7e:df:13:ea:a2:ec:74:bc:69:61:81:14:11:96:1e: 7d:5a:88:ad:d4:99:fd:5a:fe:09:29:19:df:69:97:24:7d:c6: 71:0e:80:95:0f:8a:13:4b:c6:64:42:0c:e1:68:ab:fc:f8:10: 67:a0:1b:99:73:f1:71:48:fc:16:4f:c2:40:fe:6f:16:2f:62: 56:0c:fd:6c:17:2a:2a:c5:3d:78:11:70:6a:cf:03:db:f5:91: 27:21:73:cf:39:da:25:99:b3:48:1b:92:43:1f:a9:92:a2:19: 4c:dd:37:2a:16:0b:3b:06:5c:50:d3:ab:9d:ab:f5:28:1e:91: 9b:aa:66:5a:5f:9d:66:f7:ea:e7:d2:57:50:ec:dd:c1:f0:86: 07:0c:af:6c:b2:26:ab:8f:a9:90:38:13:23:01:0e:db:b2:be: 0c:3c:3d:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPbgb8Z/YOqwFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MjdkYzFmMzctNjhlYy00ZDUwLWIwZDItYmRhZjE5NTZhOGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNDUCJCenRX1EiRg2/S2L0CtpldLfogygziK OCYjAI9Qf2ZlWGbC6tchOIXK24x+yFUfWe3wDC3aBS/cLukKUbd5YMnGqFV42TXO plRIXPzEs1PFvo0424+gtcebF3uf2dyt49PXLHmdqSffcSrPS4lEzpqCp3MRkhq5 WKk6cZY7pmPyJq6/K9rJszbH0sXUt/k6uiyMsqDkvjQcNMd3GvZxzCrEj37tmF9O LgUGRWBV/VImIpdcv3IR4/Xl5kqm87eEJ3CXPTh5BXy4Vawvt1CxIF4dFg7D/s3M J7cmKrGqirJ17gVQtnToAqoJvPLOTxzys4vlyhHsljeF2IjTlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzMN6LhWuO/wnfbYkq4j01aWNF8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvMTUwNGY1ZGEtMzA4Ny0z OTQ5LTk5ZWEtZTExMDllMjYwYWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJy/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrv+jphCti4rRDBS1s9yQC8SZT2aTQpa+23+GT4kms6IeP17btACWlk yJ37dwwIWm0an2YeEFc7WBHyQHxNeTBgqJ4X1NQ6V54IseBmxPZH/r8h3d1MWsX/ B00+Kn7fE+qi7HS8aWGBFBGWHn1aiK3Umf1a/gkpGd9plyR9xnEOgJUPihNLxmRC DOFoq/z4EGegG5lz8XFI/BZPwkD+bxYvYlYM/WwXKirFPXgRcGrPA9v1kSchc885 2iWZs0gbkkMfqZKiGUzdNyoWCzsGXFDTq52r9SgekZuqZlpfnWb36ufSV1Ds3cHw hgcMr2yyJquPqZA4EyMBDtuyvgw8Pbc= -----END CERTIFICATE-----Generated at Mon Nov 3 08:44:08 2025 by rpki-client