$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3c866c81-424a-3e1e-ac78-0550da029957.roa File: 3c866c81-424a-3e1e-ac78-0550da029957.roa (raw, json) Hash identifier: bFKkUa/LIt9XrypBB5jZCBxkRwQUkzgupC9FrrLxwzU= Subject key identifier: 42:FE:8E:80:11:47:2D:89:A7:B5:B5:82:A0:2B:50:15:B0:D5:B5:19 Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584B9CA22FF8C9EF10D1EBC25A00 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3c866c81-424a-3e1e-ac78-0550da029957.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 16789 IP address blocks: 104.156.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:2f:f8:c9:ef:10:d1:eb:c2:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=0cc2e35f-5903-4b1d-86a1-e2e822dbc12c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9d:7f:1a:13:15:00:10:df:89:ad:68:05:a3: f6:a2:02:ab:9b:87:c5:09:fb:85:94:41:71:2b:f4: 0c:02:e9:d6:d0:fc:8d:8d:fd:f2:21:5d:ab:27:6e: 1c:4e:5f:f2:43:7c:ff:66:0a:f0:f4:a0:e9:be:a4: 2e:06:05:76:c1:a5:fb:2e:aa:9e:bd:7c:ce:a5:b0: 86:40:69:b9:07:42:ec:39:c9:b5:92:6f:3b:a1:a0: b6:6a:b5:8b:0e:4f:e7:55:70:6c:4b:f3:ba:87:12: b5:72:c4:5a:98:0e:5c:8a:ab:03:63:ab:4f:4e:13: 78:8b:83:18:07:ba:cc:1a:b5:46:2f:fc:1f:7e:b4: 89:12:9d:a2:3a:0d:bc:1b:0d:26:8c:a6:8f:ca:2c: 0c:f6:7b:59:89:9b:3b:57:64:8c:66:36:80:48:d0: d2:a0:0f:f6:e3:34:4b:73:99:96:fd:69:e6:3a:88: 0a:6d:6d:db:58:c0:b8:e8:4d:69:f5:c6:ef:54:80: df:c1:70:1e:bc:8e:b2:f0:2e:ca:0d:0d:98:6b:c5: 2b:d5:9e:27:09:70:ec:78:a7:90:ca:38:d3:b1:0a: 46:89:c8:6c:8c:1b:81:68:00:8e:07:6c:c1:87:9d: 38:d6:c0:e5:96:af:1a:24:ee:b3:68:95:e0:04:ca: b2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:FE:8E:80:11:47:2D:89:A7:B5:B5:82:A0:2B:50:15:B0:D5:B5:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3c866c81-424a-3e1e-ac78-0550da029957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:99:c9:63:f5:9d:13:14:3e:30:d6:7b:53:cc:4d:70:5d:76: 7e:a5:ea:52:e1:87:8c:41:59:83:a5:b6:10:14:68:7f:2c:3a: 50:a1:0c:b0:67:a4:ee:2b:1b:fa:ae:d2:d6:77:d9:5f:2c:d7: 05:ba:92:84:c2:b1:ab:86:c6:ad:65:bc:ee:65:d7:eb:0b:ed: b2:83:10:ab:ea:c8:43:1b:19:67:1e:5b:d8:fd:71:df:60:bb: 2d:9f:6c:63:c8:22:ff:6b:da:06:02:c0:f1:09:14:14:b5:49: 5c:77:17:40:19:fc:34:fc:07:ed:5c:a4:96:51:c2:cf:80:eb: 72:91:e1:c2:1b:28:41:d9:3d:f2:49:52:12:fb:e1:92:cd:d2: c4:a3:91:31:7a:b5:a6:72:0e:5f:c7:7a:60:ac:b4:d3:8a:72: 36:7f:7a:90:79:2d:e9:e8:36:44:74:83:b4:cd:bd:94:94:42: 81:29:5d:fb:9f:6b:dd:de:e5:12:fa:a7:58:10:9b:77:79:91: d4:c3:60:22:6c:fc:c1:4b:34:a8:2b:d5:a8:59:7f:96:7f:63: fa:cb:4c:6e:ab:63:ef:6d:d4:34:ba:c8:b0:a2:54:38:18:26: 2e:ce:b4:f3:74:8e:0d:00:f6:a7:98:c6:89:12:10:50:d1:26: 70:c7:8c:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucoi/4ye8Q0evCWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk MGNjMmUzNWYtNTkwMy00YjFkLTg2YTEtZTJlODIyZGJjMTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi51/GhMVABDfia1oBaP2ogKrm4fFCfuFlEFx K/QMAunW0PyNjf3yIV2rJ24cTl/yQ3z/Zgrw9KDpvqQuBgV2waX7LqqevXzOpbCG QGm5B0LsOcm1km87oaC2arWLDk/nVXBsS/O6hxK1csRamA5ciqsDY6tPThN4i4MY B7rMGrVGL/wffrSJEp2iOg28Gw0mjKaPyiwM9ntZiZs7V2SMZjaASNDSoA/24zRL c5mW/WnmOogKbW3bWMC46E1p9cbvVIDfwXAevI6y8C7KDQ2Ya8Ur1Z4nCXDseKeQ yjjTsQpGichsjBuBaACOB2zBh5041sDllq8aJO6zaJXgBMqycwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEL+joARRy2Jp7W1gqArUBWw1bUZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvM2M4NjZjODEtNDI0YS0z ZTFlLWFjNzgtMDU1MGRhMDI5OTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJynMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCZyWP1nRMUPjDWe1PMTXBddn6l6lLhh4xBWYOlthAUaH8sOlChDLBn pO4rG/qu0tZ32V8s1wW6koTCsauGxq1lvO5l1+sL7bKDEKvqyEMbGWceW9j9cd9g uy2fbGPIIv9r2gYCwPEJFBS1SVx3F0AZ/DT8B+1cpJZRws+A63KR4cIbKEHZPfJJ UhL74ZLN0sSjkTF6taZyDl/HemCstNOKcjZ/epB5LenoNkR0g7TNvZSUQoEpXfuf a93e5RL6p1gQm3d5kdTDYCJs/MFLNKgr1ahZf5Z/Y/rLTG6rY+9t1DS6yLCiVDgY Ji7OtPN0jg0A9qeYxokSEFDRJnDHjLQ= -----END CERTIFICATE-----Generated at Mon Nov 3 08:44:08 2025 by rpki-client