$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3e3b5b42-836a-34e7-badf-cdb1abc030ea.roa File: 3e3b5b42-836a-34e7-badf-cdb1abc030ea.roa (raw, json) Hash identifier: fyhUiwDH597zz9ZUP8yV5urAXuORal7UnnrW4VseC6w= Subject key identifier: DB:58:E2:4D:14:86:B9:B3:9D:71:AA:BE:F8:5A:24:92:8B:51:C0:E0 Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584B970CF703AEF1DD85A558F540 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3e3b5b42-836a-34e7-badf-cdb1abc030ea.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 16789 IP address blocks: 104.156.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f7:03:ae:f1:dd:85:a5:58:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=a45b9608-b8f8-41aa-9f2e-b27c2b532b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4f:b2:8c:56:05:f5:e6:ee:ee:ff:15:da:d3: 40:3a:ba:4a:78:7c:c5:0a:3b:c4:42:51:50:fd:a8: 60:42:31:6a:9c:d8:b2:a7:b7:23:9b:fd:47:5b:7a: 1a:51:de:9d:bf:a4:5f:9f:6c:63:14:d1:ff:5c:93: 9f:c8:91:6a:35:3d:13:52:3b:f4:12:0f:74:4e:88: f0:f0:b8:70:3c:18:4f:c2:db:76:d8:60:dc:65:52: ca:8a:53:06:e9:0c:10:37:06:fa:82:47:b8:0f:8f: 93:b3:5a:40:c0:9a:d2:0c:f4:d4:37:44:6a:db:13: 1a:05:1f:fb:c6:e0:87:5e:24:9e:b2:a2:d5:28:16: 8e:c3:97:ef:cd:5a:9d:ee:42:22:39:7b:db:d4:1b: 0e:d4:ea:a5:68:a4:43:24:fb:0c:24:54:84:3f:bf: 1a:40:c1:74:a4:f7:1f:dc:ca:72:1e:ba:85:06:f9: 98:d8:a4:d8:ce:26:50:29:6a:c3:f3:43:c1:db:a2: a1:13:dc:d1:16:a7:a9:37:d2:ce:e5:43:ad:57:eb: 47:6d:0a:49:d3:58:da:de:12:6f:ef:0f:dc:d4:91: ff:33:c9:21:d2:6a:48:f5:95:cd:d2:b3:f4:63:e0: e7:55:05:bd:a3:f5:2b:f4:f4:b7:97:6b:83:ac:f2: 89:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:58:E2:4D:14:86:B9:B3:9D:71:AA:BE:F8:5A:24:92:8B:51:C0:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3e3b5b42-836a-34e7-badf-cdb1abc030ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:23:00:84:af:9e:90:f6:d9:16:18:b1:15:65:df:6a:d7:a9: a6:99:bd:4f:89:d6:15:dd:ba:34:cb:ee:c4:57:d4:aa:96:17: 24:f9:02:ca:20:9c:ae:b6:6f:51:61:81:7a:33:82:86:16:8d: 0f:f1:e0:f6:6e:c6:4a:2c:16:ca:55:57:a2:51:b1:2d:87:65: e4:96:60:fd:3f:44:96:c1:eb:e3:9b:35:fe:c9:85:8b:bf:69: a2:b8:50:de:c7:a2:91:1b:35:50:a8:11:d4:37:2b:9e:14:b1: 08:52:23:05:b7:52:52:73:cb:75:38:a6:77:07:92:d0:3e:ef: b4:b9:ad:63:14:0d:6f:d5:80:84:78:da:72:de:61:96:ae:8e: d2:25:de:9b:2d:3f:ce:09:7e:67:59:22:10:1e:ad:45:eb:92: 0c:90:8d:4a:d3:73:34:57:39:43:c1:78:72:5c:00:9e:e4:81: 2d:ea:b1:b5:79:bc:87:b9:52:32:57:35:c7:e2:ab:d0:84:0f: f8:e7:7d:1c:5e:9f:d6:b7:74:1b:ca:eb:4d:f2:4c:40:f6:b3: d9:c6:83:f6:33:3c:c8:94:6b:ae:98:c5:f1:7f:4f:35:cd:5b: b7:aa:e7:7e:ae:d7:cd:32:67:31:5d:b6:5b:11:68:26:a4:71: b1:f8:00:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPcDrvHdhaVY9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YTQ1Yjk2MDgtYjhmOC00MWFhLTlmMmUtYjI3YzJiNTMyYjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkE+yjFYF9ebu7v8V2tNAOrpKeHzFCjvEQlFQ /ahgQjFqnNiyp7cjm/1HW3oaUd6dv6Rfn2xjFNH/XJOfyJFqNT0TUjv0Eg90Tojw 8LhwPBhPwtt22GDcZVLKilMG6QwQNwb6gke4D4+Ts1pAwJrSDPTUN0Rq2xMaBR/7 xuCHXiSesqLVKBaOw5fvzVqd7kIiOXvb1BsO1OqlaKRDJPsMJFSEP78aQMF0pPcf 3MpyHrqFBvmY2KTYziZQKWrD80PB26KhE9zRFqepN9LO5UOtV+tHbQpJ01ja3hJv 7w/c1JH/M8kh0mpI9ZXN0rP0Y+DnVQW9o/Ur9PS3l2uDrPKJeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtY4k0UhrmznXGqvvhaJJKLUcDgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvM2UzYjViNDItODM2YS0z NGU3LWJhZGYtY2RiMWFiYzAzMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaJyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIjAISvnpD22RYYsRVl32rXqaaZvU+J1hXdujTL7sRX1KqWFyT5Asog nK62b1FhgXozgoYWjQ/x4PZuxkosFspVV6JRsS2HZeSWYP0/RJbB6+ObNf7JhYu/ aaK4UN7HopEbNVCoEdQ3K54UsQhSIwW3UlJzy3U4pncHktA+77S5rWMUDW/VgIR4 2nLeYZaujtIl3pstP84JfmdZIhAerUXrkgyQjUrTczRXOUPBeHJcAJ7kgS3qsbV5 vIe5UjJXNcfiq9CED/jnfRxen9a3dBvK603yTED2s9nGg/YzPMiUa66YxfF/TzXN W7eq536u180yZzFdtlsRaCakcbH4ACE= -----END CERTIFICATE-----Generated at Mon Nov 3 08:42:09 2025 by rpki-client