$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/7b17f2ba-c1a4-345f-b510-6da4763a4694.roa File: 7b17f2ba-c1a4-345f-b510-6da4763a4694.roa (raw, json) Hash identifier: L9FkNBiHaUbCSfEKnipeWeD2n/aFwU4hUDzW4bWQGPQ= Subject key identifier: 91:07:F2:5C:86:C8:98:45:17:EE:14:02:F6:19:F0:CB:E1:C4:5A:31 Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584B9E07D36D209943CD7686EBC0 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/7b17f2ba-c1a4-345f-b510-6da4763a4694.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16789 IP address blocks: 104.156.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:d3:6d:20:99:43:cd:76:86:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=52f395e8-8d4b-4ebb-8f07-c271918c79ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:68:39:aa:4c:4d:db:8e:01:be:1c:56:d9:73: 29:b9:0b:ea:c3:d3:81:7f:f0:c6:c4:11:3f:9f:bc: 43:75:b6:86:b9:2e:61:e6:b4:2f:23:da:94:38:dc: 5e:b6:72:94:29:6b:dc:f9:72:3d:15:54:5c:87:81: 4d:bf:fb:e6:10:a1:dd:10:00:65:80:08:50:d9:03: fc:33:36:23:5f:9a:e8:4b:c5:9a:56:bd:19:95:3d: 67:b4:97:79:50:28:3c:1e:6f:40:b9:ca:1b:7e:7e: c0:fd:05:a8:b4:4c:2d:92:ba:6c:8f:b2:e7:7f:2b: 6c:14:8e:ac:49:a8:7c:ee:11:17:5c:21:d5:49:8e: 8b:12:70:c3:f8:de:d3:07:55:55:d8:be:0c:fa:c3: a7:b4:a0:3c:12:04:ca:48:84:5c:25:af:23:e6:1a: 38:fc:3e:e4:0c:9f:24:b5:81:57:09:67:b7:66:b3: 97:d2:6c:0d:03:63:c7:cd:72:9e:69:c2:a3:72:db: 98:f6:43:ef:3a:97:40:89:3a:3d:49:29:04:b0:f1: 94:80:e5:8e:f3:9f:97:7f:d0:a8:6c:68:2e:48:2b: db:a3:df:a3:a7:46:33:8b:3a:40:8e:18:f1:b4:16: e4:ff:39:2c:1b:0a:f6:3c:52:01:d9:f9:55:91:25: 56:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:07:F2:5C:86:C8:98:45:17:EE:14:02:F6:19:F0:CB:E1:C4:5A:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/7b17f2ba-c1a4-345f-b510-6da4763a4694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:85:d9:a6:4d:b4:a9:12:75:41:1e:59:d5:08:a8:1d:ff:4c: 6f:2f:bf:24:78:a0:4a:c5:22:f4:a1:fc:f9:4d:f2:8d:9c:de: 91:cc:7d:c2:28:58:88:2b:63:5e:6d:5b:d5:18:bc:4b:c0:56: 46:46:d6:46:57:d2:2f:a7:4b:3a:f3:b4:a1:50:d2:77:b1:3f: 1b:d4:ba:c4:14:ab:6e:a3:f9:44:ea:99:04:72:53:b4:2e:d6: f2:ca:b4:31:ee:ed:51:f3:59:70:e3:e9:ca:33:1b:65:08:eb: ee:ee:ba:1c:a7:53:ac:a5:5a:66:89:90:bc:b3:09:a9:af:90: 44:7f:5f:21:d6:2f:98:b5:29:82:95:1a:34:f2:f9:06:7f:a7: a4:ba:c2:98:35:df:a1:a4:35:fa:4d:7e:02:80:a2:56:f9:d6: 4f:eb:af:d6:18:fe:2a:6e:a9:f7:c2:e5:2d:aa:86:91:5e:74: 7f:7f:93:db:1f:69:93:f9:b1:73:f6:ae:df:79:4c:60:06:b7: 1a:1d:f1:79:b1:e9:fa:89:c3:a8:1d:3b:03:b4:d5:bc:0e:92: 86:b0:4e:be:62:8e:1f:52:16:eb:c4:4c:e6:b2:7d:a6:de:6e: 50:9f:44:25:f2:bd:7d:12:8a:ef:7d:21:7a:31:2e:b5:3d:3f: a0:6d:17:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB9NtIJlDzXaG68AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NTJmMzk1ZTgtOGQ0Yi00ZWJiLThmMDctYzI3MTkxOGM3OWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2g5qkxN244BvhxW2XMpuQvqw9OBf/DGxBE/ n7xDdbaGuS5h5rQvI9qUONxetnKUKWvc+XI9FVRch4FNv/vmEKHdEABlgAhQ2QP8 MzYjX5roS8WaVr0ZlT1ntJd5UCg8Hm9Aucobfn7A/QWotEwtkrpsj7LnfytsFI6s Sah87hEXXCHVSY6LEnDD+N7TB1VV2L4M+sOntKA8EgTKSIRcJa8j5ho4/D7kDJ8k tYFXCWe3ZrOX0mwNA2PHzXKeacKjctuY9kPvOpdAiTo9SSkEsPGUgOWO85+Xf9Co bGguSCvbo9+jp0YzizpAjhjxtBbk/zksGwr2PFIB2flVkSVWSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEH8lyGyJhFF+4UAvYZ8MvhxFoxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvN2IxN2YyYmEtYzFhNC0z NDVmLWI1MTAtNmRhNDc2M2E0Njk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaJy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALWF2aZNtKkSdUEeWdUIqB3/TG8vvyR4oErFIvSh/PlN8o2c3pHMfcIo WIgrY15tW9UYvEvAVkZG1kZX0i+nSzrztKFQ0nexPxvUusQUq26j+UTqmQRyU7Qu 1vLKtDHu7VHzWXDj6cozG2UI6+7uuhynU6ylWmaJkLyzCamvkER/XyHWL5i1KYKV GjTy+QZ/p6S6wpg136GkNfpNfgKAolb51k/rr9YY/ipuqffC5S2qhpFedH9/k9sf aZP5sXP2rt95TGAGtxod8Xmx6fqJw6gdOwO01bwOkoawTr5ijh9SFuvETOayfabe blCfRCXyvX0Siu99IXoxLrU9P6BtFw4= -----END CERTIFICATE-----Generated at Mon Nov 3 08:43:20 2025 by rpki-client