$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/937b1672-0e43-321d-b01b-3b0d13dd74fc.roa File: 937b1672-0e43-321d-b01b-3b0d13dd74fc.roa (raw, json) Hash identifier: lgKNC+pBrQMv3wfXB+2mJiA+n3gUH7gjoiOJqslWRkM= Subject key identifier: 6E:87:22:EC:71:B1:DA:99:3F:AD:BE:59:0B:10:97:FC:A1:E9:38:24 Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584BAA97A4373763C7361BA310A0 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/937b1672-0e43-321d-b01b-3b0d13dd74fc.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 16789 IP address blocks: 104.156.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a4:37:37:63:c7:36:1b:a3:10:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=de3836c0-e1c9-411b-a8d8-a2dff731c549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:99:6f:38:18:87:18:f0:d1:5e:47:af:a6:b0: 49:5e:58:c1:e6:ad:2d:24:c2:22:a4:8d:ae:93:9e: a2:72:1d:75:47:72:de:60:a5:0c:0b:b1:fb:18:fa: e2:3b:05:8b:63:b3:ba:b4:1d:4c:b2:ad:ed:ce:7a: 30:c9:e3:6d:47:c6:70:a6:b2:4d:8c:b6:13:9e:63: 46:c4:32:73:85:cc:bb:d8:0b:78:b2:52:08:bb:ef: 5e:03:64:24:cf:22:e6:ec:d5:a2:eb:d5:09:b8:71: 82:cd:3d:35:1a:01:ad:4a:87:32:66:a1:4b:59:af: 10:de:71:f8:10:e0:df:d9:d2:67:fd:f0:28:62:c1: 2f:ca:28:76:d2:bf:04:c9:33:01:16:f6:45:f0:18: 36:d1:83:92:63:ab:6a:75:f4:9e:3d:87:7d:92:54: ea:66:a0:9a:8a:99:96:73:94:81:33:bc:59:a5:08: 1a:aa:56:cb:b8:f9:e6:b8:1d:b4:f6:8d:23:63:2e: e0:37:5e:61:b5:1b:92:5c:bf:04:4a:ae:57:1b:fa: 37:9d:c2:4f:e9:76:f3:84:f8:88:ef:36:ee:0b:8b: 35:cd:62:73:71:e0:d0:4a:cd:b2:bf:36:8a:06:49: bd:ac:c3:d1:8d:91:58:af:79:68:dd:8f:67:20:a4: 79:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:87:22:EC:71:B1:DA:99:3F:AD:BE:59:0B:10:97:FC:A1:E9:38:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/937b1672-0e43-321d-b01b-3b0d13dd74fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:b8:9f:c8:ef:a0:40:35:cf:07:c5:5d:37:69:d2:5a:b5:91: b5:36:fb:fd:35:fa:7e:a7:a3:9c:af:e9:d1:0c:a2:76:cf:1f: 31:91:01:aa:76:f8:79:7d:7d:18:fa:cd:c6:65:f5:ba:1c:cc: 9e:a7:83:23:5a:66:24:b9:55:e7:8f:5b:19:19:da:64:0a:65: 93:48:37:84:64:5a:b0:c5:f4:76:23:32:8e:9b:1a:10:4c:52: 16:fb:b5:f1:53:bc:b6:f1:f3:ae:a2:10:8d:ff:a5:e2:b6:99: 1e:f6:92:75:d2:da:39:1d:4f:88:28:1d:f9:aa:73:89:c0:75: 26:52:ff:44:2a:63:db:97:70:de:b8:57:7a:54:48:e3:70:e2: ec:42:de:7d:61:ad:d9:a5:16:41:eb:aa:5b:7d:39:5a:af:34: 64:a4:76:8d:af:77:dd:8e:08:6c:1f:4c:37:f7:57:0e:c9:6a: 26:90:4f:b9:80:20:1b:08:a6:3d:68:d6:08:1c:93:dd:48:99: a5:80:c5:ef:39:24:d5:ec:96:12:6e:bf:65:d9:5e:58:2b:15: a0:33:ee:dd:58:46:1f:bc:02:71:37:9d:b9:45:39:eb:7e:d6: 45:3d:9c:c8:5e:eb:bc:40:f0:33:6e:5f:7b:68:07:37:a7:57: 07:14:ea:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6Q3N2PHNhujEKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk ZGUzODM2YzAtZTFjOS00MTFiLWE4ZDgtYTJkZmY3MzFjNTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5lvOBiHGPDRXkevprBJXljB5q0tJMIipI2u k56ich11R3LeYKUMC7H7GPriOwWLY7O6tB1Msq3tznowyeNtR8ZwprJNjLYTnmNG xDJzhcy72At4slIIu+9eA2QkzyLm7NWi69UJuHGCzT01GgGtSocyZqFLWa8Q3nH4 EODf2dJn/fAoYsEvyih20r8EyTMBFvZF8Bg20YOSY6tqdfSePYd9klTqZqCaipmW c5SBM7xZpQgaqlbLuPnmuB209o0jYy7gN15htRuSXL8ESq5XG/o3ncJP6XbzhPiI 7zbuC4s1zWJzceDQSs2yvzaKBkm9rMPRjZFYr3lo3Y9nIKR5owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6HIuxxsdqZP62+WQsQl/yh6TgkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvOTM3YjE2NzItMGU0My0z MjFkLWIwMWItM2IwZDEzZGQ3NGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaJyuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADC4n8jvoEA1zwfFXTdp0lq1kbU2+/01+n6no5yv6dEMonbPHzGRAap2 +Hl9fRj6zcZl9boczJ6ngyNaZiS5VeePWxkZ2mQKZZNIN4RkWrDF9HYjMo6bGhBM Uhb7tfFTvLbx866iEI3/peK2mR72knXS2jkdT4goHfmqc4nAdSZS/0QqY9uXcN64 V3pUSONw4uxC3n1hrdmlFkHrqlt9OVqvNGSkdo2vd92OCGwfTDf3Vw7JaiaQT7mA IBsIpj1o1ggck91ImaWAxe85JNXslhJuv2XZXlgrFaAz7t1YRh+8AnE3nblFOet+ 1kU9nMhe67xA8DNuX3toBzenVwcU6gQ= -----END CERTIFICATE-----Generated at Mon Nov 3 08:43:46 2025 by rpki-client