$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/dce78afd-226b-3759-b311-de9486192567.roa File: dce78afd-226b-3759-b311-de9486192567.roa (raw, json) Hash identifier: 72i0CNRK5qkVbtSPlxRKd48m+jKfu1HswdZGBGUCq/o= Subject key identifier: 08:11:C4:2B:B2:43:1B:CA:4C:E9:53:07:2D:81:69:67:76:19:1B:C8 Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584B9CA22FE3A35834A5A89A6280 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/dce78afd-226b-3759-b311-de9486192567.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 16789 IP address blocks: 104.156.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:2f:e3:a3:58:34:a5:a8:9a:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=e6436204-26fd-47e7-b961-47f83d76e6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ba:bb:7c:dd:20:b3:51:8d:96:28:4f:53:cc: ca:30:45:d5:29:5c:dc:1a:5d:b3:af:08:d7:e3:bd: f0:bc:cf:4d:f9:f7:9e:5b:03:d9:4c:a8:19:00:cf: c2:2a:82:fa:be:06:c5:6b:7d:fe:59:78:8b:07:56: ab:df:22:d5:b1:36:f8:e0:7b:70:5d:4b:16:ca:64: c9:de:ca:c0:e6:28:c7:af:c9:6d:3e:5b:9c:59:b3: 72:2f:5a:33:be:6a:99:18:7d:fd:75:6a:16:83:99: cd:78:e5:43:8e:d7:d7:ce:b2:ee:6e:a0:0d:d6:bb: 8a:e6:19:4d:16:dc:af:78:b7:cf:3f:dc:f7:ef:17: 87:c1:77:86:c9:34:95:5c:4d:00:bb:1c:11:ae:25: 25:36:47:92:ac:cf:84:46:2f:2e:02:d7:00:38:36: 4d:51:58:2a:96:39:bf:e3:83:4a:7a:03:b2:82:2b: bc:e0:cb:65:c3:8d:bc:e5:28:bd:21:28:2e:0f:69: f2:fc:36:4c:f4:d4:5c:70:76:1e:5e:0b:5c:c0:4d: 69:78:45:1e:f8:55:1f:90:61:6d:43:85:1b:40:cb: f5:12:62:2f:dc:7b:39:73:f1:39:92:50:b4:c4:b6: 72:2e:44:4c:7f:60:8e:de:a2:91:3f:c5:61:d1:4a: fc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:11:C4:2B:B2:43:1B:CA:4C:E9:53:07:2D:81:69:67:76:19:1B:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/dce78afd-226b-3759-b311-de9486192567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:3e:c8:75:2f:d4:4e:b3:2c:05:29:8c:9b:e9:e8:39:62:24: 54:35:a8:2c:cc:7e:99:01:2f:ff:62:51:5f:92:24:29:a2:21: 7f:61:6e:e5:fb:9e:18:18:a2:17:00:88:db:4a:a4:30:ed:49: b2:2c:09:b2:49:b5:7f:2b:58:68:1c:cb:62:94:bc:aa:97:dd: 6e:d1:43:fe:7c:06:f3:d7:30:4b:1a:4c:c5:a2:8f:f1:89:bf: ac:ab:43:df:42:72:50:bc:52:e9:ff:53:8c:d2:aa:2f:74:2d: 11:46:18:3a:22:3e:ff:2c:7b:09:df:70:10:30:a5:67:e1:74: 27:86:ee:e8:8a:74:c4:80:d5:9b:c3:7b:f7:17:16:e2:62:76: aa:33:3d:a2:f0:66:7a:95:8b:b4:5e:6a:81:08:d8:8d:91:d5: fc:64:23:13:20:ad:1a:52:16:bd:f1:ec:3f:ef:06:27:04:72: 4c:2d:d5:cd:66:f1:f8:4c:c6:bf:13:90:76:a6:6c:bc:95:8d: 50:61:d7:5c:83:4c:44:f4:cf:c3:2d:ea:2a:77:d5:ca:a8:4e: 1e:1e:a8:22:a5:3b:31:93:71:62:e3:68:27:92:43:73:8e:28: 12:00:76:bf:f4:5d:2e:4f:f3:40:5e:96:19:cf:56:b3:d0:98: 76:1c:c0:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucoi/jo1g0paiaYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk ZTY0MzYyMDQtMjZmZC00N2U3LWI5NjEtNDdmODNkNzZlNmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrq7fN0gs1GNlihPU8zKMEXVKVzcGl2zrwjX 473wvM9N+feeWwPZTKgZAM/CKoL6vgbFa33+WXiLB1ar3yLVsTb44HtwXUsWymTJ 3srA5ijHr8ltPlucWbNyL1ozvmqZGH39dWoWg5nNeOVDjtfXzrLubqAN1ruK5hlN FtyveLfPP9z37xeHwXeGyTSVXE0AuxwRriUlNkeSrM+ERi8uAtcAODZNUVgqljm/ 44NKegOygiu84Mtlw4285Si9ISguD2ny/DZM9NRccHYeXgtcwE1peEUe+FUfkGFt Q4UbQMv1EmIv3Hs5c/E5klC0xLZyLkRMf2CO3qKRP8Vh0Ur8cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgRxCuyQxvKTOlTBy2BaWd2GRvIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvZGNlNzhhZmQtMjI2Yi0z NzU5LWIzMTEtZGU5NDg2MTkyNTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaJyqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8+yHUv1E6zLAUpjJvp6DliJFQ1qCzMfpkBL/9iUV+SJCmiIX9hbuX7 nhgYohcAiNtKpDDtSbIsCbJJtX8rWGgcy2KUvKqX3W7RQ/58BvPXMEsaTMWij/GJ v6yrQ99CclC8Uun/U4zSqi90LRFGGDoiPv8sewnfcBAwpWfhdCeG7uiKdMSA1ZvD e/cXFuJidqozPaLwZnqVi7ReaoEI2I2R1fxkIxMgrRpSFr3x7D/vBicEckwt1c1m 8fhMxr8TkHambLyVjVBh11yDTET0z8Mt6ip31cqoTh4eqCKlOzGTcWLjaCeSQ3OO KBIAdr/0XS5P80BelhnPVrPQmHYcwJ0= -----END CERTIFICATE-----Generated at Mon Nov 3 08:44:08 2025 by rpki-client