$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/e3baa160-3819-3b7b-8e67-c5cab2e8bf70.roa File: e3baa160-3819-3b7b-8e67-c5cab2e8bf70.roa (raw, json) Hash identifier: k0ZjPqw4vZFp9rflIVIRmIIqW92POjtI0cmr4cZ0K2g= Subject key identifier: 9D:A2:A6:93:72:BC:AA:0F:63:AA:C6:4E:D4:A8:2E:F6:65:13:A0:68 Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584B99D79F980E26280A1E4AFB80 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/e3baa160-3819-3b7b-8e67-c5cab2e8bf70.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 16789 IP address blocks: 104.156.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:9f:98:0e:26:28:0a:1e:4a:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=c3c5cf4c-4d2f-4dbc-9412-778fade51aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a6:eb:6f:d1:35:1e:10:5e:51:79:2b:b0:78: 45:74:86:56:ed:ea:b9:42:35:d4:a1:01:b6:de:0b: 94:a2:50:5b:19:54:0a:d1:8a:f6:8c:06:6a:a0:27: 4f:c2:02:f5:e5:ed:24:ce:e9:95:09:3e:1a:d0:27: 01:05:77:b3:3d:a7:fe:52:f6:0b:e5:20:c9:e2:c4: 04:ea:24:0f:bf:72:8a:e8:53:0d:52:d4:9e:84:98: 07:5f:14:e3:e3:c5:e4:1a:9b:ef:93:b2:e8:e1:9a: a7:8e:43:76:e5:3b:23:1a:bb:56:bd:dc:df:fb:5a: 4b:9b:cd:73:03:7b:d0:f2:9d:9d:f1:79:9c:06:2b: 8a:54:8a:37:d2:32:a8:9c:1d:f1:5a:53:a0:dd:89: 7e:4b:74:fc:ea:0f:0d:52:dc:3b:95:cf:79:ab:96: 0e:18:a8:10:28:4d:43:bc:30:84:7b:06:8b:d4:37: fd:19:85:60:1d:31:7f:34:38:4b:1d:b0:aa:fe:2e: 37:9a:40:9f:40:78:b9:5f:1f:95:6a:56:82:d6:6e: 0a:fb:2e:62:8f:19:79:91:19:5d:98:3e:34:3e:e8: 2d:b0:64:4e:e7:3b:80:fe:8b:d8:8a:75:2b:10:0a: 1d:1e:53:ac:5f:26:ad:65:a7:fc:7f:9f:95:99:67: 77:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A2:A6:93:72:BC:AA:0F:63:AA:C6:4E:D4:A8:2E:F6:65:13:A0:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/e3baa160-3819-3b7b-8e67-c5cab2e8bf70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:7d:7a:5d:3b:57:7e:6d:39:2e:a2:6e:ff:e4:18:aa:d1:3c: e1:d4:27:a6:1d:68:a8:f4:5f:76:5b:7e:23:a4:73:73:3d:dc: 13:1d:15:f4:f7:ba:2c:59:b1:dd:7d:75:18:d9:35:0a:b7:e5: 9e:ed:9c:23:d5:21:78:56:41:f6:c0:b6:81:ef:cc:96:7f:a8: 31:74:00:db:6c:e6:cf:5f:3b:6b:d7:fb:33:ff:b0:5e:fd:e9: fb:ac:a7:a7:1b:fe:b7:4b:f2:13:71:78:bc:7e:87:71:d4:db: fe:cc:36:ea:e0:cb:25:88:ba:09:0c:ca:24:e2:6e:ff:54:97: e8:fe:00:f1:a1:5c:64:6a:6d:36:46:ff:83:55:af:30:42:52: ff:58:7c:86:7d:17:c3:aa:6c:c4:f2:9e:49:80:49:76:33:63: 37:b1:ca:b3:c7:51:c6:46:bf:44:8b:11:ac:5c:54:60:a8:f0: 9b:dd:3a:ce:cd:a3:c7:1e:7a:48:41:72:70:df:19:a7:f8:29: 33:27:06:b4:b3:19:11:ff:df:80:69:d6:f7:32:b7:01:eb:24: 38:fe:75:03:2f:ea:fb:e3:2e:35:b0:ac:f0:39:db:f0:c5:74: f0:7b:ff:20:66:df:94:53:07:0b:87:92:19:a6:24:90:d3:bf: be:54:f6:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ15+YDiYoCh5K+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YzNjNWNmNGMtNGQyZi00ZGJjLTk0MTItNzc4ZmFkZTUxYWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhabrb9E1HhBeUXkrsHhFdIZW7eq5QjXUoQG2 3guUolBbGVQK0Yr2jAZqoCdPwgL15e0kzumVCT4a0CcBBXezPaf+UvYL5SDJ4sQE 6iQPv3KK6FMNUtSehJgHXxTj48XkGpvvk7Lo4ZqnjkN25TsjGrtWvdzf+1pLm81z A3vQ8p2d8XmcBiuKVIo30jKonB3xWlOg3Yl+S3T86g8NUtw7lc95q5YOGKgQKE1D vDCEewaL1Df9GYVgHTF/NDhLHbCq/i43mkCfQHi5Xx+ValaC1m4K+y5ijxl5kRld mD40PugtsGRO5zuA/ovYinUrEAodHlOsXyatZaf8f5+VmWd39QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2ippNyvKoPY6rGTtSoLvZlE6BoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvZTNiYWExNjAtMzgxOS0z YjdiLThlNjctYzVjYWIyZThiZjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaJygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG59el07V35tOS6ibv/kGKrRPOHUJ6YdaKj0X3ZbfiOkc3M93BMdFfT3 uixZsd19dRjZNQq35Z7tnCPVIXhWQfbAtoHvzJZ/qDF0ANts5s9fO2vX+zP/sF79 6fusp6cb/rdL8hNxeLx+h3HU2/7MNurgyyWIugkMyiTibv9Ul+j+APGhXGRqbTZG /4NVrzBCUv9YfIZ9F8OqbMTynkmASXYzYzexyrPHUcZGv0SLEaxcVGCo8JvdOs7N o8ceekhBcnDfGaf4KTMnBrSzGRH/34Bp1vcytwHrJDj+dQMv6vvjLjWwrPA52/DF dPB7/yBm35RTBwuHkhmmJJDTv75U9lQ= -----END CERTIFICATE-----Generated at Mon Nov 3 08:43:45 2025 by rpki-client