$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/0e5a622b-034c-3a3b-816e-0f51519ea53e.roa File: 0e5a622b-034c-3a3b-816e-0f51519ea53e.roa (raw, json) Hash identifier: WCKv/8kCab9t9NBCu3PiblnGK8tW7vbmHqR0wmp6r/4= Subject key identifier: DC:2D:EC:7F:13:5A:E3:81:7B:76:4B:7D:29:CA:48:57:DC:3E:C5:1F Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584AB650F98F7D5E97D9D5836020 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/0e5a622b-034c-3a3b-816e-0f51519ea53e.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 16789 IP address blocks: 104.156.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f9:8f:7d:5e:97:d9:d5:83:60:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=b31e500f-c216-4c5e-bdec-92077f484269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0f:72:8f:1f:f1:dd:8e:0e:14:91:c9:4f:fa: 6d:6a:7b:74:5b:05:13:ba:ce:75:77:be:74:2f:b6: 7c:1c:cc:21:17:61:b8:2c:b1:be:ff:08:23:13:2d: df:3c:f6:7e:1a:ac:e8:1a:31:0d:d3:6f:f1:a1:70: e2:c4:de:89:ef:d3:cf:97:fd:2c:82:12:d7:4d:f1: 65:e7:a7:87:5c:10:e7:56:bf:45:f2:d5:e0:83:aa: 39:b8:e2:50:a4:9b:76:c4:ad:6d:37:17:d9:5e:5c: 22:bc:17:f1:77:e0:36:7c:37:00:47:4f:87:e6:28: 98:f0:53:df:32:69:bc:12:68:60:12:32:6f:93:09: 78:c8:0d:2d:f6:05:31:2d:6e:26:06:b4:28:df:15: e2:48:a2:98:e0:f7:a8:d1:d2:61:57:85:b7:18:5d: c8:c4:df:0c:7a:03:28:16:c8:c1:d5:11:06:fe:59: 66:01:7c:ba:f1:d3:1c:4d:4a:92:4d:27:50:6f:9a: 6c:ba:92:b3:41:48:72:53:21:4f:85:64:3d:f1:f9: c1:bc:d8:5a:47:60:5e:4d:0d:57:85:6d:d5:f0:c0: 9e:fb:c4:31:f4:4f:92:0c:ef:83:cc:46:f6:e5:b4: a1:bf:84:b5:d7:e1:91:98:f0:9e:57:af:30:f4:63: c6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2D:EC:7F:13:5A:E3:81:7B:76:4B:7D:29:CA:48:57:DC:3E:C5:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/0e5a622b-034c-3a3b-816e-0f51519ea53e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:63:4c:8e:8c:43:68:ed:02:d5:8d:1d:2c:fb:38:a0:54:d2: 32:2a:cc:f5:ed:01:53:7a:b3:f4:9e:69:97:76:cc:1e:11:2a: 06:d2:1e:27:28:ec:bd:3f:29:d2:09:b5:5b:23:ec:96:bc:54: 40:10:8d:c3:24:98:75:ea:02:1f:8a:e7:b7:19:a6:b5:ec:ec: 8a:eb:83:05:fc:1f:71:15:37:6b:1b:db:17:10:36:c0:94:25: 04:04:b3:4b:81:e4:16:00:2b:0e:e7:fa:89:2c:d3:ac:30:74: 16:b1:0d:b2:46:41:66:85:2a:15:1a:e9:bf:ba:a3:5a:a1:ad: 65:0e:64:37:1c:de:cc:85:03:1a:a4:c4:cd:23:0f:b1:81:7a: 2e:3b:40:e3:19:85:50:95:68:78:75:cd:6c:92:c5:59:30:80: 81:d7:23:1d:cc:95:57:c4:a9:c0:6a:81:d3:b7:46:a9:9e:c5: a0:3b:ad:dc:43:80:3c:61:3c:0a:d8:55:87:a5:5d:7a:5b:4b: fe:8a:68:cd:b2:b3:5a:93:c7:85:d7:0f:22:9a:50:4d:98:06: eb:e1:f2:70:3b:69:74:13:c8:72:3f:e9:49:a5:a9:a2:b9:49: 9c:f0:c9:fe:70:fa:67:00:6b:68:23:7c:b8:8f:d3:cf:bb:0f: fe:b9:65:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UPmPfV6X2dWDYCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk YjMxZTUwMGYtYzIxNi00YzVlLWJkZWMtOTIwNzdmNDg0MjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA9yjx/x3Y4OFJHJT/ptant0WwUTus51d750 L7Z8HMwhF2G4LLG+/wgjEy3fPPZ+GqzoGjEN02/xoXDixN6J79PPl/0sghLXTfFl 56eHXBDnVr9F8tXgg6o5uOJQpJt2xK1tNxfZXlwivBfxd+A2fDcAR0+H5iiY8FPf Mmm8EmhgEjJvkwl4yA0t9gUxLW4mBrQo3xXiSKKY4Peo0dJhV4W3GF3IxN8MegMo FsjB1REG/llmAXy68dMcTUqSTSdQb5psupKzQUhyUyFPhWQ98fnBvNhaR2BeTQ1X hW3V8MCe+8Qx9E+SDO+DzEb25bShv4S11+GRmPCeV68w9GPGEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwt7H8TWuOBe3ZLfSnKSFfcPsUfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvMGU1YTYyMmItMDM0Yy0z YTNiLTgxNmUtMGY1MTUxOWVhNTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtjTI6MQ2jtAtWNHSz7OKBU0jIqzPXtAVN6s/SeaZd2zB4RKgbSHico 7L0/KdIJtVsj7Ja8VEAQjcMkmHXqAh+K57cZprXs7IrrgwX8H3EVN2sb2xcQNsCU JQQEs0uB5BYAKw7n+oks06wwdBaxDbJGQWaFKhUa6b+6o1qhrWUOZDcc3syFAxqk xM0jD7GBei47QOMZhVCVaHh1zWySxVkwgIHXIx3MlVfEqcBqgdO3RqmexaA7rdxD gDxhPArYVYelXXpbS/6KaM2ys1qTx4XXDyKaUE2YBuvh8nA7aXQTyHI/6UmlqaK5 SZzwyf5w+mcAa2gjfLiP08+7D/65ZVk= -----END CERTIFICATE-----Generated at Mon Aug 4 07:44:20 2025 by rpki-client