$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/db71ad38-6d21-32a9-a4b1-37719fefa5f5.roa File: db71ad38-6d21-32a9-a4b1-37719fefa5f5.roa (raw, json) Hash identifier: AExHgtvXlcX0o5FHdz4S+Kqyzdm4uRCPxhsK8sEY6Ko= Subject key identifier: A5:BD:B9:61:28:0F:E7:95:0B:46:62:19:CB:9D:8F:C1:E8:E6:F6:DC Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584B9E07A7383A3AFDA51D9550F0 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/db71ad38-6d21-32a9-a4b1-37719fefa5f5.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.156.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:a7:38:3a:3a:fd:a5:1d:95:50:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=0164cfef-02fe-4d02-b7b0-893cf5eb8f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:05:89:b0:50:8b:96:fa:0f:cb:5c:3e:00:04: 9c:c2:d6:7e:12:b7:57:c4:74:dd:42:86:13:1c:08: 2e:9d:c6:18:02:3b:2f:2c:78:fe:21:55:81:21:54: e3:bb:5a:36:95:d9:f8:e2:e4:d7:b3:5e:1a:df:c8: da:4c:c0:e3:70:5a:c1:e0:86:e2:67:da:f5:fd:d2: f8:25:a8:f2:bc:05:e1:36:6e:9f:fe:16:4a:c1:d4: fe:68:a4:26:51:5b:fe:3f:da:f0:6c:9d:6d:3b:e7: cc:d2:72:1c:5b:7e:74:5f:ef:30:61:6a:7b:ff:6a: d0:ca:01:40:cf:af:93:48:07:a4:4a:01:96:13:a9: eb:5e:5d:ce:22:13:e2:e1:ae:8b:60:ee:c3:ef:d8: 9c:ce:a2:70:02:d2:f0:04:13:ae:f4:56:3f:f8:de: 9a:26:85:15:89:3e:2c:bf:24:bc:d7:de:57:cb:cf: 26:ac:b4:1c:f5:d9:d1:ee:25:02:bb:7a:e1:55:0b: d3:37:07:ab:c2:44:f6:5b:29:d9:ff:54:7b:05:d5: 5a:26:9e:db:c3:06:29:43:94:5f:ef:5f:f3:f2:45: ed:7c:59:97:b6:55:85:56:39:17:32:8b:e1:b5:aa: bf:41:ef:18:06:e3:bb:9a:73:2e:72:84:00:4c:76: 2c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BD:B9:61:28:0F:E7:95:0B:46:62:19:CB:9D:8F:C1:E8:E6:F6:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/db71ad38-6d21-32a9-a4b1-37719fefa5f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:73:e0:50:ac:9b:42:d5:9c:6d:3d:8d:d8:38:d6:b8:f9:cf: b4:1e:ff:99:b5:1e:74:80:cc:d1:54:f6:c2:3c:be:19:e0:88: fc:79:06:af:38:30:92:83:a0:ea:27:49:43:fb:ec:f8:ec:d1: 4f:7a:f1:ec:7c:d9:01:66:4c:6a:bc:af:05:1a:62:04:41:d2: 3c:47:6e:85:bd:d2:e2:3a:ad:97:92:85:0b:8d:89:12:eb:37: 71:45:b0:d4:a9:1a:b4:39:a1:4a:81:c3:67:4d:27:2c:dd:7f: 63:43:e7:71:9c:19:e3:d5:1d:6a:fc:05:90:80:66:c1:74:3e: 95:2b:f5:df:27:17:d8:76:d9:ad:04:ee:c7:d4:6a:05:3b:43: 06:8d:26:10:f8:af:51:fe:91:9b:8c:2b:a6:c7:8d:74:c5:b3: e3:70:05:aa:ef:9c:bc:85:be:28:89:7e:93:5d:a4:c5:a8:04: 42:7e:af:8b:c8:cc:1a:81:b0:89:0e:8c:a5:b0:81:d3:85:ae: 4b:bc:39:f6:3c:6d:d7:6c:81:6d:8a:16:8a:de:63:a9:d0:c0: b2:d1:47:4a:09:44:4e:92:ab:0d:ed:0d:74:d8:cd:9a:27:47: c6:50:e4:b8:ac:e8:77:64:4b:cc:0e:09:86:b9:63:3c:d1:ff: 82:1b:4a:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB6c4Ojr9pR2VUPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MDE2NGNmZWYtMDJmZS00ZDAyLWI3YjAtODkzY2Y1ZWI4ZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAWJsFCLlvoPy1w+AAScwtZ+ErdXxHTdQoYT HAguncYYAjsvLHj+IVWBIVTju1o2ldn44uTXs14a38jaTMDjcFrB4IbiZ9r1/dL4 JajyvAXhNm6f/hZKwdT+aKQmUVv+P9rwbJ1tO+fM0nIcW350X+8wYWp7/2rQygFA z6+TSAekSgGWE6nrXl3OIhPi4a6LYO7D79iczqJwAtLwBBOu9FY/+N6aJoUViT4s vyS8195Xy88mrLQc9dnR7iUCu3rhVQvTNwerwkT2WynZ/1R7BdVaJp7bwwYpQ5Rf 71/z8kXtfFmXtlWFVjkXMovhtaq/Qe8YBuO7mnMucoQATHYsWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKW9uWEoD+eVC0ZiGcudj8Ho5vbcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvZGI3MWFkMzgtNmQyMS0z MmE5LWE0YjEtMzc3MTlmZWZhNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlz4FCsm0LVnG09jdg41rj5z7Qe/5m1HnSAzNFU9sI8vhngiPx5Bq84 MJKDoOonSUP77Pjs0U968ex82QFmTGq8rwUaYgRB0jxHboW90uI6rZeShQuNiRLr N3FFsNSpGrQ5oUqBw2dNJyzdf2ND53GcGePVHWr8BZCAZsF0PpUr9d8nF9h22a0E 7sfUagU7QwaNJhD4r1H+kZuMK6bHjXTFs+NwBarvnLyFviiJfpNdpMWoBEJ+r4vI zBqBsIkOjKWwgdOFrku8OfY8bddsgW2KForeY6nQwLLRR0oJRE6Sqw3tDXTYzZon R8ZQ5Lis6HdkS8wOCYa5YzzR/4IbSms= -----END CERTIFICATE-----Generated at Wed Nov 5 04:15:12 2025 by rpki-client