$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/4d0e32dc-4a57-3c1c-9e8f-04ad397fcd95.roa File: 4d0e32dc-4a57-3c1c-9e8f-04ad397fcd95.roa (raw, json) Hash identifier: cWWao9Z9axjJ5vCSoy9tI0CgWV7ufPA+3YvkmggunEk= Subject key identifier: FD:90:6E:DB:AC:41:8D:DA:C2:89:B0:A3:77:38:8F:4E:D5:7A:AF:80 Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584ACCA653EFD1185C61BA275580 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/4d0e32dc-4a57-3c1c-9e8f-04ad397fcd95.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 16789 IP address blocks: 104.156.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:53:ef:d1:18:5c:61:ba:27:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=d929ed8f-61d1-4b8c-9748-48b3c7011dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dc:f9:a1:b5:f7:68:34:d7:0a:f7:24:a9:f7: 42:40:9d:21:2a:41:f0:41:d4:b8:ca:ab:75:fa:9d: 71:0e:23:a4:38:0c:85:63:c5:00:3b:06:1c:b1:0c: 2f:e5:be:35:21:3c:0a:e9:7f:68:d7:7d:93:20:00: 19:cb:e0:cf:73:ea:91:52:0c:17:d4:39:4a:e9:a6: 69:b8:97:50:2f:38:4e:ff:ff:50:4e:cd:18:00:25: 68:c2:55:c2:4a:0b:3f:df:94:11:72:0e:ab:c7:1b: f8:c7:ee:0c:0c:2e:bb:3b:61:3b:cb:d2:05:2c:0b: f3:e7:a5:f7:4b:f2:bb:76:9a:52:4b:e6:7e:f9:46: 68:b4:99:5c:a7:b6:a3:f2:f7:1c:28:b5:f6:13:18: 14:2f:8c:39:34:6f:97:71:d1:61:25:99:bb:e8:58: 92:f0:75:35:ab:a3:45:d6:86:06:d6:5c:07:f5:5d: 6d:b2:40:1f:e1:93:8c:02:24:1e:c7:46:59:47:6e: 2e:fa:47:b5:55:31:a3:cb:a1:94:36:f1:83:2a:a1: a7:55:3d:5c:f9:b7:97:ef:7c:c9:c4:f5:05:97:56: fa:f4:96:10:66:9e:be:b0:9c:08:12:e2:e6:6c:c5: 28:a2:e0:3d:45:71:92:ba:60:bd:67:72:76:71:67: a2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:90:6E:DB:AC:41:8D:DA:C2:89:B0:A3:77:38:8F:4E:D5:7A:AF:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/4d0e32dc-4a57-3c1c-9e8f-04ad397fcd95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:d2:9e:32:22:5a:9a:31:e6:ff:7b:01:99:5a:1b:0d:50:a3: 63:1f:f0:49:cd:57:15:7c:0f:46:1f:df:ee:44:32:88:35:bd: cb:6d:76:3d:70:7d:6f:19:d2:d3:20:26:83:12:60:f5:83:77: 50:cb:56:47:53:a8:86:4f:86:6f:82:0a:4e:02:85:39:9a:3f: 47:08:6f:ce:3b:bb:e7:84:f3:55:94:4d:63:67:92:e5:04:a9: 6a:b0:6a:6d:98:97:90:ee:25:a4:dc:5f:9f:13:1c:5e:7e:50: 85:fc:2f:04:ab:1c:5d:ba:bf:2b:34:28:6f:8d:8b:72:72:9e: 00:ca:1f:58:65:3d:fc:37:60:42:cb:71:ea:97:77:9b:10:11: 8c:77:f8:87:a9:5a:3c:5e:ec:fb:16:3d:3a:9d:7d:ea:c3:94: 7e:76:08:5f:91:ea:5c:47:bd:d2:36:79:c9:44:c3:ba:52:08: 90:e5:9c:59:b3:33:0b:66:12:30:8f:c4:f6:9f:69:34:90:00: 93:9f:03:f1:f8:d4:04:41:54:2e:86:6b:53:8c:55:d4:d6:96: fb:95:0d:3c:65:ad:b9:a1:87:3e:81:0c:8e:d0:a9:fc:1a:06: 2c:13:44:47:45:62:f0:a4:db:d2:0b:cd:3d:07:11:a5:7b:45: aa:9a:2a:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMplPv0RhcYbonVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZDkyOWVkOGYtNjFkMS00YjhjLTk3NDgtNDhiM2M3MDExZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9z5obX3aDTXCvckqfdCQJ0hKkHwQdS4yqt1 +p1xDiOkOAyFY8UAOwYcsQwv5b41ITwK6X9o132TIAAZy+DPc+qRUgwX1DlK6aZp uJdQLzhO//9QTs0YACVowlXCSgs/35QRcg6rxxv4x+4MDC67O2E7y9IFLAvz56X3 S/K7dppSS+Z++UZotJlcp7aj8vccKLX2ExgUL4w5NG+XcdFhJZm76FiS8HU1q6NF 1oYG1lwH9V1tskAf4ZOMAiQex0ZZR24u+ke1VTGjy6GUNvGDKqGnVT1c+beX73zJ xPUFl1b69JYQZp6+sJwIEuLmbMUoouA9RXGSumC9Z3J2cWeitwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2QbtusQY3awomwo3c4j07Veq+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvNGQwZTMyZGMtNGE1Ny0z YzFjLTllOGYtMDRhZDM5N2ZjZDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDSnjIiWpox5v97AZlaGw1Qo2Mf8EnNVxV8D0Yf3+5EMog1vcttdj1w fW8Z0tMgJoMSYPWDd1DLVkdTqIZPhm+CCk4ChTmaP0cIb847u+eE81WUTWNnkuUE qWqwam2Yl5DuJaTcX58THF5+UIX8LwSrHF26vys0KG+Ni3JyngDKH1hlPfw3YELL ceqXd5sQEYx3+IepWjxe7PsWPTqdferDlH52CF+R6lxHvdI2eclEw7pSCJDlnFmz MwtmEjCPxPafaTSQAJOfA/H41ARBVC6Ga1OMVdTWlvuVDTxlrbmhhz6BDI7Qqfwa BiwTREdFYvCk29ILzT0HEaV7RaqaKro= -----END CERTIFICATE-----Generated at Sat Aug 23 23:46:12 2025 by rpki-client