$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/937b1672-0e43-321d-b01b-3b0d13dd74fc.roa File: 937b1672-0e43-321d-b01b-3b0d13dd74fc.roa (raw, json) Hash identifier: x3w/QzDc1Ed/tm8oDYquMoj9+saXgjoh7VLw8AnE11s= Subject key identifier: 95:CB:6A:1B:AA:E0:74:B0:68:83:6A:39:00:2A:72:CA:B3:96:A1:3B Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584AC9DBA2A0E4EE3BE8C8F94E00 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/937b1672-0e43-321d-b01b-3b0d13dd74fc.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 16789 IP address blocks: 104.156.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:a2:a0:e4:ee:3b:e8:c8:f9:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=a3906f8d-8e49-4782-a381-47ddf4d45d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7b:ab:2a:f5:1f:64:f2:23:28:60:80:50:5f: 5b:33:8b:71:82:87:f4:20:81:55:91:0a:2e:54:4e: b7:5f:6b:ef:10:81:6e:68:58:44:c1:65:62:c2:0f: 77:ad:fc:04:fb:21:15:f4:d2:ee:49:d8:56:6b:ce: 92:2e:7b:3a:b5:87:74:25:77:09:47:f7:69:14:09: bf:75:44:c5:c4:e3:3e:cc:9d:61:dc:98:0d:78:92: bf:a5:bf:b7:c9:06:9b:80:ee:e3:f2:0f:95:46:9f: 16:7b:ae:8a:79:d9:e7:3b:ee:c9:ff:f6:bc:44:1d: 5a:bc:8a:61:bb:93:6b:de:f5:f5:d9:ee:28:f1:bc: c5:a6:cf:5e:4a:4e:d9:52:cc:96:82:06:39:df:bf: c0:d2:38:8d:ea:98:b8:95:58:2b:ea:1e:19:95:79: 12:cb:7e:a8:8f:b6:4c:25:ad:67:36:d0:9a:13:b0: d2:c4:12:f9:28:74:64:19:1c:3e:4b:01:fb:4d:b2: 74:62:ec:1d:1a:05:5d:73:b7:a8:48:37:4a:9b:24: be:70:2b:18:4a:e6:58:1a:c2:30:70:bd:54:eb:65: 2d:9c:db:d8:36:a1:58:59:89:49:73:86:c0:1f:f0: 00:0f:e0:a6:99:98:f0:1d:6e:39:3e:e7:8e:68:c1: ed:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CB:6A:1B:AA:E0:74:B0:68:83:6A:39:00:2A:72:CA:B3:96:A1:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/937b1672-0e43-321d-b01b-3b0d13dd74fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:c0:b9:64:6c:ed:dd:30:26:79:15:8f:70:15:ad:1d:21:59: ab:a8:3e:f2:69:33:c9:54:ad:4b:72:41:7f:63:f5:c6:d2:eb: d3:f7:db:ca:2f:3b:86:3b:18:c3:93:05:f6:31:7d:cf:1b:3f: 1c:da:06:9b:e9:42:c6:91:ac:e2:54:64:22:66:5e:bf:dd:0d: 67:f3:e0:c7:9f:91:6c:c2:9b:3e:8c:c8:0c:ee:87:f5:11:95: 21:30:58:17:20:40:e2:8d:08:37:75:a1:b7:41:35:e2:ba:34: 05:03:c2:c2:b1:df:fd:5a:5b:ef:3e:5c:ac:41:e3:e5:2e:98: 6e:4d:a9:2c:31:93:35:59:6e:c7:d5:64:05:55:86:38:8a:f5: c6:16:c6:fc:75:41:03:0c:50:d7:2c:2f:15:dc:c1:16:0a:c4: b2:d2:8f:d8:02:26:4e:2d:79:03:49:24:fa:19:f9:17:9c:56: 9e:fe:44:53:f6:53:3b:16:e4:4e:aa:6a:9d:d8:22:a1:22:8d: 34:76:27:b1:90:11:aa:ab:9b:8b:ae:da:d3:17:24:7d:3a:2f: 2e:32:96:0e:90:89:80:3f:7f:e2:57:e5:f2:fd:de:34:53:99: 9e:08:b7:28:c2:f5:f9:32:06:cc:7e:43:81:29:23:0b:73:17: 2f:a9:21:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ26Kg5O476Mj5TgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk YTM5MDZmOGQtOGU0OS00NzgyLWEzODEtNDdkZGY0ZDQ1ZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinurKvUfZPIjKGCAUF9bM4txgof0IIFVkQou VE63X2vvEIFuaFhEwWViwg93rfwE+yEV9NLuSdhWa86SLns6tYd0JXcJR/dpFAm/ dUTFxOM+zJ1h3JgNeJK/pb+3yQabgO7j8g+VRp8We66KednnO+7J//a8RB1avIph u5Nr3vX12e4o8bzFps9eSk7ZUsyWggY537/A0jiN6pi4lVgr6h4ZlXkSy36oj7ZM Ja1nNtCaE7DSxBL5KHRkGRw+SwH7TbJ0YuwdGgVdc7eoSDdKmyS+cCsYSuZYGsIw cL1U62UtnNvYNqFYWYlJc4bAH/AAD+CmmZjwHW45PueOaMHtQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXLahuq4HSwaINqOQAqcsqzlqE7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvOTM3YjE2NzItMGU0My0z MjFkLWIwMWItM2IwZDEzZGQ3NGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaJyuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjAuWRs7d0wJnkVj3AVrR0hWauoPvJpM8lUrUtyQX9j9cbS69P328ov O4Y7GMOTBfYxfc8bPxzaBpvpQsaRrOJUZCJmXr/dDWfz4MefkWzCmz6MyAzuh/UR lSEwWBcgQOKNCDd1obdBNeK6NAUDwsKx3/1aW+8+XKxB4+UumG5NqSwxkzVZbsfV ZAVVhjiK9cYWxvx1QQMMUNcsLxXcwRYKxLLSj9gCJk4teQNJJPoZ+RecVp7+RFP2 UzsW5E6qap3YIqEijTR2J7GQEaqrm4uu2tMXJH06Ly4ylg6QiYA/f+JX5fL93jRT mZ4ItyjC9fkyBsx+Q4EpIwtzFy+pIZM= -----END CERTIFICATE-----Generated at Mon Aug 25 03:03:06 2025 by rpki-client