$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/0e5a622b-034c-3a3b-816e-0f51519ea53e.roa File: 0e5a622b-034c-3a3b-816e-0f51519ea53e.roa (raw, json) Hash identifier: mG7yAHKGI5H8214Htih4tIcw2xtMiprwevcCVCflfdY= Subject key identifier: E6:51:D2:87:EC:46:A3:79:E2:5D:7F:9F:6F:38:59:2B:02:4B:0A:F6 Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584ED9C75DD5C66E0F157A327080 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/0e5a622b-034c-3a3b-816e-0f51519ea53e.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 16789 IP address blocks: 104.156.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:5d:d5:c6:6e:0f:15:7a:32:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=0f0590ef-4487-4b6c-a9a5-f4bbe95fa412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:14:d7:80:52:3f:87:86:a8:05:6a:b1:5b:51: 61:e9:ae:b7:09:42:bc:47:b4:17:ce:1c:eb:1f:b1: fa:a0:28:6c:23:57:f1:a7:62:b0:aa:fb:ff:e5:1f: d8:10:4e:ba:31:64:66:c6:ea:49:9f:03:e6:61:95: 4a:c4:7a:7f:9c:ab:89:bf:45:fc:06:cf:e7:78:5c: f0:3f:8f:5b:e8:7d:87:8e:87:9a:bf:fe:2a:0f:32: 42:e7:54:a8:ad:0c:c7:83:77:f8:f3:98:49:db:7b: 1a:71:39:0b:46:94:be:ba:2c:63:81:e9:1d:ec:b9: eb:4c:f2:62:71:3f:f1:a8:ac:6e:c7:3a:66:a9:7c: ce:b6:32:a3:7c:90:42:f4:fd:03:89:46:2c:47:de: 62:98:d1:7d:b5:81:53:9d:13:2d:9d:21:5b:c7:77: d4:5d:2e:e5:94:60:82:ab:e2:b9:82:bd:e5:fa:3b: e4:78:c4:94:00:eb:d8:f3:df:3f:f7:71:83:55:9a: ac:3a:54:2e:93:bf:31:7b:17:33:96:29:41:fb:89: db:c9:2b:47:2d:69:5b:5e:c3:41:f8:c8:f1:05:c6: 05:e2:a0:4a:b4:c2:00:86:8f:0b:d7:80:c7:88:7c: ac:81:dc:cd:11:9c:0f:55:16:26:ea:67:b0:16:47: 76:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:51:D2:87:EC:46:A3:79:E2:5D:7F:9F:6F:38:59:2B:02:4B:0A:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/0e5a622b-034c-3a3b-816e-0f51519ea53e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:50:30:24:56:5b:19:65:ca:93:d8:8d:4b:ac:a6:19:5b:e7: 2f:c2:fc:f8:34:69:a6:13:e7:35:57:5a:5c:e4:d2:d4:2b:b8: 02:f5:24:9a:cc:54:0c:e1:92:59:6c:98:1f:60:c9:24:7d:3a: c8:86:4c:5a:f9:24:ab:07:6d:e4:cf:7d:ba:80:72:bf:90:b7: 58:dc:91:48:63:e4:fd:e4:11:27:13:26:1e:2b:73:1d:d7:6b: 4c:cf:b1:e9:06:b7:86:98:4d:00:10:2c:a1:69:f9:a4:41:38: 83:80:8e:87:83:4c:32:59:8f:26:0c:c1:c8:51:29:d4:8f:20: 25:2d:91:32:24:5c:36:ef:7a:81:a4:df:45:d8:3f:5c:c2:5f: 5d:c8:c8:d1:1c:7b:fb:e2:02:a2:66:fd:ff:13:7a:36:45:e1: 8b:5d:78:a9:64:b1:e7:6d:ae:2a:b3:e0:80:b6:54:fa:ae:ab: 33:b6:a0:30:00:55:b8:33:39:f4:af:89:2e:e6:1c:26:97:94: 7f:b8:56:60:91:4b:7b:b8:7e:eb:45:d6:66:ab:df:16:5e:50: cd:06:cd:d8:d7:6d:15:10:86:4b:ef:f7:89:91:f2:f7:8b:8f: af:26:e2:9d:98:e9:e9:64:30:4f:0d:f5:3a:a0:b0:e9:a7:27: 4f:69:a8:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx13Vxm4PFXoycIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk MGYwNTkwZWYtNDQ4Ny00YjZjLWE5YTUtZjRiYmU5NWZhNDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRTXgFI/h4aoBWqxW1Fh6a63CUK8R7QXzhzr H7H6oChsI1fxp2Kwqvv/5R/YEE66MWRmxupJnwPmYZVKxHp/nKuJv0X8Bs/neFzw P49b6H2Hjoeav/4qDzJC51SorQzHg3f485hJ23sacTkLRpS+uixjgekd7LnrTPJi cT/xqKxuxzpmqXzOtjKjfJBC9P0DiUYsR95imNF9tYFTnRMtnSFbx3fUXS7llGCC q+K5gr3l+jvkeMSUAOvY898/93GDVZqsOlQuk78xexczlilB+4nbyStHLWlbXsNB +MjxBcYF4qBKtMIAho8L14DHiHysgdzNEZwPVRYm6mewFkd2PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZR0ofsRqN54l1/n284WSsCSwr2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvMGU1YTYyMmItMDM0Yy0z YTNiLTgxNmUtMGY1MTUxOWVhNTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFQMCRWWxllypPYjUusphlb5y/C/Pg0aaYT5zVXWlzk0tQruAL1JJrM VAzhkllsmB9gySR9OsiGTFr5JKsHbeTPfbqAcr+Qt1jckUhj5P3kEScTJh4rcx3X a0zPsekGt4aYTQAQLKFp+aRBOIOAjoeDTDJZjyYMwchRKdSPICUtkTIkXDbveoGk 30XYP1zCX13IyNEce/viAqJm/f8TejZF4YtdeKlksedtriqz4IC2VPquqzO2oDAA VbgzOfSviS7mHCaXlH+4VmCRS3u4futF1mar3xZeUM0GzdjXbRUQhkvv94mR8veL j68m4p2Y6elkME8N9TqgsOmnJ09pqII= -----END CERTIFICATE-----Generated at Tue Sep 22 01:52:06 2026 by rpki-client