$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/1504f5da-3087-3949-99ea-e1109e260ad2.roa File: 1504f5da-3087-3949-99ea-e1109e260ad2.roa (raw, json) Hash identifier: o7C8ZAlDIqL+jGelyk88N7FZFrCfM7sIr2MuErd6B6Y= Subject key identifier: FD:A7:41:F7:D4:43:87:4E:00:DB:76:22:91:72:04:4E:D7:0C:4E:BD Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584ED9C75DC8BD3CFCEF0E77AF80 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/1504f5da-3087-3949-99ea-e1109e260ad2.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 16789 IP address blocks: 104.156.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:5d:c8:bd:3c:fc:ef:0e:77:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=ed5bd1f8-7c95-4589-b5b6-5f78c01109af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:42:b5:31:72:55:d8:62:02:c1:5d:eb:4c:c9: 2a:d6:63:c2:2e:bd:a6:ce:b2:03:55:aa:59:8a:77: 7e:d0:11:74:e6:d8:b3:66:c4:dc:70:61:87:ba:d2: 88:69:1e:db:ba:fa:31:38:03:6b:a3:9a:69:8f:7f: 31:13:f2:b9:8a:b1:f0:d2:c5:17:aa:54:36:46:44: b6:07:c9:fe:43:a4:9e:47:f4:e3:d3:33:fa:83:a4: 1d:82:a9:8f:0c:99:3d:fa:82:41:a2:f0:2d:73:ea: d0:c3:14:a3:3f:92:d5:3b:e3:82:d6:b1:ce:19:65: d7:8e:03:3b:95:10:05:6d:b5:ed:86:41:66:8b:5b: e8:f8:57:e9:3a:9a:d1:60:f3:b2:83:9a:53:2b:80: 41:46:c7:d3:e7:bb:e5:d4:1d:ab:e5:a6:7f:d9:95: 02:c3:59:49:b3:b2:9e:a4:1c:47:2d:3a:a3:b4:33: 33:2f:bf:e9:6b:4f:72:26:da:be:66:41:ef:e1:19: 88:e2:ed:ec:b8:f2:d4:c1:db:cf:68:cc:62:ff:09: 74:21:19:a2:b0:ae:b8:41:1a:9b:9f:11:38:cf:9b: c1:49:48:2e:ce:34:a9:17:37:12:04:26:e1:eb:65: f9:75:26:d0:c2:ec:f3:7d:0e:6e:a4:36:e7:48:d2: c2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A7:41:F7:D4:43:87:4E:00:DB:76:22:91:72:04:4E:D7:0C:4E:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/1504f5da-3087-3949-99ea-e1109e260ad2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:e7:75:a6:0b:0d:80:01:39:61:cb:08:63:c7:d2:0a:82:de: ad:71:f4:5f:87:46:15:ce:ef:d6:d8:cb:60:94:47:be:48:00: c0:b2:c5:c9:69:7e:6e:1a:d9:7c:21:1c:fe:e8:4e:84:4a:85: 52:2d:8d:af:38:39:1c:73:f3:03:ad:87:aa:54:ab:8b:32:bf: 18:47:a8:63:32:88:04:2f:ed:15:74:5c:b1:63:45:40:66:a9: 58:e2:99:64:82:13:25:37:88:29:88:e0:f8:b0:43:e4:bd:3f: 0c:b6:b3:62:72:21:d6:90:ae:a9:6f:58:49:49:ee:18:8b:eb: cb:11:db:6b:ce:56:47:77:f4:a4:80:fa:37:20:f5:96:a4:11: 79:bc:06:3e:93:b2:0c:52:11:0a:42:c0:ef:08:28:d3:08:06: 2c:f4:74:3c:22:3c:63:13:fb:31:f4:2f:de:fd:93:d9:8a:0d: 6c:70:b6:ea:17:fa:c3:96:cc:e8:ed:ae:a2:33:57:58:93:c6: 5d:9e:24:ec:be:08:2c:65:64:98:bd:37:85:3c:af:4c:2a:68: a8:61:de:c7:a7:fd:83:9f:c5:96:eb:6c:e7:b3:8e:93:d6:52: 2c:2f:b8:b5:7f:11:05:8b:5d:95:35:ba:6d:7e:a2:b7:19:7c: 70:81:5c:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx13IvTz87w53r4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk ZWQ1YmQxZjgtN2M5NS00NTg5LWI1YjYtNWY3OGMwMTEwOWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkK1MXJV2GICwV3rTMkq1mPCLr2mzrIDVapZ ind+0BF05tizZsTccGGHutKIaR7buvoxOANro5ppj38xE/K5irHw0sUXqlQ2RkS2 B8n+Q6SeR/Tj0zP6g6QdgqmPDJk9+oJBovAtc+rQwxSjP5LVO+OC1rHOGWXXjgM7 lRAFbbXthkFmi1vo+FfpOprRYPOyg5pTK4BBRsfT57vl1B2r5aZ/2ZUCw1lJs7Ke pBxHLTqjtDMzL7/pa09yJtq+ZkHv4RmI4u3suPLUwdvPaMxi/wl0IRmisK64QRqb nxE4z5vBSUguzjSpFzcSBCbh62X5dSbQwuzzfQ5upDbnSNLCQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2nQffUQ4dOANt2IpFyBE7XDE69MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvMTUwNGY1ZGEtMzA4Ny0z OTQ5LTk5ZWEtZTExMDllMjYwYWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJy/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjndaYLDYABOWHLCGPH0gqC3q1x9F+HRhXO79bYy2CUR75IAMCyxclp fm4a2XwhHP7oToRKhVItja84ORxz8wOth6pUq4syvxhHqGMyiAQv7RV0XLFjRUBm qVjimWSCEyU3iCmI4PiwQ+S9Pwy2s2JyIdaQrqlvWElJ7hiL68sR22vOVkd39KSA +jcg9ZakEXm8Bj6TsgxSEQpCwO8IKNMIBiz0dDwiPGMT+zH0L979k9mKDWxwtuoX +sOWzOjtrqIzV1iTxl2eJOy+CCxlZJi9N4U8r0wqaKhh3sen/YOfxZbrbOezjpPW UiwvuLV/EQWLXZU1um1+orcZfHCBXA0= -----END CERTIFICATE-----Generated at Tue Sep 22 10:07:10 2026 by rpki-client