$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3c866c81-424a-3e1e-ac78-0550da029957.roa File: 3c866c81-424a-3e1e-ac78-0550da029957.roa (raw, json) Hash identifier: 3DgMd6u9GLATo9tQE9+9e/Q5o43Vh5AD2IPo8b2HeT8= Subject key identifier: 28:AC:1E:87:B4:51:C7:29:4D:A3:70:E1:EB:F2:C0:2F:C1:15:53:65 Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584D5E1A6926B0BD8270E80D9AC0 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3c866c81-424a-3e1e-ac78-0550da029957.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 16789 IP address blocks: 104.156.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:69:26:b0:bd:82:70:e8:0d:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=829521ee-68bf-4558-9e5a-5006f86a526c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e5:b6:ae:42:27:4f:f8:04:1f:9f:61:d3:e5: fa:e0:85:99:d1:b6:ac:61:1a:f3:5d:ba:dd:c7:05: 95:82:74:97:50:e3:8d:88:0c:13:32:b6:88:80:de: 6b:0d:ca:cf:e4:b2:80:47:42:95:60:82:78:52:6e: 69:26:39:69:8c:ac:36:29:d7:3a:fa:83:27:6d:5b: 85:fa:9d:fc:68:15:85:31:14:50:85:d2:58:da:4c: 3c:a5:18:05:03:3f:cf:a2:1a:80:16:0c:66:11:7f: 3c:42:0d:b6:26:e8:5f:01:de:19:50:0d:34:81:6a: 0d:89:f6:9c:38:94:18:58:c7:4e:3c:73:91:97:53: 4e:44:16:53:76:5b:1b:74:29:2e:e3:fe:40:ea:7d: 30:1e:34:72:c5:bc:b5:c6:75:b8:6b:02:bb:90:a2: 65:80:bc:a8:81:32:a1:99:2f:e2:fe:f2:68:cc:5e: ef:5e:e9:ee:2b:87:98:75:80:a8:d1:30:b3:3b:4d: 21:7b:34:78:80:15:b3:2f:51:86:f4:55:05:a7:05: 7e:86:44:f3:f4:0c:b4:bb:4c:f1:ff:4f:77:cb:91: ff:8a:fc:b4:5a:8d:ca:ca:d0:23:0e:41:8e:08:df: 1f:77:19:85:57:1b:71:84:f4:1b:42:f7:82:82:15: a1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AC:1E:87:B4:51:C7:29:4D:A3:70:E1:EB:F2:C0:2F:C1:15:53:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3c866c81-424a-3e1e-ac78-0550da029957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:fd:ff:8b:d8:b1:19:da:f5:16:bf:25:da:f0:d1:c0:a7:1a: d0:3a:00:21:36:95:ab:de:d0:ee:96:d4:6f:a8:a8:b9:3f:d1: 6b:6f:57:9b:7a:d7:04:f5:e2:1b:33:77:71:d2:ad:92:d6:8a: f2:f0:1a:89:7c:34:e3:eb:90:1b:79:a4:a4:ed:7f:53:b7:ba: 15:b9:c1:e4:a2:48:3a:5d:2b:b2:b4:16:3b:53:de:1a:c7:48: 10:b7:e2:5e:c6:87:3c:c9:7c:d0:5d:61:fb:bc:5d:09:5b:4c: 37:50:e3:26:4f:b2:0e:56:ef:15:3f:42:6c:9a:bd:21:47:a5: 29:30:83:5d:3e:e6:d1:52:30:2a:6c:31:17:a9:0f:a3:b6:ea: 4c:cf:4b:ab:c6:67:bf:92:ba:75:e5:b1:59:8e:91:2a:a1:de: 99:aa:8c:bd:4e:1e:cd:2b:99:12:8c:cf:33:b2:0e:40:93:23: 9b:ba:90:96:fe:04:97:8b:a7:48:cd:89:f0:57:75:1d:a9:06: 78:d2:19:25:67:20:ca:4e:61:76:f2:78:8e:92:0f:b7:93:d4: ec:9d:e6:b4:f6:d7:ee:ae:c6:b7:e1:9a:cf:48:95:e4:3d:e9: 46:cb:bd:70:f0:24:05:76:60:54:8e:05:09:0f:b8:71:d4:51: f2:1e:ae:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmkmsL2CcOgNmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk ODI5NTIxZWUtNjhiZi00NTU4LTllNWEtNTAwNmY4NmE1MjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eW2rkInT/gEH59h0+X64IWZ0basYRrzXbrd xwWVgnSXUOONiAwTMraIgN5rDcrP5LKAR0KVYIJ4Um5pJjlpjKw2Kdc6+oMnbVuF +p38aBWFMRRQhdJY2kw8pRgFAz/PohqAFgxmEX88Qg22JuhfAd4ZUA00gWoNifac OJQYWMdOPHORl1NORBZTdlsbdCku4/5A6n0wHjRyxby1xnW4awK7kKJlgLyogTKh mS/i/vJozF7vXunuK4eYdYCo0TCzO00hezR4gBWzL1GG9FUFpwV+hkTz9Ay0u0zx /093y5H/ivy0Wo3KytAjDkGOCN8fdxmFVxtxhPQbQveCghWhXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCisHoe0UccpTaNw4evywC/BFVNlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvM2M4NjZjODEtNDI0YS0z ZTFlLWFjNzgtMDU1MGRhMDI5OTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJynMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKr9/4vYsRna9Ra/Jdrw0cCnGtA6ACE2lave0O6W1G+oqLk/0WtvV5t6 1wT14hszd3HSrZLWivLwGol8NOPrkBt5pKTtf1O3uhW5weSiSDpdK7K0FjtT3hrH SBC34l7GhzzJfNBdYfu8XQlbTDdQ4yZPsg5W7xU/QmyavSFHpSkwg10+5tFSMCps MRepD6O26kzPS6vGZ7+SunXlsVmOkSqh3pmqjL1OHs0rmRKMzzOyDkCTI5u6kJb+ BJeLp0jNifBXdR2pBnjSGSVnIMpOYXbyeI6SD7eT1Oyd5rT21+6uxrfhms9IleQ9 6UbLvXDwJAV2YFSOBQkPuHHUUfIerlE= -----END CERTIFICATE-----Generated at Fri Apr 17 11:37:30 2026 by rpki-client