$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3c866c81-424a-3e1e-ac78-0550da029957.roa File: 3c866c81-424a-3e1e-ac78-0550da029957.roa (raw, json) Hash identifier: bKw9UE/Szem42dZSflCtvfE41ZoRndP2GM1BYx2vIOA= Subject key identifier: 31:D0:48:80:ED:32:04:18:D8:E4:41:15:D8:DE:08:21:47:46:3F:D5 Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584EE0C208B664AE157435A90440 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3c866c81-424a-3e1e-ac78-0550da029957.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 16789 IP address blocks: 104.156.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:08:b6:64:ae:15:74:35:a9:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=47b24b06-a150-459b-96d0-a7be5d6a1183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d5:b7:92:0e:97:89:53:77:c6:30:71:87:e8: a2:e9:d4:7f:bd:99:8a:f5:01:6b:87:7e:3d:a2:07: 86:6a:21:67:5b:a4:f7:4f:7a:ae:3f:36:9b:fc:e9: de:79:93:ff:a0:22:50:ad:c4:c7:ed:dd:38:a8:21: 32:66:66:0f:f7:74:5e:5d:ee:86:d7:28:b2:d1:36: 5f:d6:0e:39:47:d5:53:53:7a:76:b1:d7:76:95:06: 26:f2:36:fa:36:75:c9:01:a4:7c:4a:58:ca:cd:6a: 25:b2:1d:a5:fc:21:eb:7e:c6:ae:17:47:55:b7:df: 9e:a4:6b:75:91:56:ce:1b:4b:98:ba:4d:4b:05:89: 92:54:96:35:9f:0b:09:58:b4:84:6d:44:91:08:b7: f7:83:fb:f4:62:b7:c1:cf:85:6d:42:4c:3b:d4:f5: b3:97:5f:5b:e2:8b:f0:82:af:77:84:a6:8c:60:6b: bc:a6:b7:bf:7b:8e:f8:15:c0:59:c0:6d:42:38:63: 28:74:13:73:d8:6e:ca:ec:09:ac:48:b5:2e:d2:19: a5:ff:94:ad:b1:cd:f7:36:34:cb:87:85:1b:68:5a: c3:9f:61:04:f2:d9:8f:4e:e1:33:a6:b8:cd:28:40: 35:50:04:cd:4a:05:6e:09:b9:3c:0b:7c:06:5e:7f: 4a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D0:48:80:ED:32:04:18:D8:E4:41:15:D8:DE:08:21:47:46:3F:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3c866c81-424a-3e1e-ac78-0550da029957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:71:e8:6c:f0:9f:ba:3e:19:c8:89:5d:11:d9:9c:2d:24:2d: 92:78:4a:d9:0f:6b:21:59:43:fe:d2:d6:d9:5d:5e:00:33:32: 76:ec:bc:c9:42:8f:54:6b:68:6f:d8:b0:b0:6f:b3:fb:cc:ca: 56:90:3c:ac:91:7e:d7:9f:c0:cd:df:71:83:ff:cd:e5:d7:e9: 93:04:79:ec:26:59:f8:0c:f4:fe:14:f0:84:7c:c1:72:9f:9d: 6b:f9:73:c7:b0:bc:96:e7:78:56:ca:57:f8:a8:d4:23:b5:1e: 6f:ec:a5:83:5d:4c:4b:0b:04:ea:e4:10:36:25:51:4d:3d:3c: bb:ce:36:fb:03:91:d8:f1:9b:0c:85:4c:b7:e7:8a:37:4c:1c: b1:7f:d7:34:e6:9d:01:fe:6d:bb:82:28:79:3e:d8:3d:2a:3a: a6:1d:01:c7:88:71:2c:1c:be:f8:25:d4:5f:1b:dc:84:09:f8: 53:84:73:3e:b7:57:72:fe:dc:c5:10:5f:dc:80:b5:a2:8c:10: 78:ea:db:c8:65:98:b0:47:ae:9f:de:28:6f:59:e2:87:fa:ac: 0e:5c:e0:f5:24:3b:71:7b:df:3e:06:32:d6:dd:d9:fd:ee:a2: cb:9f:cc:5b:11:17:6f:95:2d:ed:7e:0c:94:50:51:01:10:78: 7f:37:1e:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwgi2ZK4VdDWpBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk NDdiMjRiMDYtYTE1MC00NTliLTk2ZDAtYTdiZTVkNmExMTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodW3kg6XiVN3xjBxh+ii6dR/vZmK9QFrh349 ogeGaiFnW6T3T3quPzab/OneeZP/oCJQrcTH7d04qCEyZmYP93ReXe6G1yiy0TZf 1g45R9VTU3p2sdd2lQYm8jb6NnXJAaR8SljKzWolsh2l/CHrfsauF0dVt9+epGt1 kVbOG0uYuk1LBYmSVJY1nwsJWLSEbUSRCLf3g/v0YrfBz4VtQkw71PWzl19b4ovw gq93hKaMYGu8pre/e474FcBZwG1COGModBNz2G7K7AmsSLUu0hml/5Stsc33NjTL h4UbaFrDn2EE8tmPTuEzprjNKEA1UATNSgVuCbk8C3wGXn9KHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHQSIDtMgQY2ORBFdjeCCFHRj/VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvM2M4NjZjODEtNDI0YS0z ZTFlLWFjNzgtMDU1MGRhMDI5OTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJynMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBx6Gzwn7o+GciJXRHZnC0kLZJ4StkPayFZQ/7S1tldXgAzMnbsvMlC j1RraG/YsLBvs/vMylaQPKyRftefwM3fcYP/zeXX6ZMEeewmWfgM9P4U8IR8wXKf nWv5c8ewvJbneFbKV/io1CO1Hm/spYNdTEsLBOrkEDYlUU09PLvONvsDkdjxmwyF TLfnijdMHLF/1zTmnQH+bbuCKHk+2D0qOqYdAceIcSwcvvgl1F8b3IQJ+FOEcz63 V3L+3MUQX9yAtaKMEHjq28hlmLBHrp/eKG9Z4of6rA5c4PUkO3F73z4GMtbd2f3u osufzFsRF2+VLe1+DJRQUQEQeH83HoU= -----END CERTIFICATE-----Generated at Tue Sep 22 05:07:50 2026 by rpki-client