$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3e3b5b42-836a-34e7-badf-cdb1abc030ea.roa File: 3e3b5b42-836a-34e7-badf-cdb1abc030ea.roa (raw, json) Hash identifier: MvlI5CJD3NeI5bqGVXzXNypIk8m9y/gtgIVsNQ5Yhws= Subject key identifier: F1:CF:66:49:2F:6C:56:C8:0F:B9:A1:C1:F2:37:F1:B0:8B:E4:FE:89 Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584ED9C75DE232B476D9CE0C43D8 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3e3b5b42-836a-34e7-badf-cdb1abc030ea.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 16789 IP address blocks: 104.156.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:5d:e2:32:b4:76:d9:ce:0c:43:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=3138b4a7-70fb-4f7d-8f12-9420d5a40990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6e:69:3f:86:92:17:32:12:67:b1:1d:73:51: 73:cb:d1:07:3c:e9:01:b3:a0:9d:c9:51:c0:07:41: 67:dc:8a:e4:10:1f:5e:da:4b:e1:d0:ee:a7:78:70: 98:f7:1c:a1:9c:ba:3d:18:5f:71:dc:6c:f4:6d:e5: a2:4c:3b:bb:b1:f2:df:29:19:42:a4:7c:7d:66:87: b5:9a:8e:de:60:76:5b:15:b9:c7:c9:5e:9f:e0:15: ed:e8:be:9c:8d:2c:a1:1d:c8:4d:94:21:2b:09:f3: cf:85:38:a0:c7:1d:1a:20:8c:00:7e:11:92:7e:f9: ca:67:1f:7c:9b:dd:0f:a6:34:c7:93:c4:13:0b:53: 39:8a:3f:20:b1:26:77:a2:1d:84:56:3b:a8:6d:11: 26:52:db:bf:13:98:bc:6b:61:f8:9c:04:b1:9f:a5: ab:42:a6:e1:c9:c5:70:1a:bd:36:bf:79:60:9d:be: ec:ac:61:4c:6f:40:5c:4a:89:54:76:04:1a:7c:01: df:74:e2:7e:fe:5e:5b:cc:f7:92:84:20:8e:bf:84: 55:f7:de:0c:60:41:9e:0a:79:7b:1c:b5:be:a8:37: e0:1d:b2:0b:80:91:a0:e7:b9:27:ea:eb:4b:e1:53: 80:10:00:da:11:d7:9a:22:3c:4b:57:06:d4:a2:84: a3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CF:66:49:2F:6C:56:C8:0F:B9:A1:C1:F2:37:F1:B0:8B:E4:FE:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3e3b5b42-836a-34e7-badf-cdb1abc030ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:c7:2a:3b:bd:59:7d:79:3b:cb:7b:0e:db:40:18:19:39:63: 62:38:c3:af:d5:c6:63:79:d3:97:1d:dd:90:46:3d:c6:e3:50: 31:d7:bf:97:40:54:22:13:fa:c4:93:d6:cd:c0:2a:b7:c2:ee: 09:1c:57:42:07:1b:b3:e1:50:f3:75:42:e9:63:35:c3:6d:e7: 7f:56:09:19:00:7a:4c:41:99:f9:9a:fa:ad:83:9f:ec:5c:69: f7:8e:e9:54:1e:f1:01:37:fa:f0:c6:eb:70:04:c4:ed:b0:1b: f3:4a:a9:0d:bd:79:a0:28:d8:68:7a:83:f9:53:5c:01:59:85: 86:44:32:7b:3c:f3:ac:51:4f:26:50:cc:37:3c:61:ff:43:4f: d0:bf:96:bd:28:ae:77:3b:39:5e:9d:db:03:c2:48:14:dd:17: 57:5e:9d:4b:e2:1c:ec:1c:96:38:29:53:36:b3:e2:92:47:2d: 1f:eb:ee:16:ff:f9:0a:2b:e8:a1:f0:49:26:3e:76:73:10:ec: 8b:2e:3d:87:d7:ca:9f:0f:ae:ad:d3:81:c1:04:c0:a6:56:d5: 6f:c5:65:7f:0a:a7:8d:1f:0b:39:79:2e:c8:2e:b1:33:5b:c7: 0a:5e:85:0b:a7:2d:7a:00:d4:24:3b:30:e3:62:f9:db:e1:74: 8d:73:d5:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx13iMrR22c4MQ9gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk MzEzOGI0YTctNzBmYi00ZjdkLThmMTItOTQyMGQ1YTQwOTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG5pP4aSFzISZ7Edc1Fzy9EHPOkBs6CdyVHA B0Fn3IrkEB9e2kvh0O6neHCY9xyhnLo9GF9x3Gz0beWiTDu7sfLfKRlCpHx9Zoe1 mo7eYHZbFbnHyV6f4BXt6L6cjSyhHchNlCErCfPPhTigxx0aIIwAfhGSfvnKZx98 m90PpjTHk8QTC1M5ij8gsSZ3oh2EVjuobREmUtu/E5i8a2H4nASxn6WrQqbhycVw Gr02v3lgnb7srGFMb0BcSolUdgQafAHfdOJ+/l5bzPeShCCOv4RV994MYEGeCnl7 HLW+qDfgHbILgJGg57kn6utL4VOAEADaEdeaIjxLVwbUooSjTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHPZkkvbFbID7mhwfI38bCL5P6JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvM2UzYjViNDItODM2YS0z NGU3LWJhZGYtY2RiMWFiYzAzMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaJyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMrHKju9WX15O8t7DttAGBk5Y2I4w6/VxmN505cd3ZBGPcbjUDHXv5dA VCIT+sST1s3AKrfC7gkcV0IHG7PhUPN1QuljNcNt539WCRkAekxBmfma+q2Dn+xc afeO6VQe8QE3+vDG63AExO2wG/NKqQ29eaAo2Gh6g/lTXAFZhYZEMns886xRTyZQ zDc8Yf9DT9C/lr0ornc7OV6d2wPCSBTdF1denUviHOwcljgpUzaz4pJHLR/r7hb/ +Qor6KHwSSY+dnMQ7IsuPYfXyp8Prq3TgcEEwKZW1W/FZX8Kp40fCzl5LsgusTNb xwpehQunLXoA1CQ7MONi+dvhdI1z1S8= -----END CERTIFICATE-----Generated at Tue Sep 22 10:44:17 2026 by rpki-client