$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/62428eae-7ee8-3b65-a816-79a2e8931d1e.roa File: 62428eae-7ee8-3b65-a816-79a2e8931d1e.roa (raw, json) Hash identifier: mj0/ZOPuT/S2L+KyS9PZlOyaJ62d0fYF6taEDXAX5A8= Subject key identifier: A0:5B:D0:0E:5C:F9:65:E3:8B:6E:81:5D:D6:59:D2:7D:CF:04:44:BE Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584D5E1A7CE28447C71D50577360 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/62428eae-7ee8-3b65-a816-79a2e8931d1e.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 104.156.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:7c:e2:84:47:c7:1d:50:57:73:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=89bc60c6-43ed-43c7-9673-4aaae2d46ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:71:7c:8f:87:23:83:2c:6f:5d:c8:71:1a:b1: c4:6e:3f:dc:95:99:4d:4a:a2:f0:78:14:bc:3f:d8: 2f:7c:5c:10:d5:f1:79:3e:f8:aa:af:58:da:70:8d: 47:4b:1b:d5:b9:4d:fe:d1:35:30:ff:dd:68:9d:da: 27:e2:6c:8e:75:75:9c:73:a8:54:da:a5:b5:9c:02: 80:9e:f1:7b:d2:95:7f:88:8e:2f:aa:6f:46:41:75: c1:f8:d7:21:16:43:ab:59:81:57:e1:0f:ea:71:f7: 8d:96:3e:20:61:7d:51:55:cd:29:40:ce:61:e6:45: 76:ee:8a:f9:cd:57:5a:b1:00:6e:f3:80:bf:31:d4: 14:48:82:4b:68:c2:0e:0a:1c:a1:09:96:c1:c1:c4: 34:28:64:09:cd:0b:c1:1d:f8:76:77:49:46:bf:00: 97:83:fc:bd:39:01:e8:67:44:17:fe:47:22:b3:7d: 87:87:de:08:01:c5:00:8a:4b:e7:af:17:3f:dc:6a: 15:dd:b3:be:d1:a1:31:d8:db:54:6c:f4:6b:e2:38: d9:ff:e9:65:8a:d0:68:9f:a4:e0:1e:de:d5:bf:b3: b3:99:26:75:f2:40:42:c4:16:c6:ed:e1:03:b5:02: 32:62:8d:68:ad:4d:70:a3:b2:85:5a:cd:6a:c0:a1: 61:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:5B:D0:0E:5C:F9:65:E3:8B:6E:81:5D:D6:59:D2:7D:CF:04:44:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/62428eae-7ee8-3b65-a816-79a2e8931d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:5b:20:cd:73:ad:b9:fc:b7:f0:fc:d2:cf:a5:c0:48:c5:2a: b7:bd:ed:75:61:50:99:6f:95:4f:54:25:56:0a:f3:f8:26:d6: 91:37:b4:c1:9e:74:14:40:76:27:7a:9e:73:f5:cb:0b:aa:7e: e8:ed:17:4f:66:7b:ce:3b:e7:fb:de:4e:d1:77:d2:80:8b:d1: 84:2c:21:da:94:83:2f:2b:bc:ff:52:76:b9:22:c6:0c:0d:f0: 9a:1c:07:a9:d7:3a:f1:06:fb:df:40:50:8f:ae:66:62:e9:22: e5:2a:27:d0:20:f7:56:3d:64:33:1d:42:31:38:74:fb:89:7a: 3d:db:66:e8:42:9c:3c:3a:d5:0c:c8:58:81:50:e2:c6:50:64: 51:94:df:b8:e0:60:fd:41:b4:38:8a:68:05:cc:1b:54:31:ed: 82:6f:16:bc:9c:dc:26:53:3e:c5:3f:8d:57:79:c0:8b:fe:47: 9f:88:c9:3d:11:62:94:51:65:9a:17:b3:3d:93:02:50:c8:a0: 63:fa:5f:fa:e3:dd:1e:21:4c:9c:63:4b:7a:89:9f:c6:4a:eb: 34:8b:74:f5:96:2f:7d:61:01:83:e0:53:1e:98:3e:d2:b2:49: 4a:e0:93:a5:07:0d:c7:cf:b1:26:20:a2:69:50:bb:79:e1:ec: 01:af:45:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGnzihEfHHVBXc2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk ODliYzYwYzYtNDNlZC00M2M3LTk2NzMtNGFhYWUyZDQ2YWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73F8j4cjgyxvXchxGrHEbj/clZlNSqLweBS8 P9gvfFwQ1fF5Pviqr1jacI1HSxvVuU3+0TUw/91ondon4myOdXWcc6hU2qW1nAKA nvF70pV/iI4vqm9GQXXB+NchFkOrWYFX4Q/qcfeNlj4gYX1RVc0pQM5h5kV27or5 zVdasQBu84C/MdQUSIJLaMIOChyhCZbBwcQ0KGQJzQvBHfh2d0lGvwCXg/y9OQHo Z0QX/kcis32Hh94IAcUAikvnrxc/3GoV3bO+0aEx2NtUbPRr4jjZ/+llitBon6Tg Ht7Vv7OzmSZ18kBCxBbG7eEDtQIyYo1orU1wo7KFWs1qwKFhpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBb0A5c+WXji26BXdZZ0n3PBES+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvNjI0MjhlYWUtN2VlOC0z YjY1LWE4MTYtNzlhMmU4OTMxZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5bIM1zrbn8t/D80s+lwEjFKre97XVhUJlvlU9UJVYK8/gm1pE3tMGe dBRAdid6nnP1ywuqfujtF09me8475/veTtF30oCL0YQsIdqUgy8rvP9SdrkixgwN 8JocB6nXOvEG+99AUI+uZmLpIuUqJ9Ag91Y9ZDMdQjE4dPuJej3bZuhCnDw61QzI WIFQ4sZQZFGU37jgYP1BtDiKaAXMG1Qx7YJvFryc3CZTPsU/jVd5wIv+R5+IyT0R YpRRZZoXsz2TAlDIoGP6X/rj3R4hTJxjS3qJn8ZK6zSLdPWWL31hAYPgUx6YPtKy SUrgk6UHDcfPsSYgomlQu3nh7AGvRSc= -----END CERTIFICATE-----Generated at Fri Apr 17 09:42:34 2026 by rpki-client