$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/6f4a6b21-cbf1-3592-9a20-d35603db1871.roa File: 6f4a6b21-cbf1-3592-9a20-d35603db1871.roa (raw, json) Hash identifier: +UKL+yWcmmt/yc7jcSiM5wH9UAHHP2kpGQlKoypqaSk= Subject key identifier: F4:6C:F5:6C:86:46:9D:F2:C2:67:EB:C0:CC:EA:27:65:7F:7D:CF:C2 Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584EEA8764C8261CAF71D33B4100 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/6f4a6b21-cbf1-3592-9a20-d35603db1871.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 16789 IP address blocks: 104.156.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:64:c8:26:1c:af:71:d3:3b:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=cc6caff4-ea64-404b-968e-4facdca126ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:be:c1:d9:b9:ff:f1:49:39:6b:d0:df:9c:43: ec:65:9f:32:64:9a:c0:73:a9:79:7f:d5:40:01:21: 0b:dc:a9:fc:01:b7:3d:15:9d:27:dc:a8:26:64:2d: e6:46:c7:13:79:65:45:6c:33:3a:a1:72:b1:e4:07: 52:c8:ff:a4:41:0d:9e:0d:6b:f7:ba:8a:8b:10:e1: 5a:20:97:69:99:69:47:1b:96:29:b8:c2:28:b1:98: f4:87:03:17:f1:9e:96:11:22:31:04:fd:76:9c:48: 74:7f:6e:08:1b:31:7a:ea:42:79:1f:22:c2:46:78: 6f:7c:35:e3:bc:a8:2f:1e:b8:6f:6a:09:0e:5f:76: 74:d1:98:01:89:76:1d:0c:c4:90:1d:bd:b5:33:5b: db:f8:b6:61:7c:bc:4a:5b:92:95:7d:cb:ee:a4:2e: 48:67:3d:8a:2a:60:95:4d:19:c8:74:1f:73:0e:4c: 7f:a1:bf:cd:09:db:00:c0:32:15:e0:a4:29:0f:a3: 36:67:20:59:9e:1f:3c:55:66:ca:43:fe:47:3f:37: 7b:bf:08:fa:09:aa:70:09:21:fb:0d:be:a9:1c:f9: ca:34:95:55:fa:73:05:73:b6:fb:5f:12:f6:fc:dc: ca:87:ba:02:e3:55:ae:2d:a4:48:e9:68:e5:a5:cd: 93:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:6C:F5:6C:86:46:9D:F2:C2:67:EB:C0:CC:EA:27:65:7F:7D:CF:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/6f4a6b21-cbf1-3592-9a20-d35603db1871.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:21:15:97:d6:e8:15:d1:a7:6e:c3:c2:b7:d2:0d:9c:51:87: 2a:70:9c:bc:29:99:70:e8:1e:b0:1e:a9:3c:0e:26:a8:42:3f: 4f:f3:f2:3a:b2:f8:cc:7e:81:d7:fc:62:f7:d2:86:80:bb:98: 11:52:67:11:2c:4c:58:4e:d0:39:fb:1a:ab:10:55:21:2e:1b: 59:0c:11:da:24:12:98:3e:c8:f3:03:80:35:c2:16:c9:81:20: 67:3f:5c:7c:78:b0:ff:b1:39:58:3c:80:99:2d:37:32:b7:9e: a9:36:0f:2e:70:4a:09:c1:2f:51:57:28:d1:53:6c:5f:38:bb: 35:d0:7d:c7:9a:7a:87:2e:01:eb:34:db:fe:fe:72:03:36:2c: 4a:43:b8:3b:7a:d8:f0:6c:73:d7:13:c6:4f:80:d8:9e:24:96: 96:7b:93:08:97:37:46:2a:92:90:6c:1e:3b:82:f9:88:b3:2c: f7:cd:2c:47:0b:fe:08:5f:8a:83:1e:7d:14:5a:92:12:11:7d: e6:0c:18:4d:ef:05:eb:ed:a2:ef:9f:39:3f:bf:3f:0d:c5:49: 8f:c1:79:b7:1a:00:08:eb:d7:7b:7f:a2:3e:2b:5c:20:8a:7a: 87:cf:8f:ef:f4:7d:ed:a5:82:3b:f5:7e:20:eb:9d:06:0b:9f: e4:70:0d:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh2TIJhyvcdM7QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk Y2M2Y2FmZjQtZWE2NC00MDRiLTk2OGUtNGZhY2RjYTEyNmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1b7B2bn/8Uk5a9DfnEPsZZ8yZJrAc6l5f9VA ASEL3Kn8Abc9FZ0n3KgmZC3mRscTeWVFbDM6oXKx5AdSyP+kQQ2eDWv3uoqLEOFa IJdpmWlHG5YpuMIosZj0hwMX8Z6WESIxBP12nEh0f24IGzF66kJ5HyLCRnhvfDXj vKgvHrhvagkOX3Z00ZgBiXYdDMSQHb21M1vb+LZhfLxKW5KVfcvupC5IZz2KKmCV TRnIdB9zDkx/ob/NCdsAwDIV4KQpD6M2ZyBZnh88VWbKQ/5HPzd7vwj6CapwCSH7 Db6pHPnKNJVV+nMFc7b7XxL2/NzKh7oC41WuLaRI6Wjlpc2TZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRs9WyGRp3ywmfrwMzqJ2V/fc/CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvNmY0YTZiMjEtY2JmMS0z NTkyLTlhMjAtZDM1NjAzZGIxODcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJy+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALghFZfW6BXRp27DwrfSDZxRhypwnLwpmXDoHrAeqTwOJqhCP0/z8jqy +Mx+gdf8YvfShoC7mBFSZxEsTFhO0Dn7GqsQVSEuG1kMEdokEpg+yPMDgDXCFsmB IGc/XHx4sP+xOVg8gJktNzK3nqk2Dy5wSgnBL1FXKNFTbF84uzXQfceaeocuAes0 2/7+cgM2LEpDuDt62PBsc9cTxk+A2J4klpZ7kwiXN0YqkpBsHjuC+YizLPfNLEcL /ghfioMefRRakhIRfeYMGE3vBevtou+fOT+/Pw3FSY/BebcaAAjr13t/oj4rXCCK eofPj+/0fe2lgjv1fiDrnQYLn+RwDTo= -----END CERTIFICATE-----Generated at Tue Sep 22 13:10:52 2026 by rpki-client