$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/db71ad38-6d21-32a9-a4b1-37719fefa5f5.roa File: db71ad38-6d21-32a9-a4b1-37719fefa5f5.roa (raw, json) Hash identifier: zXH/3eC+ozP3xBUWtuADlSeavvIEWsE/AXGBWsU+EEQ= Subject key identifier: 4F:EA:2E:A4:07:5A:3B:FB:99:0E:0F:64:D9:26:50:0A:FE:0E:CC:74 Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584EE0C1F73FB50484FDFCF87880 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/db71ad38-6d21-32a9-a4b1-37719fefa5f5.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 104.156.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c1:f7:3f:b5:04:84:fd:fc:f8:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=03821e57-dce4-4323-8811-a473abc9bb71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7e:a9:17:88:4b:78:52:fe:2e:b0:12:f9:44: 89:01:18:1c:98:37:52:df:ac:4c:35:97:72:db:7f: c9:48:4d:32:41:34:37:76:ae:f7:87:64:90:cd:68: 62:0f:bd:dd:f6:ae:b9:7d:fe:ef:4c:38:97:67:6d: b2:3f:95:4a:3f:5a:9a:ae:c9:d3:03:4f:58:8b:76: b8:e5:fa:00:70:35:70:9f:8e:7e:9f:ca:4a:48:3c: 6d:8e:a9:a2:9a:6d:22:48:68:0d:fd:81:6a:d1:f4: be:fa:1e:91:49:b1:b1:dc:e2:cb:96:15:23:a9:c1: 32:1c:fb:c7:a1:bc:7a:33:eb:83:c9:c3:91:60:65: 57:45:a7:60:c9:77:cf:55:78:ae:44:09:6c:a7:a1: db:b4:4e:21:41:75:4a:25:3f:6d:bd:9b:b3:e2:0b: 41:20:2e:be:9b:79:1e:72:04:47:0e:51:d0:6a:d4: e6:7d:85:1b:ae:5e:3e:69:17:5a:ee:cd:d7:42:e7: ad:f9:e9:a4:ae:df:14:09:37:90:a2:24:06:8b:f1: 5c:77:d4:29:98:09:6c:be:a9:47:32:2b:fc:f7:6b: 1a:87:0c:aa:fe:08:08:c2:08:ec:70:1d:6e:d0:30: bb:75:47:33:da:90:b4:56:d2:87:2d:eb:ae:4f:6a: b7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:EA:2E:A4:07:5A:3B:FB:99:0E:0F:64:D9:26:50:0A:FE:0E:CC:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/db71ad38-6d21-32a9-a4b1-37719fefa5f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:91:5f:44:c9:7a:64:77:7d:f4:22:7d:77:04:3b:1a:9e:fd: 5c:0f:31:68:15:51:e3:b9:e0:64:3d:18:f7:9c:aa:ba:db:47: 18:39:59:04:8d:e7:9a:ff:44:56:e9:63:08:fd:2f:4f:48:55: 06:8d:66:56:7d:5c:db:f3:34:82:07:8b:6b:9e:4d:d0:03:1d: ba:92:53:55:0a:e1:56:90:cd:7f:9f:95:7c:47:f4:06:ec:8b: 47:39:53:c5:c0:91:35:99:20:fb:b9:f3:e1:ac:1d:53:8e:fc: 26:26:f7:f9:4a:b7:15:48:02:9d:9b:95:65:a2:af:b0:3f:99: b6:74:2e:96:ec:02:f3:9c:37:17:27:ac:c6:85:33:c1:14:21: d8:08:9b:e7:93:cc:e6:03:65:9e:33:fc:1d:30:fe:7c:1d:47: d9:2b:4e:4c:86:b9:9f:c8:2b:7e:f5:34:b1:03:eb:43:40:83: cc:4a:ff:dc:d7:30:69:9d:6f:f9:a6:ba:76:1f:6f:c2:45:c7: 78:0a:e7:3a:f4:00:5b:56:e3:e3:89:1a:d8:7c:a1:85:7d:28: 29:b4:e7:e3:8d:63:af:1e:8b:a3:42:7c:64:df:57:0a:f7:56: 00:fd:a1:fd:87:a0:46:3a:bb:d0:9c:bf:ae:6b:28:91:1b:4d: ab:23:3d:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwfc/tQSE/fz4eIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk MDM4MjFlNTctZGNlNC00MzIzLTg4MTEtYTQ3M2FiYzliYjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH6pF4hLeFL+LrAS+USJARgcmDdS36xMNZdy 23/JSE0yQTQ3dq73h2SQzWhiD73d9q65ff7vTDiXZ22yP5VKP1qarsnTA09Yi3a4 5foAcDVwn45+n8pKSDxtjqmimm0iSGgN/YFq0fS++h6RSbGx3OLLlhUjqcEyHPvH obx6M+uDycORYGVXRadgyXfPVXiuRAlsp6HbtE4hQXVKJT9tvZuz4gtBIC6+m3ke cgRHDlHQatTmfYUbrl4+aRda7s3XQuet+emkrt8UCTeQoiQGi/Fcd9QpmAlsvqlH Miv892sahwyq/ggIwgjscB1u0DC7dUcz2pC0VtKHLeuuT2q3ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/qLqQHWjv7mQ4PZNkmUAr+Dsx0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvZGI3MWFkMzgtNmQyMS0z MmE5LWE0YjEtMzc3MTlmZWZhNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+RX0TJemR3ffQifXcEOxqe/VwPMWgVUeO54GQ9GPecqrrbRxg5WQSN 55r/RFbpYwj9L09IVQaNZlZ9XNvzNIIHi2ueTdADHbqSU1UK4VaQzX+flXxH9Abs i0c5U8XAkTWZIPu58+GsHVOO/CYm9/lKtxVIAp2blWWir7A/mbZ0LpbsAvOcNxcn rMaFM8EUIdgIm+eTzOYDZZ4z/B0w/nwdR9krTkyGuZ/IK371NLED60NAg8xK/9zX MGmdb/mmunYfb8JFx3gK5zr0AFtW4+OJGth8oYV9KCm05+ONY68ei6NCfGTfVwr3 VgD9of2HoEY6u9Ccv65rKJEbTasjPV4= -----END CERTIFICATE-----Generated at Sun Sep 20 21:33:27 2026 by rpki-client