$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/db71ad38-6d21-32a9-a4b1-37719fefa5f5.roa File: db71ad38-6d21-32a9-a4b1-37719fefa5f5.roa (raw, json) Hash identifier: vtCYH4fRkbjdiMXKygs3FYtIfgA3UuV4q10bC1AVH3c= Subject key identifier: B5:60:AC:1E:7C:3F:B9:38:7F:60:C3:8B:CC:1A:53:47:25:82:92:50 Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584D5E1A5730971597C42EA4CFC0 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/db71ad38-6d21-32a9-a4b1-37719fefa5f5.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 104.156.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:57:30:97:15:97:c4:2e:a4:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=9a82556c-ded4-4acf-8819-d3ae48b22ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6a:66:33:cc:cb:fa:6f:f5:b9:15:b7:21:1f: 20:79:af:52:9c:5a:d6:c7:05:22:8a:8c:51:f5:72: ed:4b:ce:66:46:05:44:1f:d9:05:d1:c5:16:12:1f: 01:86:9b:43:48:99:a0:06:c7:f7:1e:25:f0:f6:e4: 23:fc:e9:d2:01:54:5f:5b:86:0f:51:98:3f:8a:8e: 85:31:08:4b:d7:43:21:9e:bd:c5:bd:de:06:f8:fc: 85:cd:8f:4f:b3:ba:08:ab:68:16:6b:66:c5:91:69: bc:40:3e:32:57:33:b8:78:b8:1b:1b:45:b1:75:26: 14:80:6a:99:99:4d:98:5e:6b:66:39:d9:b8:dc:a1: 30:48:80:72:0f:bd:3c:50:95:20:4a:e9:04:37:b8: 4f:e3:5e:4d:4f:3f:4b:0e:ba:3a:39:ea:20:ec:71: c3:11:31:fa:08:3c:7d:33:fc:f9:17:37:3d:11:32: fc:c1:8b:17:6d:b7:cb:44:85:8d:ab:c6:8e:21:45: 8b:68:4d:5a:d5:e6:6b:f1:5b:2d:08:d7:71:83:94: bc:eb:d3:55:86:0e:c5:50:e8:fb:94:d4:45:0d:da: 14:5c:6f:cd:a0:ec:8c:f6:10:90:33:1c:37:39:61: 33:f2:8d:2d:d2:39:cb:77:c2:5a:85:36:2c:53:da: 9f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:60:AC:1E:7C:3F:B9:38:7F:60:C3:8B:CC:1A:53:47:25:82:92:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/db71ad38-6d21-32a9-a4b1-37719fefa5f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:6c:91:95:26:61:b5:3d:73:77:f7:c2:2b:4b:bd:ee:8a:a1: af:c5:b7:5b:5e:c7:39:a4:99:ed:3f:52:2c:e4:02:50:e0:70: a1:d3:b8:01:6d:07:4b:ec:96:b3:d4:d6:37:a2:ac:2f:c0:7d: 83:50:20:53:e1:19:c3:25:78:63:6a:04:75:b3:54:bc:3c:bc: 16:72:47:a3:15:8b:a8:10:16:32:04:1c:8e:c0:69:55:6c:f0: 3a:f8:77:5f:4a:00:dd:13:84:cc:08:5f:76:87:d9:cf:f2:38: 50:44:08:7c:dd:ae:7c:01:e0:e4:0b:e7:02:97:c0:b6:e9:4c: c3:a3:69:2f:cd:63:a2:6b:81:bf:7a:35:67:6c:52:a1:87:8b: bd:be:df:cd:33:b8:a0:4b:ed:01:70:32:ce:b6:56:70:8f:7b: 1a:dd:2a:0d:e0:3e:be:a0:94:45:aa:a6:bd:fd:34:df:6d:88: 3c:ce:91:53:d5:f9:83:32:fb:b6:ea:a6:7e:95:bf:7e:0b:1c: dc:5e:35:ed:07:92:87:65:2c:fd:2e:d0:e6:4c:06:6e:de:23: 83:96:72:bc:37:c5:cb:05:69:07:37:05:48:9e:1a:a6:fe:47: 37:d7:9e:2b:e5:3e:2f:aa:fb:5d:df:c7:b9:b0:16:fb:40:bd: 17:63:ae:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGlcwlxWXxC6kz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk OWE4MjU1NmMtZGVkNC00YWNmLTg4MTktZDNhZTQ4YjIyY2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmpmM8zL+m/1uRW3IR8gea9SnFrWxwUiioxR 9XLtS85mRgVEH9kF0cUWEh8BhptDSJmgBsf3HiXw9uQj/OnSAVRfW4YPUZg/io6F MQhL10Mhnr3Fvd4G+PyFzY9Ps7oIq2gWa2bFkWm8QD4yVzO4eLgbG0WxdSYUgGqZ mU2YXmtmOdm43KEwSIByD708UJUgSukEN7hP415NTz9LDro6Oeog7HHDETH6CDx9 M/z5Fzc9ETL8wYsXbbfLRIWNq8aOIUWLaE1a1eZr8VstCNdxg5S869NVhg7FUOj7 lNRFDdoUXG/NoOyM9hCQMxw3OWEz8o0t0jnLd8JahTYsU9qfKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVgrB58P7k4f2DDi8waU0clgpJQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvZGI3MWFkMzgtNmQyMS0z MmE5LWE0YjEtMzc3MTlmZWZhNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdskZUmYbU9c3f3witLve6Koa/Ft1texzmkme0/UizkAlDgcKHTuAFt B0vslrPU1jeirC/AfYNQIFPhGcMleGNqBHWzVLw8vBZyR6MVi6gQFjIEHI7AaVVs 8Dr4d19KAN0ThMwIX3aH2c/yOFBECHzdrnwB4OQL5wKXwLbpTMOjaS/NY6Jrgb96 NWdsUqGHi72+380zuKBL7QFwMs62VnCPexrdKg3gPr6glEWqpr39NN9tiDzOkVPV +YMy+7bqpn6Vv34LHNxeNe0HkodlLP0u0OZMBm7eI4OWcrw3xcsFaQc3BUieGqb+ RzfXnivlPi+q+13fx7mwFvtAvRdjrnY= -----END CERTIFICATE-----Generated at Fri Apr 17 07:04:56 2026 by rpki-client