$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/dce78afd-226b-3759-b311-de9486192567.roa File: dce78afd-226b-3759-b311-de9486192567.roa (raw, json) Hash identifier: OqxuLPjR5VNxwc0D5CIsI3kzgjDvpvoO2zOwIfKSDlk= Subject key identifier: 09:B7:40:EB:B5:DB:51:26:EC:E0:E7:97:6E:2B:52:A2:EE:75:64:C0 Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584D5E1A691AC1F12EA4C6303D00 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/dce78afd-226b-3759-b311-de9486192567.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 16789 IP address blocks: 104.156.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:69:1a:c1:f1:2e:a4:c6:30:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=87e1961e-7b94-40f1-9733-f1bb4d1518fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:46:41:ca:d2:78:cf:ac:dc:cf:1e:f4:b3:b9: 16:d6:d6:f4:c3:e1:d5:8f:29:a6:81:af:a4:4e:12: 91:4c:cb:e7:16:49:45:a1:f2:44:62:3c:7b:62:5f: bf:77:f1:2a:6e:51:d8:2f:29:b4:de:a7:0c:02:c7: 16:7b:54:56:da:d7:60:13:98:19:05:e5:59:1b:72: 9b:05:38:8f:5b:b1:d5:8c:b3:8d:ef:2d:5b:1a:e0: 05:2c:6d:cf:a0:b0:01:60:f2:94:03:09:5b:d3:a1: df:40:f2:39:6c:19:fc:94:45:a9:c3:f5:98:cb:9c: 0f:f9:56:3c:3a:26:cc:da:a8:a8:54:52:cb:b3:8c: 6f:b5:a2:79:5c:c4:c6:f0:a4:cf:ca:43:d6:40:59: 59:62:1f:e6:6f:11:bf:4c:4a:10:7a:fb:66:19:6a: b5:db:8a:36:0a:96:8c:2d:a5:40:08:65:98:ef:41: 4c:02:7d:aa:18:90:b7:ed:6e:f1:7d:78:73:a4:b1: 17:00:38:b0:52:72:48:34:9e:d0:03:03:05:e0:dd: 80:bd:01:68:35:a2:df:9f:28:7f:bf:a4:50:4d:9b: 06:13:21:54:03:c8:9e:14:35:95:d0:ed:3a:62:d6: 13:92:cc:0c:5b:58:41:dd:75:78:c6:6e:59:ae:e0: d4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B7:40:EB:B5:DB:51:26:EC:E0:E7:97:6E:2B:52:A2:EE:75:64:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/dce78afd-226b-3759-b311-de9486192567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:70:94:f6:79:6b:44:d0:1c:8b:29:c4:d7:08:c5:5d:9e:26: 41:7b:1f:e2:f4:ce:05:a1:c7:af:54:0f:a4:1f:6a:df:57:62: c4:fc:0b:26:e9:af:3d:0a:57:e6:5d:4b:69:76:ca:ec:5a:0f: 94:9c:c9:4a:96:f4:a5:cf:f9:73:5e:d9:7d:0b:6f:56:8a:d5: 46:74:16:50:94:d6:55:ab:70:d6:6c:52:0d:ef:75:94:41:ac: 1c:e7:ee:06:60:2f:f7:54:47:e7:c9:4d:18:61:fe:a6:62:39: bf:f3:9b:2e:03:20:29:37:5f:d0:18:4d:9e:0c:6c:00:4e:d4: 0e:33:db:de:64:52:3b:7d:93:dd:b8:9e:3d:13:1b:9c:d2:e3: 2a:2a:8b:b6:ef:83:61:53:72:3b:39:e1:9a:f0:32:cc:57:c9: 07:5a:c4:a9:e0:2c:2d:57:92:3b:aa:68:3a:77:7f:ea:71:db: 76:73:13:53:75:b1:ef:6d:47:08:22:ae:a3:4a:ee:f4:02:fb: b3:f9:03:96:11:40:00:c9:ed:fb:41:18:7c:e1:ca:0b:cd:82: 00:18:17:f8:34:06:bb:a1:02:90:6d:84:0f:c2:47:03:e4:6e: 91:8f:38:84:47:07:56:af:93:e3:89:63:e8:55:8e:03:e2:49: 1d:ca:47:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmkawfEupMYwPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk ODdlMTk2MWUtN2I5NC00MGYxLTk3MzMtZjFiYjRkMTUxOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkZBytJ4z6zczx70s7kW1tb0w+HVjymmga+k ThKRTMvnFklFofJEYjx7Yl+/d/EqblHYLym03qcMAscWe1RW2tdgE5gZBeVZG3Kb BTiPW7HVjLON7y1bGuAFLG3PoLABYPKUAwlb06HfQPI5bBn8lEWpw/WYy5wP+VY8 OibM2qioVFLLs4xvtaJ5XMTG8KTPykPWQFlZYh/mbxG/TEoQevtmGWq124o2CpaM LaVACGWY70FMAn2qGJC37W7xfXhzpLEXADiwUnJINJ7QAwMF4N2AvQFoNaLfnyh/ v6RQTZsGEyFUA8ieFDWV0O06YtYTkswMW1hB3XV4xm5ZruDUtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAm3QOu121Em7ODnl24rUqLudWTAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvZGNlNzhhZmQtMjI2Yi0z NzU5LWIzMTEtZGU5NDg2MTkyNTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaJyqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1wlPZ5a0TQHIspxNcIxV2eJkF7H+L0zgWhx69UD6Qfat9XYsT8Cybp rz0KV+ZdS2l2yuxaD5ScyUqW9KXP+XNe2X0Lb1aK1UZ0FlCU1lWrcNZsUg3vdZRB rBzn7gZgL/dUR+fJTRhh/qZiOb/zmy4DICk3X9AYTZ4MbABO1A4z295kUjt9k924 nj0TG5zS4yoqi7bvg2FTcjs54ZrwMsxXyQdaxKngLC1XkjuqaDp3f+px23ZzE1N1 se9tRwgirqNK7vQC+7P5A5YRQADJ7ftBGHzhygvNggAYF/g0BruhApBthA/CRwPk bpGPOIRHB1avk+OJY+hVjgPiSR3KR3g= -----END CERTIFICATE-----Generated at Fri Apr 17 16:35:01 2026 by rpki-client