$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/e3baa160-3819-3b7b-8e67-c5cab2e8bf70.roa File: e3baa160-3819-3b7b-8e67-c5cab2e8bf70.roa (raw, json) Hash identifier: KOGc/fSxF+Rg+jJBUU20KE01OTXp685kAPO/b6PiT6s= Subject key identifier: CC:97:A5:C6:A6:55:E5:9E:9B:27:0D:C5:A8:4A:1F:4A:CE:5D:94:BB Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584D59EA6F4AB4186C6AF353CD40 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/e3baa160-3819-3b7b-8e67-c5cab2e8bf70.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 16789 IP address blocks: 104.156.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:6f:4a:b4:18:6c:6a:f3:53:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=a3466c73-0ccf-49d6-a45d-e5149e3a8a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:20:a6:8a:5c:3e:af:dc:43:4d:46:5e:0b:ee: d3:85:38:f6:6d:e5:1f:43:89:8b:d0:7a:b2:6d:4d: d3:17:64:e0:4c:24:d1:a5:ce:fb:a2:b3:bf:05:81: 8c:ed:46:76:b0:1a:58:9b:bb:b8:9e:d7:26:b7:e3: f6:28:b2:6d:bf:be:3b:0b:67:56:57:f4:e3:5e:ed: 27:72:2f:de:08:a8:cb:a6:b4:62:63:8d:2e:cd:02: 10:ae:9b:72:80:08:4b:09:95:2f:79:d5:1f:70:c9: e7:08:df:3f:d0:6f:3b:54:f7:74:cd:a2:cf:e7:85: b6:f3:c8:65:f1:fd:6f:e8:7e:67:ce:0f:30:cd:f6: 7e:63:d0:59:15:75:5f:d8:6a:ba:f8:38:9e:5e:d9: 35:d0:d6:13:1b:30:0d:b3:31:f8:51:e7:76:ff:2f: ae:4e:2f:d3:b3:ef:a1:5a:c6:c5:08:47:7f:a9:63: ca:95:fa:95:b7:10:e7:58:13:c0:01:4a:1a:3f:72: e7:f8:e9:e6:19:30:52:c0:81:86:82:3b:8d:97:a6: 78:90:a9:08:18:47:b3:fe:a8:fa:89:c2:54:5e:4b: 86:e0:ef:54:d1:bf:39:f7:46:43:eb:63:02:ff:44: d1:64:6a:35:21:a6:d5:a6:91:8a:9b:fc:2d:7b:1b: 82:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:97:A5:C6:A6:55:E5:9E:9B:27:0D:C5:A8:4A:1F:4A:CE:5D:94:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/e3baa160-3819-3b7b-8e67-c5cab2e8bf70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:c4:42:9a:b2:47:6b:ad:8e:ac:66:ea:c7:02:6a:d0:57:47: 01:9e:bf:de:43:85:91:28:de:25:8a:90:56:b8:a5:4f:29:3a: 2e:01:6a:42:ea:94:66:85:b4:4f:d1:d9:60:5e:89:f0:0d:8b: 33:cd:e4:c6:38:6d:f6:49:c9:67:5d:d6:cb:94:6f:f6:04:e7: cd:a5:d4:f3:b0:f4:2b:30:7e:d9:ae:ac:66:9e:39:9d:00:1b: 33:ca:b1:06:65:e4:d1:7e:c0:aa:23:90:ad:2f:ab:77:21:34: 53:12:a9:6a:b8:cf:4d:69:9d:ad:36:eb:14:ce:b9:3d:5e:ed: aa:f6:18:17:43:14:09:cf:58:a2:35:81:49:00:99:72:22:07: 38:65:d0:a8:69:81:f8:89:48:74:27:24:45:75:02:90:df:27: 6f:b5:f7:83:5e:46:c1:67:86:eb:60:fa:f3:07:f9:1f:02:84: cb:da:cd:b4:e3:fc:8b:88:f2:ff:77:8e:b8:f3:1d:d0:1e:55: ff:79:35:9a:b2:db:c4:3f:56:96:65:31:36:86:e4:60:fb:c7: 68:e4:ed:65:f6:a4:5a:08:c1:33:aa:c2:8d:b3:e0:30:01:7a: 34:f3:17:0e:1d:aa:06:92:3d:4f:bd:8f:b0:b1:ff:22:c4:b5: 3e:9e:a5:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6m9KtBhsavNTzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YTM0NjZjNzMtMGNjZi00OWQ2LWE0NWQtZTUxNDllM2E4YTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+yCmilw+r9xDTUZeC+7ThTj2beUfQ4mL0Hqy bU3TF2TgTCTRpc77orO/BYGM7UZ2sBpYm7u4ntcmt+P2KLJtv747C2dWV/TjXu0n ci/eCKjLprRiY40uzQIQrptygAhLCZUvedUfcMnnCN8/0G87VPd0zaLP54W288hl 8f1v6H5nzg8wzfZ+Y9BZFXVf2Gq6+DieXtk10NYTGzANszH4Ued2/y+uTi/Ts++h WsbFCEd/qWPKlfqVtxDnWBPAAUoaP3Ln+OnmGTBSwIGGgjuNl6Z4kKkIGEez/qj6 icJUXkuG4O9U0b8590ZD62MC/0TRZGo1IabVppGKm/wtexuClwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyXpcamVeWemycNxahKH0rOXZS7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvZTNiYWExNjAtMzgxOS0z YjdiLThlNjctYzVjYWIyZThiZjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaJygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrEQpqyR2utjqxm6scCatBXRwGev95DhZEo3iWKkFa4pU8pOi4BakLq lGaFtE/R2WBeifANizPN5MY4bfZJyWdd1suUb/YE582l1POw9CswftmurGaeOZ0A GzPKsQZl5NF+wKojkK0vq3chNFMSqWq4z01pna026xTOuT1e7ar2GBdDFAnPWKI1 gUkAmXIiBzhl0KhpgfiJSHQnJEV1ApDfJ2+194NeRsFnhutg+vMH+R8ChMvazbTj /IuI8v93jrjzHdAeVf95NZqy28Q/VpZlMTaG5GD7x2jk7WX2pFoIwTOqwo2z4DAB ejTzFw4dqgaSPU+9j7Cx/yLEtT6epTc= -----END CERTIFICATE-----Generated at Fri Apr 17 05:34:43 2026 by rpki-client