$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4387142e-4988-3933-b813-eafd0736b9a3.roa File: 4387142e-4988-3933-b813-eafd0736b9a3.roa (raw, json) Hash identifier: tT59c0VQgBxMOAJ/YqXAl4Hm7dyh1A5DB/3tEhlqFsQ= Subject key identifier: BD:1C:32:3C:BA:3D:5E:DE:79:02:D4:0E:39:0C:75:0D:D3:F8:A0:C8 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584F4112B4CE816C7EADBBC8CD00 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4387142e-4988-3933-b813-eafd0736b9a3.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22652 IP address blocks: 104.156.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:b4:ce:81:6c:7e:ad:bb:c8:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=4c649140-6d5e-49a3-8109-c9adfb69dae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5a:d1:85:fe:28:7f:21:d3:62:0c:c6:ab:e4: 3b:72:05:d5:0f:bb:fa:47:5b:58:1c:e2:08:2b:dd: ab:90:61:99:c8:12:1f:97:38:9a:97:d7:2d:b8:e7: e9:43:9f:0c:e1:77:e0:d9:e1:7c:fe:03:34:86:d7: d1:c6:c7:e6:cd:de:9a:0c:e9:20:30:ea:1b:e1:e6: a4:84:a7:26:f0:b3:5d:cc:e0:ef:3e:27:c7:a3:02: 3a:d8:d3:48:76:5e:5d:d4:4c:6e:42:b6:76:ee:89: 69:54:5a:ec:d7:7d:b8:58:6d:1d:d5:8a:d1:5d:8c: ec:7c:d1:02:91:98:b0:32:19:64:fa:1e:fb:b7:86: 0f:3f:92:36:fb:5b:6f:69:1f:2f:df:e8:3c:06:1f: a6:35:39:00:63:92:ec:94:f7:63:73:97:e8:6b:e3: fd:aa:81:54:7f:dd:dc:50:18:60:a3:ee:75:95:34: 66:11:a0:ac:4d:d9:e8:d0:8f:a5:55:9b:c3:9f:bc: fd:c6:04:83:76:a2:f8:72:6f:75:40:b5:f4:59:73: 00:ba:88:37:7a:0d:1b:48:4d:a7:9e:3e:5d:24:eb: 8a:3d:23:5d:9d:0a:7c:4f:bb:90:68:a8:3b:70:b6: ac:c1:99:da:71:3c:d9:7e:d4:4e:b2:f5:55:9c:af: 81:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1C:32:3C:BA:3D:5E:DE:79:02:D4:0E:39:0C:75:0D:D3:F8:A0:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4387142e-4988-3933-b813-eafd0736b9a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 104.156.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:32:13:94:a1:2c:d2:b5:29:33:f1:0d:dd:08:48:8e:f9:fe: 41:56:d4:fc:c5:44:0d:d9:1c:88:25:99:e4:b1:e9:8f:8a:d0: 06:d7:16:32:54:1a:6c:81:14:30:e5:38:43:74:96:1a:b0:fa: d9:60:8a:cd:d8:1b:f1:0b:a8:12:d2:9a:fa:b3:a7:62:c6:7a: ef:97:6d:63:82:e3:41:be:c8:11:1e:dc:16:cf:38:95:4c:1d: 73:c2:48:70:0a:bf:a7:e5:eb:8b:ea:2b:4b:9c:ee:fb:f8:31: 45:d7:96:cd:63:e1:16:0c:ad:f2:96:c7:74:72:eb:18:2c:0d: 6c:ea:8c:ce:48:f4:09:7a:ef:b7:ad:c9:d6:ac:d2:5c:73:ca: ec:f5:9f:1a:fd:53:31:cf:ce:da:d9:ae:a2:56:ef:99:99:94: f1:6e:f8:73:b8:a4:30:46:6a:21:02:48:e3:4b:03:a7:62:29: a5:86:7b:d8:ff:c1:df:7d:1d:7b:6a:07:c5:f7:45:09:2f:0f: 70:0f:09:f9:9b:ea:7e:6b:ee:0b:38:65:d2:c8:5a:68:79:6b: ad:73:4d:cd:c0:b5:a1:6e:c3:f6:67:5c:6e:5b:aa:f1:b7:db: cc:0d:26:9d:a6:c4:10:34:fe:68:ee:63:4b:76:8a:2d:09:13: d2:b7:d6:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BErTOgWx+rbvIzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk NGM2NDkxNDAtNmQ1ZS00OWEzLTgxMDktYzlhZGZiNjlkYWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVrRhf4ofyHTYgzGq+Q7cgXVD7v6R1tYHOII K92rkGGZyBIflzial9ctuOfpQ58M4Xfg2eF8/gM0htfRxsfmzd6aDOkgMOob4eak hKcm8LNdzODvPifHowI62NNIdl5d1ExuQrZ27olpVFrs1324WG0d1YrRXYzsfNEC kZiwMhlk+h77t4YPP5I2+1tvaR8v3+g8Bh+mNTkAY5LslPdjc5foa+P9qoFUf93c UBhgo+51lTRmEaCsTdno0I+lVZvDn7z9xgSDdqL4cm91QLX0WXMAuog3eg0bSE2n nj5dJOuKPSNdnQp8T7uQaKg7cLaswZnacTzZftROsvVVnK+BTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0cMjy6PV7eeQLUDjkMdQ3T+KDIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNDM4NzE0MmUtNDk4OC0z OTMzLWI4MTMtZWFmZDA3MzZiOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJxOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgyE5ShLNK1KTPxDd0ISI75/kFW1PzFRA3ZHIglmeSx6Y+K0AbXFjJU GmyBFDDlOEN0lhqw+tlgis3YG/ELqBLSmvqzp2LGeu+XbWOC40G+yBEe3BbPOJVM HXPCSHAKv6fl64vqK0uc7vv4MUXXls1j4RYMrfKWx3Ry6xgsDWzqjM5I9Al677et ydas0lxzyuz1nxr9UzHPztrZrqJW75mZlPFu+HO4pDBGaiECSONLA6diKaWGe9j/ wd99HXtqB8X3RQkvD3APCfmb6n5r7gs4ZdLIWmh5a61zTc3AtaFuw/ZnXG5bqvG3 28wNJp2mxBA0/mjuY0t2ii0JE9K31n8= -----END CERTIFICATE-----Generated at Thu Sep 24 21:25:53 2026 by rpki-client