$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/352b94f7-39cb-38e8-ab84-98609598ee4a.roa File: 352b94f7-39cb-38e8-ab84-98609598ee4a.roa (raw, json) Hash identifier: sHaDe74p0BYf+ezqnAag6S1NitrebxCxZCXAgp6u5MY= Subject key identifier: C4:6A:CC:0B:09:32:87:FB:C4:B3:B0:2C:D1:D4:38:44:F8:F4:BF:28 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584F3052607E724A21D368E8E300 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/352b94f7-39cb-38e8-ab84-98609598ee4a.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 11404 IP address blocks: 104.156.96.0/20 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:60:7e:72:4a:21:d3:68:e8:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=7bb172b4-1b7e-40eb-8b72-beec52754df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:04:d3:da:fb:ad:b9:20:c3:56:bf:40:f4:b4: e6:8a:b8:12:01:6a:6a:25:3f:6b:1e:b0:8e:c4:73: e5:45:19:9f:72:7c:42:4e:21:4a:f2:ee:0d:95:0c: 37:75:8f:c5:ac:cc:37:f7:e8:3e:b8:6a:a1:bd:cf: 88:40:d8:16:e6:19:d1:fb:e3:f1:c1:63:66:4c:45: 26:68:a1:72:cc:2c:c3:32:df:6b:e3:ce:8d:fa:45: bf:c1:41:96:ef:ae:5a:d9:02:cc:9f:35:07:33:27: 90:2e:55:b1:40:21:fc:ac:26:31:84:4d:71:3e:2c: a9:f8:b5:63:52:8c:d8:8f:18:5d:e9:3b:c2:21:33: af:66:3c:69:8f:0b:cd:be:ce:82:93:9b:7a:af:02: e4:b2:cd:3a:4c:b0:be:ee:e0:16:f3:b1:0d:bb:54: 3d:c6:58:9e:ab:8b:38:cd:02:a7:c0:dd:b2:15:68: 44:a4:d6:fa:4d:f5:24:e7:fb:37:71:40:41:41:09: 19:30:df:f4:2a:43:68:65:77:db:83:5f:11:71:06: 40:0e:22:b8:c4:d5:67:3e:b0:17:4f:da:b7:43:65: c4:28:0b:e0:df:8b:ff:ac:fa:e4:da:fa:3a:ca:1e: 7b:4d:61:fa:53:f5:14:4a:2e:9e:c7:19:32:33:8d: c5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6A:CC:0B:09:32:87:FB:C4:B3:B0:2C:D1:D4:38:44:F8:F4:BF:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/352b94f7-39cb-38e8-ab84-98609598ee4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.156.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:09:77:2d:a0:df:55:ba:8c:60:d5:05:1d:34:d0:85:fb:9b: 2a:1a:c7:cc:4a:19:e2:f0:9c:93:c1:7e:55:83:82:42:8d:85: 6e:07:05:cf:50:84:c6:a8:89:92:5b:0e:b4:87:ce:6e:80:45: d9:55:3e:82:ab:f2:73:df:c8:37:c0:d1:9e:22:5d:97:d7:78: 78:ed:37:e4:68:94:e4:c7:5b:ed:d2:43:c8:85:79:fb:9a:52: 0f:32:95:19:fb:d4:80:6a:94:c6:65:7a:a5:a7:ee:8c:2c:46: 45:c8:7c:32:48:0c:f0:ba:f9:4d:cf:5a:1a:59:62:f6:fe:70: 1d:09:bf:3e:ca:5c:1d:82:59:7d:df:91:4f:f9:0b:3d:3d:a7: 4f:6d:ec:9a:16:dc:43:7a:73:9e:1d:8f:6a:cd:da:8d:65:74: ad:e5:33:74:78:52:0e:07:39:8a:e0:a7:3b:f2:83:c4:68:f9: 4c:3b:3b:87:78:d7:77:93:00:dd:b9:87:f3:72:19:8f:77:88: ee:da:4d:ff:76:de:eb:91:cf:e2:b4:6d:a3:ec:dd:3e:65:ca: d3:9d:f4:80:ed:a7:f5:7c:56:4b:05:91:4d:fc:76:6c:35:87: 2a:e1:b9:5b:ae:1d:03:cf:41:7c:5f:87:9f:f7:33:4c:05:1e: c8:d0:c9:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUmB+ckoh02jo4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk N2JiMTcyYjQtMWI3ZS00MGViLThiNzItYmVlYzUyNzU0ZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsATT2vutuSDDVr9A9LTmirgSAWpqJT9rHrCO xHPlRRmfcnxCTiFK8u4NlQw3dY/FrMw39+g+uGqhvc+IQNgW5hnR++PxwWNmTEUm aKFyzCzDMt9r486N+kW/wUGW765a2QLMnzUHMyeQLlWxQCH8rCYxhE1xPiyp+LVj UozYjxhd6TvCITOvZjxpjwvNvs6Ck5t6rwLkss06TLC+7uAW87ENu1Q9xlieq4s4 zQKnwN2yFWhEpNb6TfUk5/s3cUBBQQkZMN/0KkNoZXfbg18RcQZADiK4xNVnPrAX T9q3Q2XEKAvg34v/rPrk2vo6yh57TWH6U/UUSi6exxkyM43FZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRqzAsJMof7xLOwLNHUOET49L8oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMzUyYjk0ZjctMzljYi0z OGU4LWFiODQtOTg2MDk1OThlZTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcJdy2g31W6jGDVBR000IX7myoax8xKGeLwnJPBflWDgkKNhW4HBc9Q hMaoiZJbDrSHzm6ARdlVPoKr8nPfyDfA0Z4iXZfXeHjtN+RolOTHW+3SQ8iFefua Ug8ylRn71IBqlMZleqWn7owsRkXIfDJIDPC6+U3PWhpZYvb+cB0Jvz7KXB2CWX3f kU/5Cz09p09t7JoW3EN6c54dj2rN2o1ldK3lM3R4Ug4HOYrgpzvyg8Ro+Uw7O4d4 13eTAN25h/NyGY93iO7aTf923uuRz+K0baPs3T5lytOd9IDtp/V8VksFkU38dmw1 hyrhuVuuHQPPQXxfh5/3M0wFHsjQydg= -----END CERTIFICATE-----Generated at Tue Sep 22 05:07:05 2026 by rpki-client