$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/4749d5a9-351a-310d-a4b1-7d0866c068cd.roa File: 4749d5a9-351a-310d-a4b1-7d0866c068cd.roa (raw, json) Hash identifier: OSEsiU1Rl5I058uFJ+B9oM3xvNlf4sca0AH30SICj0s= Subject key identifier: 12:9D:B4:89:5A:3F:87:56:2B:F7:37:04:91:91:88:30:AF:11:D0:BE Certificate issuer: /CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Certificate serial: 010D0C9F4328584DEDE09CC2700970D05B47FB80 Authority key identifier: C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/4749d5a9-351a-310d-a4b1-7d0866c068cd.roa Signing time: Sat 23 May 2026 13:00:31 +0000 ROA not before: Sat 23 May 2026 13:00:31 +0000 ROA not after: Fri 21 Aug 2026 13:00:31 +0000 asID: 49585 IP address blocks: 104.156.136.0/24 maxlen: 24 104.156.137.0/24 maxlen: 24 104.156.138.0/24 maxlen: 24 104.156.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ed:e0:9c:c2:70:09:70:d0:5b:47:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Validity Not Before: May 23 13:00:31 2026 GMT Not After : Aug 21 13:00:31 2026 GMT Subject: CN=ca283421-87fb-435a-abea-7953fb5da5cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:31:6a:db:1c:aa:00:50:73:61:85:36:23:eb: bc:89:53:cd:90:30:d4:c7:29:7b:7f:cd:d2:46:72: 44:b1:f2:7d:26:4a:b5:7f:e4:c8:13:a9:07:bc:ab: e4:dc:60:7a:cd:88:c9:36:7f:6a:65:93:42:21:55: 02:c7:bd:fd:ea:bf:9f:4e:1b:c8:1f:53:ca:29:08: 77:e2:da:85:93:66:5d:4d:8b:c4:23:85:1b:23:b1: b5:4b:66:fe:83:d6:09:d1:a3:34:b5:14:52:de:64: 18:af:fb:e0:f4:05:1c:f9:61:21:af:06:2c:b3:af: 9e:b5:4d:1c:07:54:c6:36:97:40:2b:7e:6c:05:1f: d2:c6:82:ef:e8:da:e7:7e:ae:61:3b:a5:98:73:36: 08:91:ca:04:d1:14:5a:84:61:06:bf:21:40:11:fd: 07:1f:b7:1b:91:3d:f8:e6:67:53:1a:d8:88:33:2e: 5c:5e:b2:67:74:13:ef:fc:fe:47:5c:e2:9b:18:81: ee:9a:e7:96:89:fd:f2:88:ec:f2:71:34:f2:0b:54: cc:67:0d:f0:45:f3:0c:91:e7:a5:e6:68:20:a0:e0: e9:27:6a:ac:f9:a4:da:27:03:ef:85:43:38:28:b5: 37:6e:da:77:8b:28:73:c3:d4:78:a0:b5:28:6e:af: 70:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9D:B4:89:5A:3F:87:56:2B:F7:37:04:91:91:88:30:AF:11:D0:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/4749d5a9-351a-310d-a4b1-7d0866c068cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl X509v3 Authority Key Identifier: keyid:C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer sbgp-ipAddrBlock: critical IPv4: 104.156.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:c9:23:26:92:c9:52:c2:a1:b9:2d:cd:16:97:a9:15:55:97: e8:2c:ad:00:c1:a1:45:55:21:5f:87:30:83:f1:3c:64:66:3a: 43:96:7c:3e:5c:e0:46:82:8f:0f:79:4b:e0:46:8d:1d:fa:ad: 75:63:da:b2:cb:e7:2e:0d:50:f0:59:48:66:52:05:3f:83:ef: 78:b9:3c:ce:d8:bc:1f:57:d6:57:6f:df:e1:59:5c:10:42:c6: df:f4:4d:6c:b9:27:1f:72:72:02:12:6c:11:7c:49:a2:db:6b: f3:87:56:fa:b3:69:cb:2b:d7:b8:19:12:c0:7e:88:ed:af:97: 19:bd:77:9f:81:4c:80:01:6e:87:d3:22:32:12:1b:c6:d5:a8: c1:c3:07:d7:b9:39:92:cf:bf:a2:84:cc:ec:ba:1e:12:c6:76: 1e:95:1e:ec:a7:6f:67:e2:c6:f7:64:e7:9a:48:7a:e7:36:36: 5c:56:10:c9:75:fa:d0:5f:22:de:41:ad:e0:f1:ec:28:48:7d: d6:fc:5d:36:91:cb:ad:65:84:2c:f6:be:c7:09:99:12:84:1b: 6f:9d:db:28:4c:5c:f9:12:af:98:5f:48:36:96:f8:7f:2b:e6: 88:be:8c:7e:b5:9a:78:fb:eb:e7:b9:5e:2c:88:98:3a:6c:04: 6e:10:e1:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3t4JzCcAlw0FtH+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE4NzNlNWEtYTE2ZC00ODkwLThkZmUtYzI4MWJmNmUw MjBlMB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk Y2EyODM0MjEtODdmYi00MzVhLWFiZWEtNzk1M2ZiNWRhNWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DFq2xyqAFBzYYU2I+u8iVPNkDDUxyl7f83S RnJEsfJ9Jkq1f+TIE6kHvKvk3GB6zYjJNn9qZZNCIVUCx7396r+fThvIH1PKKQh3 4tqFk2ZdTYvEI4UbI7G1S2b+g9YJ0aM0tRRS3mQYr/vg9AUc+WEhrwYss6+etU0c B1TGNpdAK35sBR/SxoLv6Nrnfq5hO6WYczYIkcoE0RRahGEGvyFAEf0HH7cbkT34 5mdTGtiIMy5cXrJndBPv/P5HXOKbGIHumueWif3yiOzycTTyC1TMZw3wRfMMkeel 5mggoODpJ2qs+aTaJwPvhUM4KLU3btp3iyhzw9R4oLUobq9wTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKdtIlaP4dWK/c3BJGRiDCvEdC+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3 M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgxYmY2ZTAyMGUvNDc0OWQ1YTktMzUxYS0z MTBkLWE0YjEtN2QwODY2YzA2OGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjE4NzNlNWEtYTE2ZC00ODkwLThk ZmUtYzI4MWJmNmUwMjBlLzIxODczZTVhLWExNmQtNDg5MC04ZGZlLWMyODFiZjZl MDIwZS5jcmwwHwYDVR0jBBgwFoAUx3mnxj/aW1dVPvxCh5HuGzfxwqYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgx YmY2ZTAyMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfJIyaSyVLCobktzRaXqRVVl+gsrQDBoUVVIV+HMIPxPGRmOkOWfD5c 4EaCjw95S+BGjR36rXVj2rLL5y4NUPBZSGZSBT+D73i5PM7YvB9X1ldv3+FZXBBC xt/0TWy5Jx9ycgISbBF8SaLba/OHVvqzacsr17gZEsB+iO2vlxm9d5+BTIABbofT IjISG8bVqMHDB9e5OZLPv6KEzOy6HhLGdh6VHuynb2fixvdk55pIeuc2NlxWEMl1 +tBfIt5BreDx7ChIfdb8XTaRy61lhCz2vscJmRKEG2+d2yhMXPkSr5hfSDaW+H8r 5oi+jH61mnj76+e5XiyImDpsBG4Q4ao= -----END CERTIFICATE-----Generated at Sat Jun 13 17:24:16 2026 by rpki-client