$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/1e2a8b1e-b3ce-3369-baa1-12890e4189a5.roa File: 1e2a8b1e-b3ce-3369-baa1-12890e4189a5.roa (raw, json) Hash identifier: vkNZllSAwYltIsEMfSpDTvYl97zSmSlX37QpPwEhjt8= Subject key identifier: 9E:C1:43:B5:36:6E:5C:33:2D:59:5C:BA:C8:8A:61:83:BF:47:C4:6C Certificate issuer: /CN=dc563dc9-6b87-4d82-8a58-6b8b7917092c Certificate serial: 010D0C9F4328584F140F3A91ACD8C5767AC3DF40 Authority key identifier: A0:36:F8:0B:C8:AD:05:3F:44:8C:B8:A2:AB:AA:39:66:57:E0:D3:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/1e2a8b1e-b3ce-3369-baa1-12890e4189a5.roa Signing time: Sat 05 Sep 2026 22:02:18 +0000 ROA not before: Sat 05 Sep 2026 22:02:18 +0000 ROA not after: Fri 04 Dec 2026 23:02:18 +0000 asID: 5650 IP address blocks: 104.156.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/dc563dc9-6b87-4d82-8a58-6b8b7917092c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/dc563dc9-6b87-4d82-8a58-6b8b7917092c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:0f:3a:91:ac:d8:c5:76:7a:c3:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc563dc9-6b87-4d82-8a58-6b8b7917092c Validity Not Before: Sep 5 22:02:18 2026 GMT Not After : Dec 4 23:02:18 2026 GMT Subject: CN=773d44c0-e0a2-4be8-83e0-52c11cfb67c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9a:c9:8c:83:ea:b7:8f:96:b5:45:f0:5d:b6: d2:1a:d1:6d:07:75:34:46:44:a2:47:1e:c6:46:80: 45:09:d5:27:e9:b0:d7:67:4e:79:9a:bc:6f:a4:3a: d3:5a:ab:75:ef:8f:e3:b0:f5:6d:d6:d7:b6:7e:b4: c7:b1:31:bb:7f:08:4f:aa:a0:d4:ca:bc:a0:ef:a9: 16:2e:fe:89:6f:4f:c0:67:38:44:42:cb:7f:cd:de: 80:da:c2:c6:02:cb:08:62:3a:cf:52:76:3b:58:4d: 5a:f4:bd:dc:1c:b2:4b:59:87:b4:66:e4:15:86:4e: c4:48:54:2f:52:5d:2b:f3:c6:90:5d:4c:0b:35:50: 58:91:4e:80:41:d1:cb:ed:64:1f:3d:8b:3f:8b:ff: 9f:2a:a3:68:b4:ce:69:61:2b:61:79:b0:87:b2:09: d2:7b:d0:77:b6:59:fd:99:26:8e:6e:bd:68:33:87: 52:cf:4b:ab:9a:84:8f:53:06:87:05:b3:fa:4a:99: ab:ec:12:f8:ea:37:60:b2:12:12:19:be:cd:71:6e: d7:52:15:73:d8:a4:e1:81:ab:22:1f:4d:15:f6:bc: 7c:fa:1f:28:81:43:26:49:9f:69:e1:e0:50:32:f3: 06:01:a4:77:d8:cd:7f:c0:ae:c2:77:c4:fd:c8:34: 1e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C1:43:B5:36:6E:5C:33:2D:59:5C:BA:C8:8A:61:83:BF:47:C4:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/1e2a8b1e-b3ce-3369-baa1-12890e4189a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/dc563dc9-6b87-4d82-8a58-6b8b7917092c.crl X509v3 Authority Key Identifier: keyid:A0:36:F8:0B:C8:AD:05:3F:44:8C:B8:A2:AB:AA:39:66:57:E0:D3:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c.cer sbgp-ipAddrBlock: critical IPv4: 104.156.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:75:4b:81:f6:f1:84:b5:d0:53:4a:b5:b9:32:9b:ce:19:0f: fe:00:e8:57:78:2c:56:a0:e9:a5:9a:6d:72:f4:68:6f:b2:48: aa:8c:37:46:f5:6a:42:84:77:79:68:f9:ff:53:ff:7e:26:50: 24:0e:a3:97:b3:2c:16:d6:58:32:fe:2f:99:48:da:c7:9c:46: 8f:0a:1b:7c:e4:3e:5c:f9:63:06:c1:5c:f6:90:fd:0b:e9:61: bc:d0:f7:e9:42:bd:52:54:95:59:31:db:04:91:6f:ca:72:d4: 3e:d4:88:68:9c:85:eb:8a:28:36:c0:85:ef:d0:24:77:e8:41: 12:52:01:a4:67:a9:e6:16:62:f4:18:90:29:3f:c6:2e:5c:4a: 15:9a:0b:24:75:56:4d:db:cd:4e:71:0b:0b:1f:cf:39:33:1f: 55:6e:8c:6f:7d:44:6d:ca:1c:e6:1a:d0:08:20:fc:5f:c9:12: b4:81:1f:25:98:72:a0:2d:6a:90:90:c9:2c:44:1f:32:f3:e9: 28:46:eb:07:85:f2:55:21:c0:81:81:bd:0d:ee:ba:c0:50:5e: 92:f7:df:5b:74:fe:2a:dd:76:e2:ad:6d:35:d6:d9:ed:51:26: fb:5f:fb:3b:ed:b9:49:dd:72:f3:20:46:b7:2f:39:f9:5b:c6: 91:55:9a:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UDzqRrNjFdnrD30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM1NjNkYzktNmI4Ny00ZDgyLThhNTgtNmI4Yjc5MTcw OTJjMB4XDTI2MDkwNTIyMDIxOFoXDTI2MTIwNDIzMDIxOFowLzEtMCsGA1UEAxMk NzczZDQ0YzAtZTBhMi00YmU4LTgzZTAtNTJjMTFjZmI2N2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZrJjIPqt4+WtUXwXbbSGtFtB3U0RkSiRx7G RoBFCdUn6bDXZ055mrxvpDrTWqt174/jsPVt1te2frTHsTG7fwhPqqDUyryg76kW Lv6Jb0/AZzhEQst/zd6A2sLGAssIYjrPUnY7WE1a9L3cHLJLWYe0ZuQVhk7ESFQv Ul0r88aQXUwLNVBYkU6AQdHL7WQfPYs/i/+fKqNotM5pYSthebCHsgnSe9B3tln9 mSaObr1oM4dSz0urmoSPUwaHBbP6Spmr7BL46jdgshISGb7NcW7XUhVz2KThgasi H00V9rx8+h8ogUMmSZ9p4eBQMvMGAaR32M1/wK7Cd8T9yDQe5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7BQ7U2blwzLVlcusiKYYO/R8RsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYzU2 M2RjOS02Yjg3LTRkODItOGE1OC02YjhiNzkxNzA5MmMvMWUyYThiMWUtYjNjZS0z MzY5LWJhYTEtMTI4OTBlNDE4OWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGM1NjNkYzktNmI4Ny00ZDgyLThh NTgtNmI4Yjc5MTcwOTJjL2RjNTYzZGM5LTZiODctNGQ4Mi04YTU4LTZiOGI3OTE3 MDkyYy5jcmwwHwYDVR0jBBgwFoAUoDb4C8itBT9EjLiiq6o5Zlfg040wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYzU2M2RjOS02Yjg3LTRkODItOGE1OC02Yjhi NzkxNzA5MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF51S4H28YS10FNKtbkym84ZD/4A6Fd4LFag6aWabXL0aG+ySKqMN0b1 akKEd3lo+f9T/34mUCQOo5ezLBbWWDL+L5lI2secRo8KG3zkPlz5YwbBXPaQ/Qvp YbzQ9+lCvVJUlVkx2wSRb8py1D7UiGicheuKKDbAhe/QJHfoQRJSAaRnqeYWYvQY kCk/xi5cShWaCyR1Vk3bzU5xCwsfzzkzH1VujG99RG3KHOYa0Agg/F/JErSBHyWY cqAtapCQySxEHzLz6ShG6weF8lUhwIGBvQ3uusBQXpL331t0/irdduKtbTXW2e1R Jvtf+zvtuUndcvMgRrcvOflbxpFVmjA= -----END CERTIFICATE-----Generated at Mon Sep 21 19:15:26 2026 by rpki-client