$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/b843c24c-9470-32c3-9572-a733f7a4b73d.roa File: b843c24c-9470-32c3-9572-a733f7a4b73d.roa (raw, json) Hash identifier: NvXcO40soXK5PDOveER1EW/kDlndOm5ZxBbexU+DCBU= Subject key identifier: 41:27:6C:75:0D:69:5B:3F:BB:72:9F:C9:27:10:7A:25:A4:4B:8A:B8 Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Certificate serial: 010D0C9F4328584D746FB976ECF78E3C9F57EF00 Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/b843c24c-9470-32c3-9572-a733f7a4b73d.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 21782 IP address blocks: 104.156.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:b9:76:ec:f7:8e:3c:9f:57:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=d5155b01-038a-4450-a60b-5011e0a2e812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:71:16:74:16:e9:80:92:84:df:3e:3b:4f:f0: c0:dd:f8:88:cc:a0:32:de:3b:e7:dc:d0:43:b7:53: 1c:fb:3d:39:52:fe:73:f0:a9:1a:11:ed:15:5d:be: 6a:28:b6:32:93:2c:fd:78:64:55:d3:2a:db:b0:b5: 5f:ec:4e:4f:77:23:6f:91:b6:b4:65:1c:0a:18:0d: 69:5f:29:08:10:ea:a7:f7:90:31:07:e3:83:78:c1: 6f:7c:f0:28:c8:20:a0:bf:bc:18:b8:ff:13:d6:f6: 12:3f:51:93:5a:ba:72:c0:ba:a6:15:d3:24:d0:a3: b8:24:ff:53:12:55:f9:00:a1:7a:5a:4f:39:eb:f9: c9:c1:c5:da:ac:76:0f:8e:f0:23:0d:32:53:f0:41: 7f:bd:d5:2d:e7:5e:d8:ee:54:06:73:2f:a8:5f:00: e2:60:24:c8:e3:cd:c7:d8:4a:af:06:0c:95:b6:be: db:1d:d3:4f:a3:91:59:84:3a:28:0a:a0:66:f9:99: 7d:2f:9c:ae:b0:bc:8b:2f:00:79:15:0a:ac:f6:bd: 54:9d:68:8e:a6:31:87:57:22:a8:41:b3:65:7e:dc: d3:35:11:fd:98:de:1a:3e:01:b9:2e:34:f4:64:d6: 6e:7a:83:63:88:25:cf:30:95:2f:f7:56:66:5f:b2: 68:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:27:6C:75:0D:69:5B:3F:BB:72:9F:C9:27:10:7A:25:A4:4B:8A:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/b843c24c-9470-32c3-9572-a733f7a4b73d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl X509v3 Authority Key Identifier: keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer sbgp-ipAddrBlock: critical IPv4: 104.156.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:9b:e6:29:ef:5a:68:ac:33:35:a4:eb:ee:b2:bd:36:43:32: 0f:26:94:46:f5:8d:58:2c:a8:7e:5a:11:60:f7:f7:f1:49:8b: 75:5c:67:91:32:02:a1:df:b1:a5:16:5e:c1:07:af:28:48:90: f0:ed:25:d0:c3:b8:3e:0e:28:ac:dc:ad:f1:f5:29:5d:fb:30: 87:1d:72:51:de:42:f6:ac:41:fd:f7:b6:e3:27:9c:c8:08:de: f0:c9:23:6b:8d:37:6a:4c:ec:cf:31:88:4b:e4:f5:32:1d:1a: 7b:3b:c6:27:76:25:94:89:62:8f:71:da:a3:df:9c:47:6b:dd: 35:fd:11:ec:31:a4:d4:10:f3:6d:be:c7:dd:c7:17:cb:17:1c: a9:14:df:98:e6:89:d0:71:b7:60:ef:f2:6b:6a:65:4b:2d:5a: d5:8f:0c:6a:72:99:af:79:45:a4:41:d7:96:4f:a4:04:e3:b9: 2f:85:6f:3d:7d:23:7a:f2:cf:ae:7b:59:12:ab:79:9a:cc:7e: a4:9f:02:97:88:d0:1e:c5:32:30:99:b5:e6:35:c5:23:f7:6f: ce:a2:a2:2e:be:20:ae:b8:9a:60:86:1f:39:b6:85:b3:22:94: f8:f7:28:5a:16:2a:ca:c0:b7:12:d2:4f:28:47:fa:7c:5a:fc: 6f:ef:8b:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b7l27PeOPJ9X7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl OTNhMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZDUxNTViMDEtMDM4YS00NDUwLWE2MGItNTAxMWUwYTJlODEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnEWdBbpgJKE3z47T/DA3fiIzKAy3jvn3NBD t1Mc+z05Uv5z8KkaEe0VXb5qKLYykyz9eGRV0yrbsLVf7E5PdyNvkba0ZRwKGA1p XykIEOqn95AxB+ODeMFvfPAoyCCgv7wYuP8T1vYSP1GTWrpywLqmFdMk0KO4JP9T ElX5AKF6Wk856/nJwcXarHYPjvAjDTJT8EF/vdUt517Y7lQGcy+oXwDiYCTI483H 2EqvBgyVtr7bHdNPo5FZhDooCqBm+Zl9L5yusLyLLwB5FQqs9r1UnWiOpjGHVyKo QbNlftzTNRH9mN4aPgG5LjT0ZNZueoNjiCXPMJUv91ZmX7JolQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEnbHUNaVs/u3KfyScQeiWkS4q4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvYjg0M2MyNGMtOTQ3MC0z MmMzLTk1NzItYTczM2Y3YTRiNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4 YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1 MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaJwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqb5invWmisMzWk6+6yvTZDMg8mlEb1jVgsqH5aEWD39/FJi3VcZ5Ey AqHfsaUWXsEHryhIkPDtJdDDuD4OKKzcrfH1KV37MIcdclHeQvasQf33tuMnnMgI 3vDJI2uNN2pM7M8xiEvk9TIdGns7xid2JZSJYo9x2qPfnEdr3TX9EewxpNQQ822+ x93HF8sXHKkU35jmidBxt2Dv8mtqZUstWtWPDGpyma95RaRB15ZPpATjuS+Fbz19 I3ryz657WRKreZrMfqSfApeI0B7FMjCZteY1xSP3b86ioi6+IK64mmCGHzm2hbMi lPj3KFoWKsrAtxLSTyhH+nxa/G/vi18= -----END CERTIFICATE-----Generated at Sun Apr 19 12:58:20 2026 by rpki-client