$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/0e5a622b-034c-3a3b-816e-0f51519ea53e.roa File: 0e5a622b-034c-3a3b-816e-0f51519ea53e.roa (raw, json) Hash identifier: 90VJiw0w+yoqw8cp2SEeT+OzpvivldJhauwuHrqY5i0= Subject key identifier: 61:87:10:FD:9C:31:77:00:9A:16:C8:38:2E:1A:8C:8D:32:67:FB:32 Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584F7BB3045B937B7E1EA4D1BC80 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/0e5a622b-034c-3a3b-816e-0f51519ea53e.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 16789 IP address blocks: 104.156.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:04:5b:93:7b:7e:1e:a4:d1:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=c20a7bf8-1964-4e31-8fe4-77309148d837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:54:6d:46:9a:88:ff:22:c3:22:a9:04:5b:ca: 54:57:6f:93:a3:07:d6:0d:a7:3f:2d:2d:f5:f4:93: a1:ca:69:57:9f:1f:16:0e:92:ff:a6:0d:7f:77:85: 0a:ef:0e:d4:2f:ca:7e:16:c1:09:59:0d:b9:0c:22: ae:06:c6:7e:b8:76:e8:c3:d1:26:95:b9:98:49:dc: f9:e0:ef:84:1e:12:e3:46:6a:1a:8a:79:35:94:52: 36:a0:4c:1a:ea:dd:cc:a1:e1:54:e1:f8:5b:be:de: 0e:36:36:5f:23:d1:f4:98:1e:04:15:e8:8a:9f:7d: f0:a2:eb:28:47:0c:df:07:6b:df:4c:3d:de:dc:d0: c0:e1:49:26:4f:f4:79:ca:2a:48:c4:b5:cf:54:ac: e3:a1:79:c1:83:14:53:aa:4d:64:f1:12:7f:d1:c8: d7:bd:aa:f1:c3:da:36:cd:69:49:52:68:37:89:06: 17:41:7a:8c:ee:56:78:9f:e3:cd:d8:9c:dd:9c:d3: 1f:9f:7d:e5:d3:0f:4c:57:0d:fb:94:28:72:4b:90: 54:13:cf:3c:73:25:4c:c5:8e:35:17:46:2f:d4:62: 57:ff:cd:18:e9:4a:c6:62:ad:52:56:b1:eb:20:39: f0:a6:7e:38:d5:64:1e:5e:ba:eb:e3:7f:8a:6a:d6: 95:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:87:10:FD:9C:31:77:00:9A:16:C8:38:2E:1A:8C:8D:32:67:FB:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/0e5a622b-034c-3a3b-816e-0f51519ea53e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:2e:cd:e5:43:65:6d:dc:ed:dc:10:43:cd:4c:27:d6:41:20: cb:04:fb:f7:44:ab:1e:3d:fc:5b:f3:e8:cc:e7:26:8a:62:02: b7:52:2f:43:26:c6:d7:db:9c:ad:ae:d0:88:c4:86:b8:e8:b5: ce:80:1c:2f:44:4a:2b:17:59:e6:e7:05:67:de:0e:60:fc:bb: c3:bf:59:da:f4:ba:8d:dc:f5:0b:8d:7d:2b:fc:d7:61:f5:80: bd:c9:54:6c:17:ef:3f:a0:cf:82:61:97:11:65:52:c3:b4:f0: 45:61:81:77:a3:b7:be:ac:ad:0c:48:f4:af:e1:2e:2d:c7:9e: 73:30:07:20:d7:5c:bc:df:3f:d3:67:fb:69:cd:ac:7c:d5:20: 46:50:59:81:03:70:12:29:8c:68:21:aa:1d:26:ae:48:dc:d9: 52:f3:05:b2:06:d3:63:d1:28:c2:e4:e0:14:cc:99:f6:ba:27: c2:d5:8c:23:02:07:2f:29:af:7d:98:a4:4e:61:a5:b5:13:73: 5c:ab:73:c9:b3:ab:7c:93:9a:b8:ef:56:ee:13:79:2d:d5:03: 8f:3e:e2:32:02:90:5e:ad:1d:52:aa:2b:26:b1:a9:3d:5f:05: 8f:1c:17:de:db:a4:30:33:ab:a8:db:0d:4c:48:b7:4a:37:25: 17:4d:01:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97swRbk3t+HqTRvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk YzIwYTdiZjgtMTk2NC00ZTMxLThmZTQtNzczMDkxNDhkODM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFRtRpqI/yLDIqkEW8pUV2+TowfWDac/LS31 9JOhymlXnx8WDpL/pg1/d4UK7w7UL8p+FsEJWQ25DCKuBsZ+uHbow9EmlbmYSdz5 4O+EHhLjRmoaink1lFI2oEwa6t3MoeFU4fhbvt4ONjZfI9H0mB4EFeiKn33wouso RwzfB2vfTD3e3NDA4UkmT/R5yipIxLXPVKzjoXnBgxRTqk1k8RJ/0cjXvarxw9o2 zWlJUmg3iQYXQXqM7lZ4n+PN2JzdnNMfn33l0w9MVw37lChyS5BUE888cyVMxY41 F0Yv1GJX/80Y6UrGYq1SVrHrIDnwpn441WQeXrrr43+KataVUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGHEP2cMXcAmhbIOC4ajI0yZ/syMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvMGU1YTYyMmItMDM0Yy0z YTNiLTgxNmUtMGY1MTUxOWVhNTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkuzeVDZW3c7dwQQ81MJ9ZBIMsE+/dEqx49/Fvz6MznJopiArdSL0Mm xtfbnK2u0IjEhrjotc6AHC9ESisXWebnBWfeDmD8u8O/Wdr0uo3c9QuNfSv812H1 gL3JVGwX7z+gz4JhlxFlUsO08EVhgXejt76srQxI9K/hLi3HnnMwByDXXLzfP9Nn +2nNrHzVIEZQWYEDcBIpjGghqh0mrkjc2VLzBbIG02PRKMLk4BTMmfa6J8LVjCMC By8pr32YpE5hpbUTc1yrc8mzq3yTmrjvVu4TeS3VA48+4jICkF6tHVKqKyaxqT1f BY8cF97bpDAzq6jbDUxIt0o3JRdNATw= -----END CERTIFICATE-----Generated at Sun Nov 15 20:50:39 2026 by rpki-client