$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/1504f5da-3087-3949-99ea-e1109e260ad2.roa File: 1504f5da-3087-3949-99ea-e1109e260ad2.roa (raw, json) Hash identifier: yruDqY/xvaf43p/WXBOeru5pvAsjaztpGekPukwRZhI= Subject key identifier: 4F:99:B9:AF:1C:5A:3F:7B:AC:F7:7B:4C:9D:2B:1B:C7:C7:5E:67:E2 Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584F7BB304502CFF6E9ED3111A40 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/1504f5da-3087-3949-99ea-e1109e260ad2.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 16789 IP address blocks: 104.156.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:04:50:2c:ff:6e:9e:d3:11:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=75bff6d8-6de8-4138-979c-7819cd8768bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b7:b3:5b:76:db:5c:c1:8a:a6:ef:d2:3c:b4: 31:9d:da:d4:0d:b2:6d:4d:93:79:48:53:1b:e6:a5: 12:ed:a7:9b:70:42:a2:81:f5:f5:ed:60:d6:f0:85: 5e:0a:df:d4:13:d8:39:7e:b5:d9:ce:2d:38:fc:f9: 6b:fb:50:64:91:5a:95:89:21:ed:6b:70:51:fa:82: ac:f5:ed:26:ce:b2:be:15:d8:10:b6:46:2a:70:2a: 96:e3:fd:61:e7:d6:7d:1c:92:b9:03:7a:5b:74:be: d8:51:e0:71:d1:02:cc:1e:76:b2:78:d0:84:91:17: 14:0e:f4:a4:21:da:47:d4:76:c0:50:77:2f:8f:15: a7:38:f0:2c:2f:99:8a:71:87:ce:6e:1e:77:91:f8: f1:eb:f9:56:e9:46:59:f5:2e:12:e5:e9:38:ad:f2: 34:0d:ac:ee:53:40:5b:88:39:69:35:e2:f5:da:a9: e7:22:c8:81:48:7b:97:ef:51:6e:d7:91:61:9c:2f: 75:1d:45:32:c3:db:8e:60:72:d2:9e:28:06:bb:5b: 0f:d6:ce:62:dc:ef:76:50:74:03:44:21:c7:70:b2: b3:53:2d:b0:8a:a9:cc:87:51:93:d4:2f:43:88:1c: 7a:ee:c9:e9:ff:24:38:55:af:14:16:5a:1e:f9:e3: 05:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:99:B9:AF:1C:5A:3F:7B:AC:F7:7B:4C:9D:2B:1B:C7:C7:5E:67:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/1504f5da-3087-3949-99ea-e1109e260ad2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:36:fd:c2:40:f8:fc:60:54:56:7d:86:7e:be:96:e2:4c:43: 21:05:f3:b6:9b:1e:0d:de:4d:96:98:02:82:65:1c:4c:13:94: 88:1a:60:47:c2:90:88:89:cc:e7:3d:ed:88:ce:7e:dc:7e:53: f1:a1:8e:b7:db:27:2f:01:21:b4:c6:ed:b7:8f:b4:26:6f:51: 35:37:ef:bc:2e:22:29:cf:1e:e6:bf:1b:7a:aa:47:d0:87:ec: 06:a9:8d:1d:90:86:4f:d0:43:56:f9:53:06:a4:33:90:fa:33: 26:97:3b:fa:0b:3a:4e:bf:31:d7:03:7d:d7:c4:f6:d1:d7:52: b5:21:0f:8a:1f:67:48:c3:46:04:7d:c7:2a:b6:ee:9a:59:7b: 35:3e:14:c9:0f:df:2a:25:3c:b5:ab:f0:3e:0a:28:5c:a5:ad: eb:1d:1d:f4:78:ff:04:83:1e:75:5a:61:1b:2b:09:3e:e1:be: 53:96:55:8a:da:02:66:7e:04:0c:e5:b5:e2:cc:40:b3:fd:74: 1f:81:ab:2f:76:46:4f:83:4a:8c:40:4a:09:2a:42:e8:ce:8d: eb:ed:fc:e3:6a:4d:e0:1c:6c:8f:ad:0d:b6:cb:b7:3c:25:36: 58:88:06:6d:bf:4c:f3:12:de:24:fe:1c:98:2a:07:35:fa:96: f3:ca:7d:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97swRQLP9untMRGkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk NzViZmY2ZDgtNmRlOC00MTM4LTk3OWMtNzgxOWNkODc2OGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbezW3bbXMGKpu/SPLQxndrUDbJtTZN5SFMb 5qUS7aebcEKigfX17WDW8IVeCt/UE9g5frXZzi04/Plr+1BkkVqViSHta3BR+oKs 9e0mzrK+FdgQtkYqcCqW4/1h59Z9HJK5A3pbdL7YUeBx0QLMHnayeNCEkRcUDvSk IdpH1HbAUHcvjxWnOPAsL5mKcYfObh53kfjx6/lW6UZZ9S4S5ek4rfI0DazuU0Bb iDlpNeL12qnnIsiBSHuX71Fu15FhnC91HUUyw9uOYHLSnigGu1sP1s5i3O92UHQD RCHHcLKzUy2wiqnMh1GT1C9DiBx67snp/yQ4Va8UFloe+eMF0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+Zua8cWj97rPd7TJ0rG8fHXmfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvMTUwNGY1ZGEtMzA4Ny0z OTQ5LTk5ZWEtZTExMDllMjYwYWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJy/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJg2/cJA+PxgVFZ9hn6+luJMQyEF87abHg3eTZaYAoJlHEwTlIgaYEfC kIiJzOc97YjOftx+U/GhjrfbJy8BIbTG7bePtCZvUTU377wuIinPHua/G3qqR9CH 7AapjR2Qhk/QQ1b5UwakM5D6MyaXO/oLOk6/MdcDfdfE9tHXUrUhD4ofZ0jDRgR9 xyq27ppZezU+FMkP3yolPLWr8D4KKFylresdHfR4/wSDHnVaYRsrCT7hvlOWVYra AmZ+BAzlteLMQLP9dB+Bqy92Rk+DSoxASgkqQujOjevt/ONqTeAcbI+tDbbLtzwl NliIBm2/TPMS3iT+HJgqBzX6lvPKfZg= -----END CERTIFICATE-----Generated at Sun Nov 15 20:50:37 2026 by rpki-client