$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/6f4a6b21-cbf1-3592-9a20-d35603db1871.roa File: 6f4a6b21-cbf1-3592-9a20-d35603db1871.roa (raw, json) Hash identifier: fkVmJnMRiQb9hdbKVlD5cf9i7F7TL4BOTrby2s+kW8U= Subject key identifier: 9B:C7:71:FD:ED:4D:D8:1E:AE:9C:87:C9:CF:5B:A3:E4:F8:E3:A1:74 Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584E4824944F73AE5EC66DDE5F00 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/6f4a6b21-cbf1-3592-9a20-d35603db1871.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 16789 IP address blocks: 104.156.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:94:4f:73:ae:5e:c6:6d:de:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=3fa19610-c494-4650-b3e5-48dc48beb9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:32:cd:d8:55:9b:66:6c:b3:40:bb:8f:2d:41: 8c:fb:77:46:ec:e0:20:f2:db:08:a2:8d:00:7e:45: a2:a8:6c:89:63:33:e3:bd:9a:ac:48:72:fb:7a:6e: c5:ef:6a:1c:ea:0f:4e:d9:83:99:e8:8d:19:ba:b8: 39:5e:aa:19:ff:ec:2b:0e:b3:9e:4c:53:9c:00:b5: 71:45:f6:06:93:0f:58:21:06:dd:a0:56:0b:dd:e2: d3:8e:f5:8c:a3:35:b7:23:15:84:8e:6c:78:09:0f: 71:22:be:c1:b2:fd:0a:68:d0:a2:1c:c6:de:0a:4a: 59:cf:ee:74:52:03:6f:74:a1:81:be:ab:45:5b:e5: 00:6c:cd:ce:d4:85:e2:12:51:76:12:2c:c3:7c:f4: 02:81:52:b3:6e:47:fe:69:d4:11:bf:23:70:dd:75: 09:18:bb:fb:1e:f2:e6:e5:bf:19:8d:9b:68:fb:21: 42:35:c9:47:de:cc:7f:92:ed:18:58:9c:be:d6:f5: 2c:1b:f4:28:92:66:8f:7b:1b:c6:ab:e6:0b:1e:6f: 8c:41:56:5c:d1:4e:3b:a2:07:c3:d0:9e:37:dd:8f: 44:51:ce:62:a8:34:4f:e6:3a:40:3b:e5:0f:11:a4: cd:32:59:18:56:21:64:d2:43:be:e7:12:15:a0:e7: 68:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C7:71:FD:ED:4D:D8:1E:AE:9C:87:C9:CF:5B:A3:E4:F8:E3:A1:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/6f4a6b21-cbf1-3592-9a20-d35603db1871.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:65:85:85:0a:31:dc:54:44:99:84:cc:3d:5f:ae:01:9d:99: ac:ec:ce:1e:4b:07:d2:bb:e1:bd:84:0a:47:01:8f:d7:33:9f: 25:46:61:2c:16:46:6c:01:9b:97:0c:2c:8f:e7:22:ef:87:fc: 21:c5:03:5a:34:25:5b:ab:5e:e3:ff:0f:11:98:86:ad:b6:17: 19:5d:cc:c7:60:fb:78:38:68:48:1e:ea:f3:cd:59:e6:83:18: eb:8f:e9:60:a1:9e:de:56:51:a7:fe:df:96:12:b4:9a:ff:9d: f4:f5:5e:67:42:a2:4b:9b:a3:86:b7:76:c5:de:6c:f8:a1:1d: 46:94:39:b6:ee:a7:27:25:a5:f0:31:bd:86:d4:73:1e:32:5a: 94:d2:a4:1a:5a:dd:48:f3:d4:56:b4:6d:23:af:1b:f3:f3:88: 07:d9:a0:bb:50:a1:b2:24:72:ab:4d:3b:84:f8:ae:c7:67:74: 5d:64:fd:1c:d7:1a:ac:ce:71:ae:16:b5:83:10:10:a6:a7:6e: 84:27:d8:a2:f6:65:1a:d5:c2:06:36:af:05:5b:d3:33:f1:a7: 26:b0:83:61:81:92:3a:7c:63:b6:0f:8b:47:e7:18:b9:dc:d3: 4b:66:ed:ad:e7:85:54:4d:95:6f:13:75:ac:da:df:6c:2a:e6: a8:ca:0c:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJJRPc65exm3eXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk M2ZhMTk2MTAtYzQ5NC00NjUwLWIzZTUtNDhkYzQ4YmViOWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDLN2FWbZmyzQLuPLUGM+3dG7OAg8tsIoo0A fkWiqGyJYzPjvZqsSHL7em7F72oc6g9O2YOZ6I0Zurg5XqoZ/+wrDrOeTFOcALVx RfYGkw9YIQbdoFYL3eLTjvWMozW3IxWEjmx4CQ9xIr7Bsv0KaNCiHMbeCkpZz+50 UgNvdKGBvqtFW+UAbM3O1IXiElF2EizDfPQCgVKzbkf+adQRvyNw3XUJGLv7HvLm 5b8ZjZto+yFCNclH3sx/ku0YWJy+1vUsG/QokmaPexvGq+YLHm+MQVZc0U47ogfD 0J433Y9EUc5iqDRP5jpAO+UPEaTNMlkYViFk0kO+5xIVoOdogQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvHcf3tTdgerpyHyc9bo+T446F0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvNmY0YTZiMjEtY2JmMS0z NTkyLTlhMjAtZDM1NjAzZGIxODcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJy+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxlhYUKMdxURJmEzD1frgGdmazszh5LB9K74b2ECkcBj9cznyVGYSwW RmwBm5cMLI/nIu+H/CHFA1o0JVurXuP/DxGYhq22FxldzMdg+3g4aEge6vPNWeaD GOuP6WChnt5WUaf+35YStJr/nfT1XmdCokubo4a3dsXebPihHUaUObbupyclpfAx vYbUcx4yWpTSpBpa3Ujz1Fa0bSOvG/PziAfZoLtQobIkcqtNO4T4rsdndF1k/RzX GqzOca4WtYMQEKanboQn2KL2ZRrVwgY2rwVb0zPxpyawg2GBkjp8Y7YPi0fnGLnc 00tm7a3nhVRNlW8Tdaza32wq5qjKDJI= -----END CERTIFICATE-----Generated at Fri Jul 24 10:27:19 2026 by rpki-client