$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/5b1e7fcf-2b3e-349b-aeef-315a7bba20ba.roa File: 5b1e7fcf-2b3e-349b-aeef-315a7bba20ba.roa (raw, json) Hash identifier: zKcvN0y9841WGl9qAwEU2pktxksSdRP7xNTi6OJGXvc= Subject key identifier: 4C:73:8A:DD:9A:D3:0B:1E:40:F0:F5:9F:81:F8:E1:35:90:04:1B:E1 Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F4328584D2BD9FFEBB3B501F9714F8300 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/5b1e7fcf-2b3e-349b-aeef-315a7bba20ba.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 27395 IP address blocks: 104.156.156.0/24 maxlen: 24 104.156.157.0/24 maxlen: 24 104.156.158.0/24 maxlen: 24 104.156.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:d9:ff:eb:b3:b5:01:f9:71:4f:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=3068369e-68f7-444b-a33f-7bf5ae4e995e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a3:58:06:c0:13:f9:ac:e9:72:8a:eb:f8:01: d6:2f:78:bf:46:9b:ec:2c:c5:4f:07:52:5a:ed:30: 6d:f2:5c:f9:05:10:60:fd:3b:2d:c2:dc:ab:9b:72: e1:fe:b4:e9:20:c6:d2:1a:c2:1c:e0:6b:4a:08:61: 9b:d1:a3:8f:e6:d5:12:d0:aa:40:35:93:13:0e:6d: 00:6a:87:c7:cd:85:c2:3b:18:65:6b:23:4f:2a:4a: 94:20:84:06:6d:42:e1:b6:f9:44:17:6c:7a:fd:fc: 44:5e:25:7c:d4:b7:52:43:92:8d:29:7e:15:9a:da: 24:3f:dc:69:22:3a:1c:33:d4:dd:82:1e:81:15:98: e8:d8:09:d9:e3:87:65:ec:ca:c4:32:aa:e4:35:9a: 4f:3e:d6:37:aa:d4:a4:88:23:a8:75:7a:2a:33:6d: 82:09:c3:83:41:6f:3e:82:0f:5e:d9:43:c8:da:75: e0:a5:14:0f:4d:67:1b:dc:29:44:26:f3:01:30:e2: 8a:dd:77:26:29:7b:cb:03:ac:16:f3:6f:08:55:22: 8d:08:f8:55:9e:1c:58:b7:32:1b:79:3c:df:fe:86: 13:44:b5:b7:47:40:b0:2a:47:e5:3e:6a:3f:e1:86: d6:db:69:55:d6:39:51:6b:e1:9b:cb:86:59:52:8e: 17:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:73:8A:DD:9A:D3:0B:1E:40:F0:F5:9F:81:F8:E1:35:90:04:1B:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/5b1e7fcf-2b3e-349b-aeef-315a7bba20ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 104.156.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:c0:3b:43:0b:dd:e9:ca:20:7c:bc:80:0c:4e:08:23:62:74: 33:70:40:79:89:1a:75:97:2d:f8:13:bf:71:7d:b4:c2:eb:95: 00:78:76:69:8e:a4:5c:6c:de:58:0e:c5:f1:f1:d3:54:77:8d: 4a:af:a3:ba:e1:a4:c0:6b:b6:5e:e2:8b:a0:71:4e:80:b8:f3: 80:4a:76:e0:0d:ff:01:c4:2c:16:2c:2b:b4:e4:fd:13:41:b1: 13:49:d9:33:6a:ff:9d:36:b1:e0:15:15:d4:a1:8e:c5:ec:be: 6f:51:ce:58:f9:a2:ca:e3:dc:09:47:82:32:9b:5c:74:6d:b6: d6:75:ec:5f:45:57:c5:1a:38:e5:70:51:1b:03:5b:37:47:b5: 1b:96:2c:4c:5d:db:58:2d:ec:81:4e:6d:c1:13:d6:c2:f9:8e: e5:b9:20:40:57:b1:ff:7e:e2:22:ce:ce:04:96:ae:c6:08:42: 74:22:a7:3f:b1:cb:e3:e2:87:63:cd:2d:fe:b9:db:53:b1:77: b6:04:fd:7f:3b:f5:32:11:6d:8c:9a:42:f1:2d:14:e9:d8:4b: 48:9f:9b:cb:db:8f:de:9c:d9:46:09:c1:0f:47:0c:69:a1:b4: 7a:65:fc:9c:8e:71:44:81:4b:1d:21:84:ff:4d:ae:39:97:18: 91:82:b8:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2f/rs7UB+XFPgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk MzA2ODM2OWUtNjhmNy00NDRiLWEzM2YtN2JmNWFlNGU5OTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqNYBsAT+azpcorr+AHWL3i/RpvsLMVPB1Ja 7TBt8lz5BRBg/Tstwtyrm3Lh/rTpIMbSGsIc4GtKCGGb0aOP5tUS0KpANZMTDm0A aofHzYXCOxhlayNPKkqUIIQGbULhtvlEF2x6/fxEXiV81LdSQ5KNKX4VmtokP9xp IjocM9Tdgh6BFZjo2AnZ44dl7MrEMqrkNZpPPtY3qtSkiCOodXoqM22CCcODQW8+ gg9e2UPI2nXgpRQPTWcb3ClEJvMBMOKK3XcmKXvLA6wW828IVSKNCPhVnhxYtzIb eTzf/oYTRLW3R0CwKkflPmo/4YbW22lV1jlRa+Gby4ZZUo4XZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExzit2a0wseQPD1n4H44TWQBBvhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvNWIxZTdmY2YtMmIzZS0z NDliLWFlZWYtMzE1YTdiYmEyMGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjAO0ML3enKIHy8gAxOCCNidDNwQHmJGnWXLfgTv3F9tMLrlQB4dmmO pFxs3lgOxfHx01R3jUqvo7rhpMBrtl7ii6BxToC484BKduAN/wHELBYsK7Tk/RNB sRNJ2TNq/502seAVFdShjsXsvm9Rzlj5osrj3AlHgjKbXHRtttZ17F9FV8UaOOVw URsDWzdHtRuWLExd21gt7IFObcET1sL5juW5IEBXsf9+4iLOzgSWrsYIQnQipz+x y+Pih2PNLf6521Oxd7YE/X879TIRbYyaQvEtFOnYS0ifm8vbj96c2UYJwQ9HDGmh tHpl/JyOcUSBSx0hhP9NrjmXGJGCuDs= -----END CERTIFICATE-----Generated at Sat Mar 28 10:19:07 2026 by rpki-client