$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa File: aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa (raw, json) Hash identifier: YqlESl0lTLA5jzZoM/AfP649eByQkHBsPVEfiZbwLkY= Subject key identifier: FF:9A:FA:6B:DD:18:A2:AA:9B:7B:03:F7:07:EF:9B:63:70:C8:35:F6 Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F4328584D95EFEF65BB94DD0385CAC900 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 63023 IP address blocks: 104.156.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:ef:65:bb:94:dd:03:85:ca:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=bbf24719-03b2-4fa8-8825-ba06b9f6de89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:14:53:94:59:5b:41:70:ee:69:90:41:09:48: 02:fc:40:96:8f:ed:6d:dd:df:4a:76:5c:78:59:2f: 68:b8:c2:a5:5c:a8:82:34:9f:ce:af:d1:8d:53:c3: c0:d7:e4:5e:60:aa:72:64:0e:62:a3:5b:68:97:94: 37:37:ce:66:8d:19:b1:f2:01:49:c7:ff:76:22:23: d8:1a:38:d0:df:17:d3:33:6e:14:4f:6c:58:c7:38: 9d:ae:6b:a4:b0:02:d2:9a:59:a9:cb:ca:d2:9d:6b: ee:3f:3f:18:db:1a:24:5a:0e:70:56:5e:88:3b:59: 74:e6:31:12:1e:ea:25:13:6e:82:ec:7e:2d:b7:01: b3:d1:bb:51:10:ec:b5:8f:68:22:c3:cc:a0:a5:5a: 37:09:40:fa:82:f9:99:d9:45:78:c9:d9:4d:1f:6c: e0:ae:3b:00:e9:73:d9:83:85:bf:4d:4b:2e:bf:e1: cc:e9:66:4a:f2:f9:97:73:d5:b8:98:50:f3:b2:01: 46:3c:9b:28:e6:9e:bf:ca:de:c7:38:10:41:12:32: 38:1c:2b:9e:f9:9d:6e:30:7b:6c:03:5c:9d:84:8c: 8e:ee:1f:fe:16:dd:e9:2b:8b:eb:73:24:51:39:a9: 6a:c6:f2:7c:ff:34:09:0a:45:cb:2c:a3:ca:be:b9: 82:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9A:FA:6B:DD:18:A2:AA:9B:7B:03:F7:07:EF:9B:63:70:C8:35:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 104.156.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:61:88:a1:63:eb:3e:da:a6:ba:2f:fd:8f:fa:c0:c5:d2:40: 91:fb:2d:57:f5:63:f5:a4:72:a0:9b:c8:b4:88:50:86:20:be: 70:2f:93:1d:c8:03:bf:7a:1b:e3:9b:dc:ec:73:f1:ee:26:e6: 74:d5:3a:7e:0d:ff:e1:78:54:9a:a3:84:42:29:3d:b8:fe:33: c7:cd:21:58:eb:42:9e:aa:a2:52:81:5e:a1:18:a2:bd:8b:38: ce:e1:f0:2e:85:56:66:28:8e:3d:ba:7a:51:3f:8f:66:2c:a5: cc:00:08:0c:5e:17:88:68:8a:e9:91:8b:6e:bd:51:99:4c:e6: 8a:eb:57:45:9e:77:5b:4f:65:f1:f5:a0:40:c4:ab:25:41:71: 7e:ed:89:04:7b:a2:b1:d7:96:96:27:c8:d9:f0:fc:98:4c:62: 6f:a4:ae:48:d5:06:e5:a9:6a:ca:14:0e:0d:1a:fd:e9:d2:1b: cb:98:e9:e7:2a:9c:1a:df:ec:3f:e2:df:6d:3c:6d:3d:b0:18: 7c:33:b5:b4:69:20:31:06:64:1f:81:d2:13:58:c2:eb:eb:50: 9b:27:85:f7:34:8b:37:ea:92:80:2f:cf:60:87:13:57:0a:d4: 8b:fa:c2:11:fd:70:64:15:d8:71:48:98:39:80:a7:3c:85:5e: c7:1d:9d:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V7+9lu5TdA4XKyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk YmJmMjQ3MTktMDNiMi00ZmE4LTg4MjUtYmEwNmI5ZjZkZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhRTlFlbQXDuaZBBCUgC/ECWj+1t3d9Kdlx4 WS9ouMKlXKiCNJ/Or9GNU8PA1+ReYKpyZA5io1tol5Q3N85mjRmx8gFJx/92IiPY GjjQ3xfTM24UT2xYxzidrmuksALSmlmpy8rSnWvuPz8Y2xokWg5wVl6IO1l05jES HuolE26C7H4ttwGz0btREOy1j2giw8ygpVo3CUD6gvmZ2UV4ydlNH2zgrjsA6XPZ g4W/TUsuv+HM6WZK8vmXc9W4mFDzsgFGPJso5p6/yt7HOBBBEjI4HCue+Z1uMHts A1ydhIyO7h/+Ft3pK4vrcyRROalqxvJ8/zQJCkXLLKPKvrmC6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+a+mvdGKKqm3sD9wfvm2NwyDX2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvYWJhNWE2YTEtZWFkOS0z M2ZlLWExYjQtYTllMmZiOTAwODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBhiKFj6z7aprov/Y/6wMXSQJH7LVf1Y/WkcqCbyLSIUIYgvnAvkx3I A796G+Ob3Oxz8e4m5nTVOn4N/+F4VJqjhEIpPbj+M8fNIVjrQp6qolKBXqEYor2L OM7h8C6FVmYojj26elE/j2YspcwACAxeF4hoiumRi269UZlM5orrV0Wed1tPZfH1 oEDEqyVBcX7tiQR7orHXlpYnyNnw/JhMYm+krkjVBuWpasoUDg0a/enSG8uY6ecq nBrf7D/i3208bT2wGHwztbRpIDEGZB+B0hNYwuvrUJsnhfc0izfqkoAvz2CHE1cK 1Iv6whH9cGQV2HFImDmApzyFXscdneQ= -----END CERTIFICATE-----Generated at Wed May 13 04:36:15 2026 by rpki-client