$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e67dd3ed-cf9f-34ce-88f3-e5be54a98174.roa File: e67dd3ed-cf9f-34ce-88f3-e5be54a98174.roa (raw, json) Hash identifier: 4wIyoxuLmiwTJXb/3O08z2mcIA63fqKy10HPXlt6frM= Subject key identifier: A3:08:68:4A:4A:5B:2E:4B:93:80:57:4E:3D:E2:60:50:D1:12:08:12 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584DAC45835D016747589C54BE00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e67dd3ed-cf9f-34ce-88f3-e5be54a98174.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 11404 IP address blocks: 104.156.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:83:5d:01:67:47:58:9c:54:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=ea0b4ae4-8d41-4577-9ef4-e559a62849e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:de:62:14:16:05:c4:e4:bd:8d:fb:b1:cf:a9: 76:a1:e6:aa:71:2e:8d:ac:4d:af:df:c5:94:a4:dd: bb:00:7f:2b:2f:db:f5:46:6f:1d:c5:bc:99:84:34: f3:07:86:d9:8a:c4:16:9f:28:fe:11:55:9e:54:88: 27:39:b9:61:0e:fb:b0:22:90:7f:00:a2:f9:c0:ed: 15:93:f8:76:e3:d6:5f:3a:a4:03:0f:fb:b2:93:00: f9:5a:2a:ea:75:a1:a9:74:c3:5a:70:e5:cd:2f:39: 15:19:4c:05:e5:86:44:9c:b8:d6:d2:6b:67:8f:1d: 39:71:e7:4f:63:6d:a6:49:a5:cd:d3:8c:85:24:50: 71:26:40:00:84:0b:dd:36:4c:0a:b2:a4:c7:16:43: 0d:bf:c4:0b:6b:50:65:7e:1e:06:5a:1f:72:61:21: 23:2d:ce:7d:fd:74:fe:13:8f:f3:c8:0a:70:ee:e8: ce:7e:4a:62:66:be:2c:b9:39:49:bc:bf:4e:2d:90: 1b:6b:1f:00:ab:46:8d:a6:a6:f8:8e:ab:78:d5:fe: 13:1f:71:d3:28:85:4c:a2:99:05:a2:16:8f:03:0d: 57:c8:a4:f1:aa:1e:9c:2d:f9:82:93:a3:a2:b9:49: f7:95:00:c0:d0:7f:35:ce:fc:0f:35:f4:09:ed:e1: ae:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:08:68:4A:4A:5B:2E:4B:93:80:57:4E:3D:E2:60:50:D1:12:08:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e67dd3ed-cf9f-34ce-88f3-e5be54a98174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.156.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:76:62:dc:6c:9a:bd:41:c7:ff:20:36:69:bf:0e:05:bc:55: 31:6d:4a:f5:91:8e:a1:96:71:fb:c9:f6:b9:89:8d:fd:0d:9d: 94:65:eb:bb:ec:d4:7b:56:ba:1a:75:50:36:b4:f9:d2:19:8c: 8d:d7:ec:72:0b:9b:1e:0e:c4:e1:d4:cc:ca:b3:a0:ca:23:f0: 3b:82:c9:18:4f:17:c1:9b:2c:21:e8:6e:7a:4a:3f:3c:3e:86: 4e:ec:44:17:ff:aa:7b:6f:eb:dc:f9:13:15:35:04:0f:b4:a9: 2b:ec:99:80:9d:80:00:c9:55:7a:01:ed:36:98:1a:26:94:3e: 47:15:c4:57:9b:47:ec:2c:d7:71:9d:17:52:e8:11:ff:05:b2: 39:67:18:a5:41:e5:12:0d:40:21:e8:8f:14:dc:ed:77:a0:56: 6b:f7:f8:bc:49:a9:93:39:0a:a5:95:b9:93:56:7e:e4:dd:be: 34:5e:09:86:d7:b3:0a:fa:23:0d:c0:15:59:15:4e:8f:60:df: ad:e2:21:53:5f:c5:da:b8:c8:44:71:98:04:9c:cf:69:15:5c: 83:ff:3a:fc:44:1f:6c:1e:ec:64:9f:65:94:98:91:3c:c2:aa: 9b:fc:90:45:3e:e5:73:45:35:c1:e0:90:04:34:50:0c:a5:31: b8:ea:db:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRYNdAWdHWJxUvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk ZWEwYjRhZTQtOGQ0MS00NTc3LTllZjQtZTU1OWE2Mjg0OWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt5iFBYFxOS9jfuxz6l2oeaqcS6NrE2v38WU pN27AH8rL9v1Rm8dxbyZhDTzB4bZisQWnyj+EVWeVIgnOblhDvuwIpB/AKL5wO0V k/h249ZfOqQDD/uykwD5WirqdaGpdMNacOXNLzkVGUwF5YZEnLjW0mtnjx05cedP Y22mSaXN04yFJFBxJkAAhAvdNkwKsqTHFkMNv8QLa1Blfh4GWh9yYSEjLc59/XT+ E4/zyApw7ujOfkpiZr4suTlJvL9OLZAbax8Aq0aNpqb4jqt41f4TH3HTKIVMopkF ohaPAw1XyKTxqh6cLfmCk6OiuUn3lQDA0H81zvwPNfQJ7eGuWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMIaEpKWy5Lk4BXTj3iYFDREggSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZTY3ZGQzZWQtY2Y5Zi0z NGNlLTg4ZjMtZTViZTU0YTk4MTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABB2Ytxsmr1Bx/8gNmm/DgW8VTFtSvWRjqGWcfvJ9rmJjf0NnZRl67vs 1HtWuhp1UDa0+dIZjI3X7HILmx4OxOHUzMqzoMoj8DuCyRhPF8GbLCHobnpKPzw+ hk7sRBf/qntv69z5ExU1BA+0qSvsmYCdgADJVXoB7TaYGiaUPkcVxFebR+ws13Gd F1LoEf8FsjlnGKVB5RINQCHojxTc7XegVmv3+LxJqZM5CqWVuZNWfuTdvjReCYbX swr6Iw3AFVkVTo9g363iIVNfxdq4yERxmAScz2kVXIP/OvxEH2we7GSfZZSYkTzC qpv8kEU+5XNFNcHgkAQ0UAylMbjq2+4= -----END CERTIFICATE-----Generated at Wed May 13 02:36:18 2026 by rpki-client