$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3c866c81-424a-3e1e-ac78-0550da029957.roa File: 3c866c81-424a-3e1e-ac78-0550da029957.roa (raw, json) Hash identifier: oAkmkXWTm5DMZS9wbn6UMHAOnhfRkiNwWw22CY94074= Subject key identifier: E0:7B:E7:DA:81:E6:5B:93:8E:E7:57:00:76:47:64:FF:69:DE:77:D3 Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F4328584E3E5F3D3B6CBE44DE421CA940 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3c866c81-424a-3e1e-ac78-0550da029957.roa Signing time: Sun 21 Jun 2026 09:00:12 +0000 ROA not before: Sun 21 Jun 2026 09:00:12 +0000 ROA not after: Sat 19 Sep 2026 09:00:12 +0000 asID: 16789 IP address blocks: 104.156.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:5f:3d:3b:6c:be:44:de:42:1c:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Jun 21 09:00:12 2026 GMT Not After : Sep 19 09:00:12 2026 GMT Subject: CN=80e147a4-f2c2-4293-be93-ce9aea3d4909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c9:83:95:b7:e2:e5:2e:c6:1f:47:b9:6f:6f: 0f:82:76:f9:a4:5e:ee:b5:b7:a8:43:f6:4a:28:ea: b4:a2:c1:4c:66:68:32:fe:63:a4:5c:a1:75:19:11: 7c:d0:d7:68:05:fa:55:58:01:94:f1:97:53:40:36: 1c:e4:28:18:12:e4:45:4d:7c:68:f4:76:eb:76:68: 10:2a:c1:4b:63:15:b4:d6:36:95:f1:fa:62:de:7f: ff:3f:28:fd:ac:68:c2:6b:e2:39:a0:c4:50:45:d0: c1:b1:14:1c:19:f0:de:b9:3e:00:0b:c4:44:04:91: b2:c4:9f:30:f2:26:ee:4e:e0:d8:f7:3d:0d:84:8a: 4f:70:e6:09:72:2f:57:2b:47:3d:41:3e:f0:bc:8c: 1f:76:df:33:24:f1:84:9b:fe:56:2e:38:25:f6:88: 16:1a:31:c8:68:b5:d9:2d:3a:6b:ec:46:65:65:c5: 38:ed:97:d0:78:01:81:00:98:18:d3:ab:c3:97:8b: 3c:40:7b:e1:2c:58:fc:8a:38:61:f8:49:ba:6d:c8: 1f:b5:cf:df:25:fe:2d:ff:0c:df:c1:65:7f:fc:30: 54:5e:38:d0:3c:be:e2:d2:9f:63:ba:cc:3b:0f:96: 26:b6:0d:8e:d3:11:9b:b6:fa:5d:25:e3:a4:06:b0: 40:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7B:E7:DA:81:E6:5B:93:8E:E7:57:00:76:47:64:FF:69:DE:77:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3c866c81-424a-3e1e-ac78-0550da029957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:10:6a:e6:9a:b3:8f:f3:57:df:32:5c:dd:63:d6:c3:d6:20: 6b:5d:36:36:8c:5c:6e:5f:83:e5:25:c5:ec:cd:c1:10:17:1b: 7e:15:22:d4:c2:c0:e1:1c:83:a0:1d:27:92:2d:14:a1:7d:c8: cb:27:a5:a5:18:2e:3f:e4:65:2d:b4:f9:3c:ab:46:93:61:25: 22:56:aa:95:55:20:13:48:3d:4e:d0:cb:c7:56:e6:39:65:4c: a2:04:ef:a7:95:99:5e:b9:45:cb:f2:7d:0e:77:52:b3:10:fe: 92:5e:ca:51:93:81:93:b7:08:64:bb:dc:cb:d9:87:1c:85:e8: dd:3e:04:cb:7f:ef:df:2d:e0:59:c8:fe:9c:93:fd:dc:ec:d2: 80:f8:71:96:65:48:37:c3:05:95:45:71:75:29:39:bf:d4:ac: b7:a7:24:a6:80:ed:17:ae:b7:80:cd:07:13:86:69:f6:12:bf: d8:5f:0c:1c:15:fd:8c:74:01:b5:42:eb:6d:0d:9b:cc:3d:60: 97:02:00:18:ac:17:78:7c:fa:cf:aa:cd:72:49:1e:54:06:78: 15:2f:a4:88:7b:c6:ce:ed:14:b3:7e:30:df:7a:b2:37:77:37: aa:b1:8d:0c:66:fd:9b:46:cf:c7:8e:29:09:9b:6e:c4:25:8c: 50:02:c0:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+Xz07bL5E3kIcqUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk ODBlMTQ3YTQtZjJjMi00MjkzLWJlOTMtY2U5YWVhM2Q0OTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMmDlbfi5S7GH0e5b28Pgnb5pF7utbeoQ/ZK KOq0osFMZmgy/mOkXKF1GRF80NdoBfpVWAGU8ZdTQDYc5CgYEuRFTXxo9HbrdmgQ KsFLYxW01jaV8fpi3n//Pyj9rGjCa+I5oMRQRdDBsRQcGfDeuT4AC8REBJGyxJ8w 8ibuTuDY9z0NhIpPcOYJci9XK0c9QT7wvIwfdt8zJPGEm/5WLjgl9ogWGjHIaLXZ LTpr7EZlZcU47ZfQeAGBAJgY06vDl4s8QHvhLFj8ijhh+Em6bcgftc/fJf4t/wzf wWV//DBUXjjQPL7i0p9jusw7D5Ymtg2O0xGbtvpdJeOkBrBARwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOB759qB5luTjudXAHZHZP9p3nfTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvM2M4NjZjODEtNDI0YS0z ZTFlLWFjNzgtMDU1MGRhMDI5OTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJynMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwQauaas4/zV98yXN1j1sPWIGtdNjaMXG5fg+UlxezNwRAXG34VItTC wOEcg6AdJ5ItFKF9yMsnpaUYLj/kZS20+TyrRpNhJSJWqpVVIBNIPU7Qy8dW5jll TKIE76eVmV65RcvyfQ53UrMQ/pJeylGTgZO3CGS73MvZhxyF6N0+BMt/798t4FnI /pyT/dzs0oD4cZZlSDfDBZVFcXUpOb/UrLenJKaA7Reut4DNBxOGafYSv9hfDBwV /Yx0AbVC620Nm8w9YJcCABisF3h8+s+qzXJJHlQGeBUvpIh7xs7tFLN+MN96sjd3 N6qxjQxm/ZtGz8eOKQmbbsQljFACwCE= -----END CERTIFICATE-----Generated at Wed Jun 24 11:26:57 2026 by rpki-client