$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/5a5236fa-372e-334f-bc5c-2fc8b6ec894b.roa File: 5a5236fa-372e-334f-bc5c-2fc8b6ec894b.roa (raw, json) Hash identifier: QjNikXF4cEH17XeEsTEjoSQ+qfx5DHPWwbVfztljYfc= Subject key identifier: 29:A4:78:C0:60:32:9C:68:5C:29:B1:62:07:E9:21:FB:5F:E0:CB:51 Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F4328584CAE5E79D359B71BD4D0260D00 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/5a5236fa-372e-334f-bc5c-2fc8b6ec894b.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 63023 IP address blocks: 104.156.156.0/24 maxlen: 24 104.156.157.0/24 maxlen: 24 104.156.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Feb 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:79:d3:59:b7:1b:d4:d0:26:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=60f968ca-7338-44df-860e-28197a23e559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d8:8d:6a:70:e0:ee:57:aa:97:52:2f:0a:6c: 9f:e3:a1:b6:37:7b:4e:05:ec:7f:ef:3d:97:fc:6e: 11:77:8a:f5:c3:a8:2a:aa:39:74:20:ee:ad:06:ba: 81:70:02:5c:37:24:cc:c2:2e:3b:6e:2c:a0:33:74: f5:5e:25:2d:a8:58:b3:d8:a6:61:77:e3:84:0f:17: 67:56:0e:6e:ca:9a:90:7c:e8:8c:70:a2:04:da:28: 76:2c:39:b8:e8:23:0f:ab:c8:cc:a7:b7:30:a6:d0: 7a:f9:cc:9d:b2:07:e7:be:94:6e:52:39:6b:23:80: 0c:ee:d1:f5:f0:a6:24:e7:68:2c:c6:a0:81:3a:d2: 7f:90:86:fd:00:61:e4:0f:52:79:23:f2:7a:97:5a: eb:49:92:43:ce:02:ec:45:1a:27:e9:57:13:ce:d7: 43:b4:52:01:a1:18:e2:7f:3d:20:49:1d:28:0c:3c: 2a:35:cc:ab:58:e6:6c:86:a6:4f:f9:48:76:16:bb: 4e:18:d0:e0:5b:e4:61:f1:10:ad:4b:94:49:54:4d: a1:a7:ed:6a:e4:2b:ce:1f:f5:3e:d9:99:7e:ea:eb: ce:8a:68:e7:e3:a1:7e:17:cc:ff:3a:a1:6f:db:91: 9b:27:85:54:51:62:f0:b1:4e:0c:93:45:47:f7:12: 10:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A4:78:C0:60:32:9C:68:5C:29:B1:62:07:E9:21:FB:5F:E0:CB:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/5a5236fa-372e-334f-bc5c-2fc8b6ec894b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 104.156.156.0-104.156.158.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:87:bd:23:33:c7:b6:7c:07:b1:ea:ec:6a:c9:c1:3c:26:10: 4b:d1:f3:66:a9:fd:c5:80:d9:37:a6:e6:bf:f0:ab:69:fd:30: 2d:2c:f5:c3:71:6d:41:00:e6:a3:3f:7c:26:2c:cf:57:84:1f: 12:c5:cf:bd:ac:d7:1d:8c:a4:e4:f4:50:72:9f:08:55:0f:76: b3:5e:61:82:29:16:a2:c9:24:3e:13:7e:47:c4:66:c4:09:e4: f0:83:aa:c2:d6:b3:02:44:d6:2f:f8:9a:17:ad:22:ce:c4:a1: 2e:18:25:6b:32:a8:4c:99:9c:cb:c1:a9:14:7d:21:03:a8:a8: 7f:1b:68:45:e2:13:f1:f2:bd:f9:cc:fe:a2:cf:3a:f4:63:5d: 14:b1:16:d9:fe:49:5c:6d:b8:ba:c2:0d:4d:85:1a:a6:6c:20: 93:35:17:b5:ce:3d:8a:f8:1a:02:a8:b8:5f:be:82:40:5b:ff: b4:bd:0b:a3:72:6c:db:56:82:47:da:aa:c5:b0:fd:1b:16:05: 8f:03:c4:30:ec:9e:4a:e5:75:68:2c:d4:7e:8c:cc:93:18:57: 98:99:d5:f3:c3:5e:56:a7:84:29:dc:d0:2f:97:b2:48:db:1a: 76:e7:fc:1d:58:ea:fb:60:a9:24:2e:6e:58:36:06:1b:99:9c: fa:02:93:6a -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEyuXnnTWbcb1NAmDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NjBmOTY4Y2EtNzMzOC00NGRmLTg2MGUtMjgxOTdhMjNlNTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9iNanDg7leql1IvCmyf46G2N3tOBex/7z2X /G4Rd4r1w6gqqjl0IO6tBrqBcAJcNyTMwi47biygM3T1XiUtqFiz2KZhd+OEDxdn Vg5uypqQfOiMcKIE2ih2LDm46CMPq8jMp7cwptB6+cydsgfnvpRuUjlrI4AM7tH1 8KYk52gsxqCBOtJ/kIb9AGHkD1J5I/J6l1rrSZJDzgLsRRon6VcTztdDtFIBoRji fz0gSR0oDDwqNcyrWOZshqZP+Uh2FrtOGNDgW+Rh8RCtS5RJVE2hp+1q5CvOH/U+ 2Zl+6uvOimjn46F+F8z/OqFv25GbJ4VUUWLwsU4Mk0VH9xIQZQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFCmkeMBgMpxoXCmxYgfpIftf4MtRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvNWE1MjM2ZmEtMzcyZS0z MzRmLWJjNWMtMmZjOGI2ZWM4OTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJonJwD BABonJ4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAk4e9IzPHtnwHsersasnBPCYQS9HzZqn9xYDZN6bmv/Cr af0wLSz1w3FtQQDmoz98JizPV4QfEsXPvazXHYyk5PRQcp8IVQ92s15hgikWoskk PhN+R8RmxAnk8IOqwtazAkTWL/iaF60izsShLhglazKoTJmcy8GpFH0hA6iofxto ReIT8fK9+cz+os869GNdFLEW2f5JXG24usINTYUapmwgkzUXtc49ivgaAqi4X76C QFv/tL0Lo3Js21aCR9qqxbD9GxYFjwPEMOyeSuV1aCzUfozMkxhXmJnV88NeVqeE KdzQL5eySNsaduf8HVjq+2CpJC5uWDYGG5mc+gKTag== -----END CERTIFICATE-----Generated at Mon Feb 23 17:12:29 2026 by rpki-client