$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa File: aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa (raw, json) Hash identifier: e9BGMq5EqrPS7iha4tBcej/n/xdz0kpWEw+xSVjNSfA= Subject key identifier: 4D:74:71:22:F9:78:B5:39:4D:39:9E:1A:6A:67:BD:D4:8E:A0:47:7D Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F4328584CB551D0C919824032BD03C080 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 63023 IP address blocks: 104.156.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Feb 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:d0:c9:19:82:40:32:bd:03:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=e05378a4-5432-41b1-b0e8-d1680d8902e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e9:a2:f8:40:1f:5c:5e:a2:c7:0f:5e:fc:f0: 5a:dd:9e:8b:2a:02:47:e6:0e:01:4b:fa:97:7b:0b: 7c:bc:7d:46:da:b7:ad:72:ff:c3:d9:0a:0d:aa:a8: 13:a6:fb:40:42:b2:ee:fa:59:ea:a8:78:3d:f7:19: de:58:f9:3b:19:ed:94:fe:61:bb:96:3e:0a:40:c3: 78:d8:78:e2:e2:b9:40:8a:0f:c1:bc:a2:35:fd:f9: 54:c2:9e:16:1b:d5:9a:e6:a6:f2:d1:50:7b:e5:4d: 14:3a:4d:ab:cc:01:25:34:e4:d2:fa:24:9f:82:9c: ac:ef:70:e0:6b:9a:c3:d7:ef:99:a7:3a:55:b3:b1: 8c:c9:49:e4:38:bc:be:81:af:a6:d9:bc:9d:5c:d1: 72:e5:c1:2d:a7:c1:43:1b:92:dd:58:13:7a:fc:cb: 9d:a7:70:82:d5:ed:46:b7:a4:ca:84:a0:37:4e:6d: 50:5f:84:b6:41:96:7a:a1:25:58:cb:22:f1:7a:27: 2b:db:55:5a:bd:0c:e5:d8:6d:4e:46:0e:4b:93:94: 0c:8d:fb:a7:ea:d0:2b:1e:22:e7:ce:eb:a0:6e:a5: 44:7e:e9:3f:cf:5b:9f:ce:56:b5:59:37:4b:cc:a0: 92:17:b8:17:9b:8c:fe:a5:2d:ad:b1:d5:2b:39:c8: a3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:74:71:22:F9:78:B5:39:4D:39:9E:1A:6A:67:BD:D4:8E:A0:47:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 104.156.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:fa:a5:0c:9e:93:f6:cd:79:9a:91:0d:78:92:c6:76:d9:63: 9b:c9:2f:ce:a0:84:70:c7:6e:0e:ca:b3:1b:e8:4f:2e:17:43: ee:4d:46:65:42:5b:e8:e4:2f:4a:a9:da:42:4f:69:25:0f:55: 06:3b:dd:fc:6a:db:c5:74:25:f9:27:43:e5:ca:5b:cb:41:95: 9a:2c:c7:de:db:84:85:a8:92:2b:79:d1:7d:2f:92:b9:61:67: 66:82:77:9d:24:a1:72:83:9a:6c:17:9b:43:c6:eb:60:4f:82: 7c:ac:24:1f:0b:10:06:5d:1a:44:9b:98:28:3e:d5:ae:cf:93: ac:5e:8c:22:32:0d:6a:0c:c9:7a:82:d5:60:7a:55:70:88:a6: 12:f1:e4:a5:47:29:ad:03:b9:08:35:b1:47:e4:8a:62:f5:27: 6c:57:82:ac:d0:7e:1d:91:80:94:53:50:66:e1:e6:e3:21:02: 17:a3:f6:d9:0b:9e:0b:07:31:f6:84:b5:3f:11:9f:d5:32:15: 3e:2b:60:e2:71:f5:c7:b4:cb:04:72:76:ea:0b:f5:e4:81:16: df:29:53:3f:d5:17:69:5e:6a:57:d3:0b:fa:d2:b0:d6:8e:e3: e5:24:50:5e:d6:61:a9:ef:1d:90:3f:b6:72:2e:86:d0:43:e7: 38:9f:fe:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UdDJGYJAMr0DwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk ZTA1Mzc4YTQtNTQzMi00MWIxLWIwZTgtZDE2ODBkODkwMmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOmi+EAfXF6ixw9e/PBa3Z6LKgJH5g4BS/qX ewt8vH1G2retcv/D2QoNqqgTpvtAQrLu+lnqqHg99xneWPk7Ge2U/mG7lj4KQMN4 2Hji4rlAig/BvKI1/flUwp4WG9Wa5qby0VB75U0UOk2rzAElNOTS+iSfgpys73Dg a5rD1++ZpzpVs7GMyUnkOLy+ga+m2bydXNFy5cEtp8FDG5LdWBN6/Mudp3CC1e1G t6TKhKA3Tm1QX4S2QZZ6oSVYyyLxeicr21VavQzl2G1ORg5Lk5QMjfun6tArHiLn zuugbqVEfuk/z1ufzla1WTdLzKCSF7gXm4z+pS2tsdUrOcijnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE10cSL5eLU5TTmeGmpnvdSOoEd9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvYWJhNWE2YTEtZWFkOS0z M2ZlLWExYjQtYTllMmZiOTAwODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEz6pQyek/bNeZqRDXiSxnbZY5vJL86ghHDHbg7KsxvoTy4XQ+5NRmVC W+jkL0qp2kJPaSUPVQY73fxq28V0JfknQ+XKW8tBlZosx97bhIWokit50X0vkrlh Z2aCd50koXKDmmwXm0PG62BPgnysJB8LEAZdGkSbmCg+1a7Pk6xejCIyDWoMyXqC 1WB6VXCIphLx5KVHKa0DuQg1sUfkimL1J2xXgqzQfh2RgJRTUGbh5uMhAhej9tkL ngsHMfaEtT8Rn9UyFT4rYOJx9ce0ywRyduoL9eSBFt8pUz/VF2lealfTC/rSsNaO 4+UkUF7WYanvHZA/tnIuhtBD5zif/rc= -----END CERTIFICATE-----Generated at Mon Feb 23 17:13:55 2026 by rpki-client