$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa File: aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa (raw, json) Hash identifier: hQTpaUVhoIjZIPTXHkEkLby+KqGgie4pCEeYqa/1kKU= Subject key identifier: 47:66:47:3E:89:CC:72:C5:24:11:18:33:C1:70:0C:A0:12:6B:9B:69 Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F4328584FBAA10B488F39CF59858EA940 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa Signing time: Wed 04 Nov 2026 14:00:13 +0000 ROA not before: Wed 04 Nov 2026 14:00:13 +0000 ROA not after: Tue 02 Feb 2027 14:00:13 +0000 asID: 63023 IP address blocks: 104.156.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ba:a1:0b:48:8f:39:cf:59:85:8e:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: Nov 4 14:00:13 2026 GMT Not After : Feb 2 14:00:13 2027 GMT Subject: CN=68068b64-049a-4fd2-878d-01982f35c79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:87:37:84:24:d2:cf:a2:d6:ac:38:7f:bf:99: cb:df:df:d4:c1:8b:d9:e5:7b:f7:95:e3:62:d8:37: d6:81:4d:f7:f3:c1:2f:8d:c0:84:59:78:80:fc:7b: 8d:f5:40:7e:d4:2e:91:03:f8:6e:01:fb:8d:29:eb: df:8a:b0:15:1b:68:d8:f2:1f:a3:67:85:5a:56:d8: 90:2b:7a:b9:f5:66:4a:d8:26:a4:42:ba:6e:57:c1: 07:49:c3:b8:a5:e0:a7:99:a3:be:ec:6f:e0:bb:7b: 24:fc:61:13:2e:e1:f4:f4:39:ba:aa:fd:5d:da:d7: 6b:89:e2:9e:2c:6a:d3:1d:7f:b0:52:f8:9d:d3:c1: 56:82:21:15:4c:9c:3f:11:29:8a:ed:6c:b0:92:b2: f9:b4:4c:13:b6:93:62:e8:c8:7b:6a:c6:0d:af:7f: c5:49:8f:2e:6c:d6:7b:d4:ba:e0:48:fb:2a:c8:20: 13:57:8c:52:66:8c:70:79:d6:59:a6:eb:67:df:14: ed:23:fd:7c:5c:20:80:4a:17:51:55:4b:77:65:42: 49:8b:1a:86:0f:d9:2d:82:44:e4:80:b8:b5:19:bb: c1:fe:a2:80:79:da:c6:d2:1e:7c:6e:87:70:40:fa: 8f:63:98:7c:06:71:98:ed:34:92:f2:dd:d2:ca:9a: b5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:66:47:3E:89:CC:72:C5:24:11:18:33:C1:70:0C:A0:12:6B:9B:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 104.156.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:bc:a9:62:27:be:d6:87:e1:44:cc:f7:d0:88:b6:67:85:df: 8d:49:79:dc:3a:e4:46:22:01:ff:89:84:b5:8e:8b:2b:ac:55: af:1a:1c:ee:c5:b1:a6:9a:06:33:64:49:ef:8d:97:81:1b:1e: 3f:67:c7:e8:4f:4e:15:f4:c2:a1:24:3d:ae:f4:cc:81:ab:97: 0d:c9:22:ed:cb:22:4c:3c:d4:0f:cd:4b:9d:46:26:f1:9b:b4: bf:6a:12:9f:0f:1c:a8:74:b9:82:38:1e:21:14:f6:4f:46:28: 26:84:f1:4f:d6:98:0c:35:08:0b:0f:5d:e1:a1:7c:2c:76:23: e2:64:f2:29:91:59:7f:f4:37:08:58:9a:4b:89:6c:76:6f:61: cf:03:23:5f:8c:ed:96:04:90:25:7f:60:01:5f:d0:e5:a1:02: 07:45:05:37:37:24:1e:84:b3:15:ef:54:66:f3:41:22:0b:2d: a0:35:e4:8c:31:01:07:7e:51:fc:10:cb:a8:c3:10:f4:10:c4: 12:a6:2a:13:3d:82:ee:30:4c:60:1b:34:68:b3:30:71:af:33: ec:a8:7d:5a:f3:63:ba:77:73:56:d5:d5:cf:06:7a:b2:d7:66: 9f:72:ab:23:d9:0b:19:b2:92:35:fc:ee:cd:d8:05:89:74:e6: c8:ed:08:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+6oQtIjznPWYWOqUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI2MTEwNDE0MDAxM1oXDTI3MDIwMjE0MDAxM1owLzEtMCsGA1UEAxMk NjgwNjhiNjQtMDQ5YS00ZmQyLTg3OGQtMDE5ODJmMzVjNzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioc3hCTSz6LWrDh/v5nL39/UwYvZ5Xv3leNi 2DfWgU3388EvjcCEWXiA/HuN9UB+1C6RA/huAfuNKevfirAVG2jY8h+jZ4VaVtiQ K3q59WZK2CakQrpuV8EHScO4peCnmaO+7G/gu3sk/GETLuH09Dm6qv1d2tdrieKe LGrTHX+wUvid08FWgiEVTJw/ESmK7WywkrL5tEwTtpNi6Mh7asYNr3/FSY8ubNZ7 1LrgSPsqyCATV4xSZoxwedZZputn3xTtI/18XCCAShdRVUt3ZUJJixqGD9ktgkTk gLi1GbvB/qKAedrG0h58bodwQPqPY5h8BnGY7TSS8t3Sypq1YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdmRz6JzHLFJBEYM8FwDKASa5tpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvYWJhNWE2YTEtZWFkOS0z M2ZlLWExYjQtYTllMmZiOTAwODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu8qWInvtaH4UTM99CItmeF341Jedw65EYiAf+JhLWOiyusVa8aHO7F saaaBjNkSe+Nl4EbHj9nx+hPThX0wqEkPa70zIGrlw3JIu3LIkw81A/NS51GJvGb tL9qEp8PHKh0uYI4HiEU9k9GKCaE8U/WmAw1CAsPXeGhfCx2I+Jk8imRWX/0NwhY mkuJbHZvYc8DI1+M7ZYEkCV/YAFf0OWhAgdFBTc3JB6EsxXvVGbzQSILLaA15Iwx AQd+UfwQy6jDEPQQxBKmKhM9gu4wTGAbNGizMHGvM+yofVrzY7p3c1bV1c8GerLX Zp9yqyPZCxmykjX87s3YBYl05sjtCMY= -----END CERTIFICATE-----Generated at Thu Nov 5 06:57:57 2026 by rpki-client