$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/98e87fce-1a6c-3a59-8454-ebcef8093772.roa File: 98e87fce-1a6c-3a59-8454-ebcef8093772.roa (raw, json) Hash identifier: i+Q9X9rBGAwvUYYFPl6Z/RBJ/hY2x4DVikOZxHVtNTM= Subject key identifier: F8:E3:20:8D:8D:A2:F0:5B:4C:6D:95:45:64:0F:13:30:A9:9F:80:62 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584DC135C7CFBCBC7641F2BCFB00 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/98e87fce-1a6c-3a59-8454-ebcef8093772.roa Signing time: Thu 07 May 2026 13:00:31 +0000 ROA not before: Thu 07 May 2026 13:00:31 +0000 ROA not after: Wed 05 Aug 2026 13:00:31 +0000 asID: 22652 IP address blocks: 104.156.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c1:35:c7:cf:bc:bc:76:41:f2:bc:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: May 7 13:00:31 2026 GMT Not After : Aug 5 13:00:31 2026 GMT Subject: CN=8804c616-a171-4f68-98d4-92aa6af11b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e4:5b:d9:c6:58:2d:07:b5:12:24:03:33:aa: 3b:ed:d2:5b:a3:ec:c4:c2:e6:f0:47:bb:2c:22:9d: d2:b0:fd:e9:55:16:48:85:81:c7:e9:d3:1e:1e:3e: d1:d2:8d:96:9a:33:6c:df:32:59:d6:2c:3b:d8:3f: 64:80:a5:01:8d:df:73:e5:7b:6c:21:89:bc:9c:7a: 23:05:35:29:b9:aa:72:64:60:75:86:3c:4b:19:2c: 68:b3:74:c4:1a:45:9c:24:47:43:c8:8f:96:03:24: 62:db:ea:3f:3c:08:17:64:ef:cb:3d:1e:e3:f5:f4: 01:65:a0:97:34:c1:fb:1a:ff:35:f3:7d:37:3c:b9: f4:60:73:85:63:9b:1f:d9:aa:76:ae:8d:32:56:23: f0:de:4f:6d:47:a5:8f:52:e4:db:f0:d0:0c:51:88: 8d:ed:05:89:e3:24:92:37:81:49:52:53:68:0b:15: 60:ab:24:47:68:ba:d7:8b:ac:ca:a5:c4:43:b1:78: f6:82:aa:2e:8b:24:7a:84:c8:12:06:b3:e8:b9:fb: fa:ee:d5:65:48:59:eb:60:48:3a:85:3e:0c:4d:a9: 5c:5f:9a:51:5f:1d:91:62:b1:b8:e1:98:af:1d:13: 19:1a:1a:2b:8f:98:bb:c3:e6:42:c0:79:0f:b4:9c: 8e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E3:20:8D:8D:A2:F0:5B:4C:6D:95:45:64:0F:13:30:A9:9F:80:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/98e87fce-1a6c-3a59-8454-ebcef8093772.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 104.156.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:d6:95:a3:b9:66:ee:65:2e:b1:85:d6:38:7d:21:da:ae:a9: cd:93:08:a2:02:ba:49:10:0b:23:83:07:58:30:c5:18:d2:62: 09:34:c6:34:77:80:75:ed:63:47:07:52:3b:6c:00:c7:c1:98: d8:bc:4d:28:96:f0:4e:83:8d:2a:2c:20:7f:55:b5:2d:d7:1e: a0:da:a6:51:b2:77:e4:93:4a:e0:b4:3a:24:9a:68:19:c0:ec: c0:f5:5e:b0:33:ce:5e:51:b5:31:c4:8d:6b:f7:6b:d9:50:b6: 85:04:6d:7c:e1:be:0e:e0:ce:52:1a:b9:06:be:81:e7:64:85: 91:08:bc:b6:3b:e4:1f:84:ae:99:96:04:c0:39:89:df:25:67: 5a:aa:51:64:d1:15:83:fb:39:a5:0b:58:92:5a:be:e7:38:1b: 04:67:6f:24:5e:85:08:14:99:ed:85:af:24:d0:54:87:41:08: 06:81:1b:aa:60:30:94:87:2a:92:38:fa:cf:0d:2b:1b:c7:56: 32:74:55:20:c0:92:09:ae:63:fb:2c:2b:6c:79:2b:b4:7d:aa: 58:75:a8:53:30:b5:b2:34:98:cf:7d:b8:f4:ab:49:15:ca:70: f1:ee:7f:73:59:bd:61:77:d7:9f:44:78:b4:25:86:2d:1a:b1: 2c:14:25:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3BNcfPvLx2QfK8+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDUwNzEzMDAzMVoXDTI2MDgwNTEzMDAzMVowLzEtMCsGA1UEAxMk ODgwNGM2MTYtYTE3MS00ZjY4LTk4ZDQtOTJhYTZhZjExYjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgORb2cZYLQe1EiQDM6o77dJbo+zEwubwR7ss Ip3SsP3pVRZIhYHH6dMeHj7R0o2WmjNs3zJZ1iw72D9kgKUBjd9z5XtsIYm8nHoj BTUpuapyZGB1hjxLGSxos3TEGkWcJEdDyI+WAyRi2+o/PAgXZO/LPR7j9fQBZaCX NMH7Gv818303PLn0YHOFY5sf2ap2ro0yViPw3k9tR6WPUuTb8NAMUYiN7QWJ4ySS N4FJUlNoCxVgqyRHaLrXi6zKpcRDsXj2gqouiyR6hMgSBrPoufv67tVlSFnrYEg6 hT4MTalcX5pRXx2RYrG44ZivHRMZGhorj5i7w+ZCwHkPtJyOtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjjII2NovBbTG2VRWQPEzCpn4BiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvOThlODdmY2UtMWE2Yy0z YTU5LTg0NTQtZWJjZWY4MDkzNzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHWlaO5Zu5lLrGF1jh9Idquqc2TCKICukkQCyODB1gwxRjSYgk0xjR3 gHXtY0cHUjtsAMfBmNi8TSiW8E6DjSosIH9VtS3XHqDaplGyd+STSuC0OiSaaBnA 7MD1XrAzzl5RtTHEjWv3a9lQtoUEbXzhvg7gzlIauQa+gedkhZEIvLY75B+ErpmW BMA5id8lZ1qqUWTRFYP7OaULWJJavuc4GwRnbyRehQgUme2FryTQVIdBCAaBG6pg MJSHKpI4+s8NKxvHVjJ0VSDAkgmuY/ssK2x5K7R9qlh1qFMwtbI0mM99uPSrSRXK cPHuf3NZvWF3159EeLQlhi0asSwUJcQ= -----END CERTIFICATE-----Generated at Sat May 9 19:29:27 2026 by rpki-client