$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/4749d5a9-351a-310d-a4b1-7d0866c068cd.roa File: 4749d5a9-351a-310d-a4b1-7d0866c068cd.roa (raw, json) Hash identifier: 0+uk1BgO6TXE1F6U2NOJQ0LbidhzvPQAipH9YKxY5QM= Subject key identifier: AE:06:4C:73:D0:C4:C7:3F:5E:6F:B1:8D:7C:5C:B6:D0:73:42:50:00 Certificate issuer: /CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Certificate serial: 010D0C9F4328584D0D42602DF608095802591680 Authority key identifier: C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/4749d5a9-351a-310d-a4b1-7d0866c068cd.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 49585 IP address blocks: 104.156.136.0/24 maxlen: 24 104.156.137.0/24 maxlen: 24 104.156.138.0/24 maxlen: 24 104.156.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:60:2d:f6:08:09:58:02:59:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=0dc6f581-9b3a-47d7-a5b0-7431bda4f8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:84:ea:3d:7a:4d:e7:00:01:eb:55:ae:f6:7d: 98:19:28:6f:6b:fb:17:10:32:f6:b7:44:5c:26:09: ed:d4:f5:52:e8:c6:2d:c9:19:08:21:50:83:3b:93: 49:2c:57:e7:66:45:fa:35:e8:8b:c8:bf:f5:75:ed: 76:3e:c8:5a:c3:df:28:41:db:97:5c:8a:0b:2f:da: 89:37:cb:e0:ff:41:20:fc:c3:cd:d8:d4:ac:a3:01: 44:79:ac:cd:c1:1f:ef:f4:08:0a:cc:0d:bc:42:3d: 8c:97:2f:ee:02:30:78:2b:17:b3:90:da:ce:95:f7: a7:1e:ec:f3:14:f0:2b:97:5b:c5:b2:0a:cb:99:7e: b3:f8:8e:4b:7d:f7:e7:ff:ee:d7:9b:52:b6:dd:2f: e0:c7:01:d5:5b:65:d1:08:2b:c9:14:a8:a0:24:73: 0c:ef:8f:6c:d0:98:6e:39:fa:fc:b8:b2:d7:ed:45: 41:9d:23:be:15:32:0f:cc:c5:29:03:a6:78:70:22: 8b:33:f2:a3:94:d4:a0:f0:45:c5:6c:5c:d4:89:c3: 9d:51:dd:7a:42:4b:c7:7f:b1:de:ea:0b:21:0c:ac: 62:bc:ec:3e:2c:78:88:6c:ac:9a:a6:35:59:e5:69: cd:28:93:e1:d8:1f:0f:da:15:54:02:74:be:b1:cc: 2f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:06:4C:73:D0:C4:C7:3F:5E:6F:B1:8D:7C:5C:B6:D0:73:42:50:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/4749d5a9-351a-310d-a4b1-7d0866c068cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl X509v3 Authority Key Identifier: keyid:C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer sbgp-ipAddrBlock: critical IPv4: 104.156.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:51:84:fe:08:fb:60:cb:22:34:26:41:b0:7f:64:29:14:7e: f3:de:3f:9e:a0:7f:e5:3d:dd:a4:71:a0:4f:5a:df:16:fd:dd: e6:85:8c:30:c4:86:25:79:2b:66:78:5f:83:5b:b0:2d:f1:d5: 97:97:fc:00:78:b1:dd:d2:18:8e:fd:16:41:a5:1b:4c:20:37: 46:d6:ce:aa:49:3d:6f:0d:df:71:9e:61:4f:76:70:59:20:38: bf:81:a8:ad:72:fb:34:b1:9a:b2:ee:46:23:a4:e1:c0:1f:5d: dc:8f:76:e5:8c:ad:36:94:4d:7a:07:ae:71:2f:5d:61:e9:85: a7:05:d1:1f:96:28:86:17:f6:55:dd:53:76:f2:3d:9d:55:88: 5a:32:75:1a:43:4e:bd:bd:bf:4c:1f:9d:0e:1a:71:2b:aa:69: 2e:63:eb:11:45:4a:a9:15:c7:bd:b3:76:3b:65:c4:81:5e:6f: 4c:f9:a4:72:39:4c:e8:6a:58:1f:4a:a7:25:8d:3b:45:2b:7d: 6e:79:3f:4c:2b:31:cb:37:29:d0:ce:ae:29:3f:10:39:00:00: 00:bf:6f:a0:90:da:d4:45:76:9b:2f:42:ad:6a:d8:96:39:cd: cf:b7:ee:7a:7a:ae:30:94:93:5c:ce:32:56:e4:ff:85:2d:a5: 29:c8:0c:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQmAt9ggJWAJZFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE4NzNlNWEtYTE2ZC00ODkwLThkZmUtYzI4MWJmNmUw MjBlMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk MGRjNmY1ODEtOWIzYS00N2Q3LWE1YjAtNzQzMWJkYTRmOGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4TqPXpN5wAB61Wu9n2YGShva/sXEDL2t0Rc Jgnt1PVS6MYtyRkIIVCDO5NJLFfnZkX6NeiLyL/1de12Pshaw98oQduXXIoLL9qJ N8vg/0Eg/MPN2NSsowFEeazNwR/v9AgKzA28Qj2Mly/uAjB4KxezkNrOlfenHuzz FPArl1vFsgrLmX6z+I5Lfffn/+7Xm1K23S/gxwHVW2XRCCvJFKigJHMM749s0Jhu Ofr8uLLX7UVBnSO+FTIPzMUpA6Z4cCKLM/KjlNSg8EXFbFzUicOdUd16QkvHf7He 6gshDKxivOw+LHiIbKyapjVZ5WnNKJPh2B8P2hVUAnS+scwvnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4GTHPQxMc/Xm+xjXxcttBzQlAAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3 M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgxYmY2ZTAyMGUvNDc0OWQ1YTktMzUxYS0z MTBkLWE0YjEtN2QwODY2YzA2OGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjE4NzNlNWEtYTE2ZC00ODkwLThk ZmUtYzI4MWJmNmUwMjBlLzIxODczZTVhLWExNmQtNDg5MC04ZGZlLWMyODFiZjZl MDIwZS5jcmwwHwYDVR0jBBgwFoAUx3mnxj/aW1dVPvxCh5HuGzfxwqYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgx YmY2ZTAyMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9RhP4I+2DLIjQmQbB/ZCkUfvPeP56gf+U93aRxoE9a3xb93eaFjDDE hiV5K2Z4X4NbsC3x1ZeX/AB4sd3SGI79FkGlG0wgN0bWzqpJPW8N33GeYU92cFkg OL+BqK1y+zSxmrLuRiOk4cAfXdyPduWMrTaUTXoHrnEvXWHphacF0R+WKIYX9lXd U3byPZ1ViFoydRpDTr29v0wfnQ4acSuqaS5j6xFFSqkVx72zdjtlxIFeb0z5pHI5 TOhqWB9KpyWNO0UrfW55P0wrMcs3KdDOrik/EDkAAAC/b6CQ2tRFdpsvQq1q2JY5 zc+37np6rjCUk1zOMlbk/4UtpSnIDMU= -----END CERTIFICATE-----Generated at Fri Mar 20 08:07:07 2026 by rpki-client