$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ca2bd6aa-5004-31d7-a1f4-7f5625f2112b.roa File: ca2bd6aa-5004-31d7-a1f4-7f5625f2112b.roa (raw, json) Hash identifier: toW6IbzE347Rp+CNUFLwf+B9onHDPE+1fY4jqfoB8o4= Subject key identifier: 55:00:73:EC:EA:90:2C:F9:7A:0A:75:A4:2C:92:59:80:46:46:2B:83 Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F4328584D1F4A514108C8ED659AB0A580 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ca2bd6aa-5004-31d7-a1f4-7f5625f2112b.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 36040 IP address blocks: 104.237.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:51:41:08:c8:ed:65:9a:b0:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=ad96ac5a-b8ca-40eb-9973-95fea73c3acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:36:a7:6a:32:f1:f1:2c:ad:ad:43:7c:4e:48: 72:7d:54:21:35:82:f0:94:53:b7:8f:09:6d:f7:a1: 83:c1:ce:43:ed:04:e1:66:13:ea:99:da:32:bc:8c: 78:c8:ec:52:ad:e5:8b:c8:73:e5:a6:01:9c:dd:bc: b0:68:73:6c:ec:52:f4:4e:c3:74:3d:a2:1d:d6:e1: 2f:0f:1a:92:0b:2f:a9:38:36:b6:91:9a:5f:3a:0b: 98:bc:20:28:e7:16:92:da:83:6d:ea:ad:f1:a9:0f: cb:df:60:16:3d:f4:25:fc:39:07:d0:2c:6f:16:94: 99:2f:50:23:e7:a0:23:8f:9b:8d:d7:ec:82:85:00: 65:7f:05:8d:81:51:2b:7e:4b:02:7d:84:00:dc:85: e4:c4:b0:76:53:a5:50:45:47:41:6d:4d:1e:00:ed: cd:92:0f:2d:a7:39:ad:49:4c:dc:f7:b0:3d:a8:27: 2d:bc:35:04:95:53:f3:fe:ec:26:ab:64:0d:ac:09: f3:a7:8a:aa:c5:2b:8a:98:5b:1a:94:c8:b3:7c:8c: f5:46:7b:b4:78:e7:ec:f2:1e:3d:f1:23:ab:60:ff: 95:77:44:87:ce:21:4b:3a:03:21:d9:76:5d:67:4c: 6f:b0:39:b5:2d:e5:3e:3d:2e:f0:af:95:12:9e:d2: 4a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:00:73:EC:EA:90:2C:F9:7A:0A:75:A4:2C:92:59:80:46:46:2B:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ca2bd6aa-5004-31d7-a1f4-7f5625f2112b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 104.237.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:78:0b:e6:72:c4:75:5b:bf:12:36:c8:12:d5:5f:5a:8f:ff: 74:39:6b:fb:59:4b:a2:4f:35:c0:28:17:df:16:a7:89:35:1a: 03:1c:77:3a:46:ae:65:46:4b:ca:5b:ac:a6:0f:a0:f0:89:79: f4:52:58:9f:03:bb:8a:b8:56:3d:67:21:1e:da:86:9b:53:75: 48:c2:c6:a1:aa:14:d3:0c:bd:b5:db:4a:6c:72:c9:a2:2f:ef: e3:2f:20:1f:c9:55:cf:7e:bc:e9:fc:f4:c0:01:30:7c:78:7b: 14:a1:cb:83:7b:80:61:2e:ce:98:dd:e0:36:cc:9a:b9:a9:73: 92:6e:3e:56:1d:75:c0:e0:d9:0e:7e:4c:f3:35:84:2f:7e:33: 6b:99:ea:a8:9d:24:30:98:ba:0d:31:ca:a9:53:9a:c6:f7:8f: a4:29:cb:38:aa:23:26:3b:c1:d9:9b:7d:2d:b5:d4:e4:40:11: b3:83:4c:de:5f:c2:9b:64:a2:3a:22:92:c0:c1:4e:0f:b2:2f: 55:1c:17:f5:c6:07:a9:5d:78:2a:d2:5d:e7:ba:5e:53:47:35: a5:03:a7:8e:21:a9:31:13:77:04:83:46:6a:a2:90:a7:1c:30: a1:f4:fb:0c:61:60:75:fb:3f:be:c5:5e:99:48:bc:f3:45:c2: 5c:cb:8d:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSlFBCMjtZZqwpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YWQ5NmFjNWEtYjhjYS00MGViLTk5NzMtOTVmZWE3M2MzYWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzanajLx8SytrUN8TkhyfVQhNYLwlFO3jwlt 96GDwc5D7QThZhPqmdoyvIx4yOxSreWLyHPlpgGc3bywaHNs7FL0TsN0PaId1uEv DxqSCy+pODa2kZpfOguYvCAo5xaS2oNt6q3xqQ/L32AWPfQl/DkH0CxvFpSZL1Aj 56Ajj5uN1+yChQBlfwWNgVErfksCfYQA3IXkxLB2U6VQRUdBbU0eAO3Nkg8tpzmt SUzc97A9qCctvDUElVPz/uwmq2QNrAnzp4qqxSuKmFsalMizfIz1Rnu0eOfs8h49 8SOrYP+Vd0SHziFLOgMh2XZdZ0xvsDm1LeU+PS7wr5USntJKtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUAc+zqkCz5egp1pCySWYBGRiuDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvY2EyYmQ2YWEtNTAwNC0z MWQ3LWExZjQtN2Y1NjI1ZjIxMTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaO2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHF4C+ZyxHVbvxI2yBLVX1qP/3Q5a/tZS6JPNcAoF98Wp4k1GgMcdzpG rmVGS8pbrKYPoPCJefRSWJ8Du4q4Vj1nIR7ahptTdUjCxqGqFNMMvbXbSmxyyaIv 7+MvIB/JVc9+vOn89MABMHx4exShy4N7gGEuzpjd4DbMmrmpc5JuPlYddcDg2Q5+ TPM1hC9+M2uZ6qidJDCYug0xyqlTmsb3j6QpyziqIyY7wdmbfS211ORAEbODTN5f wptkojoiksDBTg+yL1UcF/XGB6ldeCrSXee6XlNHNaUDp44hqTETdwSDRmqikKcc MKH0+wxhYHX7P77FXplIvPNFwlzLjWs= -----END CERTIFICATE-----Generated at Thu Mar 19 01:59:03 2026 by rpki-client