$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/461b3f1d-555e-3a25-93d0-17711938f671.roa File: 461b3f1d-555e-3a25-93d0-17711938f671.roa (raw, json) Hash identifier: SyIGq/OtHb+qcHXPoG7SK+z8aiMS1Te/uHhadY6Y6lU= Subject key identifier: E9:54:87:7F:A3:63:3C:E0:B5:0F:02:F4:8A:6F:84:B6:B9:90:45:3D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D1F4A7332EBB1AC1E34513880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/461b3f1d-555e-3a25-93d0-17711938f671.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 396982 IP address blocks: 104.154.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:73:32:eb:b1:ac:1e:34:51:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=ff8fe697-bcec-43d7-b30c-c70f3823df77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2a:ef:da:81:97:69:10:56:3d:78:c6:3a:7d: 9f:bd:a7:88:5f:19:e6:4d:72:60:08:4e:13:a0:9c: b1:ff:a8:e9:b7:df:be:7e:64:65:4a:ad:c9:aa:a4: c6:24:49:a5:70:e2:85:77:88:23:c1:8d:b6:7c:66: fb:8a:fd:48:6a:94:04:80:86:7d:5b:6d:08:62:f8: 72:06:67:1c:8e:61:d5:ce:5d:e6:e9:fc:c6:43:7c: cf:da:d8:ed:30:ad:a2:9e:f7:ad:92:8c:22:56:8c: f3:6d:b6:37:22:12:48:f5:c8:f8:4b:2e:8a:e1:86: 25:9d:57:13:1b:ac:3f:d4:c0:b0:97:b8:b9:a4:13: 6e:f2:0d:0b:d4:61:7c:b3:60:26:55:28:0c:36:88: 1a:9c:60:fb:41:53:41:a3:3a:c7:1b:66:94:dd:d9: 14:a6:36:be:b3:75:48:52:c8:98:0b:69:cb:d3:db: 73:eb:e9:46:f1:71:78:48:92:c4:1f:2f:3c:b7:9a: 0c:37:62:9d:a6:f2:58:9a:21:89:4f:89:1d:c9:99: 6d:be:6e:17:09:13:39:73:3d:65:34:e0:68:2f:5e: 2a:f3:02:95:16:8e:e5:02:53:97:4a:37:0e:c0:98: 9f:69:8a:d3:8b:88:2b:67:d1:68:33:8b:ef:23:b1: 0b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:54:87:7F:A3:63:3C:E0:B5:0F:02:F4:8A:6F:84:B6:B9:90:45:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/461b3f1d-555e-3a25-93d0-17711938f671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:de:34:05:85:cf:5e:25:fd:a8:31:60:c7:bb:42:d6:f1:6d: 10:92:00:0e:e5:c9:9f:e3:23:ac:46:22:21:d7:7e:16:74:1c: 34:05:42:3c:1e:35:ec:49:9d:45:ed:6d:5b:6f:1b:10:d3:63: 0d:3c:82:19:fe:ec:d5:c2:fa:71:04:b0:37:9c:e4:4d:bd:9c: eb:a8:4f:ed:c5:ce:18:71:d2:42:54:46:22:8b:4a:52:0c:9f: 11:2a:b2:0e:f5:79:3a:d2:d6:38:1c:a0:3f:92:f7:83:40:1e: 71:60:9f:e5:4f:7a:75:1a:c9:88:f3:fe:8a:af:37:55:3c:3e: cb:7e:83:f0:e8:25:d8:ab:c6:58:75:27:e7:a8:83:c9:e2:7a: b5:e3:24:87:b7:d6:fc:f6:cf:da:d1:57:8e:8c:94:02:b6:e9: 05:d1:0b:be:ae:05:7a:0e:69:d2:d8:dd:c7:15:5e:15:b0:20: 34:eb:27:39:2e:e1:1b:0c:fc:55:51:69:6d:14:04:81:11:2a: 08:95:d3:bb:33:21:09:18:0e:2a:b6:f9:26:6e:49:c8:15:a3: 45:ce:8a:2f:87:9a:96:36:47:43:f5:9f:ff:50:40:c5:22:05: 42:de:d1:32:03:17:50:84:f1:86:55:41:1c:6a:df:0f:58:13: f3:ac:2d:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSnMy67GsHjRROIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZmY4ZmU2OTctYmNlYy00M2Q3LWIzMGMtYzcwZjM4MjNkZjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsirv2oGXaRBWPXjGOn2fvaeIXxnmTXJgCE4T oJyx/6jpt9++fmRlSq3JqqTGJEmlcOKFd4gjwY22fGb7iv1IapQEgIZ9W20IYvhy BmccjmHVzl3m6fzGQ3zP2tjtMK2invetkowiVozzbbY3IhJI9cj4Sy6K4YYlnVcT G6w/1MCwl7i5pBNu8g0L1GF8s2AmVSgMNoganGD7QVNBozrHG2aU3dkUpja+s3VI UsiYC2nL09tz6+lG8XF4SJLEHy88t5oMN2KdpvJYmiGJT4kdyZltvm4XCRM5cz1l NOBoL14q8wKVFo7lAlOXSjcOwJifaYrTi4grZ9FoM4vvI7ELYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlUh3+jYzzgtQ8C9IpvhLa5kEU9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDYxYjNmMWQtNTU1ZS0z YTI1LTkzZDAtMTc3MTE5MzhmNjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJpwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFveNAWFz14l/agxYMe7QtbxbRCSAA7lyZ/jI6xGIiHXfhZ0HDQFQjwe NexJnUXtbVtvGxDTYw08ghn+7NXC+nEEsDec5E29nOuoT+3Fzhhx0kJURiKLSlIM nxEqsg71eTrS1jgcoD+S94NAHnFgn+VPenUayYjz/oqvN1U8Pst+g/DoJdirxlh1 J+eog8nierXjJIe31vz2z9rRV46MlAK26QXRC76uBXoOadLY3ccVXhWwIDTrJzku 4RsM/FVRaW0UBIERKgiV07szIQkYDiq2+SZuScgVo0XOii+HmpY2R0P1n/9QQMUi BULe0TIDF1CE8YZVQRxq3w9YE/OsLaE= -----END CERTIFICATE-----Generated at Thu Mar 19 03:10:27 2026 by rpki-client