$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dcf8fe2d-2fa7-3700-90ee-6e543461a21b.roa File: dcf8fe2d-2fa7-3700-90ee-6e543461a21b.roa (raw, json) Hash identifier: PSNgadHpUu9lZGX12nHXFFq9F24vehxZ8QE1GEXoKbQ= Subject key identifier: 44:8E:28:76:28:4A:FA:28:FB:46:9D:4A:E0:96:00:70:B3:DA:DA:A8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D1F4A841A8412059EE89535C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dcf8fe2d-2fa7-3700-90ee-6e543461a21b.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 396982 IP address blocks: 104.154.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:84:1a:84:12:05:9e:e8:95:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=72eda6f4-b66f-4bf6-909f-cf65166760ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:05:4a:b2:0b:04:2a:6e:88:8e:58:3f:ff:7b: b8:95:9c:15:17:84:76:f2:99:12:61:f1:73:e9:76: ae:27:2e:89:ea:50:5d:d6:46:df:04:c7:5b:d8:ae: dc:67:4b:1a:d8:c7:7f:2b:b4:a7:89:81:3d:e3:b7: 3a:2f:68:82:37:d8:d1:c9:5d:ce:a4:45:53:2c:e4: cc:ae:82:e1:35:fc:fc:74:f7:35:a9:c6:ef:17:59: b2:58:55:9f:f2:3c:80:20:5c:8a:cb:61:ab:91:1c: 10:72:08:ce:6a:c6:2e:87:35:f2:a6:cf:ff:eb:1e: 10:cb:99:28:0c:40:fa:3d:50:5d:e3:8d:60:35:c9: 3c:16:23:8c:81:16:01:1d:ca:d4:90:47:90:1c:15: 76:b2:bc:f4:8b:29:2f:de:bf:bd:ba:95:e2:d9:e8: e3:37:8d:10:23:92:a8:52:f3:75:52:f3:7e:29:94: ba:b2:4c:95:72:7a:7d:ac:5b:08:24:4b:eb:fc:68: 23:62:3d:f8:c4:5a:c2:dd:fd:4d:1c:9c:be:02:87: dc:f0:e9:65:4a:3e:18:ea:80:e6:98:0d:d1:54:d6: d8:b1:7e:6e:da:41:77:76:c0:8e:10:dc:9a:9e:ad: 2c:16:61:e5:59:7e:83:e3:e4:c3:48:62:3e:bc:05: e3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8E:28:76:28:4A:FA:28:FB:46:9D:4A:E0:96:00:70:B3:DA:DA:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dcf8fe2d-2fa7-3700-90ee-6e543461a21b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:86:d9:94:c3:4f:7d:b2:c7:a0:8b:da:6c:7b:9f:22:a7:6e: d3:3c:4a:f2:2b:7f:7b:83:13:13:a9:a5:d4:0c:4b:d0:2b:01: 2f:4c:ba:37:a7:50:fe:87:ef:ff:08:bc:38:f0:0f:3e:e6:8a: e2:c7:2c:14:34:39:fe:76:a5:9b:f6:2b:af:9b:d9:ab:6b:30: bc:27:e8:87:b3:81:39:63:be:a1:b3:fe:59:fb:86:a3:fd:99: 11:70:28:d3:d0:3e:87:06:89:1b:54:f6:5c:b3:92:c5:56:6a: 68:7e:13:d9:c2:3c:e9:95:b9:6b:11:ec:9b:98:40:1a:2b:a3: ce:2d:61:b0:41:a3:50:5e:5a:69:7d:a0:aa:20:a8:f2:19:f9: dd:ab:1c:9d:ce:6e:f2:64:fb:d0:f3:fc:12:4a:88:2e:a2:8f: 3f:80:2c:5d:d7:bf:e9:74:7b:5a:69:b9:00:0f:8c:75:e6:ef: 95:33:b7:cf:a5:d9:ad:92:af:a1:26:69:ff:2a:0e:60:c6:86: 23:eb:cc:c4:06:8f:d4:bf:c2:4e:7c:7d:cd:8f:91:08:6d:ec: 7f:b4:62:d8:ef:f0:59:80:ec:2b:62:d6:fb:90:92:27:1f:a5: f9:ec:51:b9:1d:b0:75:88:10:7e:19:ee:a9:67:ad:b6:47:8b: e4:fd:b3:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSoQahBIFnuiVNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NzJlZGE2ZjQtYjY2Zi00YmY2LTkwOWYtY2Y2NTE2Njc2MGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigVKsgsEKm6Ijlg//3u4lZwVF4R28pkSYfFz 6XauJy6J6lBd1kbfBMdb2K7cZ0sa2Md/K7SniYE947c6L2iCN9jRyV3OpEVTLOTM roLhNfz8dPc1qcbvF1myWFWf8jyAIFyKy2GrkRwQcgjOasYuhzXyps//6x4Qy5ko DED6PVBd441gNck8FiOMgRYBHcrUkEeQHBV2srz0iykv3r+9upXi2ejjN40QI5Ko UvN1UvN+KZS6skyVcnp9rFsIJEvr/GgjYj34xFrC3f1NHJy+Aofc8OllSj4Y6oDm mA3RVNbYsX5u2kF3dsCOENyanq0sFmHlWX6D4+TDSGI+vAXjNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESOKHYoSvoo+0adSuCWAHCz2tqoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGNmOGZlMmQtMmZhNy0z NzAwLTkwZWUtNmU1NDM0NjFhMjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJp2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKG2ZTDT32yx6CL2mx7nyKnbtM8SvIrf3uDExOppdQMS9ArAS9Mujen UP6H7/8IvDjwDz7miuLHLBQ0Of52pZv2K6+b2atrMLwn6IezgTljvqGz/ln7hqP9 mRFwKNPQPocGiRtU9lyzksVWamh+E9nCPOmVuWsR7JuYQBoro84tYbBBo1BeWml9 oKogqPIZ+d2rHJ3ObvJk+9Dz/BJKiC6ijz+ALF3Xv+l0e1ppuQAPjHXm75Uzt8+l 2a2Sr6Emaf8qDmDGhiPrzMQGj9S/wk58fc2PkQht7H+0Ytjv8FmA7Cti1vuQkicf pfnsUbkdsHWIEH4Z7qlnrbZHi+T9sy4= -----END CERTIFICATE-----Generated at Thu Mar 19 01:47:34 2026 by rpki-client