$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/908a3f0d-a421-3555-83e5-6444de1e2020.roa File: 908a3f0d-a421-3555-83e5-6444de1e2020.roa (raw, json) Hash identifier: 2yz515bVcjwlblryveT9Vw60aGB4Am2qI7ZtVeCuv+Y= Subject key identifier: 29:E2:23:82:01:C8:BA:50:F4:49:F1:CC:F9:19:7D:57:37:8D:23:B7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D932540C4044AE03A707257A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/908a3f0d-a421-3555-83e5-6444de1e2020.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 40306 IP address blocks: 75.104.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:40:c4:04:4a:e0:3a:70:72:57:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=b09d4ade-12f7-4cd8-b513-651e32dea060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c1:87:8f:c6:1e:6d:07:ae:91:f4:78:88:0a: f2:87:3b:d4:2d:5c:53:35:52:60:2e:8c:07:12:f3: 4d:15:f4:67:2c:41:f5:61:c5:21:70:b9:79:ba:65: f1:b3:d0:e7:12:fa:38:da:31:a6:38:48:eb:2c:9b: 11:ae:b3:af:bb:ae:ad:1d:47:6b:57:5f:11:3c:fa: 18:cb:27:44:cb:3f:0e:49:ed:de:ae:5b:85:02:e7: 30:a7:ff:10:77:31:47:61:c5:38:18:09:1a:ec:4e: 82:2d:cf:c7:b3:14:36:e9:2c:29:35:a4:00:8a:62: e2:e2:a7:8c:30:25:4a:b8:a2:ab:33:12:94:b6:d4: ca:f8:af:85:1a:31:88:a6:42:81:5e:63:d4:7e:7e: 29:b9:9c:72:35:7b:a0:29:67:61:c0:ce:41:83:6c: ad:78:3e:0f:c2:6c:7c:e6:8a:4c:4c:39:ce:cf:16: 4f:83:09:82:78:79:86:3b:49:d0:ac:62:bd:16:53: 48:e1:b3:9f:65:42:66:69:92:17:eb:71:27:36:c1: d0:d1:4f:7f:fa:23:09:0b:02:fb:21:24:2a:f3:58: 34:4c:4f:cf:6b:42:72:d8:92:f9:7c:c3:f5:82:c9: 73:38:f9:1a:10:a7:0e:32:de:15:b6:02:21:09:ef: e7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E2:23:82:01:C8:BA:50:F4:49:F1:CC:F9:19:7D:57:37:8D:23:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/908a3f0d-a421-3555-83e5-6444de1e2020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.104.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:b9:58:71:41:39:8d:a7:80:0d:56:6f:9f:fa:36:74:c9:de: 4a:a8:75:31:91:29:df:20:aa:37:66:fe:ad:20:a4:41:00:2a: 34:2e:f7:fa:68:c8:bf:2d:76:cb:c0:d2:c7:18:0c:31:82:9d: b7:cd:88:4c:15:6b:19:15:f7:a5:be:a1:ab:07:5a:b4:10:5c: 62:a6:e8:79:ea:e5:1b:13:50:da:65:a3:22:b8:01:3d:85:78: eb:4e:26:ed:16:8c:f3:48:30:78:f0:9a:b4:b4:c0:97:d7:0e: f3:ac:53:dd:57:29:7d:9e:d3:6c:75:30:d2:69:bb:47:cf:95: c7:a3:4f:71:27:78:01:cb:24:d9:c5:65:ba:1e:7c:fb:01:5e: 08:9f:3d:28:97:1f:8c:99:d5:4f:85:fe:08:74:b5:0f:06:0a: 5c:cb:ee:9a:bd:c1:5f:bb:cb:bd:9f:e9:63:f8:e7:5e:e7:f3: aa:4b:fc:ce:d9:6d:26:a2:54:6e:e5:f6:78:3a:9e:98:00:2b: 08:5c:a2:d5:3b:f3:2a:51:79:33:13:67:51:92:aa:38:bf:65: 94:82:c7:91:6b:3e:0a:bb:5e:36:bd:02:ce:53:20:19:f3:f6: bb:82:49:db:ec:4d:5a:db:33:9b:8f:f3:dc:e4:4d:47:ae:82: c7:0a:f1:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJUDEBErgOnByV6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk YjA5ZDRhZGUtMTJmNy00Y2Q4LWI1MTMtNjUxZTMyZGVhMDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMGHj8YebQeukfR4iAryhzvULVxTNVJgLowH EvNNFfRnLEH1YcUhcLl5umXxs9DnEvo42jGmOEjrLJsRrrOvu66tHUdrV18RPPoY yydEyz8OSe3erluFAucwp/8QdzFHYcU4GAka7E6CLc/HsxQ26SwpNaQAimLi4qeM MCVKuKKrMxKUttTK+K+FGjGIpkKBXmPUfn4puZxyNXugKWdhwM5Bg2yteD4Pwmx8 5opMTDnOzxZPgwmCeHmGO0nQrGK9FlNI4bOfZUJmaZIX63EnNsHQ0U9/+iMJCwL7 ISQq81g0TE/Pa0Jy2JL5fMP1gslzOPkaEKcOMt4VtgIhCe/nQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCniI4IByLpQ9EnxzPkZfVc3jSO3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTA4YTNmMGQtYTQyMS0z NTU1LTgzZTUtNjQ0NGRlMWUyMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2hvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGG5WHFBOY2ngA1Wb5/6NnTJ3kqodTGRKd8gqjdm/q0gpEEAKjQu9/po yL8tdsvA0scYDDGCnbfNiEwVaxkV96W+oasHWrQQXGKm6Hnq5RsTUNployK4AT2F eOtOJu0WjPNIMHjwmrS0wJfXDvOsU91XKX2e02x1MNJpu0fPlcejT3EneAHLJNnF ZboefPsBXgifPSiXH4yZ1U+F/gh0tQ8GClzL7pq9wV+7y72f6WP4517n86pL/M7Z bSaiVG7l9ng6npgAKwhcotU78ypReTMTZ1GSqji/ZZSCx5FrPgq7Xja9As5TIBnz 9ruCSdvsTVrbM5uP89zkTUeugscK8YM= -----END CERTIFICATE-----Generated at Mon Apr 27 13:49:36 2026 by rpki-client