$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/4107624b-20aa-32db-a283-7fb5f300cb08.roa File: 4107624b-20aa-32db-a283-7fb5f300cb08.roa (raw, json) Hash identifier: HWpNGoaJos0SNSTVTt2JTw+EHlrLDHsuumd+2NSa9ek= Subject key identifier: 29:4C:28:5F:7E:0A:D0:B9:D0:A5:2C:A7:7E:3A:A9:17:C5:F0:7C:5B Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F4328584D8EF57CE9D3F22712B6AE1F00 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/4107624b-20aa-32db-a283-7fb5f300cb08.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 26548 IP address blocks: 104.128.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:7c:e9:d3:f2:27:12:b6:ae:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=b2dea6bf-0139-47f8-9188-2b0022a26b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ce:64:87:2a:85:c2:14:d6:01:22:4b:55:ce: 98:42:f8:10:46:8b:aa:5b:79:2e:a0:d8:89:f6:8e: d5:31:0f:f0:41:3e:8c:a9:90:79:1e:af:3d:84:86: e8:f8:4e:37:ed:47:86:e0:c8:23:36:7a:3f:56:33: f7:37:e1:2f:4d:9d:5b:98:4b:68:32:67:2c:ba:74: ab:65:d3:4c:72:cf:5c:38:2a:37:c3:a8:bd:4f:74: d5:35:86:9b:bd:3c:c2:99:64:6b:88:bb:18:4a:6f: c4:30:b1:d5:bc:82:cc:4e:5f:02:c4:65:55:6f:ed: df:0d:61:9e:33:67:69:d0:31:f1:d9:d0:c4:a0:aa: 40:17:3d:4e:b5:d4:98:19:5a:32:e1:ab:20:d1:ec: db:89:72:d1:66:49:07:68:f5:a5:64:73:b5:ae:c2: c2:cb:73:be:c8:a6:33:e0:f6:ca:4d:2d:1a:d1:2c: 9b:45:51:3c:f2:e4:b1:a6:a1:5a:6c:4d:69:7d:ad: 92:1e:99:ec:9d:e9:7e:94:5e:cc:a3:71:61:af:17: 3f:06:ae:39:a8:76:e9:2d:82:21:79:0b:09:3f:92: 81:38:ad:12:0a:06:52:53:25:a2:4d:22:3c:cc:04: 61:b6:1a:02:b6:4f:e7:ac:48:c0:ab:51:ba:1d:67: a8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4C:28:5F:7E:0A:D0:B9:D0:A5:2C:A7:7E:3A:A9:17:C5:F0:7C:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/4107624b-20aa-32db-a283-7fb5f300cb08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv4: 104.128.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:7f:15:10:57:98:0f:f9:c5:17:92:c4:26:72:dc:60:17:1c: 61:eb:b8:27:cd:9f:00:ca:6d:d8:d4:b9:54:43:62:9e:a8:0b: b2:63:9a:71:2c:a0:62:f2:10:5c:d1:86:f9:77:52:ae:2c:de: 08:33:89:d7:61:07:39:23:ce:09:02:c3:d2:3b:ba:82:be:32: 23:21:98:00:ac:4b:94:85:8c:35:1b:c9:71:83:5e:db:f0:c3: d9:71:f1:9e:cb:61:65:4c:de:89:3b:4a:0a:dc:08:d7:88:da: ca:7c:62:43:62:3a:b3:db:a5:6e:e1:bc:2f:fe:93:10:65:69: af:b5:3d:51:92:db:07:98:10:6a:85:d9:ea:ee:2c:cd:b0:08: 8e:a9:9b:18:38:ee:67:32:18:e6:9a:bc:60:9a:94:16:ef:2f: 4f:a5:32:6c:a2:a0:ec:05:87:42:58:a6:46:e6:ea:78:2a:d1: bf:cb:64:db:02:dd:5e:aa:08:ac:d6:c6:c9:2d:61:a1:08:89: 71:ee:62:db:8a:6c:56:f5:17:aa:6c:3d:c2:46:64:4f:d8:81: 68:58:c2:4d:41:6c:4c:dc:fe:cf:95:b8:66:b2:50:dd:b8:50: 44:6e:48:0f:db:f8:37:d9:12:11:6c:4e:15:44:62:bc:37:b8: 17:aa:2a:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9Xzp0/InErauHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YjJkZWE2YmYtMDEzOS00N2Y4LTkxODgtMmIwMDIyYTI2Yjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns5khyqFwhTWASJLVc6YQvgQRouqW3kuoNiJ 9o7VMQ/wQT6MqZB5Hq89hIbo+E437UeG4MgjNno/VjP3N+EvTZ1bmEtoMmcsunSr ZdNMcs9cOCo3w6i9T3TVNYabvTzCmWRriLsYSm/EMLHVvILMTl8CxGVVb+3fDWGe M2dp0DHx2dDEoKpAFz1OtdSYGVoy4asg0ezbiXLRZkkHaPWlZHO1rsLCy3O+yKYz 4PbKTS0a0SybRVE88uSxpqFabE1pfa2SHpnsnel+lF7Mo3Fhrxc/Bq45qHbpLYIh eQsJP5KBOK0SCgZSUyWiTSI8zARhthoCtk/nrEjAq1G6HWeoCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClMKF9+CtC50KUsp346qRfF8HxbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvNDEwNzYyNGItMjBhYS0z MmRiLWEyODMtN2ZiNWYzMDBjYjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIDnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJB/FRBXmA/5xReSxCZy3GAXHGHruCfNnwDKbdjUuVRDYp6oC7JjmnEs oGLyEFzRhvl3Uq4s3ggziddhBzkjzgkCw9I7uoK+MiMhmACsS5SFjDUbyXGDXtvw w9lx8Z7LYWVM3ok7SgrcCNeI2sp8YkNiOrPbpW7hvC/+kxBlaa+1PVGS2weYEGqF 2eruLM2wCI6pmxg47mcyGOaavGCalBbvL0+lMmyioOwFh0JYpkbm6ngq0b/LZNsC 3V6qCKzWxsktYaEIiXHuYtuKbFb1F6psPcJGZE/YgWhYwk1BbEzc/s+VuGayUN24 UERuSA/b+DfZEhFsThVEYrw3uBeqKh0= -----END CERTIFICATE-----Generated at Mon Apr 20 12:06:22 2026 by rpki-client