$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac/ce5b5bb0-0760-32ae-bdce-1ed7b12ecd05.roa File: ce5b5bb0-0760-32ae-bdce-1ed7b12ecd05.roa (raw, json) Hash identifier: Q44VVwzl5HdzzWAnSm8zoNkGIQSGSf2Qr9pdXzdSlKc= Subject key identifier: D0:B9:02:7E:82:6B:1D:68:06:AB:1E:25:A2:AD:A2:BE:05:F2:01:22 Certificate issuer: /CN=01442de1-f586-40f5-9267-bc35d3b70cac Certificate serial: 010D0C9F4328584DD4BCED86F07BF9C6914F67D1 Authority key identifier: 5F:0B:CF:B1:5F:79:00:31:FF:83:DD:E9:9E:15:1C:5C:25:E4:FB:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac/ce5b5bb0-0760-32ae-bdce-1ed7b12ecd05.roa Signing time: Thu 14 May 2026 12:53:37 +0000 ROA not before: Thu 14 May 2026 12:53:37 +0000 ROA not after: Wed 12 Aug 2026 12:53:37 +0000 asID: 13457 IP address blocks: 104.167.194.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac/01442de1-f586-40f5-9267-bc35d3b70cac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac/01442de1-f586-40f5-9267-bc35d3b70cac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 16 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d4:bc:ed:86:f0:7b:f9:c6:91:4f:67:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01442de1-f586-40f5-9267-bc35d3b70cac Validity Not Before: May 14 12:53:37 2026 GMT Not After : Aug 12 12:53:37 2026 GMT Subject: CN=da7e977c-2c67-41e3-99cc-b62b0084e95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cd:9b:50:2b:0e:be:41:9b:c3:ca:1b:3f:f0: 16:c5:63:83:72:96:6e:98:88:a6:23:69:4c:3e:20: 7a:fb:3f:ed:63:4f:2b:36:e1:02:92:b4:1d:c5:f2: f5:d6:c3:e0:f6:31:8e:33:06:45:63:f2:6c:4e:47: a3:e1:b5:df:63:70:10:f3:d7:8e:f1:be:7e:f0:50: ae:3c:9d:f9:2d:96:52:3d:3a:d8:6d:ca:c1:75:f0: fd:81:e9:50:cb:d8:e1:44:76:f3:ab:e3:e4:fe:01: ab:6f:bd:1f:39:41:b5:3b:cd:7c:11:2c:7d:07:d5: c8:d9:3b:cf:d3:2a:8a:f7:c0:0e:bd:80:4c:18:81: 4a:50:9d:15:57:d3:3e:29:19:61:ed:f4:6a:03:1f: 83:54:54:03:c2:4a:d9:48:f9:cc:07:7c:08:43:c8: 77:8b:7c:88:6e:1e:27:a8:35:33:dc:8e:00:e1:5d: f1:5c:ea:06:54:fa:f6:24:b9:fc:7a:81:5f:7b:51: a8:2f:c7:28:d2:d8:35:7f:06:d7:65:7f:f1:86:df: b9:49:ef:56:30:9a:c9:33:94:7a:da:55:bd:fc:76: cf:e2:03:f9:dc:39:d6:ba:17:8b:dd:b8:f8:40:cd: 69:22:c9:4c:2a:e7:29:19:0d:92:47:a7:7c:56:1e: de:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B9:02:7E:82:6B:1D:68:06:AB:1E:25:A2:AD:A2:BE:05:F2:01:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac/ce5b5bb0-0760-32ae-bdce-1ed7b12ecd05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac/01442de1-f586-40f5-9267-bc35d3b70cac.crl X509v3 Authority Key Identifier: keyid:5F:0B:CF:B1:5F:79:00:31:FF:83:DD:E9:9E:15:1C:5C:25:E4:FB:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac.cer sbgp-ipAddrBlock: critical IPv4: 104.167.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:ed:c7:c1:0f:2b:84:15:d1:c1:ca:b4:33:55:93:44:80:5e: c8:b7:71:08:30:05:7b:54:6b:5b:aa:63:62:b3:50:ee:26:73: dd:e4:3d:63:4b:be:e3:b5:27:00:3d:15:e2:7a:f3:a5:09:05: 1a:e0:65:26:7e:2a:2d:63:8f:51:d2:17:e1:e4:25:54:a4:f5: 82:5c:d4:dd:5b:6c:e4:1d:7c:3b:06:87:61:eb:8c:75:cb:a2: 5d:33:09:26:9d:0e:06:06:75:ca:54:24:2f:9a:86:fd:a4:e5: 0e:a4:d2:ad:f9:23:b5:51:1f:e4:6e:32:6e:37:fd:d4:ab:bb: 7b:85:c0:26:6c:3c:a8:df:34:99:85:06:a7:3b:30:19:9e:fa: e5:f1:b2:05:67:8d:0d:50:00:db:dd:98:4b:26:b6:21:95:e1: e8:c3:1e:82:55:c5:b4:14:19:e9:43:59:04:92:38:c0:e5:f9: 79:f4:16:67:3f:80:56:8c:e6:4a:76:6d:d5:62:cf:4d:a1:d2: ab:05:36:06:0f:50:92:78:77:d0:c7:95:36:f9:ed:3a:3c:f8: 23:81:82:bc:fc:d6:25:f1:bc:76:5f:03:1b:e2:81:04:f8:84: 32:f9:10:74:ed:42:cd:84:64:ea:65:97:8e:57:8f:50:3e:f2: 87:f1:3b:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3UvO2G8Hv5xpFPZ9EwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE0NDJkZTEtZjU4Ni00MGY1LTkyNjctYmMzNWQzYjcw Y2FjMB4XDTI2MDUxNDEyNTMzN1oXDTI2MDgxMjEyNTMzN1owLzEtMCsGA1UEAxMk ZGE3ZTk3N2MtMmM2Ny00MWUzLTk5Y2MtYjYyYjAwODRlOTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM2bUCsOvkGbw8obP/AWxWODcpZumIimI2lM PiB6+z/tY08rNuECkrQdxfL11sPg9jGOMwZFY/JsTkej4bXfY3AQ89eO8b5+8FCu PJ35LZZSPTrYbcrBdfD9gelQy9jhRHbzq+Pk/gGrb70fOUG1O818ESx9B9XI2TvP 0yqK98AOvYBMGIFKUJ0VV9M+KRlh7fRqAx+DVFQDwkrZSPnMB3wIQ8h3i3yIbh4n qDUz3I4A4V3xXOoGVPr2JLn8eoFfe1GoL8co0tg1fwbXZX/xht+5Se9WMJrJM5R6 2lW9/HbP4gP53DnWuheL3bj4QM1pIslMKucpGQ2SR6d8Vh7eqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNC5An6Cax1oBqseJaKtor4F8gEiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wMTQ0 MmRlMS1mNTg2LTQwZjUtOTI2Ny1iYzM1ZDNiNzBjYWMvY2U1YjViYjAtMDc2MC0z MmFlLWJkY2UtMWVkN2IxMmVjZDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDE0NDJkZTEtZjU4Ni00MGY1LTky NjctYmMzNWQzYjcwY2FjLzAxNDQyZGUxLWY1ODYtNDBmNS05MjY3LWJjMzVkM2I3 MGNhYy5jcmwwHwYDVR0jBBgwFoAUXwvPsV95ADH/g93pnhUcXCXk+50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wMTQ0MmRlMS1mNTg2LTQwZjUtOTI2Ny1iYzM1 ZDNiNzBjYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKfCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALjtx8EPK4QV0cHKtDNVk0SAXsi3cQgwBXtUa1uqY2KzUO4mc93kPWNL vuO1JwA9FeJ686UJBRrgZSZ+Ki1jj1HSF+HkJVSk9YJc1N1bbOQdfDsGh2HrjHXL ol0zCSadDgYGdcpUJC+ahv2k5Q6k0q35I7VRH+RuMm43/dSru3uFwCZsPKjfNJmF Bqc7MBme+uXxsgVnjQ1QANvdmEsmtiGV4ejDHoJVxbQUGelDWQSSOMDl+Xn0Fmc/ gFaM5kp2bdViz02h0qsFNgYPUJJ4d9DHlTb57To8+COBgrz81iXxvHZfAxvigQT4 hDL5EHTtQs2EZOpll45Xj1A+8ofxO4c= -----END CERTIFICATE-----Generated at Fri May 15 06:15:08 2026 by rpki-client