$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/bb7e42ee-468b-3653-9334-615b6977fa9b.roa File: bb7e42ee-468b-3653-9334-615b6977fa9b.roa (raw, json) Hash identifier: z117+T5kxI9RgyXR1agAlNqV9WUHbcjEnPymN7hFCKw= Subject key identifier: 3A:03:D6:62:D0:C6:2A:49:CB:65:18:7D:3E:6B:79:35:7B:29:4E:A4 Certificate issuer: /CN=2775f7c3-c238-47d5-98c9-835a28d9095e Certificate serial: 010D0C9F4328584D8EF57920835D25CC9B5C0CC0 Authority key identifier: D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/bb7e42ee-468b-3653-9334-615b6977fa9b.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 401104 IP address blocks: 104.167.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:79:20:83:5d:25:cc:9b:5c:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2775f7c3-c238-47d5-98c9-835a28d9095e Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=76989ab4-1e60-43b2-a738-596491ae2274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e7:4d:47:58:39:eb:76:c0:12:23:4a:20:7b: 5a:43:b8:77:51:07:31:8c:14:db:ba:4e:0c:0d:64: fe:f0:23:a3:98:81:2c:fb:22:75:a9:47:92:4a:4e: 6e:90:58:01:6a:3b:64:dc:bf:da:8e:40:6f:a9:f4: 62:69:2c:04:7c:2c:24:ab:1e:7c:65:df:c5:b5:50: e1:bb:af:5c:f7:a4:46:71:f1:3a:55:80:11:40:9c: 94:f3:cc:c2:51:96:83:58:85:48:93:05:b2:f9:3a: e1:0e:de:d2:cb:47:9f:2a:33:29:6f:0a:ee:04:01: 21:06:d5:b1:75:80:3c:61:58:e7:c4:f2:9b:c7:0f: 55:82:41:d4:fc:ab:d2:a1:19:2b:8a:d5:4e:a6:df: 83:99:fd:98:c3:a4:e6:28:e2:69:9b:57:e7:79:e9: 9d:cd:48:3a:f6:6c:cf:4a:a8:bc:dc:5e:76:cf:64: 2b:55:bd:05:15:cf:fd:33:99:0a:c4:e3:28:4a:1a: 24:3a:e9:1d:cc:da:8c:af:39:ee:05:a5:fa:24:ea: 85:44:a9:90:0f:72:77:c3:01:c6:7d:cc:7f:f3:1a: 19:31:bd:3d:aa:5c:16:06:c7:e9:dc:ba:a1:db:7e: 1b:31:3d:49:5e:e8:7c:1e:95:74:71:42:e1:80:05: 6b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:03:D6:62:D0:C6:2A:49:CB:65:18:7D:3E:6B:79:35:7B:29:4E:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/bb7e42ee-468b-3653-9334-615b6977fa9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl X509v3 Authority Key Identifier: keyid:D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer sbgp-ipAddrBlock: critical IPv4: 104.167.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:b6:2a:aa:8d:10:f2:68:2b:81:fa:d6:11:80:c7:ae:09:c0: 30:0a:f2:cd:e4:6a:b9:46:28:0c:be:c3:5c:80:cc:59:f8:12: 39:59:51:07:a0:72:89:f2:0c:a2:ba:ee:b6:72:a6:e9:fb:99: 95:51:99:fe:e8:56:f5:e1:01:40:c2:45:bd:30:bb:af:5e:52: 82:6e:c1:fc:18:b5:17:0d:1e:dc:fc:90:5e:83:8e:8a:5e:f8: 6c:11:a9:6b:0f:d9:43:20:44:a2:e1:75:12:05:d0:06:67:6a: 44:20:ff:61:d1:27:35:26:cb:5a:dc:8a:d0:ce:da:55:df:cf: 68:32:7d:84:93:f1:62:ec:79:27:d0:1a:f5:96:39:a3:95:25: 29:b0:bb:6a:3a:b1:1c:fc:11:d7:c9:ad:fb:03:68:d3:46:83: 38:9d:9b:73:0e:65:fb:5b:6e:af:14:e7:99:43:18:57:7a:22: 0b:1a:d5:ac:7e:00:4c:db:07:55:cb:bd:25:ed:51:7b:58:eb: 35:32:dc:64:57:10:34:d4:4a:02:2a:f3:82:14:d7:a6:01:21: 54:90:59:81:1e:ad:09:19:b6:7a:8d:f9:96:dc:2c:94:ba:85: 11:a1:bd:80:67:72:d3:ac:47:3f:3f:db:81:7d:4c:08:a5:0f: 08:0e:89:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9Xkgg10lzJtcDMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjc3NWY3YzMtYzIzOC00N2Q1LTk4YzktODM1YTI4ZDkw OTVlMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NzY5ODlhYjQtMWU2MC00M2IyLWE3MzgtNTk2NDkxYWUyMjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApudNR1g563bAEiNKIHtaQ7h3UQcxjBTbuk4M DWT+8COjmIEs+yJ1qUeSSk5ukFgBajtk3L/ajkBvqfRiaSwEfCwkqx58Zd/FtVDh u69c96RGcfE6VYARQJyU88zCUZaDWIVIkwWy+TrhDt7Sy0efKjMpbwruBAEhBtWx dYA8YVjnxPKbxw9VgkHU/KvSoRkritVOpt+Dmf2Yw6TmKOJpm1fneemdzUg69mzP Sqi83F52z2QrVb0FFc/9M5kKxOMoShokOukdzNqMrznuBaX6JOqFRKmQD3J3wwHG fcx/8xoZMb09qlwWBsfp3Lqh234bMT1JXuh8HpV0cULhgAVrhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoD1mLQxipJy2UYfT5reTV7KU6kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNzc1 ZjdjMy1jMjM4LTQ3ZDUtOThjOS04MzVhMjhkOTA5NWUvYmI3ZTQyZWUtNDY4Yi0z NjUzLTkzMzQtNjE1YjY5NzdmYTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjc3NWY3YzMtYzIzOC00N2Q1LTk4 YzktODM1YTI4ZDkwOTVlLzI3NzVmN2MzLWMyMzgtNDdkNS05OGM5LTgzNWEyOGQ5 MDk1ZS5jcmwwHwYDVR0jBBgwFoAU0STfzH9bgNKN7P7ujM9SM461IUQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNzc1ZjdjMy1jMjM4LTQ3ZDUtOThjOS04MzVh MjhkOTA5NWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD22KqqNEPJoK4H61hGAx64JwDAK8s3karlGKAy+w1yAzFn4EjlZUQeg conyDKK67rZypun7mZVRmf7oVvXhAUDCRb0wu69eUoJuwfwYtRcNHtz8kF6Djope +GwRqWsP2UMgRKLhdRIF0AZnakQg/2HRJzUmy1rcitDO2lXfz2gyfYST8WLseSfQ GvWWOaOVJSmwu2o6sRz8EdfJrfsDaNNGgzidm3MOZftbbq8U55lDGFd6Igsa1ax+ AEzbB1XLvSXtUXtY6zUy3GRXEDTUSgIq84IU16YBIVSQWYEerQkZtnqN+ZbcLJS6 hRGhvYBnctOsRz8/24F9TAilDwgOiRc= -----END CERTIFICATE-----Generated at Wed Apr 29 17:29:02 2026 by rpki-client