$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/baee71ad-3baa-3dab-8533-57d28b98781b.roa File: baee71ad-3baa-3dab-8533-57d28b98781b.roa (raw, json) Hash identifier: FWveKxWqTWmQik/eIIlDeCF8ud8Uspyw1WnY3kDPvJQ= Subject key identifier: DF:49:0B:DE:DE:80:4C:E8:11:7E:AA:71:0B:02:44:47:51:17:BE:36 Certificate issuer: /CN=39b2626e-a40d-46fc-b3c3-ff5a12195939 Certificate serial: 010D0C9F4328584D8C2A98DF3805951E47271E00 Authority key identifier: 16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/baee71ad-3baa-3dab-8533-57d28b98781b.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 401707 IP address blocks: 104.232.11.0/24 maxlen: 24 2602:f899:fe::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:98:df:38:05:95:1e:47:27:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39b2626e-a40d-46fc-b3c3-ff5a12195939 Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=2ffa611d-9402-4b85-bb3e-57caaa4242f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:96:3e:ff:98:f2:a0:ac:74:26:2e:18:3b:fe: ec:ef:4d:65:1a:67:0a:8d:c3:cd:7b:24:2b:b1:d0: 91:1c:db:07:1c:0a:52:f5:a0:b4:74:7c:e7:82:9d: 8f:d1:51:df:0d:3b:ff:7e:b5:3f:0f:3c:84:42:59: 45:cb:7b:7d:f8:92:e3:78:ee:5b:f9:3a:a3:bc:2c: ea:2d:4b:da:2f:76:7d:21:31:e2:36:6e:b5:10:61: f1:0b:90:80:4e:4e:56:90:b5:91:5f:81:f8:ba:0b: d5:8d:9d:a2:2b:0f:a5:d7:ab:d4:a8:7b:70:72:6f: 97:1a:67:89:72:f8:3c:ca:5b:44:da:1c:e2:41:f2: 90:7b:ae:ba:78:81:4c:ed:eb:f8:87:70:9f:ad:98: 41:f9:97:47:76:2d:2a:87:d4:e8:d8:8e:5b:ef:38: 50:6c:ae:95:e6:74:a7:4d:c7:3c:9f:65:3a:80:f4: e4:96:f5:f0:1c:1e:55:9d:76:cb:4f:63:d0:06:cc: 5e:97:8d:1c:60:ec:85:dd:be:c8:0d:d6:90:22:d6: d3:30:21:97:cc:80:f3:18:79:2f:9b:cd:44:ec:d8: 84:2d:9a:72:8c:c9:52:9f:6c:30:20:66:75:5e:3c: 2d:d1:7a:16:73:02:d8:5f:54:ae:e8:26:f1:88:30: 32:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:49:0B:DE:DE:80:4C:E8:11:7E:AA:71:0B:02:44:47:51:17:BE:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/baee71ad-3baa-3dab-8533-57d28b98781b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.crl X509v3 Authority Key Identifier: keyid:16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer sbgp-ipAddrBlock: critical IPv4: 104.232.11.0/24 IPv6: 2602:f899:fe::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e6:af:de:f4:37:af:02:e8:82:78:42:a1:85:6d:49:a1:a7: 70:d5:cd:12:de:97:60:68:bd:ef:cd:a8:8c:31:e6:96:19:6b: 90:56:2d:b2:db:f0:1e:22:64:9d:4a:3e:77:fb:ea:64:e0:ce: 19:53:9f:ad:b6:4c:a3:00:e7:e5:9b:4d:fd:6b:75:1a:73:68: e1:78:d8:6d:57:65:32:4b:3b:5a:2a:63:38:62:ee:30:f1:e4: 57:e0:f4:1f:72:ea:cf:39:e5:a6:b0:ad:6c:91:8a:2a:8a:13: f5:d6:2a:4a:70:a5:3b:7d:d9:71:ef:92:3c:70:e8:38:2b:b3: a5:89:fd:41:81:a5:03:0e:45:04:7e:46:85:ee:dc:79:1a:fe: e6:59:04:c9:aa:d5:84:f9:8f:c7:b5:e8:33:40:19:ab:15:88: f3:fe:f5:ff:2b:de:32:bb:ee:3e:f5:99:b5:0c:d4:49:dd:58: ed:9b:d4:91:8e:f9:6c:83:85:e7:6a:e4:55:71:59:ae:32:ce: ec:f1:5f:14:9f:86:26:63:90:a8:93:5d:4c:26:d5:0d:11:e4: cc:d3:3a:06:34:e0:0a:7c:d7:36:7d:0f:6c:74:ee:96:f9:88: ee:33:aa:04:54:c0:ca:4f:1c:ad:ab:8c:72:e1:99:1e:b7:9c: 51:7b:5e:6a -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE2MKpjfOAWVHkcnHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzliMjYyNmUtYTQwZC00NmZjLWIzYzMtZmY1YTEyMTk1 OTM5MB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk MmZmYTYxMWQtOTQwMi00Yjg1LWJiM2UtNTdjYWFhNDI0MmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZY+/5jyoKx0Ji4YO/7s701lGmcKjcPNeyQr sdCRHNsHHApS9aC0dHzngp2P0VHfDTv/frU/DzyEQllFy3t9+JLjeO5b+TqjvCzq LUvaL3Z9ITHiNm61EGHxC5CATk5WkLWRX4H4ugvVjZ2iKw+l16vUqHtwcm+XGmeJ cvg8yltE2hziQfKQe666eIFM7ev4h3CfrZhB+ZdHdi0qh9To2I5b7zhQbK6V5nSn Tcc8n2U6gPTklvXwHB5VnXbLT2PQBsxel40cYOyF3b7IDdaQItbTMCGXzIDzGHkv m81E7NiELZpyjMlSn2wwIGZ1Xjwt0XoWcwLYX1Su6CbxiDAyEwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFN9JC97egEzoEX6qcQsCREdRF742MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOWIy NjI2ZS1hNDBkLTQ2ZmMtYjNjMy1mZjVhMTIxOTU5MzkvYmFlZTcxYWQtM2JhYS0z ZGFiLTg1MzMtNTdkMjhiOTg3ODFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzliMjYyNmUtYTQwZC00NmZjLWIz YzMtZmY1YTEyMTk1OTM5LzM5YjI2MjZlLWE0MGQtNDZmYy1iM2MzLWZmNWExMjE5 NTkzOS5jcmwwHwYDVR0jBBgwFoAUFlk2LKpBOBxjTu4FUkfAgNzA2YAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOWIyNjI2ZS1hNDBkLTQ2ZmMtYjNjMy1mZjVh MTIxOTU5MzkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAaOgLMA8E AgACMAkDBwEmAviZAP4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZ+av3vQ3rwLognhCoYVtSaGncNXNEt6X YGi9782ojDHmlhlrkFYtstvwHiJknUo+d/vqZODOGVOfrbZMowDn5ZtN/Wt1GnNo 4XjYbVdlMks7WipjOGLuMPHkV+D0H3LqzznlprCtbJGKKooT9dYqSnClO33Zce+S PHDoOCuzpYn9QYGlAw5FBH5Ghe7ceRr+5lkEyarVhPmPx7XoM0AZqxWI8/71/yve MrvuPvWZtQzUSd1Y7ZvUkY75bIOF52rkVXFZrjLO7PFfFJ+GJmOQqJNdTCbVDRHk zNM6BjTgCnzXNn0PbHTulvmI7jOqBFTAyk8crauMcuGZHrecUXteag== -----END CERTIFICATE-----Generated at Tue Apr 28 01:15:15 2026 by rpki-client