$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0105a7ab-cb1b-3c8e-99de-8d79a156a63d.roa File: 0105a7ab-cb1b-3c8e-99de-8d79a156a63d.roa (raw, json) Hash identifier: wR4J9FYjdkHwFCDdEqecxskU01c442PHqdfZqChv23c= Subject key identifier: A2:A0:07:54:B2:40:7A:D0:52:F4:C7:E9:71:37:72:51:AB:41:77:F5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E0678AC36A19E484209EF3770 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0105a7ab-cb1b-3c8e-99de-8d79a156a63d.roa Signing time: Mon 01 Jun 2026 08:26:30 +0000 ROA not before: Mon 01 Jun 2026 08:26:30 +0000 ROA not after: Sun 30 Aug 2026 08:26:30 +0000 asID: 154383 IP address blocks: 104.250.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:06:78:ac:36:a1:9e:48:42:09:ef:37:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 1 08:26:30 2026 GMT Not After : Aug 30 08:26:30 2026 GMT Subject: CN=09e73c11-c7aa-4c7a-bc3a-9ce800912257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:60:99:dd:c7:e1:ba:a9:a6:ab:3e:bf:18:33: da:eb:09:8e:86:23:07:1d:91:96:ce:99:7e:62:0b: 1f:ef:a9:22:2d:9c:7c:d4:fa:d1:8c:cf:5f:47:52: 6d:13:85:7c:66:a5:18:e5:54:5a:f3:4b:24:e2:10: f2:6d:af:d9:75:d7:96:3e:73:fe:ff:04:cc:50:7d: 0d:0e:ef:2d:46:65:2c:4f:9f:73:3e:0d:73:d2:0d: 08:51:a8:8b:18:6b:cf:ec:96:4a:06:ad:fa:9e:fa: d3:89:59:8e:70:7e:dd:ef:49:2f:7e:f9:06:dd:ba: 9e:1f:a8:47:4a:97:dc:f2:c7:64:c9:fa:a9:cb:4b: 9b:4b:1d:a1:47:a6:c8:cd:41:db:46:47:c4:a9:65: 9d:4d:b1:2d:d9:44:6c:d6:ab:8a:6d:59:b2:34:3c: da:ef:61:a7:6d:7a:77:82:f6:15:6a:cb:1a:fb:94: 2b:45:c8:e3:59:59:08:04:60:62:f7:9e:58:75:59: b6:ca:e2:a6:c2:e2:c8:69:07:6b:c8:f5:0a:af:16: bf:f1:55:e4:ab:75:1f:d7:78:84:09:be:93:64:f7: ce:66:3e:40:ab:78:3b:f0:37:b1:71:f1:d7:f0:68: 10:8f:c9:bc:cc:c2:06:c1:21:a8:4e:90:97:e5:97: 6d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A0:07:54:B2:40:7A:D0:52:F4:C7:E9:71:37:72:51:AB:41:77:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0105a7ab-cb1b-3c8e-99de-8d79a156a63d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ef:e7:62:7a:8d:34:da:aa:bd:78:eb:58:4c:81:de:09:88: 8c:d4:25:cf:d3:57:db:3a:9e:7b:16:f0:41:68:76:15:7a:b4: 61:1d:8e:f0:20:14:89:89:e2:7e:f0:64:37:76:f8:8e:42:c1: 51:38:b6:c5:ec:02:8e:44:e3:45:3e:e1:64:a0:c6:6f:b1:81: 12:a9:b8:bd:de:f8:71:af:be:f1:40:a5:81:d3:fd:bb:32:bd: c1:e4:65:ca:15:34:5e:75:9b:d6:2c:61:74:97:6e:d1:31:a8: ad:02:c5:2f:ac:7b:27:ab:46:29:14:b1:99:e1:b7:78:fc:77: e0:a1:a5:ae:8d:aa:87:10:e1:1f:6b:3b:f1:a6:47:23:6e:af: e7:11:34:84:ae:22:9f:5f:55:b7:86:14:24:2f:90:61:19:f0: 4a:71:f3:09:56:6a:e8:cc:7d:f0:2b:5a:cb:c0:d8:0f:c2:dc: 34:f3:be:c8:bc:8e:bf:2d:fc:92:eb:50:90:c7:4c:d6:1b:54: c2:49:90:55:e0:8e:a7:5a:af:00:1f:fe:42:da:2a:22:a6:36: 54:7a:6c:d6:d7:68:fe:1b:06:33:80:41:39:42:d8:ad:17:89: 5d:25:69:05:c0:d2:44:d7:8b:67:77:a0:17:ca:ff:34:b6:f1: d2:c8:8f:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4GeKw2oZ5IQgnvN3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYwMTA4MjYzMFoXDTI2MDgzMDA4MjYzMFowLzEtMCsGA1UEAxMk MDllNzNjMTEtYzdhYS00YzdhLWJjM2EtOWNlODAwOTEyMjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWCZ3cfhuqmmqz6/GDPa6wmOhiMHHZGWzpl+ Ygsf76kiLZx81PrRjM9fR1JtE4V8ZqUY5VRa80sk4hDyba/ZddeWPnP+/wTMUH0N Du8tRmUsT59zPg1z0g0IUaiLGGvP7JZKBq36nvrTiVmOcH7d70kvfvkG3bqeH6hH Spfc8sdkyfqpy0ubSx2hR6bIzUHbRkfEqWWdTbEt2URs1quKbVmyNDza72GnbXp3 gvYVassa+5QrRcjjWVkIBGBi955YdVm2yuKmwuLIaQdryPUKrxa/8VXkq3Uf13iE Cb6TZPfOZj5Aq3g78DexcfHX8GgQj8m8zMIGwSGoTpCX5ZdtkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKgB1SyQHrQUvTH6XE3clGrQXf1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDEwNWE3YWItY2IxYi0z YzhlLTk5ZGUtOGQ3OWExNTZhNjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7v52J6jTTaqr1461hMgd4JiIzUJc/TV9s6nnsW8EFodhV6tGEdjvAg FImJ4n7wZDd2+I5CwVE4tsXsAo5E40U+4WSgxm+xgRKpuL3e+HGvvvFApYHT/bsy vcHkZcoVNF51m9YsYXSXbtExqK0CxS+seyerRikUsZnht3j8d+Chpa6NqocQ4R9r O/GmRyNur+cRNISuIp9fVbeGFCQvkGEZ8Epx8wlWaujMffArWsvA2A/C3DTzvsi8 jr8t/JLrUJDHTNYbVMJJkFXgjqdarwAf/kLaKiKmNlR6bNbXaP4bBjOAQTlC2K0X iV0laQXA0kTXi2d3oBfK/zS28dLIjxQ= -----END CERTIFICATE-----Generated at Thu Jun 4 10:00:09 2026 by rpki-client