$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/398bb86a-edc1-381a-95f9-8566051e129a.roa File: 398bb86a-edc1-381a-95f9-8566051e129a.roa (raw, json) Hash identifier: ISjvEQw0oU6Sin302SA7/OFxGJORbcRHUv/WoPdqHTA= Subject key identifier: 33:DB:6E:4F:F5:30:72:7C:F3:6E:94:47:DB:6B:30:17:D0:00:26:A6 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E00E0946E7E03F519ECDD0548 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/398bb86a-edc1-381a-95f9-8566051e129a.roa Signing time: Sat 30 May 2026 08:21:01 +0000 ROA not before: Sat 30 May 2026 08:21:01 +0000 ROA not after: Fri 28 Aug 2026 08:21:01 +0000 asID: 206340 IP address blocks: 104.250.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:e0:94:6e:7e:03:f5:19:ec:dd:05:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 30 08:21:01 2026 GMT Not After : Aug 28 08:21:01 2026 GMT Subject: CN=cb00a266-ce54-4250-a68a-a0b4a7819980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d3:ca:3e:d1:41:aa:fe:31:8f:b2:bf:91:d6: b3:3f:07:9f:01:4d:4c:41:30:e0:68:80:4c:0c:2c: 3a:c5:be:f3:7e:d9:8a:66:2e:99:6c:59:9f:eb:7d: d7:99:d7:98:41:fd:bf:45:82:09:50:8d:f8:98:74: 0e:e1:75:06:59:0e:81:b1:61:89:2e:42:bd:a7:5e: ba:94:fd:02:98:77:fe:da:02:6d:0e:16:8a:04:bd: 2f:35:d8:42:0f:46:1c:14:a8:65:2a:ea:1b:fc:e0: 85:5f:f4:ef:40:91:71:d1:fa:55:3d:29:89:08:8b: 2e:15:b0:71:0b:63:63:a9:02:7f:43:22:c6:9c:41: f8:72:aa:6b:52:bd:1f:13:b9:f9:f4:19:24:50:37: dc:67:92:3a:be:ea:8d:6c:19:ce:f2:e6:de:25:40: 64:9c:14:f5:49:c2:af:02:4b:9f:9c:17:f4:a0:85: 86:65:cf:12:18:08:a3:ea:84:a9:72:e5:72:5b:7c: a6:36:55:14:52:33:ac:7b:ea:af:f5:d5:5c:c4:c9: b9:9d:ef:af:fe:ad:49:c0:1e:1d:03:f2:d2:7b:a9: bd:b3:38:76:e1:48:de:ea:cc:53:0e:53:db:dd:93: e1:ce:8c:18:1f:e0:de:2c:18:1c:8b:67:c4:50:f3: fd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DB:6E:4F:F5:30:72:7C:F3:6E:94:47:DB:6B:30:17:D0:00:26:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/398bb86a-edc1-381a-95f9-8566051e129a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:fb:8b:21:61:9c:f6:b9:f2:59:04:36:50:5c:37:f6:92:1c: 09:94:81:ee:90:29:1a:d2:63:2a:ea:2a:28:3d:c2:c6:4b:f4: 03:c7:06:c5:51:81:7d:c7:e0:5d:39:ba:fc:f1:8b:2d:a0:87: 86:96:d8:55:a8:54:bc:13:33:9c:7d:d8:8d:91:b9:9b:ca:fb: 48:2b:e6:c0:bc:d1:c0:a5:28:ec:27:81:7b:76:e3:cd:73:31: 20:9a:de:14:ab:99:15:8f:87:12:bc:24:8e:2e:13:80:b9:db: b8:49:63:3c:1c:eb:f1:c3:36:e9:48:6f:83:62:05:3c:91:d9: 54:b6:a4:a8:b5:af:1e:6f:6e:d4:c9:28:13:e5:7b:74:db:28: 04:8c:9c:3e:7b:34:f3:53:4a:32:6a:33:2c:e9:0e:56:16:02: d3:e1:7a:14:64:8a:9c:6f:2a:24:83:fb:41:e2:0d:07:38:99: c5:c2:56:26:3a:21:fd:2c:26:95:ed:e9:47:0c:ab:e9:5f:59: f1:d3:6f:be:8b:03:78:7f:7d:dd:fe:77:69:74:73:d8:a6:2e: c0:75:79:8b:db:32:f8:69:7f:0f:4c:2c:3b:f0:b9:7b:3c:6f: c6:e1:67:8e:67:a6:e9:99:ac:5b:17:8c:4c:b5:1c:5c:4e:67: cd:29:02:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4A4JRufgP1GezdBUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDUzMDA4MjEwMVoXDTI2MDgyODA4MjEwMVowLzEtMCsGA1UEAxMk Y2IwMGEyNjYtY2U1NC00MjUwLWE2OGEtYTBiNGE3ODE5OTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitPKPtFBqv4xj7K/kdazPwefAU1MQTDgaIBM DCw6xb7zftmKZi6ZbFmf633XmdeYQf2/RYIJUI34mHQO4XUGWQ6BsWGJLkK9p166 lP0CmHf+2gJtDhaKBL0vNdhCD0YcFKhlKuob/OCFX/TvQJFx0fpVPSmJCIsuFbBx C2NjqQJ/QyLGnEH4cqprUr0fE7n59BkkUDfcZ5I6vuqNbBnO8ubeJUBknBT1ScKv AkufnBf0oIWGZc8SGAij6oSpcuVyW3ymNlUUUjOse+qv9dVcxMm5ne+v/q1JwB4d A/LSe6m9szh24Uje6sxTDlPb3ZPhzowYH+DeLBgci2fEUPP9HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPbbk/1MHJ8826UR9trMBfQACamMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzk4YmI4NmEtZWRjMS0z ODFhLTk1ZjktODU2NjA1MWUxMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGn7iyFhnPa58lkENlBcN/aSHAmUge6QKRrSYyrqKig9wsZL9APHBsVR gX3H4F05uvzxiy2gh4aW2FWoVLwTM5x92I2RuZvK+0gr5sC80cClKOwngXt2481z MSCa3hSrmRWPhxK8JI4uE4C527hJYzwc6/HDNulIb4NiBTyR2VS2pKi1rx5vbtTJ KBPle3TbKASMnD57NPNTSjJqMyzpDlYWAtPhehRkipxvKiSD+0HiDQc4mcXCViY6 If0sJpXt6UcMq+lfWfHTb76LA3h/fd3+d2l0c9imLsB1eYvbMvhpfw9MLDvwuXs8 b8bhZ45npumZrFsXjEy1HFxOZ80pAhE= -----END CERTIFICATE-----Generated at Thu Jun 4 10:00:03 2026 by rpki-client