$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/49983501-5530-3388-b854-3db6d5ede801.roa File: 49983501-5530-3388-b854-3db6d5ede801.roa (raw, json) Hash identifier: 8C5w+SVOefBvBZR4Kj6XuydDm4Pqm71p4xvMtJlnTQI= Subject key identifier: 3E:F8:1D:D7:52:04:31:AC:FC:FD:9D:69:1C:E9:EF:17:CE:89:DC:57 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D9B855522A4B6E91AEE199240 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/49983501-5530-3388-b854-3db6d5ede801.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 216314 IP address blocks: 104.250.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:55:22:a4:b6:e9:1a:ee:19:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=0751fa2b-f124-407d-87a3-784308077217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bb:97:34:87:55:0a:ab:27:63:1f:dc:cf:c9: 82:80:00:78:4d:a9:ee:d4:66:1d:3b:df:3d:00:ad: d4:ed:06:d4:0b:96:3c:0f:cd:25:66:e9:8a:ba:f1: 49:49:ef:2e:c8:e7:38:17:64:95:e9:33:f1:05:93: 88:f6:c1:72:6f:60:9c:77:a2:cb:0d:61:60:b4:ae: ae:9f:a7:10:8c:d3:a3:6f:74:aa:81:56:ff:de:97: 97:3a:87:5a:4e:21:da:27:26:c6:fe:8b:bf:1a:5b: bd:f6:54:04:fa:41:ef:aa:29:2e:ca:0a:59:11:f4: a3:f9:39:11:a4:7b:16:12:00:89:32:34:b9:b8:8b: 83:69:a7:ba:a2:27:bf:a1:e0:72:1d:59:b2:a2:1a: 63:91:e9:1b:1a:d2:e6:8d:a2:b1:65:e8:85:f9:19: 91:52:5d:05:3d:bb:dd:25:a5:64:ce:2c:de:62:30: 04:03:cf:83:6e:6c:0e:4c:10:97:46:c7:3b:1e:9e: 93:c2:ff:35:05:c1:7c:b0:f0:1a:0a:ae:5f:44:06: 27:a9:db:6b:04:1e:01:73:ab:2b:2c:e9:22:ab:eb: 7c:e5:54:13:0d:2f:34:3d:cb:1c:c1:06:ab:9e:80: 3a:34:6c:0c:4f:13:de:a3:db:9a:2e:f2:71:89:6f: 06:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F8:1D:D7:52:04:31:AC:FC:FD:9D:69:1C:E9:EF:17:CE:89:DC:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/49983501-5530-3388-b854-3db6d5ede801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:1d:c3:d0:6c:af:3a:ca:d7:cf:bc:3d:17:c9:be:1e:84:e8: d1:fe:aa:db:eb:8c:40:7b:d4:fb:6a:3f:e4:0b:61:ef:f1:16: 5a:70:d5:09:cd:54:71:69:d6:33:62:07:63:87:f6:e5:1d:02: ef:fd:a0:ce:8b:3b:de:be:ad:87:06:5b:ea:0c:0a:d7:04:3c: 9a:c1:2d:2f:3a:bc:49:af:fc:14:cf:b6:3b:0b:b6:df:e7:b7: 63:f7:5d:9b:9c:3c:b1:e1:10:14:6b:5c:58:c2:34:ed:7c:3d: 3b:44:21:a8:bc:a9:fd:d8:18:60:2b:f5:08:e5:02:83:69:ea: 69:25:bb:e3:fe:11:f0:1d:78:2e:0d:61:ac:80:e5:0f:4c:d9: 0a:31:a9:14:93:73:e9:1f:bb:7a:df:fa:18:c2:30:4a:c5:29: 17:a3:9e:49:4a:cf:8a:77:e7:12:97:fb:e6:e0:6c:07:8e:18: 4b:79:e4:87:06:c9:78:a9:54:62:b8:86:28:54:6e:27:01:a4: 90:20:61:1d:34:74:d3:ee:90:03:a3:d1:9e:6b:6d:70:91:1c: 24:87:dd:fb:25:68:a6:0e:ad:fe:f9:80:00:ab:ef:5d:0d:3f: a6:2d:92:3f:fc:ba:67:a0:5f:4f:2d:e0:76:42:d4:1a:29:0b: 18:94:03:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2bhVUipLbpGu4ZkkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk MDc1MWZhMmItZjEyNC00MDdkLTg3YTMtNzg0MzA4MDc3MjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLuXNIdVCqsnYx/cz8mCgAB4Tanu1GYdO989 AK3U7QbUC5Y8D80lZumKuvFJSe8uyOc4F2SV6TPxBZOI9sFyb2Ccd6LLDWFgtK6u n6cQjNOjb3SqgVb/3peXOodaTiHaJybG/ou/Glu99lQE+kHvqikuygpZEfSj+TkR pHsWEgCJMjS5uIuDaae6oie/oeByHVmyohpjkekbGtLmjaKxZeiF+RmRUl0FPbvd JaVkzizeYjAEA8+DbmwOTBCXRsc7Hp6Twv81BcF8sPAaCq5fRAYnqdtrBB4Bc6sr LOkiq+t85VQTDS80PcscwQarnoA6NGwMTxPeo9uaLvJxiW8GowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD74HddSBDGs/P2daRzp7xfOidxXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDk5ODM1MDEtNTUzMC0z Mzg4LWI4NTQtM2RiNmQ1ZWRlODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0dw9BsrzrK18+8PRfJvh6E6NH+qtvrjEB71PtqP+QLYe/xFlpw1QnN VHFp1jNiB2OH9uUdAu/9oM6LO96+rYcGW+oMCtcEPJrBLS86vEmv/BTPtjsLtt/n t2P3XZucPLHhEBRrXFjCNO18PTtEIai8qf3YGGAr9QjlAoNp6mklu+P+EfAdeC4N YayA5Q9M2QoxqRSTc+kfu3rf+hjCMErFKRejnklKz4p35xKX++bgbAeOGEt55IcG yXipVGK4hihUbicBpJAgYR00dNPukAOj0Z5rbXCRHCSH3fslaKYOrf75gACr710N P6Ytkj/8umegX08t4HZC1BopCxiUAyc= -----END CERTIFICATE-----Generated at Mon Apr 27 18:03:44 2026 by rpki-client