$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d668ec8-2e6a-3b22-a4af-83461043e4b6.roa File: 9d668ec8-2e6a-3b22-a4af-83461043e4b6.roa (raw, json) Hash identifier: X9ewNTLlZIE+7QhDPT7EKOxSlE7f0/p5OjSL+yOSeBg= Subject key identifier: 28:66:85:23:99:7E:86:BD:4C:94:E8:40:C4:3B:47:5D:C9:EB:5B:E1 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D88CD68083BD45992060F4AC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d668ec8-2e6a-3b22-a4af-83461043e4b6.roa Signing time: Fri 17 Apr 2026 08:05:23 +0000 ROA not before: Fri 17 Apr 2026 08:05:23 +0000 ROA not after: Thu 16 Jul 2026 08:05:23 +0000 asID: 9009 IP address blocks: 104.243.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:cd:68:08:3b:d4:59:92:06:0f:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 17 08:05:23 2026 GMT Not After : Jul 16 08:05:23 2026 GMT Subject: CN=6bff21a6-ad17-4c5f-9da9-893ee0a7528b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5e:11:92:8a:e8:91:f0:4f:ba:e3:76:e3:9b: 35:f6:6e:d3:b0:ce:ec:7a:84:1a:56:00:00:61:fd: a1:42:23:f1:d2:94:b5:82:e0:4b:0a:19:2d:ea:80: 0f:38:b6:ea:c4:62:18:98:24:1a:82:ad:09:41:b5: 8d:dc:4c:c6:9c:24:fb:4c:65:f1:9b:19:fb:cb:b6: fd:92:be:d3:bd:78:cc:96:f7:f6:84:62:5b:0b:4c: c1:76:d7:3b:9f:92:ce:78:62:12:74:6c:8c:1a:45: 21:df:bb:87:02:d3:0a:34:01:b0:db:60:a8:74:ac: 45:20:9a:1e:f4:55:b6:34:01:af:e5:23:1f:d1:25: 3b:ec:0a:71:86:21:1f:e1:5f:b0:34:6f:ea:82:9f: 5e:87:ae:63:fa:39:ac:3a:83:ad:d0:c4:29:1c:d7: 56:65:a2:2b:53:40:36:6a:f1:33:29:27:ba:3c:e4: 38:cd:45:92:0e:86:d2:fa:98:c6:34:7f:55:d4:e9: 1b:4e:73:9c:7a:01:1c:b6:ff:94:b7:cc:e8:7f:a2: e6:86:94:70:de:7e:5b:41:ef:56:f1:6c:9f:4f:f9: 7e:40:bc:6f:98:bb:06:ca:14:cc:3e:b7:ab:b4:d2: 97:e0:37:69:5c:23:de:22:b8:16:e0:e6:f7:11:c2: e4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:66:85:23:99:7E:86:BD:4C:94:E8:40:C4:3B:47:5D:C9:EB:5B:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d668ec8-2e6a-3b22-a4af-83461043e4b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ff:f4:0f:c6:b6:f5:f0:f8:99:72:e2:d3:33:3e:cd:de:1a: 91:2a:6b:5f:0f:4f:10:de:11:c5:4f:b7:57:1e:70:d5:5c:0f: 0a:ef:2e:0d:4d:21:75:a9:37:bc:be:59:da:a8:f5:90:28:fe: 51:b3:64:ad:d3:83:f2:d7:2d:fa:2b:a5:66:7d:bd:1a:15:ae: 4a:0b:23:d3:32:db:b5:d7:f6:5a:9d:44:ef:ac:df:9b:aa:ae: 33:ec:4e:f9:53:72:5d:5b:4f:41:e8:12:aa:31:cb:31:32:58: b3:cc:be:66:1b:8d:3e:54:8d:9b:be:50:47:70:e5:3a:96:ca: e8:73:de:5b:ed:00:a3:cd:f7:89:c3:80:7d:6a:5c:20:89:12: 98:ba:07:70:16:6e:04:38:5e:89:74:6c:f7:ae:19:be:04:ad: bc:2d:4f:b6:57:53:fa:b2:cf:e8:d5:88:bb:91:a6:d8:36:d1: 4f:c1:18:25:c1:60:f4:0e:33:68:c0:c7:50:77:ec:cd:bc:64: 76:63:09:88:4b:8c:dc:2c:5f:76:96:ca:9e:e9:c1:3c:16:cb: f1:8a:25:80:7c:1c:fa:fd:5b:07:44:0c:f0:83:f1:34:2c:a0: 67:c7:a0:1d:16:f4:b0:e3:b6:8f:f2:a6:ad:9d:3b:16:92:dd: 98:df:44:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2IzWgIO9RZkgYPSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQxNzA4MDUyM1oXDTI2MDcxNjA4MDUyM1owLzEtMCsGA1UEAxMk NmJmZjIxYTYtYWQxNy00YzVmLTlkYTktODkzZWUwYTc1MjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV4RkorokfBPuuN245s19m7TsM7seoQaVgAA Yf2hQiPx0pS1guBLChkt6oAPOLbqxGIYmCQagq0JQbWN3EzGnCT7TGXxmxn7y7b9 kr7TvXjMlvf2hGJbC0zBdtc7n5LOeGISdGyMGkUh37uHAtMKNAGw22CodKxFIJoe 9FW2NAGv5SMf0SU77ApxhiEf4V+wNG/qgp9eh65j+jmsOoOt0MQpHNdWZaIrU0A2 avEzKSe6POQ4zUWSDobS+pjGNH9V1OkbTnOcegEctv+Ut8zof6LmhpRw3n5bQe9W 8WyfT/l+QLxvmLsGyhTMPrertNKX4DdpXCPeIrgW4Ob3EcLkLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChmhSOZfoa9TJToQMQ7R13J61vhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOWQ2NjhlYzgtMmU2YS0z YjIyLWE0YWYtODM0NjEwNDNlNGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADf/9A/GtvXw+Jly4tMzPs3eGpEqa18PTxDeEcVPt1cecNVcDwrvLg1N IXWpN7y+Wdqo9ZAo/lGzZK3Tg/LXLforpWZ9vRoVrkoLI9My27XX9lqdRO+s35uq rjPsTvlTcl1bT0HoEqoxyzEyWLPMvmYbjT5UjZu+UEdw5TqWyuhz3lvtAKPN94nD gH1qXCCJEpi6B3AWbgQ4Xol0bPeuGb4ErbwtT7ZXU/qyz+jViLuRptg20U/BGCXB YPQOM2jAx1B37M28ZHZjCYhLjNwsX3aWyp7pwTwWy/GKJYB8HPr9WwdEDPCD8TQs oGfHoB0W9LDjto/ypq2dOxaS3ZjfRE8= -----END CERTIFICATE-----Generated at Sat Apr 18 22:20:23 2026 by rpki-client