$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/efa63315-c35a-3ed1-9536-6c8c2d3511c6.roa File: efa63315-c35a-3ed1-9536-6c8c2d3511c6.roa (raw, json) Hash identifier: EA/y6XZ8MVX6r/mHt/gvB/WEbK9L6TU7su3wpzvzZNc= Subject key identifier: 9A:D8:03:EB:9B:A7:18:4E:A4:3A:5F:27:B4:60:54:66:38:D9:35:E0 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D91C00FDDB18554DD7FD13460 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/efa63315-c35a-3ed1-9536-6c8c2d3511c6.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 212238 IP address blocks: 104.250.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:0f:dd:b1:85:54:dd:7f:d1:34:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=ffba1f54-dd88-4f9e-98f5-7d4f46cfc1bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:47:b4:b5:92:96:78:a5:bc:55:c7:cb:b1:63: 0c:4d:47:17:72:70:92:6e:af:c1:00:c6:ef:52:ed: d1:7a:85:9c:b1:99:d2:a3:ca:82:26:09:c6:7b:f0: fb:f4:b4:45:3d:d6:05:f0:ba:0a:e5:b5:0a:8c:e9: 2e:57:70:d6:66:bc:bc:d3:f5:24:53:5a:b5:80:bf: d5:6c:e3:3c:48:7d:6d:83:42:ac:c0:39:81:2b:92: 5e:f5:a3:53:f2:3c:4b:f4:3a:c7:6c:c4:2d:4f:9a: 87:91:a1:b3:27:11:7b:ef:b2:8c:10:90:d0:a9:d6: 1c:a0:35:4e:94:47:49:19:af:43:3d:dd:16:53:f0: 6c:c7:f0:ed:99:ce:2e:8a:e1:45:b4:94:e9:6c:ff: 52:f2:41:f9:08:23:02:56:d0:b3:90:35:a1:ec:56: a9:b6:a6:21:93:86:0b:46:68:fb:7e:0b:49:3f:64: 8d:c8:28:02:1e:94:64:06:86:fe:5a:a0:67:9e:2b: 23:8a:22:bb:b8:c5:5b:9d:8d:04:72:41:93:f9:e3: 2a:ea:fa:e5:0d:0e:af:87:b0:30:0c:bc:7a:fc:e1: bf:a6:a0:c1:48:e3:90:ea:01:f4:b9:c3:ff:0d:69: ca:8d:b4:05:b0:fc:78:d4:8a:a9:45:58:29:d4:88: db:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D8:03:EB:9B:A7:18:4E:A4:3A:5F:27:B4:60:54:66:38:D9:35:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/efa63315-c35a-3ed1-9536-6c8c2d3511c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:00:a0:96:c7:7e:2d:b4:d7:10:6e:35:66:bc:90:78:51:d5: 0f:8f:fc:cd:92:cd:d6:64:b9:78:bb:a6:a1:66:ee:e2:1a:2e: 74:24:85:38:7a:97:80:59:ec:04:a9:fc:8d:ea:95:97:8b:18: 95:cf:c9:7f:43:cc:ff:0d:35:1b:41:bd:f3:02:87:d7:5d:e2: 78:14:6b:fb:bd:e3:98:28:94:55:09:03:ab:a0:08:46:94:fa: c9:15:f9:5d:6d:a1:96:84:fb:d2:01:b8:9b:a8:e2:dd:34:39: 40:8d:1c:3a:4b:e7:b3:11:33:71:e7:22:7e:26:8e:7b:a9:0f: bd:80:69:38:0d:f3:cf:eb:ba:c1:70:f6:b0:81:0d:34:5d:88: 31:a9:34:2a:18:16:bb:de:64:36:d9:b2:a6:7d:a6:81:57:5f: 1a:af:59:5a:fc:92:99:d9:ca:3b:d6:c9:07:13:7a:2c:cb:2e: 2a:3f:e4:4d:99:cc:ea:50:82:b4:93:f9:f5:f3:4d:c4:57:74: d4:91:c5:6f:18:62:38:52:8a:1e:13:fa:da:09:51:c0:00:0b: 72:2d:6d:6b:56:32:26:c2:f2:6a:31:e4:b7:d8:1c:e4:35:b2: 76:30:e5:9c:38:ed:07:36:cb:40:83:f2:c7:89:36:4d:bb:28: 28:2a:e7:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwA/dsYVU3X/RNGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk ZmZiYTFmNTQtZGQ4OC00ZjllLTk4ZjUtN2Q0ZjQ2Y2ZjMWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEe0tZKWeKW8VcfLsWMMTUcXcnCSbq/BAMbv Uu3ReoWcsZnSo8qCJgnGe/D79LRFPdYF8LoK5bUKjOkuV3DWZry80/UkU1q1gL/V bOM8SH1tg0KswDmBK5Je9aNT8jxL9DrHbMQtT5qHkaGzJxF777KMEJDQqdYcoDVO lEdJGa9DPd0WU/Bsx/Dtmc4uiuFFtJTpbP9S8kH5CCMCVtCzkDWh7FaptqYhk4YL Rmj7fgtJP2SNyCgCHpRkBob+WqBnnisjiiK7uMVbnY0EckGT+eMq6vrlDQ6vh7Aw DLx6/OG/pqDBSOOQ6gH0ucP/DWnKjbQFsPx41IqpRVgp1IjbgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrYA+ubpxhOpDpfJ7RgVGY42TXgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZWZhNjMzMTUtYzM1YS0z ZWQxLTk1MzYtNmM4YzJkMzUxMWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPq8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEAoJbHfi201xBuNWa8kHhR1Q+P/M2SzdZkuXi7pqFm7uIaLnQkhTh6 l4BZ7ASp/I3qlZeLGJXPyX9DzP8NNRtBvfMCh9dd4ngUa/u945golFUJA6ugCEaU +skV+V1toZaE+9IBuJuo4t00OUCNHDpL57MRM3HnIn4mjnupD72AaTgN88/rusFw 9rCBDTRdiDGpNCoYFrveZDbZsqZ9poFXXxqvWVr8kpnZyjvWyQcTeizLLio/5E2Z zOpQgrST+fXzTcRXdNSRxW8YYjhSih4T+toJUcAAC3ItbWtWMibC8mox5LfYHOQ1 snYw5Zw47Qc2y0CD8seJNk27KCgq50s= -----END CERTIFICATE-----Generated at Tue May 5 23:18:58 2026 by rpki-client