$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/0ea9e1cf-0128-3fd6-a058-5e7b286fec44.roa File: 0ea9e1cf-0128-3fd6-a058-5e7b286fec44.roa (raw, json) Hash identifier: hydrqXZ8h5tcDTxzmE3S3+S/zwsQtDICKXKAPoYzHyw= Subject key identifier: A9:D9:BD:08:22:C7:F2:84:42:09:30:4D:C1:D2:C2:12:71:55:0C:3C Certificate issuer: /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Certificate serial: 010D0C9F4328584E0865E053C96F56062E092778 Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/0ea9e1cf-0128-3fd6-a058-5e7b286fec44.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 399244 IP address blocks: 104.204.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:65:e0:53:c9:6f:56:06:2e:09:27:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=21d58ad2-03a1-4eec-93fe-00acaa279704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:50:e5:3a:c8:2f:e6:de:a2:75:6e:c4:88:99: 6e:ba:97:c9:a3:02:ad:4d:7c:58:f9:a2:6d:b6:48: 5c:72:3a:6d:93:73:13:be:4e:21:32:7a:6d:23:6a: d1:f0:2d:fb:18:65:be:4e:8d:30:ee:b7:aa:2d:74: e2:b0:07:69:d2:87:26:d3:59:60:94:fc:c2:ca:f1: 8d:14:16:f6:59:eb:10:2e:61:52:ac:c6:88:7e:52: 22:57:17:80:2e:0d:de:0e:35:ab:4c:f1:30:03:ae: 40:e1:84:5c:b7:71:82:88:39:48:55:ce:96:26:65: a9:0a:77:c1:95:01:bf:ae:1b:fb:09:c4:04:88:a6: b2:27:5c:c6:41:72:a6:78:20:b4:03:38:dc:34:d5: 53:33:c3:70:07:b1:b5:a5:7d:ff:d9:93:62:8c:d3: 4d:9e:63:62:6e:af:a9:6f:0e:9f:e8:08:56:07:62: 05:b7:1a:04:90:13:f5:ea:07:1c:56:46:c9:99:98: 6e:25:d6:fd:65:3f:13:cd:e4:c6:9a:2e:69:a5:5a: 48:31:a5:0a:74:c1:cf:fa:26:0f:3f:46:7c:3f:63: 54:ef:a6:c1:e5:fd:d9:d1:4f:03:f2:45:c0:14:70: 47:e1:77:37:d7:4d:7f:56:88:e6:38:a9:b1:13:40: 56:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D9:BD:08:22:C7:F2:84:42:09:30:4D:C1:D2:C2:12:71:55:0C:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/0ea9e1cf-0128-3fd6-a058-5e7b286fec44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl X509v3 Authority Key Identifier: keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer sbgp-ipAddrBlock: critical IPv4: 104.204.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:87:57:da:4e:c6:05:a0:19:8f:c7:76:bc:d0:ec:cd:7d:d6: ef:e6:2d:e2:e1:68:9d:5c:9c:b5:b1:dc:ed:d0:ec:6b:bc:3f: b6:68:23:1d:04:bd:25:42:6b:b7:c1:6d:f5:8e:7b:b3:03:3c: e4:38:78:9d:72:3c:d3:16:cf:2e:db:4d:b0:8b:57:9a:f9:b6: a5:fd:25:fc:22:7f:2c:5c:ed:85:ef:87:9d:64:8d:eb:b3:e6: f3:21:c9:92:40:e7:58:bc:93:12:cb:3a:52:e5:cd:78:3f:51: fb:58:90:44:e1:67:d3:31:b5:e2:77:81:19:da:44:31:b4:91: e7:2c:c0:10:8c:6d:52:af:1a:78:22:27:ef:8f:34:c0:53:b8: b5:10:9d:45:6d:a6:48:2f:41:25:5e:99:2d:2e:03:38:d4:b0: 74:e7:7c:60:55:69:82:6b:60:90:7f:9d:b8:0c:06:1e:fd:0a: a4:22:5a:0f:1b:79:53:5d:88:5a:7b:47:23:9b:af:99:b1:7b: 3a:14:5d:26:df:8c:39:57:7b:55:fb:22:5d:81:6c:37:97:f3: ca:0e:51:20:d3:8a:57:13:74:18:10:17:6e:fd:3d:d5:fa:d3: 60:f3:af:08:7f:63:24:27:13:1f:b8:d0:7f:81:ca:b2:2a:ec: 31:e1:b0:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZeBTyW9WBi4JJ3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh MzhkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk MjFkNThhZDItMDNhMS00ZWVjLTkzZmUtMDBhY2FhMjc5NzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVDlOsgv5t6idW7EiJluupfJowKtTXxY+aJt tkhccjptk3MTvk4hMnptI2rR8C37GGW+To0w7reqLXTisAdp0ocm01lglPzCyvGN FBb2WesQLmFSrMaIflIiVxeALg3eDjWrTPEwA65A4YRct3GCiDlIVc6WJmWpCnfB lQG/rhv7CcQEiKayJ1zGQXKmeCC0AzjcNNVTM8NwB7G1pX3/2ZNijNNNnmNibq+p bw6f6AhWB2IFtxoEkBP16gccVkbJmZhuJdb9ZT8TzeTGmi5ppVpIMaUKdMHP+iYP P0Z8P2NU76bB5f3Z0U8D8kXAFHBH4Xc3101/VojmOKmxE0BWnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnZvQgix/KEQgkwTcHSwhJxVQw8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvMGVhOWUxY2YtMDEyOC0z ZmQ2LWEwNTgtNWU3YjI4NmZlYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl MTU0YmEzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMzdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmHV9pOxgWgGY/HdrzQ7M191u/mLeLhaJ1cnLWx3O3Q7Gu8P7ZoIx0E vSVCa7fBbfWOe7MDPOQ4eJ1yPNMWzy7bTbCLV5r5tqX9Jfwifyxc7YXvh51kjeuz 5vMhyZJA51i8kxLLOlLlzXg/UftYkEThZ9MxteJ3gRnaRDG0kecswBCMbVKvGngi J++PNMBTuLUQnUVtpkgvQSVemS0uAzjUsHTnfGBVaYJrYJB/nbgMBh79CqQiWg8b eVNdiFp7RyObr5mxezoUXSbfjDlXe1X7Il2BbDeX88oOUSDTilcTdBgQF279PdX6 02Dzrwh/YyQnEx+40H+ByrIq7DHhsPU= -----END CERTIFICATE-----Generated at Thu Jun 4 11:16:45 2026 by rpki-client