$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/eaf7e485-7ab8-383a-af6e-1d1d48e46da5.roa File: eaf7e485-7ab8-383a-af6e-1d1d48e46da5.roa (raw, json) Hash identifier: oTmLsqlRQcGgODnofrsJWBKeQ7qj3OoRpwXApd7GwIw= Subject key identifier: 89:6F:FE:1D:EF:56:43:45:B7:77:9B:9F:DE:9E:84:E9:4F:A3:E2:17 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584D2644B843E2F0E299DFDDC040 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/eaf7e485-7ab8-383a-af6e-1d1d48e46da5.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 21743 IP address blocks: 104.247.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:b8:43:e2:f0:e2:99:df:dd:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=2dbadb53-3f41-43db-aecc-983b017fa32b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3b:16:5b:4f:4c:a4:d1:8e:b2:64:12:cd:b2: a1:3c:96:2d:1e:c5:de:01:f0:c3:f5:f4:22:02:25: 45:b5:42:a8:ea:b2:1b:b8:d7:ce:91:05:32:c9:c1: 0e:29:2d:b0:dc:11:6f:85:66:d1:d7:4f:b7:18:01: 26:c1:cd:82:aa:09:8f:55:85:5c:2f:2d:fa:df:b1: 3b:28:30:17:c5:ce:4e:fe:69:18:51:ed:6c:6d:4f: 1f:f2:4d:86:50:a7:25:72:98:40:25:9a:52:72:64: e7:38:cc:6c:e4:a2:2c:76:f0:da:3d:2a:18:53:2f: b1:81:8b:bb:68:fc:69:6d:a2:a7:f5:61:6c:16:f4: 60:25:59:f8:5e:73:fe:f8:9f:28:c3:fb:17:f6:fc: 78:db:d0:fe:d6:e5:8e:36:3f:52:60:66:4a:e9:51: ee:96:e0:0c:d2:8d:98:0d:75:00:dc:71:4b:16:bd: 31:aa:08:bd:f1:02:23:e1:7b:f6:8e:89:31:10:5e: 70:b8:6b:3d:e0:b4:51:c9:75:f1:30:9c:95:19:87: 37:89:b3:f8:7e:e5:75:df:f0:c6:d2:68:6e:f5:76: bb:32:35:23:01:8a:63:a7:e9:53:d0:0b:fe:85:12: 47:34:44:1f:2b:71:7c:8c:d4:07:31:06:00:3b:fc: b7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6F:FE:1D:EF:56:43:45:B7:77:9B:9F:DE:9E:84:E9:4F:A3:E2:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/eaf7e485-7ab8-383a-af6e-1d1d48e46da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 104.247.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:97:29:57:65:7d:15:c9:ee:52:b9:8a:f7:4d:80:ea:07:ed: 67:89:8c:57:16:fa:d8:51:37:2a:10:be:1d:3e:94:d4:55:96: c6:b2:06:b3:22:30:35:e5:d9:e6:a1:07:a2:c6:a3:ba:07:86: 4b:c7:a9:66:da:8e:1b:72:16:3b:99:af:00:08:10:ac:ae:63: 8e:d7:5c:ad:ed:d7:33:9d:37:e0:42:0d:16:3b:4e:47:ce:c1: 43:3b:9a:c9:95:68:f8:bf:b3:27:50:41:bd:6f:64:be:bc:c9: de:7e:5e:6e:0c:54:b3:3d:3c:b4:ea:5f:e3:ca:fc:3a:b7:92: d4:a7:09:bd:10:9e:93:cc:62:90:20:be:82:7b:f8:b7:26:38: 5e:2f:b1:b6:01:34:9c:06:ba:77:e7:cd:4d:69:ff:77:23:a6: d2:16:62:8b:99:e9:52:36:9f:24:aa:ed:f1:ed:b6:33:72:a3: 3c:84:6f:85:c9:45:a8:ed:54:1b:f8:17:6c:55:41:65:a3:8f: d9:ad:33:34:92:e7:1a:2e:f1:c6:fa:c6:ea:ea:1a:d7:38:f6: b7:29:b2:00:f2:80:5f:f4:d1:65:b5:d0:a0:dd:d5:83:07:96: fc:ac:a3:79:cc:dc:05:7c:c5:36:c2:da:d8:3a:41:d2:8d:e0: a2:f0:35:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRLhD4vDimd/dwEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk MmRiYWRiNTMtM2Y0MS00M2RiLWFlY2MtOTgzYjAxN2ZhMzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTsWW09MpNGOsmQSzbKhPJYtHsXeAfDD9fQi AiVFtUKo6rIbuNfOkQUyycEOKS2w3BFvhWbR10+3GAEmwc2CqgmPVYVcLy3637E7 KDAXxc5O/mkYUe1sbU8f8k2GUKclcphAJZpScmTnOMxs5KIsdvDaPSoYUy+xgYu7 aPxpbaKn9WFsFvRgJVn4XnP++J8ow/sX9vx429D+1uWONj9SYGZK6VHuluAM0o2Y DXUA3HFLFr0xqgi98QIj4Xv2jokxEF5wuGs94LRRyXXxMJyVGYc3ibP4fuV13/DG 0mhu9Xa7MjUjAYpjp+lT0Av+hRJHNEQfK3F8jNQHMQYAO/y33wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlv/h3vVkNFt3ebn96ehOlPo+IXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvZWFmN2U0ODUtN2FiOC0z ODNhLWFmNmUtMWQxZDQ4ZTQ2ZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPd5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOXKVdlfRXJ7lK5ivdNgOoH7WeJjFcW+thRNyoQvh0+lNRVlsayBrMi MDXl2eahB6LGo7oHhkvHqWbajhtyFjuZrwAIEKyuY47XXK3t1zOdN+BCDRY7TkfO wUM7msmVaPi/sydQQb1vZL68yd5+Xm4MVLM9PLTqX+PK/Dq3ktSnCb0QnpPMYpAg voJ7+LcmOF4vsbYBNJwGunfnzU1p/3cjptIWYouZ6VI2nySq7fHttjNyozyEb4XJ RajtVBv4F2xVQWWjj9mtMzSS5xou8cb6xurqGtc49rcpsgDygF/00WW10KDd1YMH lvyso3nM3AV8xTbC2tg6QdKN4KLwNcs= -----END CERTIFICATE-----Generated at Wed Mar 18 00:39:30 2026 by rpki-client