$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/a896a9f3-afd2-38fb-9e10-2e738ea71c53.roa File: a896a9f3-afd2-38fb-9e10-2e738ea71c53.roa (raw, json) Hash identifier: wYZNatTEnBV0kyiSbcjmzDwVurvYXw2wA1LQNoEyQz0= Subject key identifier: A7:2A:61:B3:2B:27:75:30:29:46:97:C2:95:56:A9:2B:A9:AD:40:87 Certificate issuer: /CN=0215b589-0229-401c-98ef-53194fd5e2a5 Certificate serial: 010D0C9F4328584D4D5A77D9AAC6E1ED11A33C00 Authority key identifier: 7B:C8:33:EC:28:50:49:DE:DF:E1:DE:79:F6:39:28:E0:24:48:B8:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/a896a9f3-afd2-38fb-9e10-2e738ea71c53.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 46455 IP address blocks: 104.255.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/0215b589-0229-401c-98ef-53194fd5e2a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/0215b589-0229-401c-98ef-53194fd5e2a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:77:d9:aa:c6:e1:ed:11:a3:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0215b589-0229-401c-98ef-53194fd5e2a5 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=9d7f4fa0-1772-4624-87ad-91bbb5c6d7c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d2:24:a6:68:15:a2:03:18:10:81:19:e4:1f: db:94:00:2c:f5:fb:10:d5:4b:3c:06:8a:91:64:bf: e3:11:51:dd:ca:89:c6:50:2c:f8:04:88:19:96:08: d7:ab:a2:ad:88:b8:a3:b7:37:84:24:8a:ab:93:74: 6f:df:a1:14:da:e5:3f:76:9b:b6:1f:9e:3d:63:38: 97:eb:25:7b:86:21:47:ae:a3:7b:ca:59:d6:d4:1d: 6e:b2:e0:ea:d0:15:47:dd:18:66:ca:17:b3:c6:cf: d3:a8:c8:ad:c7:c0:92:0c:20:5d:7e:6e:83:c0:f5: 1a:42:ed:fc:c4:d1:ad:1a:df:bf:f6:65:80:b2:46: 84:38:f5:cc:1c:63:6d:13:b7:88:5c:b0:02:9b:16: 47:78:6f:31:de:c1:e0:ea:55:f4:67:72:61:11:31: de:01:40:7a:76:bf:9a:61:df:4e:70:a2:6b:fb:a0: fb:ac:f3:c7:85:55:68:45:40:f7:b7:70:ec:47:1e: 59:be:03:ac:bd:df:9c:74:7b:31:4d:4a:84:b7:49: 55:41:91:f7:1f:62:1f:66:b8:51:20:45:32:39:69: 40:51:b9:bc:d9:d5:4c:62:84:15:99:80:db:84:24: 05:8b:7e:93:0c:c8:4b:68:73:f5:39:30:79:5d:0d: 1d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2A:61:B3:2B:27:75:30:29:46:97:C2:95:56:A9:2B:A9:AD:40:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/a896a9f3-afd2-38fb-9e10-2e738ea71c53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/0215b589-0229-401c-98ef-53194fd5e2a5.crl X509v3 Authority Key Identifier: keyid:7B:C8:33:EC:28:50:49:DE:DF:E1:DE:79:F6:39:28:E0:24:48:B8:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5.cer sbgp-ipAddrBlock: critical IPv4: 104.255.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:fc:7a:4d:7d:3a:00:a4:0c:b8:21:94:c7:bc:ec:d8:03:d6: 6d:84:ed:66:5c:8f:80:d6:42:3c:89:6d:90:a1:a6:e9:99:26: 49:30:21:eb:80:1d:0a:2a:c1:e3:a4:2d:14:79:8b:c4:46:e2: 02:44:f6:56:77:98:71:6c:a8:8e:96:e0:74:a4:31:2e:1a:25: fc:5d:b1:bd:6a:21:b8:74:85:7e:40:ca:2d:53:10:c9:58:4d: e2:87:3d:2b:80:ab:bd:61:42:b0:b5:02:56:25:c7:6c:3a:f8: 0d:be:65:73:5f:f7:61:a4:67:5a:6f:a4:f3:4b:b6:9b:47:0e: 3a:b3:31:bb:aa:22:22:3c:0e:dc:ca:62:f5:6a:fe:e8:38:da: c7:05:94:02:1f:6f:36:59:30:f2:82:80:15:54:f3:dd:0e:01: 92:d0:97:08:d2:04:5d:12:11:fb:8e:46:57:a7:76:f1:73:47: 84:83:26:4b:7f:3b:d4:ec:5b:e6:7a:6f:a5:78:ef:18:b7:bd: 60:12:72:17:70:5c:28:d0:73:39:b1:b7:db:b7:61:e4:fa:ad: 0d:2f:38:58:aa:ee:f6:b1:b2:5d:a2:07:34:4a:9a:f2:b2:16: 19:e4:6c:a7:84:b7:7d:41:42:49:03:5a:db:1c:40:2a:56:a1: 93:27:bf:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWnfZqsbh7RGjPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDIxNWI1ODktMDIyOS00MDFjLTk4ZWYtNTMxOTRmZDVl MmE1MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk OWQ3ZjRmYTAtMTc3Mi00NjI0LTg3YWQtOTFiYmI1YzZkN2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtIkpmgVogMYEIEZ5B/blAAs9fsQ1Us8BoqR ZL/jEVHdyonGUCz4BIgZlgjXq6KtiLijtzeEJIqrk3Rv36EU2uU/dpu2H549YziX 6yV7hiFHrqN7ylnW1B1usuDq0BVH3Rhmyhezxs/TqMitx8CSDCBdfm6DwPUaQu38 xNGtGt+/9mWAskaEOPXMHGNtE7eIXLACmxZHeG8x3sHg6lX0Z3JhETHeAUB6dr+a Yd9OcKJr+6D7rPPHhVVoRUD3t3DsRx5ZvgOsvd+cdHsxTUqEt0lVQZH3H2IfZrhR IEUyOWlAUbm82dVMYoQVmYDbhCQFi36TDMhLaHP1OTB5XQ0dSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcqYbMrJ3UwKUaXwpVWqSuprUCHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wMjE1 YjU4OS0wMjI5LTQwMWMtOThlZi01MzE5NGZkNWUyYTUvYTg5NmE5ZjMtYWZkMi0z OGZiLTllMTAtMmU3MzhlYTcxYzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDIxNWI1ODktMDIyOS00MDFjLTk4 ZWYtNTMxOTRmZDVlMmE1LzAyMTViNTg5LTAyMjktNDAxYy05OGVmLTUzMTk0ZmQ1 ZTJhNS5jcmwwHwYDVR0jBBgwFoAUe8gz7ChQSd7f4d559jko4CRIuAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wMjE1YjU4OS0wMjI5LTQwMWMtOThlZi01MzE5 NGZkNWUyYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP9IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEb8ek19OgCkDLghlMe87NgD1m2E7WZcj4DWQjyJbZChpumZJkkwIeuA HQoqweOkLRR5i8RG4gJE9lZ3mHFsqI6W4HSkMS4aJfxdsb1qIbh0hX5Ayi1TEMlY TeKHPSuAq71hQrC1AlYlx2w6+A2+ZXNf92GkZ1pvpPNLtptHDjqzMbuqIiI8DtzK YvVq/ug42scFlAIfbzZZMPKCgBVU890OAZLQlwjSBF0SEfuORlendvFzR4SDJkt/ O9TsW+Z6b6V47xi3vWASchdwXCjQczmxt9u3YeT6rQ0vOFiq7vaxsl2iBzRKmvKy FhnkbKeEt31BQkkDWtscQCpWoZMnv3g= -----END CERTIFICATE-----Generated at Fri Apr 3 17:58:24 2026 by rpki-client