$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/fce5dff3-32a5-303b-9a89-b82f6ffa4cf9.roa File: fce5dff3-32a5-303b-9a89-b82f6ffa4cf9.roa (raw, json) Hash identifier: ycRW+SYDl1r32s0+dPY50FmtzZh9iUlqGuHtB7iesDU= Subject key identifier: 94:B6:2A:4A:C4:C2:73:22:0B:D0:AD:38:1F:87:31:54:D2:BF:55:99 Certificate issuer: /CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b Certificate serial: 010D0C9F4328584D1F2FBE6CED0221098C4ACC80 Authority key identifier: CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/fce5dff3-32a5-303b-9a89-b82f6ffa4cf9.roa Signing time: Tue 10 Mar 2026 12:07:50 +0000 ROA not before: Tue 10 Mar 2026 12:07:50 +0000 ROA not after: Mon 08 Jun 2026 12:07:50 +0000 asID: 21713 IP address blocks: 104.160.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:2f:be:6c:ed:02:21:09:8c:4a:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b Validity Not Before: Mar 10 12:07:50 2026 GMT Not After : Jun 8 12:07:50 2026 GMT Subject: CN=31298830-0b86-416a-9334-6a7268b84952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:40:a8:6e:03:17:9d:26:8c:f0:c6:dd:4c:89: 7f:6a:26:a2:a1:a8:b0:79:a1:5e:86:8f:ac:73:c4: 0e:47:25:5c:84:b8:98:4b:17:98:3c:7a:65:7d:74: 0b:da:ce:61:e9:08:07:e1:09:0e:50:05:6d:04:7c: ac:99:31:ac:95:66:4b:9d:b8:5b:cb:2b:86:76:e7: 81:5c:ab:0a:f5:75:3e:bb:04:21:ef:b8:be:42:2f: 4c:3f:80:a2:fe:cb:d4:03:6e:2a:81:3f:dc:74:12: 57:64:e7:6c:73:dc:fe:44:d4:c0:ca:71:b1:cd:aa: 46:2d:f4:5b:a8:43:e8:18:99:c6:35:96:4d:4f:51: 20:64:94:7d:46:ea:05:8b:f5:20:52:8e:3b:b7:ce: c7:98:e7:a2:3f:74:49:6b:73:30:d1:3d:07:51:eb: 8d:a4:69:e2:24:31:86:7f:07:84:96:bd:c1:a8:9c: 14:6f:e1:95:be:b0:cf:46:cc:c0:c1:d3:31:db:3e: c9:bc:5b:5e:c6:77:9e:eb:a3:48:05:dc:39:f6:c0: 9d:5f:0d:6a:4e:04:f2:af:46:84:e0:31:5d:6d:26: 5f:aa:a3:dd:74:47:71:8e:d9:9f:ad:87:0c:de:62: 40:80:61:15:f1:76:c8:06:9f:49:ab:2c:c1:30:20: 03:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B6:2A:4A:C4:C2:73:22:0B:D0:AD:38:1F:87:31:54:D2:BF:55:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/fce5dff3-32a5-303b-9a89-b82f6ffa4cf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl X509v3 Authority Key Identifier: keyid:CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer sbgp-ipAddrBlock: critical IPv4: 104.160.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d7:a8:75:e8:0b:ac:03:ac:81:22:fa:b8:47:a8:58:e4:73: 5a:7f:ab:6f:6e:e0:b3:c7:f5:82:4b:03:51:eb:11:73:ea:65: 7d:ea:87:d3:89:0e:bf:c1:e0:8a:14:47:df:00:a2:ec:41:86: 18:52:18:93:3c:bf:d6:e4:37:1b:68:86:70:54:a4:a7:5a:82: ff:19:49:b1:ea:73:09:a0:b0:35:e2:ee:69:f3:97:47:6d:63: 41:99:93:bc:bd:57:95:9f:1a:b0:db:c3:32:75:69:06:42:47: 9e:d2:04:b1:5e:f7:41:1f:cc:7b:f5:27:5e:50:34:82:f2:fa: 07:b2:96:8d:09:99:82:3e:fa:5e:11:d0:40:b0:ad:d5:bc:dd: 03:4f:b7:e8:db:af:c8:25:97:c2:69:f8:b7:18:fd:4a:9c:88: 5b:37:3d:ee:30:81:84:0c:e9:87:47:c8:d1:c8:7e:f5:e9:12: e5:78:7f:f5:7e:be:a4:90:ba:93:24:07:8a:e8:83:f2:04:ba: 08:1f:99:17:bb:58:03:71:fa:dc:7e:9f:ff:a6:75:40:e4:64: 5d:23:4d:64:fa:06:fa:84:64:37:7a:30:d7:89:08:90:d6:5c: 6d:70:52:84:e2:ad:ab:5f:73:47:1d:e8:69:d3:7b:8a:8c:b2: 72:8e:2f:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fL75s7QIhCYxKzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDkzMWU3MTctYzFkMS00ZGQ4LTg2M2QtNWMwNmZiNzZm NDdiMB4XDTI2MDMxMDEyMDc1MFoXDTI2MDYwODEyMDc1MFowLzEtMCsGA1UEAxMk MzEyOTg4MzAtMGI4Ni00MTZhLTkzMzQtNmE3MjY4Yjg0OTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUCobgMXnSaM8MbdTIl/aiaioaiweaFeho+s c8QORyVchLiYSxeYPHplfXQL2s5h6QgH4QkOUAVtBHysmTGslWZLnbhbyyuGdueB XKsK9XU+uwQh77i+Qi9MP4Ci/svUA24qgT/cdBJXZOdsc9z+RNTAynGxzapGLfRb qEPoGJnGNZZNT1EgZJR9RuoFi/UgUo47t87HmOeiP3RJa3Mw0T0HUeuNpGniJDGG fweElr3BqJwUb+GVvrDPRszAwdMx2z7JvFtexnee66NIBdw59sCdXw1qTgTyr0aE 4DFdbSZfqqPddEdxjtmfrYcM3mJAgGEV8XbIBp9JqyzBMCADKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJS2KkrEwnMiC9CtOB+HMVTSv1WZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80OTMx ZTcxNy1jMWQxLTRkZDgtODYzZC01YzA2ZmI3NmY0N2IvZmNlNWRmZjMtMzJhNS0z MDNiLTlhODktYjgyZjZmZmE0Y2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDkzMWU3MTctYzFkMS00ZGQ4LTg2 M2QtNWMwNmZiNzZmNDdiLzQ5MzFlNzE3LWMxZDEtNGRkOC04NjNkLTVjMDZmYjc2 ZjQ3Yi5jcmwwHwYDVR0jBBgwFoAUzkL+cRFxw0kbjbZ7dOQfT+KR3owwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80OTMxZTcxNy1jMWQxLTRkZDgtODYzZC01YzA2 ZmI3NmY0N2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaKA4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzXqHXoC6wDrIEi+rhHqFjkc1p/q29u4LPH9YJLA1HrEXPqZX3qh9OJ Dr/B4IoUR98AouxBhhhSGJM8v9bkNxtohnBUpKdagv8ZSbHqcwmgsDXi7mnzl0dt Y0GZk7y9V5WfGrDbwzJ1aQZCR57SBLFe90EfzHv1J15QNILy+geylo0JmYI++l4R 0ECwrdW83QNPt+jbr8gll8Jp+LcY/UqciFs3Pe4wgYQM6YdHyNHIfvXpEuV4f/V+ vqSQupMkB4rog/IEuggfmRe7WANx+tx+n/+mdUDkZF0jTWT6BvqEZDd6MNeJCJDW XG1wUoTiratfc0cd6GnTe4qMsnKOL/0= -----END CERTIFICATE-----Generated at Fri Mar 13 10:56:54 2026 by rpki-client