$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b9bf8681-9025-360c-820c-2d5bb3dbb16c.roa File: b9bf8681-9025-360c-820c-2d5bb3dbb16c.roa (raw, json) Hash identifier: hA0QZWwthLRVNfqdydHmSXeH8g1pkWlMXiT2btx6oDc= Subject key identifier: B8:EE:72:C3:9F:B4:00:2A:DC:F0:1D:EC:D8:3F:5F:61:A3:1D:E1:F6 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584D07ACF86566A68511A43FF300 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b9bf8681-9025-360c-820c-2d5bb3dbb16c.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 26658 IP address blocks: 104.232.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:f8:65:66:a6:85:11:a4:3f:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=3fd50a11-f5b6-48e9-890b-04713e5d1787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b5:49:a3:8a:31:96:3f:90:6e:43:42:43:57: 1b:5d:8f:31:a7:e5:d0:43:73:27:f4:6e:78:df:b2: bd:93:ed:54:51:76:9f:a3:17:06:78:bf:bc:7e:1f: 5d:46:72:5f:58:24:50:5c:80:ef:4b:1b:37:56:f8: f1:01:06:05:81:1b:eb:89:af:06:32:24:b5:51:31: af:10:69:5b:51:c0:13:95:79:fe:e9:f1:22:0b:0e: b0:b9:c4:0e:a3:0c:a1:aa:6a:f2:83:0c:f2:3d:eb: 97:5d:22:fc:8a:73:1a:f2:e8:e4:b5:4e:db:d2:d5: d9:24:75:9a:b8:29:59:22:ea:49:21:cf:db:a7:ba: 2f:09:31:40:30:49:d5:a8:df:1f:18:01:1e:cf:7d: 3c:e3:00:62:71:86:1c:5e:34:72:e4:7f:4d:51:6e: e5:fa:67:3b:74:68:09:0a:50:80:b0:3f:63:92:a4: 34:fb:f7:4d:05:6a:68:db:04:2c:10:17:71:87:cf: 5a:62:d3:e0:d5:a1:dd:5c:16:27:5f:a3:7e:80:2f: ec:dd:8f:e7:ec:09:7e:e1:20:20:cc:5c:8d:17:f2: 10:d5:18:2d:75:4b:6d:75:b3:46:cb:89:85:9d:55: ec:85:9d:04:5d:35:85:7e:73:64:b8:c5:4f:56:c9: bb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EE:72:C3:9F:B4:00:2A:DC:F0:1D:EC:D8:3F:5F:61:A3:1D:E1:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b9bf8681-9025-360c-820c-2d5bb3dbb16c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.232.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:0c:4b:76:48:6b:d0:75:4f:9b:bf:5c:4d:d5:47:a4:c4:8d: c2:15:d0:d1:4d:25:f4:6f:9e:e7:6f:f2:91:8e:60:5b:2e:fc: bd:98:0a:7d:fc:18:a6:22:3f:da:12:be:02:5d:b5:0a:42:4c: f1:dd:09:8b:97:58:b8:8f:74:ed:4e:52:c5:51:da:28:3b:25: d4:92:d9:e3:67:a7:4e:65:07:68:38:bf:3c:fa:30:1d:3d:f8: 9d:e3:da:56:e2:71:d2:6d:75:1e:4c:b0:85:b7:ff:c7:80:fb: ba:0a:a5:62:e8:fb:22:10:26:07:45:db:23:c4:a0:af:aa:89: 3e:83:4a:86:e8:67:33:49:7a:02:79:32:a8:84:f2:c6:52:b8: fc:bd:cf:6a:11:db:d6:ee:f4:d4:8d:4d:67:e9:bf:30:5c:c0: 5a:06:b3:04:71:e0:d6:2e:b1:dc:a5:1f:a8:f0:dd:44:42:f9: 8e:10:3b:1a:24:a7:f4:62:f2:e7:3a:bf:55:73:6a:0f:7c:91: 98:11:1d:31:d5:6e:e1:54:c9:72:04:ea:56:6e:19:5b:0e:0b: f6:23:cf:2b:83:eb:df:16:06:2c:e0:30:98:56:fb:74:30:14: 2a:68:b8:08:c0:63:4e:ac:ac:27:52:75:e8:3a:51:d0:25:01: e9:87:c4:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrPhlZqaFEaQ/8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk M2ZkNTBhMTEtZjViNi00OGU5LTg5MGItMDQ3MTNlNWQxNzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrVJo4oxlj+QbkNCQ1cbXY8xp+XQQ3Mn9G54 37K9k+1UUXafoxcGeL+8fh9dRnJfWCRQXIDvSxs3VvjxAQYFgRvria8GMiS1UTGv EGlbUcATlXn+6fEiCw6wucQOowyhqmrygwzyPeuXXSL8inMa8ujktU7b0tXZJHWa uClZIupJIc/bp7ovCTFAMEnVqN8fGAEez3084wBicYYcXjRy5H9NUW7l+mc7dGgJ ClCAsD9jkqQ0+/dNBWpo2wQsEBdxh89aYtPg1aHdXBYnX6N+gC/s3Y/n7Al+4SAg zFyNF/IQ1RgtdUttdbNGy4mFnVXshZ0EXTWFfnNkuMVPVsm7CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjucsOftAAq3PAd7Ng/X2GjHeH2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvYjliZjg2ODEtOTAyNS0z NjBjLTgyMGMtMmQ1YmIzZGJiMTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOhGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQMS3ZIa9B1T5u/XE3VR6TEjcIV0NFNJfRvnudv8pGOYFsu/L2YCn38 GKYiP9oSvgJdtQpCTPHdCYuXWLiPdO1OUsVR2ig7JdSS2eNnp05lB2g4vzz6MB09 +J3j2lbicdJtdR5MsIW3/8eA+7oKpWLo+yIQJgdF2yPEoK+qiT6DSoboZzNJegJ5 MqiE8sZSuPy9z2oR29bu9NSNTWfpvzBcwFoGswRx4NYusdylH6jw3URC+Y4QOxok p/Ri8uc6v1Vzag98kZgRHTHVbuFUyXIE6lZuGVsOC/YjzyuD698WBizgMJhW+3Qw FCpouAjAY06srCdSdeg6UdAlAemHxAE= -----END CERTIFICATE-----Generated at Sat Mar 21 20:04:57 2026 by rpki-client