$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a6f6823e-db3c-3065-8f20-5102dda0ec74.roa File: a6f6823e-db3c-3065-8f20-5102dda0ec74.roa (raw, json) Hash identifier: xNtut7L9m5ITqKkYETpaF22U5jFz629zALnFMbu1VFY= Subject key identifier: 4B:16:B2:12:DF:1F:BD:5C:C1:B1:7A:90:5D:C0:05:F8:D1:65:EC:64 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D97555C61A28B7FA9B1368EC0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a6f6823e-db3c-3065-8f20-5102dda0ec74.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 23473 IP address blocks: 104.145.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:5c:61:a2:8b:7f:a9:b1:36:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=4231e2b6-3ace-4321-adb0-7e663d16c47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3b:33:dc:71:cc:ee:0a:e6:f0:76:dc:46:57: 74:05:c6:bd:70:a8:27:13:e9:94:03:d9:e8:63:aa: 8f:29:f4:23:a5:10:67:11:7c:01:b8:e7:2c:01:86: 79:b2:cf:b6:8b:10:c4:9f:20:af:a8:fb:61:5b:fe: 64:b8:55:8c:0f:5f:b3:42:0a:43:b2:a6:fe:c2:df: a0:69:45:a4:bf:4a:36:aa:60:cb:91:ec:d9:95:e6: 16:56:f3:f1:49:3b:48:9d:42:1e:ab:21:a1:e6:36: 4a:10:7a:22:a1:4c:03:b1:ee:05:f3:79:f7:7f:9c: a1:c2:82:25:bd:26:1c:87:0f:9b:ca:a0:80:64:fd: a2:11:12:d6:41:59:a5:38:ed:16:f9:93:b3:b7:39: 4b:9f:ef:94:77:e3:56:2a:59:86:14:ac:a9:7c:34: c2:3a:1d:a1:e9:60:44:d1:fa:2b:ce:0d:a1:74:d8: c8:31:4f:15:0b:a6:1e:46:85:8d:9a:f4:9d:71:eb: 4d:86:12:5c:c6:21:75:83:cc:11:e3:74:e0:52:6f: 7d:d1:98:d6:c9:b7:6d:ff:9d:de:98:b1:f0:e0:57: d7:62:73:39:56:e2:02:b9:13:64:54:48:94:10:42: 25:34:ae:34:38:fe:6f:51:1b:68:4a:6c:9a:ac:9a: 0c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:16:B2:12:DF:1F:BD:5C:C1:B1:7A:90:5D:C0:05:F8:D1:65:EC:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a6f6823e-db3c-3065-8f20-5102dda0ec74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 104.145.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:9a:e2:25:3e:76:53:0f:65:85:b2:9f:7f:07:f5:4b:a9:35: e4:3f:26:01:af:6d:d6:32:68:bd:e7:d4:3d:ed:d4:37:b2:da: 1f:65:4c:ab:e8:59:60:1c:11:69:bd:10:15:8b:36:12:50:f7: 6c:99:a1:01:61:11:32:fe:b3:f7:bd:42:ab:0a:f1:79:8e:99: 87:82:79:04:0a:fe:19:74:fb:a6:93:e6:6e:63:a6:bc:cd:a3: 8e:16:89:7d:e9:a6:36:d8:e9:66:c9:13:0c:86:c9:c8:19:4e: b9:c2:46:c7:9b:c2:0c:3f:ea:f0:b1:42:3f:ba:a4:98:d9:a3: a8:0b:48:59:60:86:e9:93:eb:6b:1c:0b:81:96:7b:4c:56:f3: 93:ed:00:3f:7e:43:0b:1a:f8:29:fe:f2:49:fa:44:bf:9a:bd: 08:97:07:70:2d:50:a4:49:34:53:90:5d:2f:a2:ac:84:9c:b6: dc:3d:b5:bb:80:d6:d2:58:8a:24:2d:f6:12:07:4b:ae:51:a4: 84:56:02:9d:c9:17:68:5b:0c:49:44:5f:9f:39:be:79:5b:b7: a8:3d:33:a2:ee:06:35:20:94:5b:84:e6:bf:d4:ad:7d:f1:db: 61:1e:b2:6e:47:0d:d4:d2:e2:00:ab:89:3d:02:5c:0f:85:59: ff:ef:92:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVVxhoot/qbE2jsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk NDIzMWUyYjYtM2FjZS00MzIxLWFkYjAtN2U2NjNkMTZjNDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzsz3HHM7grm8HbcRld0Bca9cKgnE+mUA9no Y6qPKfQjpRBnEXwBuOcsAYZ5ss+2ixDEnyCvqPthW/5kuFWMD1+zQgpDsqb+wt+g aUWkv0o2qmDLkezZleYWVvPxSTtInUIeqyGh5jZKEHoioUwDse4F83n3f5yhwoIl vSYchw+byqCAZP2iERLWQVmlOO0W+ZOztzlLn++Ud+NWKlmGFKypfDTCOh2h6WBE 0forzg2hdNjIMU8VC6YeRoWNmvSdcetNhhJcxiF1g8wR43TgUm990ZjWybdt/53e mLHw4FfXYnM5VuICuRNkVEiUEEIlNK40OP5vURtoSmyarJoM9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsWshLfH71cwbF6kF3ABfjRZexkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTZmNjgyM2UtZGIzYy0z MDY1LThmMjAtNTEwMmRkYTBlYzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOa4iU+dlMPZYWyn38H9UupNeQ/JgGvbdYyaL3n1D3t1Dey2h9lTKvo WWAcEWm9EBWLNhJQ92yZoQFhETL+s/e9QqsK8XmOmYeCeQQK/hl0+6aT5m5jprzN o44WiX3ppjbY6WbJEwyGycgZTrnCRsebwgw/6vCxQj+6pJjZo6gLSFlghumT62sc C4GWe0xW85PtAD9+Qwsa+Cn+8kn6RL+avQiXB3AtUKRJNFOQXS+irIScttw9tbuA 1tJYiiQt9hIHS65RpIRWAp3JF2hbDElEX585vnlbt6g9M6LuBjUglFuE5r/UrX3x 22Eesm5HDdTS4gCriT0CXA+FWf/vkuE= -----END CERTIFICATE-----Generated at Thu May 7 03:15:08 2026 by rpki-client