$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/20966557-eff3-3d8a-a800-0556961c5bfb.roa File: 20966557-eff3-3d8a-a800-0556961c5bfb.roa (raw, json) Hash identifier: hEw1AG9bj7NXWaXzCXxJYYWlBDWOrqBsCkJRd2tBmuI= Subject key identifier: BA:8C:66:4F:45:66:BE:A4:01:F0:70:E6:A1:EB:A2:F5:BB:FB:83:CD Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584D20AF55B172A3FAA4E8249580 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/20966557-eff3-3d8a-a800-0556961c5bfb.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 931 IP address blocks: 104.224.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:55:b1:72:a3:fa:a4:e8:24:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=96b2f1ea-728c-425d-8591-a386c39b5abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2f:de:bd:41:71:62:b6:8a:ca:0e:3c:b0:e2: 54:f6:7a:cd:3e:a6:bf:fb:85:bf:1f:42:59:db:89: bc:5d:68:34:25:85:52:06:fc:d9:76:e0:5c:eb:20: b3:66:c1:9c:a8:a0:66:15:0e:4e:f5:d7:ba:e0:fb: 18:8e:e2:ba:ef:35:3d:9e:50:5c:42:aa:87:0d:9e: 0d:d5:1b:44:bf:04:2d:e4:fb:24:0b:35:ed:7f:88: 1e:cc:a5:bb:b3:a7:5b:f2:49:f2:17:1b:90:b2:ea: a7:6a:76:23:60:98:4b:01:e7:6f:0a:03:c4:67:5e: 58:3f:a7:52:17:c5:f8:88:fe:25:56:15:61:c2:2c: fe:a0:9c:76:cf:aa:28:27:1f:89:95:b7:bd:7e:68: ff:b4:8b:43:8d:80:34:3c:d9:2a:cc:52:88:64:9e: e2:55:4c:8f:d7:7f:01:6d:0d:d3:a4:1c:45:c8:93: 10:4f:a1:97:aa:58:a0:ff:14:23:ff:ce:2b:64:ca: f9:dc:2d:fd:e0:43:ec:c4:63:22:d3:b8:24:bf:1c: 66:09:cb:c5:f3:4b:cd:cb:46:d3:49:de:7a:1b:e6: fa:cd:13:38:2c:d8:ea:3f:d7:85:cb:d1:a4:f0:2f: c5:72:6b:f3:66:e7:d1:16:fb:4c:bf:09:f4:0d:02: 75:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8C:66:4F:45:66:BE:A4:01:F0:70:E6:A1:EB:A2:F5:BB:FB:83:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/20966557-eff3-3d8a-a800-0556961c5bfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.224.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:33:2b:4b:c8:7c:0c:6d:aa:1a:08:6d:bc:71:31:2f:ff:f7: 45:2c:d3:e2:c3:fc:e2:62:9f:ef:bf:6a:07:ac:61:d3:a7:b3: 94:4a:37:e4:9c:ad:b4:fc:67:58:d4:58:1e:82:33:03:e8:8b: 7c:bf:6c:08:70:1b:74:50:b1:87:10:8a:ce:1d:2d:4d:52:a2: 30:b2:61:4b:2f:e6:7c:96:1b:be:61:fa:74:ba:7a:6e:b1:6b: 4d:bb:4a:84:30:8f:1b:29:a0:96:63:b6:3d:fd:42:0d:43:d5: b6:58:02:24:75:20:e2:3d:eb:bd:be:86:ff:35:1f:fa:e5:19: a3:f8:9b:b9:e7:2c:60:88:c9:e9:25:ed:71:78:85:3c:7e:65: 30:35:46:07:6d:ce:42:93:8b:04:19:83:dc:9c:fb:e0:36:c5: a0:71:16:29:8f:d2:04:53:03:e0:9b:fd:a1:18:e9:ee:e3:25: d8:fc:c2:bd:e9:c8:c0:52:cb:c9:45:60:a0:a2:7a:ec:e1:0b: d2:dc:23:7c:47:92:7d:f5:ea:11:d0:68:3c:2c:25:24:85:c6: 76:c8:4d:ab:ad:e2:7b:cb:8c:b7:04:8a:07:84:97:c2:5d:61: c4:2a:99:39:28:af:09:b0:83:77:03:d3:53:89:68:aa:5d:07: a5:ed:e0:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1WxcqP6pOgklYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk OTZiMmYxZWEtNzI4Yy00MjVkLTg1OTEtYTM4NmMzOWI1YWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgy/evUFxYraKyg48sOJU9nrNPqa/+4W/H0JZ 24m8XWg0JYVSBvzZduBc6yCzZsGcqKBmFQ5O9de64PsYjuK67zU9nlBcQqqHDZ4N 1RtEvwQt5PskCzXtf4gezKW7s6db8knyFxuQsuqnanYjYJhLAedvCgPEZ15YP6dS F8X4iP4lVhVhwiz+oJx2z6ooJx+Jlbe9fmj/tItDjYA0PNkqzFKIZJ7iVUyP138B bQ3TpBxFyJMQT6GXqlig/xQj/84rZMr53C394EPsxGMi07gkvxxmCcvF80vNy0bT Sd56G+b6zRM4LNjqP9eFy9Gk8C/FcmvzZufRFvtMvwn0DQJ1ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqMZk9FZr6kAfBw5qHrovW7+4PNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvMjA5NjY1NTctZWZmMy0z ZDhhLWE4MDAtMDU1Njk2MWM1YmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOAeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkzK0vIfAxtqhoIbbxxMS//90Us0+LD/OJin++/agesYdOns5RKN+Sc rbT8Z1jUWB6CMwPoi3y/bAhwG3RQsYcQis4dLU1SojCyYUsv5nyWG75h+nS6em6x a027SoQwjxspoJZjtj39Qg1D1bZYAiR1IOI9672+hv81H/rlGaP4m7nnLGCIyekl 7XF4hTx+ZTA1RgdtzkKTiwQZg9yc++A2xaBxFimP0gRTA+Cb/aEY6e7jJdj8wr3p yMBSy8lFYKCieuzhC9LcI3xHkn316hHQaDwsJSSFxnbITaut4nvLjLcEigeEl8Jd YcQqmTkorwmwg3cD01OJaKpdB6Xt4Eo= -----END CERTIFICATE-----Generated at Fri Mar 13 10:59:35 2026 by rpki-client