$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2ca1fafd-5784-383a-86a2-45ab028896d0.roa File: 2ca1fafd-5784-383a-86a2-45ab028896d0.roa (raw, json) Hash identifier: TLC38rkhnrNfkMVEDzcRabhsNoD4xNGNthfLCCAcPQw= Subject key identifier: A0:8B:16:1A:35:88:61:58:CB:18:89:13:ED:FC:BF:1F:7F:C0:B4:8A Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584D20AF55812C52F81DACDE3C80 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2ca1fafd-5784-383a-86a2-45ab028896d0.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 931 IP address blocks: 104.224.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:55:81:2c:52:f8:1d:ac:de:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=f28a5c81-fcbb-45b3-8263-42a58ad4a30b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:29:ae:90:2b:7c:c9:41:b8:3c:ba:3a:9f:11: 39:13:fa:8e:20:5a:04:f5:c3:50:5f:c0:be:2f:58: 1f:d9:71:98:70:f3:63:bc:5a:8a:de:bc:a0:bc:98: 83:cb:07:d4:8b:2e:3e:66:c8:a0:38:64:76:d3:62: 4b:31:0f:a8:99:2b:c6:57:f1:37:46:ed:65:d2:0b: 4b:5a:ef:f0:5f:84:63:5d:e9:33:42:9d:c8:dd:33: 29:3b:d4:8e:c8:c6:db:c0:74:88:9d:61:7f:23:87: 62:33:f6:67:9b:bb:90:04:84:ca:6d:f5:78:50:76: 8f:4a:52:14:79:12:7d:10:a8:12:28:b7:f4:29:e3: 1b:51:3b:09:20:c6:f8:84:a0:5b:ac:52:c9:78:dd: 55:32:69:01:13:ef:18:73:7b:7c:ce:13:53:08:ed: de:b5:37:36:4b:df:d8:5f:83:b8:25:eb:a1:04:2c: 4a:36:87:76:0b:28:b6:27:ff:76:3c:64:ca:ab:e6: 3b:9c:1f:f0:cd:79:ea:17:3b:2e:df:7e:21:01:83: 23:91:f5:fd:eb:cf:2f:63:cc:8e:f0:66:25:55:77: 6e:da:7b:5d:45:28:cb:1f:c3:0b:39:27:1e:76:53: bc:13:a1:68:64:9b:9e:e7:d2:95:f7:8c:c9:f9:5a: ec:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8B:16:1A:35:88:61:58:CB:18:89:13:ED:FC:BF:1F:7F:C0:B4:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2ca1fafd-5784-383a-86a2-45ab028896d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.224.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:0f:86:3b:25:1d:c3:f5:b2:ef:99:b2:bf:59:77:08:00:a3: 14:c6:df:89:19:5b:ea:e6:d8:7f:9e:a2:24:71:a1:24:4f:22: 0c:49:32:0b:da:51:d5:ce:d1:bd:21:b5:24:b2:7d:0b:69:58: da:71:7d:5a:67:29:51:65:d3:b4:1f:aa:f6:93:53:43:93:1b: d1:27:01:74:87:22:62:e7:12:23:ee:e7:d0:ba:48:e9:a0:b3: 68:6c:14:d6:c1:35:25:db:a9:01:a9:24:cf:5b:5d:f7:cb:f8: 2e:37:98:65:ce:4c:37:92:0d:0b:5e:83:c8:c1:06:e7:03:3c: a4:63:60:34:e4:bd:80:62:e5:c6:27:06:18:f6:ad:59:35:36: 7c:b6:f6:98:d2:8a:bb:45:20:6a:cc:d1:d9:e9:f9:0c:bb:64: c9:1f:f0:b5:0c:b2:69:86:5f:ad:a5:3b:ff:da:8c:67:8c:c6: 5e:99:0d:ae:84:ba:12:e3:f8:f5:98:92:7e:4a:7c:33:21:bb: ca:20:b9:d5:fc:47:cf:fb:77:1a:b5:c5:10:8e:19:ec:66:88: 53:ce:e2:ba:57:ab:db:c2:b5:8d:6d:ca:c5:41:70:0e:41:5d: 99:94:12:d3:ac:9e:5f:5f:d1:4d:4c:33:ce:6f:1f:3f:8e:32: e7:ca:21:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1WBLFL4HazePIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk ZjI4YTVjODEtZmNiYi00NWIzLTgyNjMtNDJhNThhZDRhMzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgimukCt8yUG4PLo6nxE5E/qOIFoE9cNQX8C+ L1gf2XGYcPNjvFqK3rygvJiDywfUiy4+ZsigOGR202JLMQ+omSvGV/E3Ru1l0gtL Wu/wX4RjXekzQp3I3TMpO9SOyMbbwHSInWF/I4diM/Znm7uQBITKbfV4UHaPSlIU eRJ9EKgSKLf0KeMbUTsJIMb4hKBbrFLJeN1VMmkBE+8Yc3t8zhNTCO3etTc2S9/Y X4O4JeuhBCxKNod2Cyi2J/92PGTKq+Y7nB/wzXnqFzsu334hAYMjkfX9688vY8yO 8GYlVXdu2ntdRSjLH8MLOScedlO8E6FoZJue59KV94zJ+Vrs5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCLFho1iGFYyxiJE+38vx9/wLSKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvMmNhMWZhZmQtNTc4NC0z ODNhLTg2YTItNDVhYjAyODg5NmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoPhjslHcP1su+Zsr9ZdwgAoxTG34kZW+rm2H+eoiRxoSRPIgxJMgva UdXO0b0htSSyfQtpWNpxfVpnKVFl07QfqvaTU0OTG9EnAXSHImLnEiPu59C6SOmg s2hsFNbBNSXbqQGpJM9bXffL+C43mGXOTDeSDQteg8jBBucDPKRjYDTkvYBi5cYn Bhj2rVk1Nny29pjSirtFIGrM0dnp+Qy7ZMkf8LUMsmmGX62lO//ajGeMxl6ZDa6E uhLj+PWYkn5KfDMhu8ogudX8R8/7dxq1xRCOGexmiFPO4rpXq9vCtY1tysVBcA5B XZmUEtOsnl9f0U1MM85vHz+OMufKIf8= -----END CERTIFICATE-----Generated at Fri Mar 13 10:59:25 2026 by rpki-client