$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/42afc059-5ef8-345d-9eb0-509cf5658724.roa File: 42afc059-5ef8-345d-9eb0-509cf5658724.roa (raw, json) Hash identifier: Psl5Yv68EYSllotHWtR2lD97HtWL6JeoPuqwy6eb2AQ= Subject key identifier: 6C:37:9B:45:7E:FE:93:D2:4A:59:0D:38:54:5A:D4:85:A4:A8:D2:94 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584D20AF55D874F6FB15FE994280 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/42afc059-5ef8-345d-9eb0-509cf5658724.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 931 IP address blocks: 104.249.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:55:d8:74:f6:fb:15:fe:99:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=7d6d8b43-3d86-4872-ab45-67a7be92a7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:88:bf:bb:6c:b8:27:85:74:a4:e6:35:b6:c9: 93:1d:85:89:b0:f4:0f:b8:b7:42:41:73:65:4c:16: 5e:17:88:1d:2c:e6:da:6b:b2:7a:6d:9c:35:4d:d9: 63:09:34:c5:2e:de:bb:29:33:34:2b:55:85:b0:99: f3:bc:9d:e1:62:6d:b7:ab:3e:ff:4e:0b:85:2a:c9: 06:fb:c9:78:23:2b:a5:a8:59:b9:aa:0d:12:be:8b: 58:99:be:4b:dd:a8:63:aa:1b:0f:18:cd:f6:78:e5: c0:79:8e:73:96:53:e8:6e:8b:4c:74:b1:a7:ec:ec: 6b:30:1f:59:9f:43:d1:07:4a:34:a7:12:f2:38:a0: d2:48:99:5f:13:09:88:f8:37:b3:1e:a8:1f:e3:66: 76:c7:04:57:23:d2:a4:6d:75:6f:a2:55:b1:21:dd: f2:1b:cd:fe:f9:67:20:4a:3f:76:a8:f8:7c:90:2e: 79:69:31:84:35:ee:b1:4b:69:70:fb:a9:60:d9:b8: b5:65:99:1f:9f:7a:63:54:19:fb:67:a7:e4:30:42: 0c:b6:73:0d:4f:36:62:97:44:6c:01:ae:49:eb:21: 5e:98:0f:8e:56:af:77:76:0a:1c:93:c5:03:41:e0: a6:31:42:fb:f1:03:ed:cd:b7:8e:60:78:77:eb:b1: 0d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:37:9B:45:7E:FE:93:D2:4A:59:0D:38:54:5A:D4:85:A4:A8:D2:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/42afc059-5ef8-345d-9eb0-509cf5658724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.249.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:c6:59:0f:a1:dd:c3:f3:d6:13:9e:37:e2:ce:9d:72:6f:7c: 8c:cf:c1:af:10:1d:50:9f:7a:1d:1a:d7:fd:ea:a3:e2:37:a0: 4c:27:87:72:2f:7b:de:d5:8c:6b:7a:31:e1:d7:c8:95:f5:8d: 78:76:ca:20:5d:f4:24:c6:8a:00:48:a7:72:7b:bc:60:eb:be: b3:cd:17:2b:9e:c0:4b:ff:80:b3:37:5d:a5:e7:fa:b7:b3:33: 4c:29:38:4e:63:9b:20:2f:fb:11:01:94:fc:46:b0:fb:52:fe: bb:8b:d4:b6:80:fe:ac:a8:5b:78:85:72:2e:12:61:d3:63:b3: 2e:cf:44:fd:3c:89:e6:a4:07:6e:d1:c4:54:50:29:7e:9f:e5: 94:4b:92:b9:de:4a:09:7f:b2:b4:d1:c1:6d:3b:c6:f1:a4:c5: 76:db:08:12:81:e0:ad:df:99:dd:ea:3c:6c:2e:b1:d8:31:23: 0b:7e:5a:66:c4:62:17:b1:03:83:d8:90:b3:ca:52:5c:f5:67: ab:a8:89:1d:0b:19:19:62:18:bf:74:0a:e7:96:fa:85:bd:e1: 71:1b:67:9b:09:63:af:0a:a4:e0:9d:70:37:2d:63:ce:10:c4: 7b:e5:84:8d:2c:bd:83:ae:6f:88:03:c7:91:9d:ed:fe:c9:58: 93:6d:22:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1XYdPb7Ff6ZQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk N2Q2ZDhiNDMtM2Q4Ni00ODcyLWFiNDUtNjdhN2JlOTJhN2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4i/u2y4J4V0pOY1tsmTHYWJsPQPuLdCQXNl TBZeF4gdLObaa7J6bZw1TdljCTTFLt67KTM0K1WFsJnzvJ3hYm23qz7/TguFKskG +8l4IyulqFm5qg0SvotYmb5L3ahjqhsPGM32eOXAeY5zllPobotMdLGn7OxrMB9Z n0PRB0o0pxLyOKDSSJlfEwmI+DezHqgf42Z2xwRXI9KkbXVvolWxId3yG83++Wcg Sj92qPh8kC55aTGENe6xS2lw+6lg2bi1ZZkfn3pjVBn7Z6fkMEIMtnMNTzZil0Rs Aa5J6yFemA+OVq93dgock8UDQeCmMUL78QPtzbeOYHh367ENgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGw3m0V+/pPSSlkNOFRa1IWkqNKUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNDJhZmMwNTktNWVmOC0z NDVkLTllYjAtNTA5Y2Y1NjU4NzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/GWQ+h3cPz1hOeN+LOnXJvfIzPwa8QHVCfeh0a1/3qo+I3oEwnh3Iv e97VjGt6MeHXyJX1jXh2yiBd9CTGigBIp3J7vGDrvrPNFyuewEv/gLM3XaXn+rez M0wpOE5jmyAv+xEBlPxGsPtS/ruL1LaA/qyoW3iFci4SYdNjsy7PRP08ieakB27R xFRQKX6f5ZRLkrneSgl/srTRwW07xvGkxXbbCBKB4K3fmd3qPGwusdgxIwt+WmbE YhexA4PYkLPKUlz1Z6uoiR0LGRliGL90CueW+oW94XEbZ5sJY68KpOCdcDctY84Q xHvlhI0svYOub4gDx5Gd7f7JWJNtIv8= -----END CERTIFICATE-----Generated at Fri Mar 13 10:59:40 2026 by rpki-client