$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8df1d45d-f0f6-331a-aa48-9c48058a3859.roa File: 8df1d45d-f0f6-331a-aa48-9c48058a3859.roa (raw, json) Hash identifier: wZbCxrIix4exSnLKhv1C6oUlIJj7A/P+wPYYFmPMN5c= Subject key identifier: A2:A0:11:A3:B9:55:5C:6A:56:37:6A:0C:B9:22:8C:53:C6:62:DB:72 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584D20AF5798CBB9AB3E4454B400 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8df1d45d-f0f6-331a-aa48-9c48058a3859.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 213122 IP address blocks: 104.249.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:57:98:cb:b9:ab:3e:44:54:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=ddcfe777-c648-4403-9d5f-5193bdc7a00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d4:36:4c:23:aa:46:5a:ce:1c:ff:70:59:cc: b2:c5:35:2b:db:24:16:26:04:d3:ac:13:0e:cc:87: 8e:22:ab:f0:09:12:8a:14:d5:9b:36:4e:fb:45:3c: 45:87:40:eb:de:44:da:40:f4:e1:c8:85:db:0e:53: da:5b:77:70:24:8c:8d:36:ea:ae:59:90:1b:e4:01: 75:33:0e:e5:7b:c7:b8:f0:f6:56:0c:ef:6c:4e:5e: 53:93:fb:ea:dc:00:de:ce:63:75:ba:34:b8:32:f3: ee:6f:d7:18:75:9d:37:52:ed:c3:47:ae:fd:0b:12: e5:e2:43:53:58:94:dc:42:28:34:83:fe:7d:19:a1: 4e:b0:2b:15:91:a1:5d:6a:09:91:47:ba:3f:61:15: 38:f1:f2:f7:54:d5:1e:b5:55:4f:a5:11:00:7c:54: de:2c:d1:6e:ad:b6:57:65:19:2c:d0:25:4b:d3:eb: e3:25:b7:c5:85:5e:1a:71:5d:11:66:5c:a5:df:13: dd:28:05:d2:7c:9f:9a:67:b6:f5:1b:32:f2:a2:d9: 2e:7d:5d:9f:08:17:ca:12:ef:85:3f:c5:da:10:41: eb:d5:6c:7f:72:5a:f0:2c:f1:1e:3d:55:66:ac:f7: f8:89:5e:57:6b:8c:1b:1f:f5:be:89:39:db:d8:1c: 91:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A0:11:A3:B9:55:5C:6A:56:37:6A:0C:B9:22:8C:53:C6:62:DB:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8df1d45d-f0f6-331a-aa48-9c48058a3859.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.249.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:de:02:d5:63:a4:9c:6c:36:38:c8:ea:8d:c2:a6:59:46:a7: 59:5b:4c:f3:fa:84:ec:f4:ec:4c:61:ae:3e:42:df:ad:73:bf: 98:5c:df:65:e5:35:bc:da:a0:25:df:de:59:1b:8f:6c:89:1a: 54:62:2a:cf:55:31:f6:cb:89:de:cc:ee:2d:e7:39:96:0d:8f: e5:4e:4a:06:f2:15:07:a4:2f:92:9e:48:32:03:04:c1:41:3d: 1f:ca:67:88:19:da:30:43:b2:d2:c9:34:d2:0f:13:e8:fe:0d: b4:9d:2b:ea:6b:a3:4d:11:07:86:be:b9:fe:09:b2:ce:9e:fb: 68:9a:a1:68:5f:d4:ca:d6:12:95:71:4b:e0:f1:e9:94:fd:47: b9:1b:b2:d5:11:29:d1:70:ad:58:74:19:83:a4:6a:c6:a2:ad: 4d:e1:b6:2c:76:8f:ae:d0:8a:17:a7:17:5c:fb:58:ae:52:02: 3a:2b:9b:9f:ae:c7:00:f1:51:78:65:00:7d:13:19:1c:31:62: b8:e4:18:a3:7c:87:ce:53:64:b2:6e:31:76:da:ee:80:03:c9: 94:7f:f9:25:cf:55:73:19:50:f3:fc:b5:cb:b8:49:d0:35:ae: ca:3b:a7:8e:00:9f:59:bb:8e:33:31:6a:cf:55:d8:98:0b:30: 69:f7:f3:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1eYy7mrPkRUtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk ZGRjZmU3NzctYzY0OC00NDAzLTlkNWYtNTE5M2JkYzdhMDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNQ2TCOqRlrOHP9wWcyyxTUr2yQWJgTTrBMO zIeOIqvwCRKKFNWbNk77RTxFh0Dr3kTaQPThyIXbDlPaW3dwJIyNNuquWZAb5AF1 Mw7le8e48PZWDO9sTl5Tk/vq3ADezmN1ujS4MvPub9cYdZ03Uu3DR679CxLl4kNT WJTcQig0g/59GaFOsCsVkaFdagmRR7o/YRU48fL3VNUetVVPpREAfFTeLNFurbZX ZRks0CVL0+vjJbfFhV4acV0RZlyl3xPdKAXSfJ+aZ7b1GzLyotkufV2fCBfKEu+F P8XaEEHr1Wx/clrwLPEePVVmrPf4iV5Xa4wbH/W+iTnb2ByReQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKgEaO5VVxqVjdqDLkijFPGYttyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvOGRmMWQ0NWQtZjBmNi0z MzFhLWFhNDgtOWM0ODA1OGEzODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHeAtVjpJxsNjjI6o3CpllGp1lbTPP6hOz07Exhrj5C361zv5hc32Xl NbzaoCXf3lkbj2yJGlRiKs9VMfbLid7M7i3nOZYNj+VOSgbyFQekL5KeSDIDBMFB PR/KZ4gZ2jBDstLJNNIPE+j+DbSdK+pro00RB4a+uf4Jss6e+2iaoWhf1MrWEpVx S+Dx6ZT9R7kbstURKdFwrVh0GYOkasairU3htix2j67QihenF1z7WK5SAjorm5+u xwDxUXhlAH0TGRwxYrjkGKN8h85TZLJuMXba7oADyZR/+SXPVXMZUPP8tcu4SdA1 rso7p44An1m7jjMxas9V2JgLMGn383s= -----END CERTIFICATE-----Generated at Fri Mar 13 13:33:30 2026 by rpki-client