$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a76a38d7-efa4-3450-9774-2046e431cfb8.roa File: a76a38d7-efa4-3450-9774-2046e431cfb8.roa (raw, json) Hash identifier: wmNM2fmoQ5dAtEKWXTsInGbaGKDjMHLKu8XsrdE9sSY= Subject key identifier: C7:D0:5D:83:BF:45:97:A5:4C:3A:CE:61:BB:76:07:60:81:F8:EB:61 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584D20AF56022E8BC881C1281480 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a76a38d7-efa4-3450-9774-2046e431cfb8.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 931 IP address blocks: 104.249.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:56:02:2e:8b:c8:81:c1:28:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=49da0b1c-07db-41b6-9056-009fc4c44769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:01:6d:6e:e5:8d:16:3f:05:7a:ec:bd:ab:ae: a8:ad:58:9c:45:bc:d5:65:78:0a:07:b8:9f:a2:98: f4:5f:f3:1c:71:b8:dd:36:54:72:10:3f:53:34:13: 90:6d:77:fa:26:57:f7:33:20:39:0f:48:d3:bb:00: 1e:7e:fe:51:bf:24:cf:a3:89:0e:19:73:9d:02:bb: f0:fa:7f:e0:83:a1:e0:c2:82:6c:4f:50:0d:d1:a2: 64:3b:13:19:0d:82:4d:ab:c6:b1:99:3a:05:7b:1e: f3:a7:70:a6:87:d4:a4:35:b1:23:e5:f3:b9:96:4d: b7:36:a0:b3:d3:34:54:67:92:bc:6f:9f:59:61:5e: ef:5b:1f:c6:e8:6b:5e:0c:63:53:f3:5d:dd:2a:a5: 4f:c6:a7:cc:6a:5d:2e:25:78:ee:64:ba:6d:a7:16: 32:83:a5:fa:b3:6d:b3:6f:5f:a3:9f:1d:d2:9a:07: d5:02:2e:a3:1e:33:18:5f:d2:f1:3a:88:95:d8:13: b5:7e:c3:73:ac:96:39:3a:1d:5d:c4:51:e0:39:90: 68:df:1f:21:37:82:30:35:f4:25:24:41:0d:63:34: 05:2f:b2:b6:77:f9:1b:ec:a4:f8:f0:19:b3:b0:3c: d7:49:e6:83:59:ba:1a:2a:9b:ac:ee:87:84:75:24: 1b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D0:5D:83:BF:45:97:A5:4C:3A:CE:61:BB:76:07:60:81:F8:EB:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a76a38d7-efa4-3450-9774-2046e431cfb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.249.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:5f:dc:0b:d0:87:c3:f1:1c:32:19:4c:73:f1:53:6a:9e:36: 11:c6:b6:29:7e:67:81:b7:8e:d0:ec:1b:18:68:24:09:fc:f8: 21:3d:9e:d0:e1:00:90:25:9b:88:d7:45:06:78:9a:5d:49:2c: 2a:0b:20:37:58:21:28:e3:a3:82:a2:5d:e6:61:bc:b1:26:20: eb:59:bf:ad:2c:86:be:2a:2b:77:87:c0:74:a9:30:56:ac:66: e6:7c:56:06:dd:9c:bd:51:10:32:98:86:a5:77:6a:1c:af:95: 5b:29:44:ae:5a:e2:5e:62:99:b1:8d:4e:7f:c8:63:5e:0d:4d: bf:1b:9c:19:14:43:ab:da:ff:a3:95:52:35:22:7f:2f:72:83: 5b:43:c0:e4:fe:6c:9b:6d:11:d8:94:dd:33:d4:6b:31:c5:51: e2:95:79:59:5f:58:8c:ae:ff:5e:d5:98:4b:0c:a1:35:b7:5f: 5c:48:8a:8e:b3:56:de:a8:f9:9f:ba:9c:b9:b4:41:75:50:18: 12:e1:e1:4e:f4:b6:ad:18:48:f4:e9:42:42:26:82:a5:0c:f6: e9:e2:6d:24:60:5e:1c:ad:12:51:37:7a:d7:6f:2b:0e:a8:ad: 96:43:a4:56:42:88:03:b8:5f:5a:34:59:54:14:1e:c7:1b:e7: c6:3d:28:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1YCLovIgcEoFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk NDlkYTBiMWMtMDdkYi00MWI2LTkwNTYtMDA5ZmM0YzQ0NzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQFtbuWNFj8Feuy9q66orVicRbzVZXgKB7if opj0X/MccbjdNlRyED9TNBOQbXf6Jlf3MyA5D0jTuwAefv5RvyTPo4kOGXOdArvw +n/gg6HgwoJsT1AN0aJkOxMZDYJNq8axmToFex7zp3Cmh9SkNbEj5fO5lk23NqCz 0zRUZ5K8b59ZYV7vWx/G6GteDGNT813dKqVPxqfMal0uJXjuZLptpxYyg6X6s22z b1+jnx3SmgfVAi6jHjMYX9LxOoiV2BO1fsNzrJY5Oh1dxFHgOZBo3x8hN4IwNfQl JEENYzQFL7K2d/kb7KT48BmzsDzXSeaDWboaKpus7oeEdSQbAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfQXYO/RZelTDrOYbt2B2CB+OthMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYTc2YTM4ZDctZWZhNC0z NDUwLTk3NzQtMjA0NmU0MzFjZmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtf3AvQh8PxHDIZTHPxU2qeNhHGtil+Z4G3jtDsGxhoJAn8+CE9ntDh AJAlm4jXRQZ4ml1JLCoLIDdYISjjo4KiXeZhvLEmIOtZv60shr4qK3eHwHSpMFas ZuZ8VgbdnL1REDKYhqV3ahyvlVspRK5a4l5imbGNTn/IY14NTb8bnBkUQ6va/6OV UjUify9yg1tDwOT+bJttEdiU3TPUazHFUeKVeVlfWIyu/17VmEsMoTW3X1xIio6z Vt6o+Z+6nLm0QXVQGBLh4U70tq0YSPTpQkImgqUM9unibSRgXhytElE3etdvKw6o rZZDpFZCiAO4X1o0WVQUHscb58Y9KFg= -----END CERTIFICATE-----Generated at Fri Mar 13 11:01:36 2026 by rpki-client