$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f005327f-246f-30ed-8e50-a91fdd190a16.roa File: f005327f-246f-30ed-8e50-a91fdd190a16.roa (raw, json) Hash identifier: l5jWGeiJWqYL7TbjlVC4Q4XWQ5KlZPZSZs2xSykEWVo= Subject key identifier: BB:EE:E5:2D:56:84:81:E0:A8:39:DE:E2:43:0F:53:2E:80:CA:32:F2 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584D20AF57A996802301CC914880 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f005327f-246f-30ed-8e50-a91fdd190a16.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 213122 IP address blocks: 104.249.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:57:a9:96:80:23:01:cc:91:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=cfb4a760-3ab1-4bac-9b5a-778cd91c2ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bc:1d:ab:d7:21:31:3a:7c:e8:e5:7f:2c:a9: ad:91:bc:60:4e:7e:d1:53:a0:8c:b3:f8:0b:b8:b3: d1:1e:08:5f:ca:2a:49:75:cf:b6:17:01:52:ab:cf: bd:4a:ea:2e:54:ae:69:2a:03:2d:e0:bf:65:d2:49: a1:7b:ea:1d:43:ad:05:0c:fe:80:61:c1:40:48:3a: 4a:cd:58:21:d1:63:af:56:af:89:73:43:4c:2d:1c: 86:2c:9e:2d:f2:55:8a:6e:6b:d4:5d:8f:10:59:a9: 72:d2:25:16:5a:3c:f7:68:92:e9:72:d6:57:6e:9a: b4:ac:65:01:51:87:14:dd:b1:1d:3c:0e:67:da:e6: 81:1c:ec:b9:0f:38:c8:4e:c1:21:3f:72:80:4f:fa: a0:23:7c:37:3e:5e:bd:09:6b:81:b0:2e:8c:9e:3e: 12:2e:dd:04:59:d2:f6:77:ef:43:c1:5d:53:50:dc: 9d:77:7f:75:b1:b1:2a:be:3a:cc:a1:e2:04:3b:a4: c4:62:45:8f:28:c6:7f:00:b7:11:2f:de:44:34:f7: 01:43:11:fa:65:b4:aa:82:bb:cf:99:3b:1f:be:18: 63:28:13:a3:71:1b:90:cf:db:2f:50:33:16:e2:2a: ce:c9:c7:26:a7:83:bb:8f:99:bf:83:26:8b:87:d2: 6c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:EE:E5:2D:56:84:81:E0:A8:39:DE:E2:43:0F:53:2E:80:CA:32:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f005327f-246f-30ed-8e50-a91fdd190a16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.249.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:e8:61:61:bd:b6:b9:4f:1a:ff:59:97:ac:37:52:16:35:17: 39:be:98:f7:5b:1f:6d:a3:77:35:10:17:eb:76:bd:06:c5:35: 34:2d:fa:d9:00:8c:4c:51:be:9f:42:09:57:7b:23:fd:a7:ef: 45:6d:78:93:f5:40:b3:6b:59:14:9f:7f:c4:1e:73:8d:6d:fe: 8d:73:1b:63:d6:c8:53:ff:92:a3:9e:73:fa:c1:39:f5:77:02: 9b:c1:d6:3c:40:b0:4a:38:80:ab:64:86:bc:63:a5:b2:b9:3b: fc:ee:ca:f5:85:66:03:97:88:47:c4:7c:15:bd:a1:a8:4c:28: 4a:da:5e:9d:2f:87:88:33:92:6b:ba:db:c8:28:05:81:68:8f: 3f:49:33:09:02:99:93:09:ce:d8:16:ca:51:1c:6a:9c:f5:65: ee:a7:3d:d2:39:38:f3:ef:9b:bd:a6:1c:71:47:4c:b4:9d:34: ff:c6:f0:68:e9:28:be:9f:b5:7d:71:10:f1:95:60:98:df:3d: a8:7e:b1:6e:bd:07:18:8e:58:49:23:dd:74:3a:90:75:9f:26: 4e:cf:b7:47:a7:f4:09:69:80:df:ad:b1:2c:1e:97:2f:2e:b3: 5f:89:0e:c8:65:f3:10:f5:c9:61:d9:26:64:bc:f9:f9:f6:e2: ec:65:e7:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1eploAjAcyRSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk Y2ZiNGE3NjAtM2FiMS00YmFjLTliNWEtNzc4Y2Q5MWMyYWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7wdq9chMTp86OV/LKmtkbxgTn7RU6CMs/gL uLPRHghfyipJdc+2FwFSq8+9SuouVK5pKgMt4L9l0kmhe+odQ60FDP6AYcFASDpK zVgh0WOvVq+Jc0NMLRyGLJ4t8lWKbmvUXY8QWaly0iUWWjz3aJLpctZXbpq0rGUB UYcU3bEdPA5n2uaBHOy5DzjITsEhP3KAT/qgI3w3Pl69CWuBsC6Mnj4SLt0EWdL2 d+9DwV1TUNydd391sbEqvjrMoeIEO6TEYkWPKMZ/ALcRL95ENPcBQxH6ZbSqgrvP mTsfvhhjKBOjcRuQz9svUDMW4irOyccmp4O7j5m/gyaLh9JsNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvu5S1WhIHgqDne4kMPUy6AyjLyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvZjAwNTMyN2YtMjQ2Zi0z MGVkLThlNTAtYTkxZmRkMTkwYTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILoYWG9trlPGv9Zl6w3UhY1Fzm+mPdbH22jdzUQF+t2vQbFNTQt+tkA jExRvp9CCVd7I/2n70VteJP1QLNrWRSff8Qec41t/o1zG2PWyFP/kqOec/rBOfV3 ApvB1jxAsEo4gKtkhrxjpbK5O/zuyvWFZgOXiEfEfBW9oahMKEraXp0vh4gzkmu6 28goBYFojz9JMwkCmZMJztgWylEcapz1Ze6nPdI5OPPvm72mHHFHTLSdNP/G8Gjp KL6ftX1xEPGVYJjfPah+sW69BxiOWEkj3XQ6kHWfJk7Pt0en9AlpgN+tsSwely8u s1+JDshl8xD1yWHZJmS8+fn24uxl52k= -----END CERTIFICATE-----Generated at Fri Mar 13 13:32:50 2026 by rpki-client