$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c4153b1-d80f-31dc-8f71-7a68dcca115f.roa File: 8c4153b1-d80f-31dc-8f71-7a68dcca115f.roa (raw, json) Hash identifier: xSKV7jEEcU4Dhfjb5yJ0XKSRiiJXgfeHSNIhEo9XR7Y= Subject key identifier: 85:AF:D6:04:29:86:F9:E3:D2:44:C0:B2:05:36:4E:F7:F1:8B:5B:75 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D1D15FCFB289342F5CE12F3E0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c4153b1-d80f-31dc-8f71-7a68dcca115f.roa Signing time: Mon 09 Mar 2026 18:04:19 +0000 ROA not before: Mon 09 Mar 2026 18:04:19 +0000 ROA not after: Sun 07 Jun 2026 18:04:19 +0000 asID: 398781 IP address blocks: 104.164.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:15:fc:fb:28:93:42:f5:ce:12:f3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 9 18:04:19 2026 GMT Not After : Jun 7 18:04:19 2026 GMT Subject: CN=2a5b13b1-b396-43ff-8aec-20e58ff326b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c8:ef:f2:9a:e8:53:73:75:e0:90:b1:74:23: 54:71:f5:af:25:01:fa:d6:70:77:d9:af:24:23:12: fc:4e:23:36:b7:2c:8b:4b:78:1b:7d:51:bd:12:7d: a3:20:52:15:2f:e5:1f:90:f0:0c:7e:98:16:05:5c: 1d:1a:1e:66:f5:f9:0c:c7:90:98:cc:6a:25:0c:80: 9d:ed:2d:b3:2f:27:a4:09:09:b2:2c:d4:c6:95:aa: 42:e1:20:30:41:69:55:e5:74:f8:40:d2:93:83:17: 23:fe:52:f4:c7:e0:02:19:3b:7e:37:ef:d3:dd:d6: b6:72:cc:47:3d:e0:d9:cc:e2:66:66:aa:ea:81:c7: 84:21:4f:ea:84:dd:f1:2e:41:90:c5:39:4f:e9:00: 6d:79:c1:5a:5b:94:39:29:19:c6:02:f3:b9:65:40: 20:11:b7:bf:27:e4:2c:db:5e:ca:b1:b8:86:3e:68: a4:f4:46:3c:40:a8:5c:d6:d0:0c:06:52:8d:9b:6c: 02:0b:79:62:f3:cc:f3:80:d1:06:b4:16:21:48:42: b8:dc:42:ac:21:be:e4:57:08:01:9f:43:38:f7:2d: 03:ff:f7:e2:bc:08:aa:2b:30:f4:68:2b:e1:42:8f: 56:27:44:a5:0c:d7:6f:c4:03:d6:ff:fc:12:02:b8: 5b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AF:D6:04:29:86:F9:E3:D2:44:C0:B2:05:36:4E:F7:F1:8B:5B:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c4153b1-d80f-31dc-8f71-7a68dcca115f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.164.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:e8:29:72:ff:c0:83:eb:7d:2f:82:ea:11:a6:ea:c4:b0:e2: b6:5d:0e:10:e2:a8:0d:85:3a:ba:18:8d:d7:44:6f:d3:b1:ce: ee:a9:aa:23:86:c3:ba:ec:1f:23:f5:53:90:52:6b:3a:d5:27: 56:39:8d:b3:fa:09:89:2b:98:22:bb:3a:46:c1:c0:07:bc:0c: 08:a6:8e:d5:c6:3a:f5:c9:59:10:68:de:2b:b6:9d:31:2a:21: e7:c2:2f:d8:c2:68:2d:4c:bf:9b:eb:26:11:2e:6b:7f:07:b4: b7:72:e6:9c:ba:80:dd:bf:e2:dc:af:e6:90:a2:bc:b2:8c:33: a7:2c:64:0e:f0:ff:cb:0a:fe:75:e1:b1:3c:e6:fc:30:47:08: 01:b0:79:04:b3:1e:8b:56:6f:54:76:6d:8e:4f:cc:4d:ea:ec: 49:09:7f:ff:b1:bd:5e:c2:56:4f:e0:04:71:eb:d6:5c:12:fc: 91:86:9c:19:72:98:a9:4e:c7:ce:c3:af:80:c2:d5:32:02:04: 5b:df:eb:39:05:cf:2d:a1:cb:9b:53:8d:e1:97:d7:a4:4f:bb: 75:82:f0:6d:b0:d5:82:d0:f8:7f:87:7f:da:85:90:69:d6:f0: 10:31:1f:b4:30:fc:3e:b4:6a:13:1a:4b:0d:11:de:52:49:42: e9:44:67:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0dFfz7KJNC9c4S8+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMwOTE4MDQxOVoXDTI2MDYwNzE4MDQxOVowLzEtMCsGA1UEAxMk MmE1YjEzYjEtYjM5Ni00M2ZmLThhZWMtMjBlNThmZjMyNmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8jv8proU3N14JCxdCNUcfWvJQH61nB32a8k IxL8TiM2tyyLS3gbfVG9En2jIFIVL+UfkPAMfpgWBVwdGh5m9fkMx5CYzGolDICd 7S2zLyekCQmyLNTGlapC4SAwQWlV5XT4QNKTgxcj/lL0x+ACGTt+N+/T3da2csxH PeDZzOJmZqrqgceEIU/qhN3xLkGQxTlP6QBtecFaW5Q5KRnGAvO5ZUAgEbe/J+Qs 217KsbiGPmik9EY8QKhc1tAMBlKNm2wCC3li88zzgNEGtBYhSEK43EKsIb7kVwgB n0M49y0D//fivAiqKzD0aCvhQo9WJ0SlDNdvxAPW//wSArhbNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWv1gQphvnj0kTAsgU2Tvfxi1t1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGM0MTUzYjEtZDgwZi0z MWRjLThmNzEtN2E2OGRjY2ExMTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKS9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/oKXL/wIPrfS+C6hGm6sSw4rZdDhDiqA2FOroYjddEb9Oxzu6pqiOG w7rsHyP1U5BSazrVJ1Y5jbP6CYkrmCK7OkbBwAe8DAimjtXGOvXJWRBo3iu2nTEq IefCL9jCaC1Mv5vrJhEua38HtLdy5py6gN2/4tyv5pCivLKMM6csZA7w/8sK/nXh sTzm/DBHCAGweQSzHotWb1R2bY5PzE3q7EkJf/+xvV7CVk/gBHHr1lwS/JGGnBly mKlOx87Dr4DC1TICBFvf6zkFzy2hy5tTjeGX16RPu3WC8G2w1YLQ+H+Hf9qFkGnW 8BAxH7Qw/D60ahMaSw0R3lJJQulEZ9Q= -----END CERTIFICATE-----Generated at Mon Mar 23 18:50:01 2026 by rpki-client