$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b518323f-d77d-3700-8a9f-3f8d4caf1987.roa File: b518323f-d77d-3700-8a9f-3f8d4caf1987.roa (raw, json) Hash identifier: xJvrPZOZZxV+K3CsbosGj5ok3Eue7fb+nKJal1g8sRo= Subject key identifier: AE:3B:78:E3:84:ED:BE:B5:F5:3B:D5:25:D0:4E:8E:57:DD:96:CB:57 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584CB121D0772F4C94C409D7AD00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b518323f-d77d-3700-8a9f-3f8d4caf1987.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 393886 IP address blocks: 104.253.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:d0:77:2f:4c:94:c4:09:d7:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=4c8f102d-a975-40b8-89de-583b7a9ffc11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d2:89:71:e8:66:4b:7a:b7:16:e8:35:64:71: 8a:e9:86:cc:3f:fe:2e:02:d5:b3:81:0a:92:52:d4: 56:8d:06:5a:f6:de:79:0e:91:b7:73:40:97:11:d5: 83:c4:a5:b3:ae:4e:87:af:54:92:5b:48:b3:39:b3: 16:4b:6c:51:3d:d1:b5:2c:ea:ce:cf:8d:33:3b:9b: 07:70:07:06:75:0d:57:e7:b4:b7:d1:9e:d5:36:a3: 3e:63:d6:e5:b4:33:bf:88:d2:04:25:33:ce:a5:a6: 69:43:89:77:78:e8:34:59:f1:d4:e7:b8:c5:96:49: 0b:11:f2:75:8d:34:14:d8:c2:33:68:34:5b:24:83: f5:05:59:cb:4e:34:4b:c3:3f:98:4a:c9:e0:3c:2e: a6:9a:af:77:a1:36:46:4f:74:7a:37:02:bb:75:23: b6:4e:eb:41:de:3d:de:3c:74:10:7e:1d:32:57:56: b0:02:c4:49:10:38:17:fc:ee:17:30:76:74:1e:b7: 3f:39:c4:7c:24:50:54:b0:58:34:66:06:3a:2d:18: 92:bb:b1:8f:cc:95:c3:45:e7:27:4d:76:37:31:ae: 18:37:10:db:ed:1b:c3:be:c1:3f:b6:c1:e1:f1:aa: 8c:6c:00:ba:be:00:89:38:0d:48:64:9f:7a:83:f6: 6e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3B:78:E3:84:ED:BE:B5:F5:3B:D5:25:D0:4E:8E:57:DD:96:CB:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b518323f-d77d-3700-8a9f-3f8d4caf1987.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:c1:46:a3:9e:19:4f:65:a2:c1:67:fc:51:73:bf:8b:6c:23: 2b:ea:d9:6e:60:e2:e2:57:8c:e1:24:4d:77:b2:42:3e:40:47: 0a:b5:40:0e:0d:b4:50:a5:da:5e:3b:78:5e:14:1a:26:5b:ec: 81:06:76:71:20:8b:11:4c:56:02:09:79:8a:05:49:d6:8c:15: 89:d8:3c:b8:a4:02:26:3f:7a:c4:6c:61:94:d5:24:dc:6d:43: b8:b2:a4:e1:4e:ab:34:64:25:ce:8a:e0:e3:04:f6:e2:82:fd: 60:8f:cd:78:59:c0:73:11:58:2f:ae:bd:e9:21:d9:05:42:5e: 7f:db:78:98:c9:35:de:2e:34:07:2f:2c:a3:ff:53:61:82:11: 29:ec:3f:8c:0a:cc:02:81:d1:ce:91:7f:5e:6d:99:3b:36:64: dd:37:36:93:5a:b8:61:f4:9d:d0:37:1b:40:83:f1:0c:e2:b8: f0:a8:ec:a3:78:92:aa:6d:73:76:b8:cd:b6:4a:b9:fc:f0:c2: 36:da:d2:cc:be:44:73:4c:0d:08:e6:b5:f7:49:3e:16:46:7c: c5:b0:26:ea:d3:6a:70:93:a0:38:43:51:01:54:73:9e:2a:be: a3:e3:bf:af:ad:19:7d:41:3f:cf:5e:0a:ac:ed:f1:7a:1e:9e: e0:79:fb:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIdB3L0yUxAnXrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk NGM4ZjEwMmQtYTk3NS00MGI4LTg5ZGUtNTgzYjdhOWZmYzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdKJcehmS3q3Fug1ZHGK6YbMP/4uAtWzgQqS UtRWjQZa9t55DpG3c0CXEdWDxKWzrk6Hr1SSW0izObMWS2xRPdG1LOrOz40zO5sH cAcGdQ1X57S30Z7VNqM+Y9bltDO/iNIEJTPOpaZpQ4l3eOg0WfHU57jFlkkLEfJ1 jTQU2MIzaDRbJIP1BVnLTjRLwz+YSsngPC6mmq93oTZGT3R6NwK7dSO2TutB3j3e PHQQfh0yV1awAsRJEDgX/O4XMHZ0Hrc/OcR8JFBUsFg0ZgY6LRiSu7GPzJXDRecn TXY3Ma4YNxDb7RvDvsE/tsHh8aqMbAC6vgCJOA1IZJ96g/ZuqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK47eOOE7b619TvVJdBOjlfdlstXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjUxODMyM2YtZDc3ZC0z NzAwLThhOWYtM2Y4ZDRjYWYxOTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP2fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrBRqOeGU9losFn/FFzv4tsIyvq2W5g4uJXjOEkTXeyQj5ARwq1QA4N tFCl2l47eF4UGiZb7IEGdnEgixFMVgIJeYoFSdaMFYnYPLikAiY/esRsYZTVJNxt Q7iypOFOqzRkJc6K4OME9uKC/WCPzXhZwHMRWC+uvekh2QVCXn/beJjJNd4uNAcv LKP/U2GCESnsP4wKzAKB0c6Rf15tmTs2ZN03NpNauGH0ndA3G0CD8QziuPCo7KN4 kqptc3a4zbZKufzwwjba0sy+RHNMDQjmtfdJPhZGfMWwJurTanCToDhDUQFUc54q vqPjv6+tGX1BP89eCqzt8XoenuB5+98= -----END CERTIFICATE-----Generated at Thu Feb 26 12:21:16 2026 by rpki-client