$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/de70e6fe-66fe-3765-b52f-63f1e9054940.roa File: de70e6fe-66fe-3765-b52f-63f1e9054940.roa (raw, json) Hash identifier: sbAVpTwQV7joRS/Aq0dIkUuHqV2b6FhQPThL2NHDyXY= Subject key identifier: 70:F3:39:A0:DC:AA:B2:AB:4D:6E:6E:3A:65:2D:B4:2C:F2:14:33:2B Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D1D077847F7F069BA46D9EC80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/de70e6fe-66fe-3765-b52f-63f1e9054940.roa Signing time: Mon 09 Mar 2026 17:35:04 +0000 ROA not before: Mon 09 Mar 2026 17:35:04 +0000 ROA not after: Sun 07 Jun 2026 17:35:04 +0000 asID: 398781 IP address blocks: 104.253.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:07:78:47:f7:f0:69:ba:46:d9:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 9 17:35:04 2026 GMT Not After : Jun 7 17:35:04 2026 GMT Subject: CN=316fafe5-fef6-4ad8-be51-3e1c4efd3060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:93:2d:f0:ed:d0:64:d7:25:83:0c:4f:3b:e8: ba:6b:4d:a9:7e:b4:a8:f2:71:ae:a9:ed:02:01:66: 1f:c2:05:11:47:c4:06:8a:31:b1:94:5e:9f:0c:e6: f0:9e:2e:bf:bb:dd:a5:21:3a:d7:fa:f3:d9:47:45: 30:51:20:81:c8:08:8a:0d:0f:a2:53:00:0a:9b:11: c8:49:45:74:f7:ba:1a:7a:2b:14:d1:4a:70:6e:13: 1f:8e:a2:2a:49:fd:a5:b4:37:4a:22:70:c5:f7:04: f6:05:80:54:63:72:14:14:e2:b2:8a:24:55:e3:5f: 2f:b6:eb:05:ea:e2:d1:0d:49:49:8a:f9:dc:42:07: 40:1b:d6:56:0e:2b:45:2e:4f:1e:15:5d:88:d9:f0: a5:92:68:c5:cf:ac:bb:fa:08:89:6f:74:81:a1:68: 00:1c:43:fe:9c:51:fc:8e:49:05:52:5e:8d:de:4b: ae:eb:f3:3d:85:b1:eb:bf:a2:28:9f:48:76:84:69: 45:cb:cf:8f:31:5c:5d:a8:45:80:93:d8:1e:1e:4b: d9:06:63:3c:de:5c:07:eb:89:c8:e5:6e:40:2e:90: ea:47:c5:06:df:d5:b1:0e:4a:c2:4f:54:7b:0a:00: fc:02:6d:18:53:bf:c4:c4:ee:66:fa:1a:12:8e:e2: a7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F3:39:A0:DC:AA:B2:AB:4D:6E:6E:3A:65:2D:B4:2C:F2:14:33:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/de70e6fe-66fe-3765-b52f-63f1e9054940.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:c6:a7:3a:2b:aa:86:ba:48:e2:28:0b:b2:0a:83:5d:40:39: 69:51:a6:e7:95:cd:c5:00:ef:87:52:db:89:a3:a8:59:75:c1: 00:ea:a0:d1:5a:75:1c:ec:ad:db:c3:c0:7c:b9:f2:ed:08:36: 7a:33:d4:e1:3a:cc:1b:27:2d:7c:a5:04:08:fd:f1:db:e8:23: 6d:08:4b:9a:d2:d5:65:fa:3d:25:44:ae:3a:68:99:9c:78:b1: 90:c5:8c:8c:6e:85:6e:67:6c:4e:32:c3:a9:67:ef:af:2b:97: 29:d7:8d:c7:83:4f:1e:a6:03:ac:7b:d9:77:f2:7a:fc:40:dd: 55:e7:e9:6f:93:e0:77:12:c5:6e:9d:9a:26:2c:51:db:42:c0: 8f:58:eb:53:3a:12:fe:e5:32:42:86:ec:13:df:2b:79:64:b2: 8d:e5:d7:aa:ee:57:cf:43:a2:13:60:b3:e5:77:c0:01:61:54: f9:9f:68:69:dd:f3:ef:23:25:2f:17:37:e5:e6:a5:ed:2d:f6: d4:ea:fb:43:23:1f:d4:f3:c1:29:cd:a9:5a:33:89:4c:0d:31: fa:9b:da:71:c6:19:e2:9c:03:fb:9c:b1:67:76:36:4a:5b:af: f2:cd:88:a0:f8:ef:f1:34:6e:80:f4:a5:fa:80:37:b9:33:85: b0:0f:2d:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0dB3hH9/BpukbZ7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMwOTE3MzUwNFoXDTI2MDYwNzE3MzUwNFowLzEtMCsGA1UEAxMk MzE2ZmFmZTUtZmVmNi00YWQ4LWJlNTEtM2UxYzRlZmQzMDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJMt8O3QZNclgwxPO+i6a02pfrSo8nGuqe0C AWYfwgURR8QGijGxlF6fDObwni6/u92lITrX+vPZR0UwUSCByAiKDQ+iUwAKmxHI SUV097oaeisU0UpwbhMfjqIqSf2ltDdKInDF9wT2BYBUY3IUFOKyiiRV418vtusF 6uLRDUlJivncQgdAG9ZWDitFLk8eFV2I2fClkmjFz6y7+giJb3SBoWgAHEP+nFH8 jkkFUl6N3kuu6/M9hbHrv6Ion0h2hGlFy8+PMVxdqEWAk9geHkvZBmM83lwH64nI 5W5ALpDqR8UG39WxDkrCT1R7CgD8Am0YU7/ExO5m+hoSjuKnBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDzOaDcqrKrTW5uOmUttCzyFDMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGU3MGU2ZmUtNjZmZS0z NzY1LWI1MmYtNjNmMWU5MDU0OTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP1VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHGpzorqoa6SOIoC7IKg11AOWlRpueVzcUA74dS24mjqFl1wQDqoNFa dRzsrdvDwHy58u0INnoz1OE6zBsnLXylBAj98dvoI20IS5rS1WX6PSVErjpomZx4 sZDFjIxuhW5nbE4yw6ln768rlynXjceDTx6mA6x72XfyevxA3VXn6W+T4HcSxW6d miYsUdtCwI9Y61M6Ev7lMkKG7BPfK3lkso3l16ruV89DohNgs+V3wAFhVPmfaGnd 8+8jJS8XN+Xmpe0t9tTq+0MjH9TzwSnNqVoziUwNMfqb2nHGGeKcA/ucsWd2Nkpb r/LNiKD47/E0boD0pfqAN7kzhbAPLc0= -----END CERTIFICATE-----Generated at Mon Mar 23 18:51:22 2026 by rpki-client