$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/0b95849b-a821-3b29-86e2-82b650dfd913.roa File: 0b95849b-a821-3b29-86e2-82b650dfd913.roa (raw, json) Hash identifier: 9DWuoI/sgCCXrwCRUZ5ispkfosYvVMPrfW/gUX4bAlc= Subject key identifier: 39:7D:B1:35:A3:0E:3F:8B:62:3B:A6:52:DF:4C:7A:CA:20:BF:63:5B Certificate issuer: /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Certificate serial: 010D0C9F4328584D1F4A43728C9AF13D86D2BF00 Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/0b95849b-a821-3b29-86e2-82b650dfd913.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 59920 IP address blocks: 104.167.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:43:72:8c:9a:f1:3d:86:d2:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=f443190c-3d24-4cdf-9510-7935715e129b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:20:67:c2:1c:27:19:01:da:1c:47:58:f6:f6: 34:1f:05:fe:3b:ae:e9:06:35:e9:7d:d0:29:87:62: 78:cc:65:6a:67:8e:c9:21:2f:58:a6:c8:aa:37:3c: c5:6b:94:03:e6:62:85:6a:97:84:28:bf:d6:14:ad: e6:5e:79:85:80:ea:13:20:c8:10:6a:9c:ff:c1:a8: 89:0c:34:04:b1:6f:8b:83:63:77:00:7b:2b:d2:4f: f0:1c:c8:93:46:4b:56:3e:c1:88:75:f8:d0:36:c0: 90:2c:cd:ac:19:d9:2a:d7:78:3e:1a:15:54:66:40: 64:0a:4f:7e:60:8e:b5:a9:c6:9b:f8:74:af:bc:18: fa:d2:e6:82:e3:0c:70:6c:05:ab:be:31:a8:01:f9: eb:e4:6b:20:e0:6e:08:e5:41:6e:e4:83:9b:fe:20: fe:5b:f5:ef:7c:a2:d8:0e:f3:91:80:79:a0:99:dc: b5:20:2c:fd:9c:89:52:54:82:dd:3c:86:2a:2a:70: 57:b8:62:79:c0:df:9f:74:0f:2e:71:84:fb:28:c3: e2:8d:05:48:05:df:7d:6f:2e:0b:60:ae:57:c4:26: bd:5f:bf:47:fe:15:9e:44:74:c2:9e:66:65:74:6b: 11:19:e2:81:89:d1:42:14:15:af:0b:98:7c:e4:39: de:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7D:B1:35:A3:0E:3F:8B:62:3B:A6:52:DF:4C:7A:CA:20:BF:63:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/0b95849b-a821-3b29-86e2-82b650dfd913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl X509v3 Authority Key Identifier: keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer sbgp-ipAddrBlock: critical IPv4: 104.167.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:32:da:e1:85:07:6c:76:4f:df:62:d5:06:e8:b5:5d:7f:b6: 42:83:cd:7e:79:ee:84:7d:e8:7c:e8:79:69:a4:16:fe:de:6d: fe:86:9c:47:7b:9b:c3:8f:1d:47:0f:b7:a3:96:15:44:16:48: 3b:ab:2e:32:64:e4:ac:e9:9a:66:1d:c1:27:b3:ce:4d:62:15: 2d:86:db:7f:ed:34:ff:06:42:1b:ff:21:ef:c9:53:80:7d:00: 08:30:fd:27:4c:5b:7a:66:a3:b1:ba:50:c9:c7:0a:35:ab:84: 2b:45:55:9f:10:af:aa:b0:ac:48:44:22:ab:30:48:ab:31:df: 15:0c:c2:6a:21:d7:37:d8:28:86:8c:a8:a7:10:f0:9b:35:f4: e4:79:21:7e:b8:cf:96:2c:42:ec:c4:75:33:1d:0e:c0:03:66: 7c:04:ea:f2:0a:ca:9f:09:11:c8:60:cf:6f:99:c7:1f:47:9e: da:d5:fa:51:40:96:94:10:69:8e:97:05:21:91:d7:6f:3f:e7: 7b:f5:1b:02:f4:05:23:79:68:df:28:ae:18:d8:7e:75:f6:dd: 8c:4a:76:6b:b6:72:97:14:27:ec:74:09:b9:0b:32:0e:ad:b7: df:b7:24:1c:96:81:d3:89:22:97:aa:16:90:57:bc:a6:89:c8: 5b:54:f6:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSkNyjJrxPYbSvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4 ZjcyMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZjQ0MzE5MGMtM2QyNC00Y2RmLTk1MTAtNzkzNTcxNWUxMjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiBnwhwnGQHaHEdY9vY0HwX+O67pBjXpfdAp h2J4zGVqZ47JIS9YpsiqNzzFa5QD5mKFapeEKL/WFK3mXnmFgOoTIMgQapz/waiJ DDQEsW+Lg2N3AHsr0k/wHMiTRktWPsGIdfjQNsCQLM2sGdkq13g+GhVUZkBkCk9+ YI61qcab+HSvvBj60uaC4wxwbAWrvjGoAfnr5Gsg4G4I5UFu5IOb/iD+W/XvfKLY DvORgHmgmdy1ICz9nIlSVILdPIYqKnBXuGJ5wN+fdA8ucYT7KMPijQVIBd99by4L YK5XxCa9X79H/hWeRHTCnmZldGsRGeKBidFCFBWvC5h85DnefwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDl9sTWjDj+LYjumUt9Mesogv2NbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvMGI5NTg0OWItYTgyMS0z YjI5LTg2ZTItODJiNjUwZGZkOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4 NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2 N2JmMDhmNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKfWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4y2uGFB2x2T99i1QbotV1/tkKDzX557oR96HzoeWmkFv7ebf6GnEd7 m8OPHUcPt6OWFUQWSDurLjJk5KzpmmYdwSezzk1iFS2G23/tNP8GQhv/Ie/JU4B9 AAgw/SdMW3pmo7G6UMnHCjWrhCtFVZ8Qr6qwrEhEIqswSKsx3xUMwmoh1zfYKIaM qKcQ8Js19OR5IX64z5YsQuzEdTMdDsADZnwE6vIKyp8JEchgz2+Zxx9HntrV+lFA lpQQaY6XBSGR128/53v1GwL0BSN5aN8orhjYfnX23YxKdmu2cpcUJ+x0CbkLMg6t t9+3JByWgdOJIpeqFpBXvKaJyFtU9g0= -----END CERTIFICATE-----Generated at Thu Mar 12 16:16:26 2026 by rpki-client