$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/2acba3df-9f0a-3582-b2f6-62a24560f8a1.roa File: 2acba3df-9f0a-3582-b2f6-62a24560f8a1.roa (raw, json) Hash identifier: VkAcTnPphf+NPXeGdPYyOrHPnqphZqL6PyZ0vnZtN4Y= Subject key identifier: 85:0A:8E:BD:E3:F7:19:7D:CD:05:F5:9D:02:3F:4C:AC:AD:1F:C8:43 Certificate issuer: /CN=8fe40320-74dc-4444-a6ef-bd88d604a876 Certificate serial: 010D0C9F4328584C7D7C3F9EF52177D0D7F64D60 Authority key identifier: 06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/2acba3df-9f0a-3582-b2f6-62a24560f8a1.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 33387 IP address blocks: 104.224.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:3f:9e:f5:21:77:d0:d7:f6:4d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fe40320-74dc-4444-a6ef-bd88d604a876 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=a0cab670-22a6-4f17-9dd1-05b05a7b85b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a1:3b:a1:60:33:f4:dd:85:36:81:47:3f:f2: 4c:43:01:b7:45:9e:31:ec:30:5e:93:24:26:8a:9a: e5:30:d5:ba:e5:cb:4c:3e:e8:fa:61:fc:d1:ea:22: 10:7c:2e:36:7b:20:9e:81:01:cb:d6:d4:85:92:c4: e6:e7:dc:66:84:04:cb:c9:74:c4:be:09:3b:ac:8f: 89:52:7a:4c:3d:13:80:8d:f2:0f:d5:86:2e:fb:83: 95:a7:cc:15:4c:07:36:87:b5:94:e6:65:38:97:a2: c1:b4:3a:39:89:85:ac:50:c4:42:53:a7:d1:00:fc: 75:54:ed:75:ef:a2:ad:db:2f:03:49:00:d3:88:61: fe:47:1a:47:34:45:70:76:b7:6d:be:cb:9d:e9:1d: bc:88:0a:c4:1f:aa:2b:fd:0e:0a:2c:f9:2d:23:ab: 19:ee:52:fe:ae:58:2e:94:15:bd:47:54:01:ad:fb: 7a:09:e7:c0:ea:dd:bd:74:2f:1c:70:8e:2e:46:25: 2f:89:ed:79:76:eb:1a:07:ec:e5:97:0b:d2:fc:96: d6:b8:a8:2d:49:55:e4:bd:c4:dc:3a:dc:62:a0:d5: 87:23:9a:59:1a:a9:4a:80:37:46:6c:c9:67:59:4b: da:1b:a1:3a:b0:4f:ec:8c:d7:80:7e:7d:8f:f0:7c: 18:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0A:8E:BD:E3:F7:19:7D:CD:05:F5:9D:02:3F:4C:AC:AD:1F:C8:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/2acba3df-9f0a-3582-b2f6-62a24560f8a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl X509v3 Authority Key Identifier: keyid:06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer sbgp-ipAddrBlock: critical IPv4: 104.224.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:82:0b:d5:3e:f8:62:81:c9:4a:f0:5b:76:12:2e:78:0e:dd: b8:3f:69:27:ac:bb:a5:41:f9:59:06:6f:91:f8:26:f2:aa:f0: 59:08:97:e1:1f:ab:5e:00:08:f6:7f:42:ef:9b:33:00:4f:03: b6:85:2e:a5:61:7c:71:9e:58:09:bb:54:c8:80:c2:9d:f4:36: ac:df:03:7b:d5:79:14:b1:6f:ec:97:db:2b:7d:a9:b8:27:84: 9c:37:4f:d5:99:fa:8a:f6:ed:2b:d3:75:91:53:b3:8e:f8:04: ea:0b:e8:88:75:1f:42:2e:57:4f:89:e0:fa:1d:87:7d:36:a9: 96:98:e7:08:2d:a9:17:6e:24:78:bd:6c:91:eb:27:3d:7c:80: 24:67:14:72:4b:45:d2:d5:d2:cf:8c:03:7d:83:4e:16:b7:33: ae:9b:5a:38:a8:ad:0b:92:a8:c9:63:cd:f4:5e:fd:8a:68:36: bd:62:df:ea:de:b4:3a:e8:f8:66:b8:2f:94:04:eb:ff:3a:95: 1b:d7:f1:b3:1b:e3:60:44:dc:5e:7d:1b:aa:8e:8b:0b:7a:87: 41:a1:2f:c3:94:dd:16:91:af:62:d4:e9:18:f6:65:a4:a1:ba: e2:c1:db:4d:03:5b:38:fa:ce:d7:ba:e1:cf:85:80:d8:f8:f8: d9:47:0e:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fD+e9SF30Nf2TWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZlNDAzMjAtNzRkYy00NDQ0LWE2ZWYtYmQ4OGQ2MDRh ODc2MB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk YTBjYWI2NzAtMjJhNi00ZjE3LTlkZDEtMDViMDVhN2I4NWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaE7oWAz9N2FNoFHP/JMQwG3RZ4x7DBekyQm iprlMNW65ctMPuj6YfzR6iIQfC42eyCegQHL1tSFksTm59xmhATLyXTEvgk7rI+J UnpMPROAjfIP1YYu+4OVp8wVTAc2h7WU5mU4l6LBtDo5iYWsUMRCU6fRAPx1VO11 76Kt2y8DSQDTiGH+RxpHNEVwdrdtvsud6R28iArEH6or/Q4KLPktI6sZ7lL+rlgu lBW9R1QBrft6CefA6t29dC8ccI4uRiUvie15dusaB+zllwvS/JbWuKgtSVXkvcTc OtxioNWHI5pZGqlKgDdGbMlnWUvaG6E6sE/sjNeAfn2P8HwYnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUKjr3j9xl9zQX1nQI/TKytH8hDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZmU0 MDMyMC03NGRjLTQ0NDQtYTZlZi1iZDg4ZDYwNGE4NzYvMmFjYmEzZGYtOWYwYS0z NTgyLWIyZjYtNjJhMjQ1NjBmOGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGZlNDAzMjAtNzRkYy00NDQ0LWE2 ZWYtYmQ4OGQ2MDRhODc2LzhmZTQwMzIwLTc0ZGMtNDQ0NC1hNmVmLWJkODhkNjA0 YTg3Ni5jcmwwHwYDVR0jBBgwFoAUBpspmYh8dDlJyy1jHEtRwUvXMnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZmU0MDMyMC03NGRjLTQ0NDQtYTZlZi1iZDg4 ZDYwNGE4NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOANMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+CC9U++GKByUrwW3YSLngO3bg/aSesu6VB+VkGb5H4JvKq8FkIl+Ef q14ACPZ/Qu+bMwBPA7aFLqVhfHGeWAm7VMiAwp30NqzfA3vVeRSxb+yX2yt9qbgn hJw3T9WZ+or27SvTdZFTs474BOoL6Ih1H0IuV0+J4Podh302qZaY5wgtqRduJHi9 bJHrJz18gCRnFHJLRdLV0s+MA32DTha3M66bWjiorQuSqMljzfRe/YpoNr1i3+re tDro+Ga4L5QE6/86lRvX8bMb42BE3F59G6qOiwt6h0GhL8OU3RaRr2LU6Rj2ZaSh uuLB200DWzj6zte64c+FgNj4+NlHDnY= -----END CERTIFICATE-----Generated at Thu Feb 26 13:31:02 2026 by rpki-client