$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/3f2b9678-6820-3b5b-b536-bc6677e9c5aa.roa File: 3f2b9678-6820-3b5b-b536-bc6677e9c5aa.roa (raw, json) Hash identifier: +CEg1D5+Vh4LVGvnblY0kQc9emOU7JcFhlwEVQ+5+yM= Subject key identifier: 4F:12:AE:CB:3F:1D:04:0D:C3:EB:29:4F:DF:4E:8D:3A:20:DB:E4:B8 Certificate issuer: /CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca Certificate serial: 010D0C9F4328584D95F0019F167FAA7D3A7DED00 Authority key identifier: 53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/3f2b9678-6820-3b5b-b536-bc6677e9c5aa.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 215016 IP address blocks: 104.193.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:01:9f:16:7f:aa:7d:3a:7d:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=bd8893a8-71dc-4147-b4fb-fb70dad67b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3f:63:d8:56:84:a4:9a:aa:9d:1f:50:c1:c1: 92:5d:ff:53:8d:50:c9:b2:6a:9e:98:47:f1:57:7c: e3:9e:ad:e4:9f:82:15:ea:82:6d:77:2b:35:b1:21: 1f:a9:38:3c:48:ab:16:b1:3e:9f:ec:75:53:46:5c: 3d:5f:cc:0c:54:d0:db:b0:1f:b4:3a:0c:b4:68:82: ed:f4:d3:4a:83:21:9b:cf:ac:b0:03:af:84:5f:31: 6a:d3:2d:08:2c:b2:cd:93:35:77:0d:7e:4d:73:61: 93:38:ed:94:93:bc:d7:2d:28:a1:b7:8b:fa:72:bf: 01:6c:61:23:74:d6:e1:a9:99:7c:08:48:33:ab:a5: ac:ba:be:33:df:07:73:3e:3a:b2:11:ff:45:2c:c7: d1:e8:bd:55:4f:3f:83:ea:43:8a:76:fc:1c:e9:11: aa:01:03:16:93:77:c3:1e:22:69:1a:97:db:90:ac: 4a:93:34:c0:f2:cd:e3:89:c1:ea:07:1c:24:29:09: 31:04:5e:1e:d3:79:b0:54:2e:16:a5:20:81:de:34: e5:11:9e:89:44:85:d2:cd:04:be:5b:20:bf:ed:3a: 1f:23:80:f0:6e:68:3a:b7:67:a5:c9:b8:23:ef:c3: ad:79:b8:d0:90:db:a5:85:c1:27:c3:a6:29:e7:94: 6c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:12:AE:CB:3F:1D:04:0D:C3:EB:29:4F:DF:4E:8D:3A:20:DB:E4:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/3f2b9678-6820-3b5b-b536-bc6677e9c5aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.crl X509v3 Authority Key Identifier: keyid:53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer sbgp-ipAddrBlock: critical IPv4: 104.193.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:dd:3d:cd:38:8f:20:a1:e2:88:9a:a9:e9:2d:f5:26:27:49: 66:d7:cb:35:e0:68:ca:fe:9a:5d:71:f3:89:2a:2f:34:cb:f2: 17:ac:b2:f4:3b:27:a3:ca:d5:75:dd:41:df:1c:7d:c5:79:a2: be:da:1c:eb:4c:4e:f0:ef:7f:b5:7a:79:36:67:7e:dc:45:20: 39:f0:f0:e2:2e:3a:48:cf:42:ec:68:54:f9:98:bb:b6:8d:db: 30:92:c4:48:80:8e:f1:f4:86:ab:61:2d:9f:30:07:52:11:48: 80:52:eb:7d:06:f3:5d:bd:a2:e0:1f:57:df:8b:42:e7:83:40: 77:18:ff:b7:b8:40:15:e7:3a:eb:d3:95:78:69:0b:5e:d7:41: 58:ec:db:dc:d4:03:55:06:35:23:7b:06:9c:e9:8b:f0:1d:55: 55:91:91:be:06:59:ed:f6:02:c5:f1:f7:07:0d:d1:06:6c:4a: 93:80:f0:8e:be:8b:79:a2:ce:e9:a2:d3:67:eb:fc:b8:c9:11: e9:56:91:f6:c4:27:cc:0f:ce:0e:9a:38:7f:12:62:65:ed:d4: 70:92:a3:4b:1f:fa:f7:24:b0:59:7a:26:b4:15:cf:37:67:e3: 20:c1:b8:c7:c4:99:ec:61:20:12:6a:84:30:81:8c:9a:bb:74: fd:c3:26:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8AGfFn+qfTp97QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlYTEyZmYtZjk1NC00MjI5LTg4YTItZDJjNjY1NmEw ZWNhMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk YmQ4ODkzYTgtNzFkYy00MTQ3LWI0ZmItZmI3MGRhZDY3YjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD9j2FaEpJqqnR9QwcGSXf9TjVDJsmqemEfx V3zjnq3kn4IV6oJtdys1sSEfqTg8SKsWsT6f7HVTRlw9X8wMVNDbsB+0Ogy0aILt 9NNKgyGbz6ywA6+EXzFq0y0ILLLNkzV3DX5Nc2GTOO2Uk7zXLSiht4v6cr8BbGEj dNbhqZl8CEgzq6Wsur4z3wdzPjqyEf9FLMfR6L1VTz+D6kOKdvwc6RGqAQMWk3fD HiJpGpfbkKxKkzTA8s3jicHqBxwkKQkxBF4e03mwVC4WpSCB3jTlEZ6JRIXSzQS+ WyC/7TofI4Dwbmg6t2elybgj78OtebjQkNulhcEnw6Yp55RswQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8Srss/HQQNw+spT99OjTog2+S4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMGVh MTJmZi1mOTU0LTQyMjktODhhMi1kMmM2NjU2YTBlY2EvM2YyYjk2NzgtNjgyMC0z YjViLWI1MzYtYmM2Njc3ZTljNWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDBlYTEyZmYtZjk1NC00MjI5LTg4 YTItZDJjNjY1NmEwZWNhL2QwZWExMmZmLWY5NTQtNDIyOS04OGEyLWQyYzY2NTZh MGVjYS5jcmwwHwYDVR0jBBgwFoAUU0R/CWOSUHfPZabuD30f5r3OpLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMGVhMTJmZi1mOTU0LTQyMjktODhhMi1kMmM2 NjU2YTBlY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMHBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3dPc04jyCh4oiaqekt9SYnSWbXyzXgaMr+ml1x84kqLzTL8hessvQ7 J6PK1XXdQd8cfcV5or7aHOtMTvDvf7V6eTZnftxFIDnw8OIuOkjPQuxoVPmYu7aN 2zCSxEiAjvH0hqthLZ8wB1IRSIBS630G8129ouAfV9+LQueDQHcY/7e4QBXnOuvT lXhpC17XQVjs29zUA1UGNSN7Bpzpi/AdVVWRkb4GWe32AsXx9wcN0QZsSpOA8I6+ i3mizumi02fr/LjJEelWkfbEJ8wPzg6aOH8SYmXt1HCSo0sf+vcksFl6JrQVzzdn 4yDBuMfEmexhIBJqhDCBjJq7dP3DJr0= -----END CERTIFICATE-----Generated at Wed Apr 22 06:52:33 2026 by rpki-client