$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/f1b53950-8f95-3608-896e-d18a018c60b7.roa File: f1b53950-8f95-3608-896e-d18a018c60b7.roa (raw, json) Hash identifier: iNjjKGPShsj+hawCAnvl1ipX7w4osoGvf83mebJCPfg= Subject key identifier: 68:39:05:B9:2F:D9:25:9E:89:18:D7:33:0F:7C:90:57:A7:84:12:C7 Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Certificate serial: 010D0C9F4328584D8EF58828590ABA23766819C0 Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/f1b53950-8f95-3608-896e-d18a018c60b7.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 401241 IP address blocks: 104.238.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:88:28:59:0a:ba:23:76:68:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=437cfa16-a01d-4008-8aad-d0ea8eb43c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c3:35:6a:bd:8d:bc:4b:2e:c7:11:c5:90:b1: df:0e:00:92:cc:01:74:f5:35:cf:00:4d:49:86:dd: ff:a6:14:54:a0:59:65:2a:2d:f0:4b:6f:94:c9:a9: d6:c0:5b:b6:e9:ae:12:f5:22:91:dd:1f:81:c2:d8: 62:20:ae:3c:20:48:55:e6:0c:43:82:16:a3:5e:15: df:5b:3f:a7:c5:62:3d:04:9b:14:f9:e3:23:bf:ec: b1:7e:e4:23:85:b3:7b:3f:78:99:65:ad:94:98:a1: a2:6a:e9:a2:1e:78:da:9c:ba:96:92:93:44:81:31: 04:29:0f:54:a4:2b:49:59:5b:10:6e:ee:76:95:81: 24:52:7f:07:99:8c:7b:12:d1:78:17:6d:51:5f:f5: 49:b5:39:17:cb:a8:87:5e:b5:ec:19:5e:ea:59:fa: d1:9c:cd:db:20:9b:d4:17:64:d7:66:35:60:70:d5: 7c:d7:eb:0c:c7:ec:1d:ff:35:c3:2b:29:d7:fe:1b: b0:c2:aa:53:fd:65:00:c3:ff:40:c5:8f:eb:dc:42: 9b:28:76:b7:4e:03:90:41:e4:4f:55:6d:45:90:2f: 70:e4:6c:02:83:8d:b7:60:dd:d7:91:94:66:05:c4: 83:a3:d1:b6:d0:15:a9:84:51:87:0d:42:c6:7d:9b: ba:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:39:05:B9:2F:D9:25:9E:89:18:D7:33:0F:7C:90:57:A7:84:12:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/f1b53950-8f95-3608-896e-d18a018c60b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl X509v3 Authority Key Identifier: keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer sbgp-ipAddrBlock: critical IPv4: 104.238.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:e2:1e:6c:e8:98:e5:f4:9d:db:06:bb:be:75:f3:61:49:1d: 54:81:fa:55:ee:f0:fe:a1:60:34:c5:eb:97:c7:c0:54:80:af: 17:fd:35:91:e4:56:d1:80:61:33:22:06:f5:7c:a2:57:80:60: 2d:31:52:9a:e1:ad:2a:63:0f:35:9c:07:db:72:e1:cc:91:75: d8:9c:d0:76:c0:31:bf:b8:c7:7c:1e:15:ec:ac:b3:5b:99:73: 1b:89:a8:19:42:df:5f:4a:90:ae:26:74:b3:e8:bb:f4:e0:7e: 74:48:de:c5:b6:b1:96:e6:a5:5c:1f:5c:47:10:ad:36:e6:9a: e6:d3:e8:f6:e7:df:dc:1f:72:ef:57:59:16:8e:58:0a:d2:90: 66:22:80:7f:b6:10:bb:b0:54:79:c5:4d:1e:e8:6b:e1:16:08: 72:f6:a8:45:25:0b:40:c8:da:98:09:aa:37:fc:86:f1:27:25: 48:b1:ca:45:70:c6:82:1a:6a:19:5a:a6:18:64:1b:97:35:91: 7c:03:4f:3f:9e:05:c8:ab:84:8c:b6:89:11:1e:d3:66:35:70: 23:7a:38:d9:20:5e:62:08:1a:c3:61:89:ed:59:4c:9d:0b:d8: 73:24:0c:30:e3:fd:21:9c:d0:a2:9c:bc:fb:ee:11:5c:89:21: fd:b1:ef:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9YgoWQq6I3ZoGcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh YTNjMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NDM3Y2ZhMTYtYTAxZC00MDA4LThhYWQtZDBlYThlYjQzYzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsM1ar2NvEsuxxHFkLHfDgCSzAF09TXPAE1J ht3/phRUoFllKi3wS2+UyanWwFu26a4S9SKR3R+BwthiIK48IEhV5gxDghajXhXf Wz+nxWI9BJsU+eMjv+yxfuQjhbN7P3iZZa2UmKGiaumiHnjanLqWkpNEgTEEKQ9U pCtJWVsQbu52lYEkUn8HmYx7EtF4F21RX/VJtTkXy6iHXrXsGV7qWfrRnM3bIJvU F2TXZjVgcNV81+sMx+wd/zXDKynX/huwwqpT/WUAw/9AxY/r3EKbKHa3TgOQQeRP VW1FkC9w5GwCg423YN3XkZRmBcSDo9G20BWphFGHDULGfZu6sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGg5Bbkv2SWeiRjXMw98kFenhBLHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvZjFiNTM5NTAtOGY5NS0z NjA4LTg5NmUtZDE4YTAxOGM2MGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2 YmFlMGFhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO7BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAriHmzomOX0ndsGu75182FJHVSB+lXu8P6hYDTF65fHwFSArxf9NZHk VtGAYTMiBvV8oleAYC0xUprhrSpjDzWcB9ty4cyRddic0HbAMb+4x3weFeyss1uZ cxuJqBlC319KkK4mdLPou/TgfnRI3sW2sZbmpVwfXEcQrTbmmubT6Pbn39wfcu9X WRaOWArSkGYigH+2ELuwVHnFTR7oa+EWCHL2qEUlC0DI2pgJqjf8hvEnJUixykVw xoIaahlaphhkG5c1kXwDTz+eBcirhIy2iREe02Y1cCN6ONkgXmIIGsNhie1ZTJ0L 2HMkDDDj/SGc0KKcvPvuEVyJIf2x76E= -----END CERTIFICATE-----Generated at Fri May 1 21:28:50 2026 by rpki-client