$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/2bc43a93-0030-3c39-8b64-3f0f629703a2.roa File: 2bc43a93-0030-3c39-8b64-3f0f629703a2.roa (raw, json) Hash identifier: Zt8IaV5Tzo/jqGU1mMssV5CCGDltRfUB5PTcBqBYfzo= Subject key identifier: EF:D5:DA:41:60:57:56:9E:FF:A7:DD:D1:E7:6F:24:6F:D4:28:EC:C5 Certificate issuer: /CN=85ff82e4-cd37-45c6-b714-ab0a04927964 Certificate serial: 010D0C9F4328584CAFBC6E0B423457E20C73FA40 Authority key identifier: 5E:4B:BF:18:60:91:10:DF:CE:16:25:9B:8B:08:65:A9:1C:62:50:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/2bc43a93-0030-3c39-8b64-3f0f629703a2.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 397942 IP address blocks: 104.171.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:6e:0b:42:34:57:e2:0c:73:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85ff82e4-cd37-45c6-b714-ab0a04927964 Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=26c932e3-d20d-456e-9821-d99dceb1c8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:45:d4:2b:69:83:ea:98:a1:da:9e:f3:0b:1a: 33:b0:c1:68:5e:06:5e:4d:ca:84:3e:95:32:02:20: 63:fe:57:8d:2d:ba:ef:f6:ce:29:04:ab:51:8a:65: 39:08:0d:fb:e3:78:2e:e1:bc:44:e8:87:cc:45:d5: 42:54:13:2f:df:c2:d6:39:c5:0f:fd:d6:e3:b2:78: cc:a2:7a:e4:16:10:22:44:13:53:15:82:ea:1f:ba: 21:bf:22:bb:6f:d9:c2:cc:52:e0:af:e2:26:5c:20: 5c:30:0a:0e:a8:cc:bd:d6:95:ed:52:48:bd:c9:fd: 8c:a8:ad:67:84:a7:b2:f9:52:ae:00:d8:86:7e:eb: db:40:5d:34:06:92:98:fe:70:49:dd:22:8e:94:48: 8e:18:9c:77:3d:63:2c:3b:b2:eb:ab:f8:3b:b4:74: 82:87:9d:39:38:f2:0c:74:d2:9c:6a:61:e6:4b:5e: f0:5b:5b:42:00:c8:f5:d0:bd:41:a7:37:92:04:22: 4f:03:b5:55:34:8a:b1:fd:50:cb:c1:a5:3c:36:a0: 74:c4:4b:a5:fd:f8:46:a5:59:d0:5b:53:a8:37:17: 1c:8d:cb:3b:ee:40:bf:b3:9d:3c:46:9d:e3:8b:80: 78:5a:69:9f:02:62:b0:42:12:e4:8e:54:88:e5:9b: 45:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D5:DA:41:60:57:56:9E:FF:A7:DD:D1:E7:6F:24:6F:D4:28:EC:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/2bc43a93-0030-3c39-8b64-3f0f629703a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.crl X509v3 Authority Key Identifier: keyid:5E:4B:BF:18:60:91:10:DF:CE:16:25:9B:8B:08:65:A9:1C:62:50:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer sbgp-ipAddrBlock: critical IPv4: 104.171.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ec:87:00:12:b4:93:87:84:94:ff:7e:46:52:a9:5b:6b:40: 69:6d:76:c1:87:2b:04:8e:a3:06:6b:f6:ed:69:2f:58:69:55: 86:a6:01:46:6b:2c:c3:7b:04:02:11:23:c2:1a:fa:4a:0e:38: 1e:95:62:bb:25:8c:9f:01:67:09:80:a9:f8:0f:8b:8c:3b:03: 6f:6a:7b:6c:44:2e:e0:e7:86:48:d3:88:fd:26:ed:b9:c2:64: ac:af:d0:54:dd:b4:c0:bf:1b:29:ab:82:44:5a:19:97:fd:48: 7a:04:68:c9:0a:9e:27:05:fb:8f:70:c8:dd:4c:95:31:69:0b: 11:5c:ea:b1:21:86:4b:12:57:8f:6f:fc:9e:bc:a2:53:dc:0b: 06:39:9e:22:2e:92:85:ee:e7:a6:eb:f8:f9:20:38:6c:d5:32: 38:01:92:82:71:5d:6f:f0:a0:dd:6b:cb:28:2d:d6:88:5e:dc: 62:b5:41:f0:fb:0b:0c:4f:04:97:21:9b:eb:8f:f0:fe:dc:ca: ec:9f:86:8a:89:b1:5e:75:26:42:2a:55:7f:b4:b2:42:b2:8d: 2a:54:fa:49:bc:66:b9:10:5d:35:23:b7:fa:d8:f7:77:8b:90: 0f:33:c6:f6:49:71:ce:fe:2e:18:c2:a7:ed:1c:5c:dd:7c:8a: f6:d7:ca:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvG4LQjRX4gxz+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVmZjgyZTQtY2QzNy00NWM2LWI3MTQtYWIwYTA0OTI3 OTY0MB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk MjZjOTMyZTMtZDIwZC00NTZlLTk4MjEtZDk5ZGNlYjFjOGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70XUK2mD6pih2p7zCxozsMFoXgZeTcqEPpUy AiBj/leNLbrv9s4pBKtRimU5CA3743gu4bxE6IfMRdVCVBMv38LWOcUP/dbjsnjM onrkFhAiRBNTFYLqH7ohvyK7b9nCzFLgr+ImXCBcMAoOqMy91pXtUki9yf2MqK1n hKey+VKuANiGfuvbQF00BpKY/nBJ3SKOlEiOGJx3PWMsO7Lrq/g7tHSCh505OPIM dNKcamHmS17wW1tCAMj10L1BpzeSBCJPA7VVNIqx/VDLwaU8NqB0xEul/fhGpVnQ W1OoNxccjcs77kC/s508Rp3ji4B4WmmfAmKwQhLkjlSI5ZtFvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/V2kFgV1ae/6fd0edvJG/UKOzFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84NWZm ODJlNC1jZDM3LTQ1YzYtYjcxNC1hYjBhMDQ5Mjc5NjQvMmJjNDNhOTMtMDAzMC0z YzM5LThiNjQtM2YwZjYyOTcwM2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODVmZjgyZTQtY2QzNy00NWM2LWI3 MTQtYWIwYTA0OTI3OTY0Lzg1ZmY4MmU0LWNkMzctNDVjNi1iNzE0LWFiMGEwNDky Nzk2NC5jcmwwHwYDVR0jBBgwFoAUXku/GGCREN/OFiWbiwhlqRxiUBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84NWZmODJlNC1jZDM3LTQ1YzYtYjcxNC1hYjBh MDQ5Mjc5NjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaKvEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDshwAStJOHhJT/fkZSqVtrQGltdsGHKwSOowZr9u1pL1hpVYamAUZr LMN7BAIRI8Ia+koOOB6VYrsljJ8BZwmAqfgPi4w7A29qe2xELuDnhkjTiP0m7bnC ZKyv0FTdtMC/GymrgkRaGZf9SHoEaMkKnicF+49wyN1MlTFpCxFc6rEhhksSV49v /J68olPcCwY5niIukoXu56br+PkgOGzVMjgBkoJxXW/woN1ryygt1ohe3GK1QfD7 CwxPBJchm+uP8P7cyuyfhoqJsV51JkIqVX+0skKyjSpU+km8ZrkQXTUjt/rY93eL kA8zxvZJcc7+LhjCp+0cXN18ivbXykk= -----END CERTIFICATE-----Generated at Sat Feb 28 00:00:53 2026 by rpki-client