$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/aaf0afb9-21cc-3093-9672-d4bd78801824.roa File: aaf0afb9-21cc-3093-9672-d4bd78801824.roa (raw, json) Hash identifier: DzujVYFm1nB8lXAO4oeqN6a1wOCMO6yHIbqxUFr/Q74= Subject key identifier: 39:22:7C:AA:08:0D:8C:A7:8C:18:91:B1:03:C4:F5:C0:7D:97:53:B3 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584D0BE6B9A8B5D83E166A723460 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/aaf0afb9-21cc-3093-9672-d4bd78801824.roa Signing time: Tue 03 Mar 2026 14:20:21 +0000 ROA not before: Tue 03 Mar 2026 14:20:21 +0000 ROA not after: Mon 01 Jun 2026 13:20:21 +0000 asID: 401783 IP address blocks: 104.241.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:e6:b9:a8:b5:d8:3e:16:6a:72:34:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Mar 3 14:20:21 2026 GMT Not After : Jun 1 13:20:21 2026 GMT Subject: CN=b56d2801-0931-4a06-8f1c-1523c68a356d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e7:6c:40:4d:fd:9b:70:ab:ed:2f:0e:12:08: 2e:0d:c9:b6:fe:e0:14:ab:5c:cc:51:f9:e8:3b:b9: 4f:8f:86:0c:89:8d:a0:44:7a:af:96:94:d2:f6:73: ba:7b:0f:eb:9f:67:c2:9f:42:b2:89:14:57:f1:17: f4:f5:28:e3:07:41:06:5b:c3:95:ca:37:73:70:19: 4b:73:1a:42:e0:59:8e:7c:00:ae:87:d0:31:2f:f9: a3:54:1e:c2:09:70:8f:4b:4f:50:bb:19:d9:93:0e: 92:4d:a3:bf:86:9d:32:8a:59:76:56:79:c4:6f:1f: ec:47:b4:be:6c:3d:d7:97:4e:1e:a3:db:95:70:54: a1:81:be:6a:2c:f3:5b:a6:83:71:80:28:89:c5:98: 4c:65:0b:91:b0:49:84:0a:7d:35:f5:e5:33:3d:99: dc:da:36:00:68:6a:32:82:1b:9b:02:56:af:0f:7f: 17:f7:30:b8:ee:bf:fd:d6:62:c0:20:8c:cf:3f:83: fa:11:f0:46:6a:62:ff:48:9e:a3:5f:2a:cc:22:ac: 9d:d7:b1:1a:45:81:ff:c2:96:63:e5:3c:b0:c7:8d: e7:f1:cf:b4:fc:d2:50:e6:b4:a4:eb:65:fc:9f:1c: 0e:80:6d:8f:d1:5b:6f:be:98:fa:b1:21:8c:79:40: c6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:22:7C:AA:08:0D:8C:A7:8C:18:91:B1:03:C4:F5:C0:7D:97:53:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/aaf0afb9-21cc-3093-9672-d4bd78801824.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 104.241.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:2b:e6:2d:f7:20:e9:53:86:9d:45:12:98:4e:39:44:21:a2: aa:16:39:60:a6:4f:c9:40:5f:3f:56:9f:38:da:5f:53:d8:ac: 43:94:8e:0c:b6:aa:db:cf:4f:76:44:63:96:79:12:83:98:87: 80:99:84:fa:70:45:03:8c:b4:0b:12:80:7e:36:17:3e:ba:7b: eb:d9:4f:ca:16:a9:05:c8:0b:fc:5b:fc:03:c3:17:64:8b:a9: 6e:82:76:c5:0b:f6:f8:94:dc:2c:e5:d5:e8:28:ce:a5:e4:0d: c9:f5:79:3d:ba:c6:f3:20:73:8c:a6:2f:69:70:a9:21:f1:9c: 26:35:1e:1a:b5:b7:89:2c:c8:d1:93:36:ce:e7:04:64:9c:18: 28:24:44:e6:dd:11:74:6d:f9:11:e1:01:ea:50:1d:85:a9:ed: 47:af:95:d0:51:95:d5:bd:28:78:3b:44:80:ce:e8:fc:06:9b: 0f:69:00:e1:f2:f1:d8:46:68:62:72:b6:07:b3:67:e9:85:be: e7:1a:c9:56:d7:09:61:7b:b8:68:6a:5b:12:c1:3f:b3:d3:6d: 39:ac:8f:ce:48:eb:0e:d5:02:b8:ed:4e:47:57:61:ef:fc:c1: 67:b4:40:89:57:63:36:36:ee:a4:a5:7d:7a:ec:30:cf:7a:97: fe:75:0e:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0L5rmotdg+FmpyNGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDMwMzE0MjAyMVoXDTI2MDYwMTEzMjAyMVowLzEtMCsGA1UEAxMk YjU2ZDI4MDEtMDkzMS00YTA2LThmMWMtMTUyM2M2OGEzNTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxudsQE39m3Cr7S8OEgguDcm2/uAUq1zMUfno O7lPj4YMiY2gRHqvlpTS9nO6ew/rn2fCn0KyiRRX8Rf09SjjB0EGW8OVyjdzcBlL cxpC4FmOfACuh9AxL/mjVB7CCXCPS09QuxnZkw6STaO/hp0yill2VnnEbx/sR7S+ bD3Xl04eo9uVcFShgb5qLPNbpoNxgCiJxZhMZQuRsEmECn019eUzPZnc2jYAaGoy ghubAlavD38X9zC47r/91mLAIIzPP4P6EfBGamL/SJ6jXyrMIqyd17EaRYH/wpZj 5Tywx43n8c+0/NJQ5rSk62X8nxwOgG2P0Vtvvpj6sSGMeUDGIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkifKoIDYynjBiRsQPE9cB9l1OzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYWFmMGFmYjktMjFjYy0z MDkzLTk2NzItZDRiZDc4ODAxODI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPGyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkr5i33IOlThp1FEphOOUQhoqoWOWCmT8lAXz9WnzjaX1PYrEOUjgy2 qtvPT3ZEY5Z5EoOYh4CZhPpwRQOMtAsSgH42Fz66e+vZT8oWqQXIC/xb/APDF2SL qW6CdsUL9viU3Czl1egozqXkDcn1eT26xvMgc4ymL2lwqSHxnCY1Hhq1t4ksyNGT Ns7nBGScGCgkRObdEXRt+RHhAepQHYWp7UevldBRldW9KHg7RIDO6PwGmw9pAOHy 8dhGaGJytgezZ+mFvucayVbXCWF7uGhqWxLBP7PTbTmsj85I6w7VArjtTkdXYe/8 wWe0QIlXYzY27qSlfXrsMM96l/51DuU= -----END CERTIFICATE-----Generated at Thu Mar 5 14:01:41 2026 by rpki-client