$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/485a4304-d5de-343c-969d-5641796f6864.roa File: 485a4304-d5de-343c-969d-5641796f6864.roa (raw, json) Hash identifier: 687rD3/b6kg1FefmFVkeo21JZ44kIyzJIikrp5LSAUw= Subject key identifier: 0A:02:EE:88:59:8B:16:BA:F8:3C:25:9D:19:25:B1:AE:D7:C0:BB:EF Certificate issuer: /CN=f59a5af4-2483-44fd-8539-cacfd54edc45 Certificate serial: 010D0C9F4328584D4FBF7D5E8261A0B8386BBB00 Authority key identifier: 6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/485a4304-d5de-343c-969d-5641796f6864.roa Signing time: Fri 27 Mar 2026 21:36:16 +0000 ROA not before: Fri 27 Mar 2026 21:36:16 +0000 ROA not after: Thu 25 Jun 2026 21:36:16 +0000 asID: 19523 IP address blocks: 104.167.252.0/23 maxlen: 23 104.167.252.0/24 maxlen: 24 104.167.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4f:bf:7d:5e:82:61:a0:b8:38:6b:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f59a5af4-2483-44fd-8539-cacfd54edc45 Validity Not Before: Mar 27 21:36:16 2026 GMT Not After : Jun 25 21:36:16 2026 GMT Subject: CN=022687e2-30bd-47f3-9d0b-57ccebce41f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a5:be:59:58:a8:18:23:29:2d:c1:94:fc:ed: 91:a9:a2:e6:fd:d2:4e:19:32:d2:df:ed:4b:fe:f3: f1:e9:d5:58:e8:95:bb:6b:b3:05:49:d3:ad:ba:c1: 87:58:87:0c:3b:e3:4c:65:a8:d8:e8:71:1e:42:59: 41:96:8e:3b:c8:6d:19:75:32:95:31:1e:81:2b:04: 37:25:6c:de:c7:47:36:57:7b:19:a5:a8:85:d1:e2: be:71:37:21:c3:f6:2c:b3:e3:06:22:e1:59:ae:70: 84:1f:3b:2e:b1:da:96:a1:18:ec:1b:31:ea:7d:42: c4:31:36:4f:01:b5:d9:63:64:76:75:dc:f6:da:71: 4f:61:ba:b1:72:80:0a:2e:32:d0:a4:df:d9:27:db: 55:ea:62:8e:76:65:c8:6b:e7:b5:9a:84:fa:79:0f: 33:1a:b7:6c:6b:2b:2a:82:38:d9:3b:22:91:93:59: bd:88:f2:ef:5a:b8:eb:8b:b2:33:5e:e5:d8:3d:c8: 6e:98:1a:8b:51:12:5a:4f:75:03:9b:67:b6:6c:05: 08:a5:07:02:cf:72:bd:5f:81:4d:96:60:c4:5e:52: f6:0e:69:99:96:90:fa:2d:9b:89:d9:53:54:63:5e: f0:87:1e:1d:2d:3a:fa:e6:cb:d5:54:0d:b7:8d:43: 0d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:02:EE:88:59:8B:16:BA:F8:3C:25:9D:19:25:B1:AE:D7:C0:BB:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/485a4304-d5de-343c-969d-5641796f6864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl X509v3 Authority Key Identifier: keyid:6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer sbgp-ipAddrBlock: critical IPv4: 104.167.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:15:e9:6a:aa:ec:a1:30:79:73:bc:31:62:67:ef:73:cb:27: 9e:ab:ad:0b:38:4c:57:54:39:56:b0:a7:c1:cd:3c:00:bc:c0: 8b:aa:46:15:79:59:f2:0d:c8:32:e6:4a:84:33:47:24:43:65: 29:e4:8c:1a:81:b0:5d:bb:13:50:53:43:ea:6d:22:d8:a2:4a: 37:46:97:65:81:7a:f6:f4:b1:64:4a:1d:a7:85:25:8d:fd:e1: d0:b2:0f:72:34:e2:2c:6e:34:ba:4f:f2:8a:a3:9f:41:da:61: 0c:4c:43:04:bf:13:1d:33:15:82:f2:78:d7:75:10:a7:58:f3: d8:f6:0c:83:55:8a:63:87:fd:a0:d1:79:96:28:9d:35:27:11: 60:0e:90:b0:ff:9e:87:92:7e:6d:94:6d:d7:f6:99:3d:81:ef: 77:f5:aa:a8:8e:57:c0:db:ca:94:09:33:e2:1c:18:8b:3b:91: 8f:6d:58:f1:79:cf:98:58:bc:e4:da:36:37:22:eb:d8:fb:2d: 36:86:bf:6f:91:4e:33:59:28:19:b0:fa:11:42:3a:1f:da:b8: cc:4f:01:06:11:7f:6c:c4:d7:7c:fc:42:a3:92:eb:a1:fb:70: 1a:f3:6a:06:2a:20:73:d0:bf:17:df:59:e9:bb:93:2b:29:83: 89:08:19:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Pv31egmGguDhruwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjU5YTVhZjQtMjQ4My00NGZkLTg1MzktY2FjZmQ1NGVk YzQ1MB4XDTI2MDMyNzIxMzYxNloXDTI2MDYyNTIxMzYxNlowLzEtMCsGA1UEAxMk MDIyNjg3ZTItMzBiZC00N2YzLTlkMGItNTdjY2ViY2U0MWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6W+WVioGCMpLcGU/O2RqaLm/dJOGTLS3+1L /vPx6dVY6JW7a7MFSdOtusGHWIcMO+NMZajY6HEeQllBlo47yG0ZdTKVMR6BKwQ3 JWzex0c2V3sZpaiF0eK+cTchw/Yss+MGIuFZrnCEHzsusdqWoRjsGzHqfULEMTZP AbXZY2R2ddz22nFPYbqxcoAKLjLQpN/ZJ9tV6mKOdmXIa+e1moT6eQ8zGrdsaysq gjjZOyKRk1m9iPLvWrjri7IzXuXYPchumBqLURJaT3UDm2e2bAUIpQcCz3K9X4FN lmDEXlL2DmmZlpD6LZuJ2VNUY17whx4dLTr65svVVA23jUMN1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoC7ohZixa6+DwlnRklsa7XwLvvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mNTlh NWFmNC0yNDgzLTQ0ZmQtODUzOS1jYWNmZDU0ZWRjNDUvNDg1YTQzMDQtZDVkZS0z NDNjLTk2OWQtNTY0MTc5NmY2ODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZjU5YTVhZjQtMjQ4My00NGZkLTg1 MzktY2FjZmQ1NGVkYzQ1L2Y1OWE1YWY0LTI0ODMtNDRmZC04NTM5LWNhY2ZkNTRl ZGM0NS5jcmwwHwYDVR0jBBgwFoAUbNMHi0i2IcjLGHXFI2XehGOvG78wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mNTlhNWFmNC0yNDgzLTQ0ZmQtODUzOS1jYWNm ZDU0ZWRjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaKf8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4V6Wqq7KEweXO8MWJn73PLJ56rrQs4TFdUOVawp8HNPAC8wIuqRhV5 WfINyDLmSoQzRyRDZSnkjBqBsF27E1BTQ+ptItiiSjdGl2WBevb0sWRKHaeFJY39 4dCyD3I04ixuNLpP8oqjn0HaYQxMQwS/Ex0zFYLyeNd1EKdY89j2DINVimOH/aDR eZYonTUnEWAOkLD/noeSfm2Ubdf2mT2B73f1qqiOV8DbypQJM+IcGIs7kY9tWPF5 z5hYvOTaNjci69j7LTaGv2+RTjNZKBmw+hFCOh/auMxPAQYRf2zE13z8QqOS66H7 cBrzagYqIHPQvxffWem7kyspg4kIGec= -----END CERTIFICATE-----Generated at Tue Apr 14 16:02:37 2026 by rpki-client