$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70/418e6398-6476-3e8e-a61e-c3b2c7bd36bf.roa File: 418e6398-6476-3e8e-a61e-c3b2c7bd36bf.roa (raw, json) Hash identifier: 34YPu31s5DpijDKpBWLqrO6KopO3zXTYD9KnpmGNeek= Subject key identifier: 42:05:BC:DF:4B:A9:01:CA:72:44:52:7B:A0:CF:04:A9:A5:A3:9F:39 Certificate issuer: /CN=22b400c5-de2c-4a3d-a19e-a928e8743b70 Certificate serial: 010D0C9F4328584DAC456EA3FFB32F77A54D57F0 Authority key identifier: 9C:D4:4A:9F:6E:93:8A:0E:E6:8D:83:25:5B:18:16:64:C3:6E:B5:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70/418e6398-6476-3e8e-a61e-c3b2c7bd36bf.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 14618 IP address blocks: 104.36.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70/22b400c5-de2c-4a3d-a19e-a928e8743b70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70/22b400c5-de2c-4a3d-a19e-a928e8743b70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:6e:a3:ff:b3:2f:77:a5:4d:57:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22b400c5-de2c-4a3d-a19e-a928e8743b70 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=0c5eec7f-ebb5-4af1-a0fc-c318478fce2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b7:a3:8d:3b:b0:c7:bb:d6:f4:94:89:71:b7: fc:05:fd:b0:44:9c:53:bb:da:1e:28:aa:8c:39:f9: c2:b3:5d:39:00:d8:05:2b:70:dd:1f:bb:2c:59:e9: 16:3b:f5:b6:5a:7e:a8:a6:bd:a0:16:83:26:a7:49: a4:e1:4f:f0:b6:e9:1f:6b:e9:be:85:07:ec:c5:9c: c1:6a:17:01:43:ea:31:52:bb:95:5c:6b:a8:7a:6d: fa:53:dd:5d:ca:39:2e:36:fe:60:f0:43:86:75:06: 75:6a:8a:80:02:1c:41:59:d3:02:31:5c:df:32:d4: 21:5d:2e:06:36:55:f3:8f:f4:df:f7:c2:20:42:3c: 2e:34:3b:b1:79:bf:8a:a9:33:ba:f2:62:29:0e:e8: ba:65:82:57:ea:64:61:1e:16:4f:23:4d:cd:6d:c7: d9:a7:10:a9:54:7c:f1:cc:8d:6e:d6:6e:e0:51:35: d9:c4:c3:74:f2:29:47:31:aa:a8:a1:1b:38:36:5f: c6:e0:06:cf:22:0e:6d:3c:b4:cf:db:76:32:11:79: 09:43:01:7c:74:70:0f:9a:45:e2:ea:39:af:08:44: 89:36:61:9b:f5:79:00:0d:c0:cb:53:6d:92:be:c9: 0c:2a:cf:8b:61:e1:31:f1:95:7d:fc:94:fe:08:98: bd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:05:BC:DF:4B:A9:01:CA:72:44:52:7B:A0:CF:04:A9:A5:A3:9F:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70/418e6398-6476-3e8e-a61e-c3b2c7bd36bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70/22b400c5-de2c-4a3d-a19e-a928e8743b70.crl X509v3 Authority Key Identifier: keyid:9C:D4:4A:9F:6E:93:8A:0E:E6:8D:83:25:5B:18:16:64:C3:6E:B5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70.cer sbgp-ipAddrBlock: critical IPv4: 104.36.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:43:3f:0e:83:4f:a0:df:d9:eb:e4:9b:0d:22:62:3c:d9:93: b1:61:c3:22:27:bb:3e:24:64:71:45:c5:08:38:04:eb:60:3f: f3:24:fa:fa:ae:06:a5:34:08:09:ab:8a:c7:af:e0:19:4f:c8: 21:19:c7:15:53:7a:3b:e9:46:07:3b:bd:62:24:bc:51:a9:17: ea:cd:07:a4:99:a7:d4:56:55:9f:66:dc:77:b9:e4:ed:15:f2: 33:d1:a9:eb:b6:39:89:1d:97:5a:75:60:fe:4c:e0:af:71:2e: a1:e9:72:50:d7:c2:0f:36:a0:d7:24:82:3a:30:6e:5c:23:15: 5e:10:7c:d1:7b:39:f3:43:78:50:d1:85:81:43:36:14:4c:df: 90:ef:c5:e2:84:0d:86:91:7b:f5:5c:f8:cf:78:ce:0a:1e:f6: 79:a3:ce:cb:87:89:15:6b:d1:0b:f7:b1:3c:23:21:69:bf:88: 8e:eb:8d:4a:12:5b:be:88:6d:4e:20:d2:fc:c3:76:56:69:8d: 2b:cc:45:d3:2d:5d:27:8f:af:4a:d9:e1:e3:cd:91:c2:a9:ab: 17:5d:17:5e:eb:a5:00:b3:85:72:32:6a:36:cc:23:e5:08:19: 55:f9:e1:6c:f0:b4:66:72:79:0f:91:11:81:6b:41:2e:2f:1f: 70:0f:33:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRW6j/7Mvd6VNV/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJiNDAwYzUtZGUyYy00YTNkLWExOWUtYTkyOGU4NzQz YjcwMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk MGM1ZWVjN2YtZWJiNS00YWYxLWEwZmMtYzMxODQ3OGZjZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLejjTuwx7vW9JSJcbf8Bf2wRJxTu9oeKKqM OfnCs105ANgFK3DdH7ssWekWO/W2Wn6opr2gFoMmp0mk4U/wtukfa+m+hQfsxZzB ahcBQ+oxUruVXGuoem36U91dyjkuNv5g8EOGdQZ1aoqAAhxBWdMCMVzfMtQhXS4G NlXzj/Tf98IgQjwuNDuxeb+KqTO68mIpDui6ZYJX6mRhHhZPI03NbcfZpxCpVHzx zI1u1m7gUTXZxMN08ilHMaqooRs4Nl/G4AbPIg5tPLTP23YyEXkJQwF8dHAPmkXi 6jmvCESJNmGb9XkADcDLU22SvskMKs+LYeEx8ZV9/JT+CJi9UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIFvN9LqQHKckRSe6DPBKmlo585MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMmI0 MDBjNS1kZTJjLTRhM2QtYTE5ZS1hOTI4ZTg3NDNiNzAvNDE4ZTYzOTgtNjQ3Ni0z ZThlLWE2MWUtYzNiMmM3YmQzNmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjJiNDAwYzUtZGUyYy00YTNkLWEx OWUtYTkyOGU4NzQzYjcwLzIyYjQwMGM1LWRlMmMtNGEzZC1hMTllLWE5MjhlODc0 M2I3MC5jcmwwHwYDVR0jBBgwFoAUnNRKn26Tig7mjYMlWxgWZMNutb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMmI0MDBjNS1kZTJjLTRhM2QtYTE5ZS1hOTI4 ZTg3NDNiNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCQhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZDPw6DT6Df2evkmw0iYjzZk7FhwyInuz4kZHFFxQg4BOtgP/Mk+vqu BqU0CAmrisev4BlPyCEZxxVTejvpRgc7vWIkvFGpF+rNB6SZp9RWVZ9m3He55O0V 8jPRqeu2OYkdl1p1YP5M4K9xLqHpclDXwg82oNckgjowblwjFV4QfNF7OfNDeFDR hYFDNhRM35DvxeKEDYaRe/Vc+M94zgoe9nmjzsuHiRVr0Qv3sTwjIWm/iI7rjUoS W76IbU4g0vzDdlZpjSvMRdMtXSePr0rZ4ePNkcKpqxddF17rpQCzhXIyajbMI+UI GVX54WzwtGZyeQ+REYFrQS4vH3APM5s= -----END CERTIFICATE-----Generated at Thu Apr 30 12:07:46 2026 by rpki-client