$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/74c6c214-6aee-3ff1-9584-bfea1eba2eac.roa File: 74c6c214-6aee-3ff1-9584-bfea1eba2eac.roa (raw, json) Hash identifier: sz2p64KyLljQlCyuXNYuxa58HWns6NhFcfOlMYCd3xU= Subject key identifier: 0B:FE:C0:CC:A2:89:A2:0F:F8:5B:A5:2A:E6:D7:6D:33:D0:47:CF:46 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584D492A6F49560173C72E12B000 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/74c6c214-6aee-3ff1-9584-bfea1eba2eac.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 5645 IP address blocks: 104.246.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:6f:49:56:01:73:c7:2e:12:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=775efad1-d254-48c3-9c43-45611f16c632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d8:e2:89:8a:7d:3e:da:84:f8:69:b1:0a:29: 3d:f4:38:12:52:89:cb:82:72:4a:d5:6b:ba:8c:94: dd:eb:45:86:c9:e6:cd:6a:aa:ef:d4:74:55:78:60: 03:9d:60:c3:7b:c4:80:08:1c:a7:50:7e:65:37:92: c1:7e:55:8f:1a:9e:8d:8a:f0:fc:61:02:af:dc:ee: 14:0b:41:c3:cb:4b:0e:c8:6c:e6:b1:42:32:c3:a4: c6:b4:2b:65:e9:ea:e5:f8:11:99:61:b4:d5:de:7e: 18:6f:98:67:bf:5e:43:54:fe:80:cf:b7:df:75:f5: 5a:27:7c:cd:e7:bf:cb:f5:17:80:41:c3:2f:64:fc: 23:f7:6f:d5:3c:7a:ed:6d:11:fe:64:ef:45:7a:56: 35:0e:ec:b0:f1:e0:89:66:64:9a:61:62:4b:1f:0f: 51:ea:ee:b2:21:7e:14:c9:2a:5e:8e:13:a7:e3:17: e5:ca:f8:b2:5e:d9:e3:13:ea:28:2c:57:87:8a:1d: 81:55:93:b8:0d:30:44:6c:46:ec:3e:b8:f0:e6:cf: 2c:3c:cf:00:ee:ef:12:fd:59:1e:85:f0:d6:8a:82: 18:ab:45:ca:9d:46:69:e7:4c:03:a0:cf:f8:9e:37: fc:cf:f0:fb:7e:aa:85:e4:95:7b:1c:40:d1:c2:3b: f9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:FE:C0:CC:A2:89:A2:0F:F8:5B:A5:2A:E6:D7:6D:33:D0:47:CF:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/74c6c214-6aee-3ff1-9584-bfea1eba2eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 104.246.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:0f:4e:bf:f5:d4:36:86:b1:04:eb:7d:ea:1b:d3:c0:dd:7f: d4:52:ac:20:d2:8a:c5:6e:12:8e:4e:e6:9c:39:61:eb:f2:ea: ed:be:90:de:4a:3e:05:59:72:72:d0:fd:45:46:95:9c:3c:38: 42:c9:06:ce:c7:ea:75:59:ba:0e:bc:41:fa:a1:18:a4:a4:10: 7d:29:e4:db:6e:e6:e1:c9:4c:9f:95:53:a9:d6:03:d9:19:83: 18:53:4c:88:b1:23:ec:30:27:9a:e9:4b:43:2f:09:59:28:5d: 6a:0a:d8:3f:9d:1b:a1:0a:b5:be:db:36:ea:b3:6d:ea:cb:b2: 68:38:81:c4:24:e9:5a:57:22:07:87:07:83:18:27:fd:9c:a1: f4:6f:22:27:3a:70:22:14:f3:e4:f4:7a:1d:7b:22:47:c4:90: 0b:3d:ac:d5:6a:3e:fb:0c:e1:a8:1a:31:2f:a0:7a:83:68:20: 1b:0a:05:0e:60:b1:0a:f8:a5:ed:3a:58:5d:64:47:30:af:7e: e9:29:a9:36:a0:44:15:bf:87:9b:86:f2:71:48:5b:48:e6:5b: 61:c3:bb:45:fa:b9:3f:02:56:2c:ad:77:9b:0f:d7:ad:5e:60: f1:56:f9:dc:54:f0:ab:9f:11:7d:7d:72:8f:a1:bf:ed:07:2a: 53:cb:32:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKm9JVgFzxy4SsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk Nzc1ZWZhZDEtZDI1NC00OGMzLTljNDMtNDU2MTFmMTZjNjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidjiiYp9PtqE+GmxCik99DgSUonLgnJK1Wu6 jJTd60WGyebNaqrv1HRVeGADnWDDe8SACBynUH5lN5LBflWPGp6NivD8YQKv3O4U C0HDy0sOyGzmsUIyw6TGtCtl6erl+BGZYbTV3n4Yb5hnv15DVP6Az7ffdfVaJ3zN 57/L9ReAQcMvZPwj92/VPHrtbRH+ZO9FelY1Duyw8eCJZmSaYWJLHw9R6u6yIX4U ySpejhOn4xflyviyXtnjE+ooLFeHih2BVZO4DTBEbEbsPrjw5s8sPM8A7u8S/Vke hfDWioIYq0XKnUZp50wDoM/4njf8z/D7fqqF5JV7HEDRwjv5OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAv+wMyiiaIP+FulKubXbTPQR89GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvNzRjNmMyMTQtNmFlZS0z ZmYxLTk1ODQtYmZlYTFlYmEyZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPatMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsPTr/11DaGsQTrfeob08Ddf9RSrCDSisVuEo5O5pw5Yevy6u2+kN5K PgVZcnLQ/UVGlZw8OELJBs7H6nVZug68QfqhGKSkEH0p5Ntu5uHJTJ+VU6nWA9kZ gxhTTIixI+wwJ5rpS0MvCVkoXWoK2D+dG6EKtb7bNuqzberLsmg4gcQk6VpXIgeH B4MYJ/2cofRvIic6cCIU8+T0eh17IkfEkAs9rNVqPvsM4agaMS+geoNoIBsKBQ5g sQr4pe06WF1kRzCvfukpqTagRBW/h5uG8nFIW0jmW2HDu0X6uT8CViytd5sP161e YPFW+dxU8KufEX19co+hv+0HKlPLMlE= -----END CERTIFICATE-----Generated at Wed Mar 25 18:18:45 2026 by rpki-client