$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa File: a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa (raw, json) Hash identifier: 5XfWOInsKCC/nb1FJ26WP0242dUTjqJILEUtFcaIVgw= Subject key identifier: 1F:9F:66:7F:1A:07:FD:AC:3E:FE:E6:F1:D1:EC:C9:29:F1:6A:4E:1D Certificate issuer: /CN=900920d7-dc26-412d-b92a-7af35af2cc24 Certificate serial: 010D0C9F4328584D3DFFA7AF8919AD7C32444640 Authority key identifier: D7:72:A6:9A:5A:9A:5E:31:05:1B:21:51:B8:3B:C7:48:89:48:D3:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 36694 IP address blocks: 104.219.228.0/22 maxlen: 24 2620:11d:1000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:a7:af:89:19:ad:7c:32:44:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900920d7-dc26-412d-b92a-7af35af2cc24 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=6f5ddc73-2275-4c76-bbd9-48164c361632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b3:f5:23:23:b0:5c:a1:ec:63:30:24:42:ba: fb:cb:69:63:b9:b4:ed:46:c8:18:74:a1:79:e8:16: 2d:ae:87:2d:94:a0:b2:4d:61:5c:c0:9c:d2:b9:fd: 14:a9:1c:f7:9f:f7:99:a9:a7:d0:0e:d7:e5:e4:a7: 1e:3c:13:e7:e8:38:46:23:7f:74:65:4d:04:09:11: 44:9a:fa:5e:15:49:05:96:d3:b9:d7:56:56:e4:49: cc:e2:9e:81:cb:81:e2:7e:63:83:d6:dc:74:4a:60: 50:50:68:4a:3f:88:5a:b6:19:d2:89:b1:da:9c:c1: f8:79:2b:a5:05:7a:1d:d0:09:a7:3b:f8:e0:1b:3d: 49:d2:0b:a4:14:2a:df:c9:ea:28:de:9b:e1:fb:d6: 79:89:16:06:83:8e:b2:ac:8f:3f:54:95:18:38:42: 6d:6f:01:d1:82:b1:8f:30:01:9a:5f:f7:ed:48:a1: ee:26:64:9f:56:b9:99:fb:c6:85:ac:e3:18:ff:6e: 29:6c:ea:4d:fd:5b:ef:f0:90:e4:23:93:a3:82:0d: 84:bf:94:5f:35:8f:7c:7f:37:b8:2a:c6:64:46:30: 76:9a:fc:a6:f3:42:a9:bb:82:43:6e:0d:6e:67:35: 68:5e:1d:ab:7b:a3:da:12:99:a6:2e:08:f0:b1:e3: b6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9F:66:7F:1A:07:FD:AC:3E:FE:E6:F1:D1:EC:C9:29:F1:6A:4E:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.crl X509v3 Authority Key Identifier: keyid:D7:72:A6:9A:5A:9A:5E:31:05:1B:21:51:B8:3B:C7:48:89:48:D3:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer sbgp-ipAddrBlock: critical IPv4: 104.219.228.0/22 IPv6: 2620:11d:1000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:2d:dd:d1:26:4b:7b:d1:ca:ba:0a:d0:fe:67:e3:d8:6c:63: d3:cd:3a:06:e5:69:06:92:d7:cd:33:3b:44:ca:e6:62:7c:18: c3:49:c9:53:d9:31:5c:4a:99:0a:e6:3a:04:49:0b:d5:b4:d2: 94:54:d9:2e:d3:8b:25:0f:2d:2b:fc:ff:f3:96:f9:db:ec:15: 19:b5:b6:2b:2b:f4:2a:01:b8:b0:de:5d:fc:d6:4d:1e:5a:79: 8c:44:c1:85:5f:cf:b0:56:a2:56:50:15:34:07:82:97:1f:bf: 48:da:0f:78:cf:62:48:c7:ca:20:01:b5:0c:3b:79:0c:00:e1: a6:e2:75:bc:e1:5e:e5:50:59:46:48:40:6c:3e:bc:3f:d8:17: 70:97:d8:9c:3e:50:e5:44:34:83:a8:40:cd:c4:a1:cc:74:c4: dc:6c:4d:19:2f:70:e3:d4:fa:d5:a3:87:73:8b:d5:97:f5:df: ce:d4:51:fb:c5:eb:dc:63:d9:1a:1d:6a:6c:8f:21:0e:3a:88: 70:13:bd:af:08:75:83:36:2a:f2:21:01:8c:7f:5b:e7:3e:b5: 19:34:3f:6d:60:3e:c7:25:82:cc:d3:6a:ab:d7:24:15:10:0a: bf:ae:57:54:b5:5e:6a:05:4b:34:6d:ea:3e:5e:c0:a3:35:11: 3c:c3:9d:72 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE09/6eviRmtfDJERkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwOTIwZDctZGMyNi00MTJkLWI5MmEtN2FmMzVhZjJj YzI0MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NmY1ZGRjNzMtMjI3NS00Yzc2LWJiZDktNDgxNjRjMzYxNjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbP1IyOwXKHsYzAkQrr7y2ljubTtRsgYdKF5 6BYtroctlKCyTWFcwJzSuf0UqRz3n/eZqafQDtfl5KcePBPn6DhGI390ZU0ECRFE mvpeFUkFltO511ZW5EnM4p6By4HifmOD1tx0SmBQUGhKP4hathnSibHanMH4eSul BXod0AmnO/jgGz1J0gukFCrfyeoo3pvh+9Z5iRYGg46yrI8/VJUYOEJtbwHRgrGP MAGaX/ftSKHuJmSfVrmZ+8aFrOMY/24pbOpN/Vvv8JDkI5Ojgg2Ev5RfNY98fze4 KsZkRjB2mvym80Kpu4JDbg1uZzVoXh2re6PaEpmmLgjwseO2xQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFB+fZn8aB/2sPv7m8dHsySnxak4dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDA5 MjBkNy1kYzI2LTQxMmQtYjkyYS03YWYzNWFmMmNjMjQvYTg2ZGVhNGYtNWY2Zi0z MmFlLThhMjUtZWFkNGE0ZGJhMmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTAwOTIwZDctZGMyNi00MTJkLWI5 MmEtN2FmMzVhZjJjYzI0LzkwMDkyMGQ3LWRjMjYtNDEyZC1iOTJhLTdhZjM1YWYy Y2MyNC5jcmwwHwYDVR0jBBgwFoAU13KmmlqaXjEFGyFRuDvHSIlI0+AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDA5MjBkNy1kYzI2LTQxMmQtYjkyYS03YWYz NWFmMmNjMjQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCaNvkMA8E AgACMAkDBwQmIAEdEAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACS3d0SZLe9HKugrQ/mfj2Gxj0806BuVp BpLXzTM7RMrmYnwYw0nJU9kxXEqZCuY6BEkL1bTSlFTZLtOLJQ8tK/z/85b52+wV GbW2Kyv0KgG4sN5d/NZNHlp5jETBhV/PsFaiVlAVNAeClx+/SNoPeM9iSMfKIAG1 DDt5DADhpuJ1vOFe5VBZRkhAbD68P9gXcJfYnD5Q5UQ0g6hAzcShzHTE3GxNGS9w 49T61aOHc4vVl/XfztRR+8Xr3GPZGh1qbI8hDjqIcBO9rwh1gzYq8iEBjH9b5z61 GTQ/bWA+xyWCzNNqq9ckFRAKv65XVLVeagVLNG3qPl7AozURPMOdcg== -----END CERTIFICATE-----Generated at Fri Mar 27 05:05:23 2026 by rpki-client