$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/2a9f1de8-5c57-323b-af9a-2f5ed8ca7d37.roa File: 2a9f1de8-5c57-323b-af9a-2f5ed8ca7d37.roa (raw, json) Hash identifier: kRY9j4DNQ0Tk0NcmNmibU81GLOobJg2Qrb3wmnIJN/E= Subject key identifier: 4F:C3:D9:59:0B:66:D2:61:AC:59:25:B8:E5:E4:1F:28:F7:52:A9:B6 Certificate issuer: /CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b Certificate serial: 010D0C9F4328584D8EF5643DC2DE486CBEE9FF90 Authority key identifier: B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/2a9f1de8-5c57-323b-af9a-2f5ed8ca7d37.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 1299 IP address blocks: 104.247.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:64:3d:c2:de:48:6c:be:e9:ff:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=f3b5c2c6-9095-43a0-ab79-872fa9413127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a8:4d:ed:8e:8e:1a:b3:59:1f:7c:e5:84:0d: a3:4c:07:cb:ee:62:72:db:46:7a:ec:95:38:93:bc: 90:20:3b:76:46:26:e2:76:26:9a:ed:e6:d5:36:80: 46:49:7e:e2:63:84:05:fe:bf:1e:3c:e2:be:11:b6: 2b:d6:9a:5d:51:2d:b9:8d:cc:26:92:00:43:73:7c: b0:82:99:dd:4d:90:4e:88:de:a1:49:f0:b2:44:c5: c1:86:d5:77:89:6c:b8:c2:02:2b:70:02:15:c1:a7: ae:1a:b5:52:6f:a4:bb:f7:87:5b:2f:7d:2c:b7:21: b5:82:e9:9e:16:fa:cf:57:96:4e:1d:49:11:3d:9d: 7e:d9:f0:ff:74:c8:21:1d:80:e5:9e:de:22:d1:1f: 92:60:1f:44:5a:e4:ec:08:4e:3f:bb:e4:ba:3a:83: ad:ed:99:79:c5:94:03:6c:09:fe:c3:cd:e0:2e:bd: 6a:2e:09:7f:aa:8e:fb:d5:b8:b7:73:23:4e:c4:ae: d0:54:86:c1:e6:68:d3:82:82:99:a4:00:99:ad:7e: 7a:cc:d2:38:95:46:fc:c1:6f:e9:bc:b8:01:ec:d0: 77:3f:60:70:a8:f5:d8:10:f2:61:10:ca:23:dc:6c: d6:bb:8c:71:5d:8d:c9:64:0c:6c:5e:c1:d2:d0:b3: 14:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C3:D9:59:0B:66:D2:61:AC:59:25:B8:E5:E4:1F:28:F7:52:A9:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/2a9f1de8-5c57-323b-af9a-2f5ed8ca7d37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl X509v3 Authority Key Identifier: keyid:B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer sbgp-ipAddrBlock: critical IPv4: 104.247.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:59:5e:84:df:5a:71:91:88:20:b3:f0:3e:27:4f:18:8c:e2: 68:47:ea:9f:d4:84:28:94:87:1d:fe:a6:2b:20:80:76:76:0b: d9:1d:4e:d4:98:a0:67:42:d0:bf:1f:3f:31:6f:80:df:0b:7f: 85:50:3b:70:56:a3:95:a1:d3:f5:2b:b8:1e:20:3e:c8:14:f8: 1f:47:5d:77:a1:83:da:fb:8f:78:6d:4e:5b:c8:a3:7e:53:33: 24:b7:1f:0f:10:a7:55:12:e8:1b:68:2a:eb:78:fa:95:27:4f: a3:f2:61:fc:b8:e0:97:57:21:b8:94:ac:4a:af:25:5c:42:47: c2:63:63:b8:42:86:31:82:08:22:31:f6:49:93:95:8d:19:eb: 5f:ff:bb:40:ee:62:7a:e3:3b:3b:e6:7b:37:a5:a3:a7:8b:27: 5e:e7:83:6f:9d:a9:bc:c1:69:8a:81:5e:15:7d:85:29:1e:9d: 28:bf:bd:b6:3c:23:72:11:a9:8c:9b:24:b5:5e:3b:be:2c:b3: 40:dd:a0:21:6e:91:9a:cb:36:5f:2b:64:d1:f3:71:37:a2:2f: a4:1f:fc:f6:ca:b0:71:05:0e:bd:00:04:5f:ab:59:ca:58:a2: 64:07:c1:05:b9:fb:ed:89:5e:c9:0f:f7:6d:40:6e:03:02:78: bd:92:cf:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9WQ9wt5IbL7p/5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIwNzhmN2EtOGJjNC00NmMzLWI5Y2ItNzMzMDc3NWE3 ODBiMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZjNiNWMyYzYtOTA5NS00M2EwLWFiNzktODcyZmE5NDEzMTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6hN7Y6OGrNZH3zlhA2jTAfL7mJy20Z67JU4 k7yQIDt2Ribidiaa7ebVNoBGSX7iY4QF/r8ePOK+EbYr1ppdUS25jcwmkgBDc3yw gpndTZBOiN6hSfCyRMXBhtV3iWy4wgIrcAIVwaeuGrVSb6S794dbL30styG1gume FvrPV5ZOHUkRPZ1+2fD/dMghHYDlnt4i0R+SYB9EWuTsCE4/u+S6OoOt7Zl5xZQD bAn+w83gLr1qLgl/qo771bi3cyNOxK7QVIbB5mjTgoKZpACZrX56zNI4lUb8wW/p vLgB7NB3P2BwqPXYEPJhEMoj3GzWu4xxXY3JZAxsXsHS0LMU/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/D2VkLZtJhrFkluOXkHyj3Uqm2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYjA3 OGY3YS04YmM0LTQ2YzMtYjljYi03MzMwNzc1YTc4MGIvMmE5ZjFkZTgtNWM1Ny0z MjNiLWFmOWEtMmY1ZWQ4Y2E3ZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGIwNzhmN2EtOGJjNC00NmMzLWI5 Y2ItNzMzMDc3NWE3ODBiLzBiMDc4ZjdhLThiYzQtNDZjMy1iOWNiLTczMzA3NzVh NzgwYi5jcmwwHwYDVR0jBBgwFoAUt248f7jEEIrnvlA07Aoj48xe7PEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYjA3OGY3YS04YmM0LTQ2YzMtYjljYi03MzMw Nzc1YTc4MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPd1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZZXoTfWnGRiCCz8D4nTxiM4mhH6p/UhCiUhx3+pisggHZ2C9kdTtSY oGdC0L8fPzFvgN8Lf4VQO3BWo5Wh0/UruB4gPsgU+B9HXXehg9r7j3htTlvIo35T MyS3Hw8Qp1US6BtoKut4+pUnT6PyYfy44JdXIbiUrEqvJVxCR8JjY7hChjGCCCIx 9kmTlY0Z61//u0DuYnrjOzvmezelo6eLJ17ng2+dqbzBaYqBXhV9hSkenSi/vbY8 I3IRqYybJLVeO74ss0DdoCFukZrLNl8rZNHzcTeiL6Qf/PbKsHEFDr0ABF+rWcpY omQHwQW5++2JXskP921AbgMCeL2SzwY= -----END CERTIFICATE-----Generated at Wed May 13 07:58:50 2026 by rpki-client