$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/1f54617e-3c5e-3db3-ad0e-8c7f5e145528.roa File: 1f54617e-3c5e-3db3-ad0e-8c7f5e145528.roa (raw, json) Hash identifier: 5URaloajr3J7TapQKrmp/Z7ImacfT5NhZSLp3i5sS4s= Subject key identifier: AC:9C:34:B1:CA:CA:53:E1:0A:0E:C9:DF:82:30:39:A3:09:6F:AA:7D Certificate issuer: /CN=265b0641-047d-4787-a12d-159370bfcdb1 Certificate serial: 010D0C9F4328584D1F4A1C13CA64AC7EE0600760 Authority key identifier: 26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/1f54617e-3c5e-3db3-ad0e-8c7f5e145528.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 20473 IP address blocks: 104.171.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:1c:13:ca:64:ac:7e:e0:60:07:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=265b0641-047d-4787-a12d-159370bfcdb1 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=572cce8a-2886-47b8-89f3-cdbd228bb491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:55:12:ef:9d:24:c2:1e:7f:93:51:56:06:00: 72:93:3c:27:44:0a:01:4f:48:bd:b0:f7:0f:03:40: e1:06:eb:cc:95:02:47:37:cc:f3:3a:ef:d5:2c:dc: fb:30:a7:bc:12:be:47:df:02:0f:9b:a3:f5:b0:87: 4d:4f:1f:90:53:c1:1e:7e:f9:64:e8:4c:64:ee:fc: d1:ad:06:43:a2:60:96:90:f9:7b:59:08:e2:bb:e4: 8a:2e:d3:f4:ce:09:27:fd:2a:bc:85:d8:43:2b:25: b2:71:fd:cd:63:10:5b:92:e1:24:4d:76:90:4d:73: 6a:13:33:be:ce:1c:7c:8f:13:ee:3e:09:87:89:e9: f9:c8:4a:eb:15:a0:a1:91:d1:26:49:61:3c:1f:b6: f5:cd:3e:12:f6:c3:74:eb:89:84:e7:5e:41:57:76: ef:1e:23:23:37:b7:71:9a:01:c3:22:da:34:90:70: 84:c4:67:84:07:b5:d9:85:ea:ff:1a:a1:7d:04:a4: a9:b4:57:25:de:49:5c:37:a7:25:48:25:9a:20:cc: fc:9d:2e:2d:95:ab:f2:05:2c:4e:2d:86:25:b8:1d: ab:0b:ef:a1:aa:9a:48:6f:20:69:74:78:4a:21:de: b1:fe:45:dc:79:61:41:29:80:34:23:15:9f:01:dc: 4e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9C:34:B1:CA:CA:53:E1:0A:0E:C9:DF:82:30:39:A3:09:6F:AA:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/1f54617e-3c5e-3db3-ad0e-8c7f5e145528.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl X509v3 Authority Key Identifier: keyid:26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer sbgp-ipAddrBlock: critical IPv4: 104.171.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:92:2d:03:50:64:4d:61:f0:bb:af:4d:68:4e:06:dc:d3:ef: a9:4f:17:53:e7:d9:c8:bd:26:55:0e:29:95:5b:bd:20:30:aa: 8d:a8:1a:fb:ea:34:10:d3:b0:30:f6:86:6e:82:8a:04:79:5c: 3f:74:03:27:d2:b5:5e:ae:59:43:1a:71:68:20:b6:49:a3:ef: ca:8f:9d:e3:5e:ae:34:40:46:63:ee:eb:56:7f:2e:b7:48:a6: ad:b4:03:2d:19:0f:03:a4:d8:ca:28:aa:97:de:4a:b2:47:83: 02:54:49:83:39:12:e1:c3:03:f9:12:00:76:64:9d:1d:30:72: 0d:8a:21:1e:7f:9d:fd:9e:14:a9:ab:8d:a9:a6:7d:ca:d7:6a: 4d:7e:70:c7:20:94:f0:84:ba:f2:b0:42:55:27:a4:80:cd:c9: a1:28:e1:6b:f6:3e:5d:75:ab:76:5a:32:96:66:b1:57:41:24: 95:8d:fb:fb:f6:17:3e:8c:b5:62:30:e7:a5:ad:83:93:5a:b1: 7e:5d:c9:37:70:b4:f5:d9:25:05:ce:b5:9f:a0:66:6f:7e:1f: 79:8d:ee:09:27:e0:da:b5:c6:14:24:06:ff:06:c2:0f:0b:e4: 3c:9f:42:a1:bd:0f:ba:2a:fb:1a:25:c8:48:1b:d0:c2:55:98: 38:d8:13:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fShwTymSsfuBgB2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjY1YjA2NDEtMDQ3ZC00Nzg3LWExMmQtMTU5MzcwYmZj ZGIxMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NTcyY2NlOGEtMjg4Ni00N2I4LTg5ZjMtY2RiZDIyOGJiNDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1US750kwh5/k1FWBgBykzwnRAoBT0i9sPcP A0DhBuvMlQJHN8zzOu/VLNz7MKe8Er5H3wIPm6P1sIdNTx+QU8Eefvlk6Exk7vzR rQZDomCWkPl7WQjiu+SKLtP0zgkn/Sq8hdhDKyWycf3NYxBbkuEkTXaQTXNqEzO+ zhx8jxPuPgmHien5yErrFaChkdEmSWE8H7b1zT4S9sN064mE515BV3bvHiMjN7dx mgHDIto0kHCExGeEB7XZher/GqF9BKSptFcl3klcN6clSCWaIMz8nS4tlavyBSxO LYYluB2rC++hqppIbyBpdHhKId6x/kXceWFBKYA0IxWfAdxOWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKycNLHKylPhCg7J34IwOaMJb6p9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNjVi MDY0MS0wNDdkLTQ3ODctYTEyZC0xNTkzNzBiZmNkYjEvMWY1NDYxN2UtM2M1ZS0z ZGIzLWFkMGUtOGM3ZjVlMTQ1NTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjY1YjA2NDEtMDQ3ZC00Nzg3LWEx MmQtMTU5MzcwYmZjZGIxLzI2NWIwNjQxLTA0N2QtNDc4Ny1hMTJkLTE1OTM3MGJm Y2RiMS5jcmwwHwYDVR0jBBgwFoAUJmxHOadzqCMYoLfPmvtjcpFUCyUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNjViMDY0MS0wNDdkLTQ3ODctYTEyZC0xNTkz NzBiZmNkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKsVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOSLQNQZE1h8LuvTWhOBtzT76lPF1Pn2ci9JlUOKZVbvSAwqo2oGvvq NBDTsDD2hm6CigR5XD90AyfStV6uWUMacWggtkmj78qPneNerjRARmPu61Z/LrdI pq20Ay0ZDwOk2MooqpfeSrJHgwJUSYM5EuHDA/kSAHZknR0wcg2KIR5/nf2eFKmr jammfcrXak1+cMcglPCEuvKwQlUnpIDNyaEo4Wv2Pl11q3ZaMpZmsVdBJJWN+/v2 Fz6MtWIw56Wtg5NasX5dyTdwtPXZJQXOtZ+gZm9+H3mN7gkn4Nq1xhQkBv8Gwg8L 5DyfQqG9D7oq+xolyEgb0MJVmDjYE5w= -----END CERTIFICATE-----Generated at Thu Mar 26 15:08:08 2026 by rpki-client