$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/c8d33b8b-f1e7-3532-a195-f3f117e50354.roa File: c8d33b8b-f1e7-3532-a195-f3f117e50354.roa (raw, json) Hash identifier: t0mJ1K7wWHy+qA/zOcjW+7b0sFTR6/zGcKKnNSy7jT4= Subject key identifier: EA:4C:E5:34:54:8E:79:94:A8:EC:C3:76:15:ED:E8:8B:18:23:FD:0B Certificate issuer: /CN=265b0641-047d-4787-a12d-159370bfcdb1 Certificate serial: 010D0C9F4328584D237A2C87FDDB8F223D3E0F80 Authority key identifier: 26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/c8d33b8b-f1e7-3532-a195-f3f117e50354.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 20473 IP address blocks: 104.171.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:2c:87:fd:db:8f:22:3d:3e:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=265b0641-047d-4787-a12d-159370bfcdb1 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=42ebb9e5-86f4-4401-b768-61ea48bae783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b5:94:66:56:54:11:0e:5c:40:9f:da:56:65: 0e:7f:fb:52:31:5b:9f:d1:f3:0f:54:39:e4:d7:8d: 3b:0d:b4:8a:03:44:81:33:9c:48:c8:7f:79:d9:d1: d3:d8:d5:ba:68:84:aa:cd:5d:16:2b:48:2e:a5:02: cb:e0:d3:ec:81:10:cd:36:a9:9a:d6:db:00:25:00: 34:f4:ed:90:dc:68:ba:01:6b:12:09:b0:b8:1b:c5: 87:a7:9e:1d:96:be:32:19:ba:94:a3:4b:3a:0d:a0: d4:2f:2d:b8:8c:53:a8:35:3c:7e:f3:6a:ad:9e:70: 94:55:9f:69:47:ac:cf:cf:a2:cf:8f:54:49:32:68: fe:46:cc:36:40:d9:8e:32:d4:c1:52:70:59:92:51: 41:e9:a8:27:c1:8f:0b:b4:55:68:ad:9d:3e:ce:91: 17:6f:b4:b7:a8:32:18:ed:f4:9e:e3:3c:7a:19:01: 9e:80:98:59:5f:ef:38:9a:d9:c4:0b:de:7c:82:65: 05:4f:8a:b9:3a:cb:59:f0:20:df:d6:52:1e:ee:65: c8:d7:ca:b1:46:6d:2d:f0:9f:82:13:23:da:d2:a2: 12:35:16:84:53:64:73:27:11:a4:92:a3:a8:ea:0b: 3a:b5:2c:51:a9:de:b6:ca:d8:77:42:e0:71:78:40: 98:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4C:E5:34:54:8E:79:94:A8:EC:C3:76:15:ED:E8:8B:18:23:FD:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/c8d33b8b-f1e7-3532-a195-f3f117e50354.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl X509v3 Authority Key Identifier: keyid:26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer sbgp-ipAddrBlock: critical IPv4: 104.171.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:03:94:cc:14:13:7a:93:5a:6f:e3:49:a9:cd:c7:2e:55:76: 5f:f4:db:64:9b:80:0f:0f:6d:d1:85:8c:b8:e9:d7:c3:d8:0d: dd:92:a9:9c:1e:75:57:e2:61:ae:cf:d0:de:c1:d5:4d:92:c7: a9:88:c2:26:d7:1e:e8:bb:9b:2d:96:95:70:ee:1c:d3:61:7c: c3:b9:a9:50:07:24:30:ae:fb:da:53:4d:ec:c9:98:a1:40:07: 1e:73:5e:a6:a2:24:8a:8a:b0:14:e8:be:a8:80:ff:e5:2f:ea: 2f:4c:0a:aa:2a:47:9f:29:e8:07:3e:8f:a1:c6:8d:1f:99:fd: b1:b2:f2:d7:46:0a:5c:8e:cf:1e:c4:d3:34:80:2e:bc:18:27: c5:e8:6d:90:b7:4d:6e:5b:e7:09:8d:14:75:3e:f0:57:e5:93: 04:84:74:79:42:72:8d:7b:06:dc:fb:72:6f:fa:c3:b9:2a:09: c5:3d:08:45:6f:b2:66:3c:8b:4f:f6:3d:9b:79:7b:a1:20:d5: fd:21:db:f6:14:f5:f1:19:14:a4:88:a4:72:12:37:b9:d0:4b: 78:dc:f3:ff:a5:d9:28:ec:cb:8e:3f:90:9c:c8:7d:54:00:70: 47:71:62:1f:e8:16:63:7e:54:31:ce:54:43:37:6e:fa:f4:c7: ba:82:8f:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeiyH/duPIj0+D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjY1YjA2NDEtMDQ3ZC00Nzg3LWExMmQtMTU5MzcwYmZj ZGIxMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NDJlYmI5ZTUtODZmNC00NDAxLWI3NjgtNjFlYTQ4YmFlNzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27WUZlZUEQ5cQJ/aVmUOf/tSMVuf0fMPVDnk 1407DbSKA0SBM5xIyH952dHT2NW6aISqzV0WK0gupQLL4NPsgRDNNqma1tsAJQA0 9O2Q3Gi6AWsSCbC4G8WHp54dlr4yGbqUo0s6DaDULy24jFOoNTx+82qtnnCUVZ9p R6zPz6LPj1RJMmj+Rsw2QNmOMtTBUnBZklFB6agnwY8LtFVorZ0+zpEXb7S3qDIY 7fSe4zx6GQGegJhZX+84mtnEC958gmUFT4q5OstZ8CDf1lIe7mXI18qxRm0t8J+C EyPa0qISNRaEU2RzJxGkkqOo6gs6tSxRqd62yth3QuBxeECY2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpM5TRUjnmUqOzDdhXt6IsYI/0LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNjVi MDY0MS0wNDdkLTQ3ODctYTEyZC0xNTkzNzBiZmNkYjEvYzhkMzNiOGItZjFlNy0z NTMyLWExOTUtZjNmMTE3ZTUwMzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjY1YjA2NDEtMDQ3ZC00Nzg3LWEx MmQtMTU5MzcwYmZjZGIxLzI2NWIwNjQxLTA0N2QtNDc4Ny1hMTJkLTE1OTM3MGJm Y2RiMS5jcmwwHwYDVR0jBBgwFoAUJmxHOadzqCMYoLfPmvtjcpFUCyUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNjViMDY0MS0wNDdkLTQ3ODctYTEyZC0xNTkz NzBiZmNkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMDlMwUE3qTWm/jSanNxy5Vdl/022SbgA8PbdGFjLjp18PYDd2SqZwe dVfiYa7P0N7B1U2Sx6mIwibXHui7my2WlXDuHNNhfMO5qVAHJDCu+9pTTezJmKFA Bx5zXqaiJIqKsBTovqiA/+Uv6i9MCqoqR58p6Ac+j6HGjR+Z/bGy8tdGClyOzx7E 0zSALrwYJ8XobZC3TW5b5wmNFHU+8FflkwSEdHlCco17Btz7cm/6w7kqCcU9CEVv smY8i0/2PZt5e6Eg1f0h2/YU9fEZFKSIpHISN7nQS3jc8/+l2Sjsy44/kJzIfVQA cEdxYh/oFmN+VDHOVEM3bvr0x7qCj4E= -----END CERTIFICATE-----Generated at Thu Mar 26 19:16:16 2026 by rpki-client