$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa File: bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa (raw, json) Hash identifier: IAsq1wcQfXRZB5E4OjvPkCd7Dy8gM8ZysY1FFXa4csc= Subject key identifier: AA:3D:B0:85:D2:9A:23:29:A9:1A:CF:33:E2:A0:9E:45:94:A5:99:D5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D95F006F9800137D99E9C8CC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 212238 IP address blocks: 104.243.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:06:f9:80:01:37:d9:9e:9c:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=e8ec91af-0d6a-4613-b3c1-8335f7a7d9de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ba:6c:b5:f6:b6:46:20:f8:d8:31:85:39:70: 7e:fe:68:e4:59:26:35:6e:21:0d:7d:b1:3b:20:7e: 72:50:29:08:e0:80:0b:2b:5e:a3:ff:ff:86:65:30: 0e:03:e8:b7:ce:7f:1a:fb:f6:72:10:9f:0a:87:d9: 8e:88:6e:08:56:fc:9d:08:13:fd:27:38:98:21:7b: f2:2b:ed:88:58:e8:70:ac:3d:01:de:36:72:4c:1a: 3e:bd:9a:88:7d:bc:e8:af:c2:cc:24:2d:7e:4c:f6: b0:d6:24:18:9f:ef:94:59:d4:93:f8:41:cb:93:a4: 25:d0:d4:dc:ad:b9:6a:61:ad:62:59:9f:1f:b2:ae: 48:ad:2b:b0:74:6f:9e:6c:58:1c:68:b8:9d:10:e6: b3:b7:24:fa:d8:dc:1d:3f:0f:24:b6:fd:a3:cd:f6: 4a:8d:82:02:13:76:dc:76:c7:d8:88:d7:2b:50:06: 43:38:af:49:9f:b9:1a:5a:11:0e:db:e0:0f:1c:32: d3:c6:04:e5:aa:08:92:37:6d:f8:73:88:e5:57:2f: 02:2e:91:27:68:c6:fa:34:dd:3d:ab:f2:3d:77:1f: 13:04:a1:7a:02:7d:42:64:84:58:af:69:b7:68:ac: 3e:d3:82:b8:ac:7c:b8:d3:01:81:08:16:09:a3:6a: 77:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3D:B0:85:D2:9A:23:29:A9:1A:CF:33:E2:A0:9E:45:94:A5:99:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:a4:1a:d5:82:3c:18:33:b7:6e:18:7b:60:2c:00:a4:1d:40: 50:d5:1e:36:63:12:22:9b:ce:52:cc:a0:d5:30:7d:c2:28:fb: 8b:2e:b0:12:25:71:f7:4d:d1:ee:49:34:ca:80:6e:b7:d1:e6: 21:bb:74:a4:44:cc:b5:d6:e9:22:0a:10:de:34:de:4b:29:cd: 2e:1e:24:43:4c:87:bc:a1:b1:1e:74:d5:f3:de:1d:bc:27:13: 7d:ab:4b:b3:7a:54:46:15:8b:ad:d8:e5:be:1b:2d:11:e7:50: 4a:0b:1d:1a:19:bb:19:2d:9e:b3:b7:3a:ee:23:9c:fe:20:71: a7:e4:fc:18:eb:87:09:f8:71:e7:a0:f6:34:26:45:f4:e2:ec: c4:e7:b8:ce:61:24:b3:8c:77:09:01:a5:cc:70:cf:78:0e:df: 5d:32:88:df:58:01:b0:d3:43:e6:59:fb:77:32:99:fb:bc:ef: dc:71:a0:42:a5:d0:78:68:28:a7:51:25:f7:66:1e:fe:40:cc: 9d:ef:35:75:74:71:27:98:41:b0:1e:ca:fc:01:83:79:29:a8: 59:87:70:9b:6d:aa:8e:68:38:61:8a:70:2a:57:d9:e7:5b:71: 22:9b:77:56:36:da:b0:27:c4:2c:4b:74:01:9c:f2:68:77:a5: 6e:4e:f2:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8Ab5gAE32Z6cjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk ZThlYzkxYWYtMGQ2YS00NjEzLWIzYzEtODMzNWY3YTdkOWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLpstfa2RiD42DGFOXB+/mjkWSY1biENfbE7 IH5yUCkI4IALK16j//+GZTAOA+i3zn8a+/ZyEJ8Kh9mOiG4IVvydCBP9JziYIXvy K+2IWOhwrD0B3jZyTBo+vZqIfbzor8LMJC1+TPaw1iQYn++UWdST+EHLk6Ql0NTc rblqYa1iWZ8fsq5IrSuwdG+ebFgcaLidEOaztyT62NwdPw8ktv2jzfZKjYICE3bc dsfYiNcrUAZDOK9Jn7kaWhEO2+APHDLTxgTlqgiSN234c4jlVy8CLpEnaMb6NN09 q/I9dx8TBKF6An1CZIRYr2m3aKw+04K4rHy40wGBCBYJo2p3xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKo9sIXSmiMpqRrPM+KgnkWUpZnVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmY2NjFmZGYtNzQ3YS0z ZTQ3LTg5YzMtYjFjYmMwNjRjN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSkGtWCPBgzt24Ye2AsAKQdQFDVHjZjEiKbzlLMoNUwfcIo+4susBIl cfdN0e5JNMqAbrfR5iG7dKREzLXW6SIKEN403kspzS4eJENMh7yhsR501fPeHbwn E32rS7N6VEYVi63Y5b4bLRHnUEoLHRoZuxktnrO3Ou4jnP4gcafk/Bjrhwn4ceeg 9jQmRfTi7MTnuM5hJLOMdwkBpcxwz3gO310yiN9YAbDTQ+ZZ+3cymfu879xxoEKl 0HhoKKdRJfdmHv5AzJ3vNXV0cSeYQbAeyvwBg3kpqFmHcJttqo5oOGGKcCpX2edb cSKbd1Y22rAnxCxLdAGc8mh3pW5O8iQ= -----END CERTIFICATE-----Generated at Wed May 13 05:44:58 2026 by rpki-client