$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f4cc3021-ec93-3fdf-91cf-69f8b818fc1e.roa File: f4cc3021-ec93-3fdf-91cf-69f8b818fc1e.roa (raw, json) Hash identifier: E32BuE13TeRo+dw7KQ3pT7ah0LvtswJQ+ax8buh7juc= Subject key identifier: B7:1C:08:2A:3D:BF:E2:BB:E9:5D:4C:C5:94:23:4E:8B:12:C0:18:57 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584DA6B00AEDE2027EECC84F3240 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f4cc3021-ec93-3fdf-91cf-69f8b818fc1e.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 396356 IP address blocks: 104.243.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:0a:ed:e2:02:7e:ec:c8:4f:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=e4270921-6f93-42d9-a003-45a5ba6f2c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:76:05:ec:bd:f0:71:fc:ed:75:8c:20:ec:bd: 54:d4:97:1d:ea:65:8f:ab:7c:e3:65:db:1a:dd:76: b1:2a:10:37:63:42:19:37:3c:ca:a8:55:76:e9:29: 76:a5:0e:72:2c:6f:ca:d6:07:4a:8c:29:2e:b7:af: 1a:29:01:54:7b:1c:44:cf:bd:47:b6:10:91:11:c7: dc:54:09:38:58:57:26:e3:92:ce:b5:8c:79:11:38: f7:67:9a:43:12:b9:78:07:15:28:61:e7:da:cc:3b: 18:0e:53:20:78:ac:07:68:4f:27:16:7e:ed:b8:d9: 30:2e:8c:7e:27:c2:43:58:64:2a:66:56:25:2c:48: 85:92:0f:36:3a:b1:43:cb:67:b6:88:4d:9f:28:71: 7c:8e:99:cf:ae:c9:73:3b:14:00:0c:ba:18:86:78: de:d3:9d:bf:3e:ed:62:a0:dd:62:04:e3:ab:80:da: fd:e7:a7:f3:2e:b5:99:59:e8:b9:d3:7a:af:7a:aa: d6:a6:c7:d2:37:6c:6a:2c:e8:eb:3d:41:a9:76:45: 3a:74:48:5c:f2:fd:6e:ac:3f:79:14:dc:42:9d:b2: 1c:a4:ea:cb:70:c1:57:e9:64:f2:5e:94:23:f9:11: bc:82:fe:60:5f:16:3e:26:b6:fe:23:01:30:23:3f: c3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1C:08:2A:3D:BF:E2:BB:E9:5D:4C:C5:94:23:4E:8B:12:C0:18:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f4cc3021-ec93-3fdf-91cf-69f8b818fc1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:f2:35:17:26:88:c7:74:d9:9a:91:1c:c9:18:19:76:e5:2e: 50:cf:1b:ef:94:e5:6b:f0:9f:64:76:98:fe:af:cd:a5:c9:a8: ff:ce:41:a6:9c:01:34:66:f1:8b:0f:51:07:f0:cf:d4:44:94: 31:f8:97:9f:68:ee:f7:35:c2:37:77:20:7a:8c:78:60:b1:b5: a6:4e:5a:6a:d9:e4:3f:01:d3:53:15:23:48:83:0b:5c:d5:6e: 2e:f1:63:f4:29:6e:cc:e2:11:b6:72:6c:65:a2:73:a6:07:cc: 93:90:14:65:a6:fa:1d:62:e7:92:52:37:74:82:1a:5a:2a:51: b1:c2:94:a8:f3:e0:78:3b:37:91:bb:f5:7c:bf:26:57:ba:7a: 3c:d0:82:00:52:76:97:db:c3:49:42:30:9d:a8:d3:a0:8b:06: d8:0c:35:fa:42:c6:3d:89:75:78:da:8f:b2:a6:2d:84:85:5b: cd:e7:41:1c:85:d2:e0:48:68:1c:61:97:22:4d:77:47:8a:85: 8f:7d:c8:9d:e7:46:4c:28:d0:ec:1c:61:e6:51:eb:a3:c8:77: 51:ac:54:8f:df:9d:11:3e:33:d8:8c:f8:c4:41:32:3a:27:91: e2:6d:04:9c:02:4a:13:ee:65:60:4c:8d:49:cd:9e:fb:82:38: d1:95:fa:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msArt4gJ+7MhPMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk ZTQyNzA5MjEtNmY5My00MmQ5LWEwMDMtNDVhNWJhNmYyYzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXYF7L3wcfztdYwg7L1U1Jcd6mWPq3zjZdsa 3XaxKhA3Y0IZNzzKqFV26Sl2pQ5yLG/K1gdKjCkut68aKQFUexxEz71HthCREcfc VAk4WFcm45LOtYx5ETj3Z5pDErl4BxUoYefazDsYDlMgeKwHaE8nFn7tuNkwLox+ J8JDWGQqZlYlLEiFkg82OrFDy2e2iE2fKHF8jpnPrslzOxQADLoYhnje052/Pu1i oN1iBOOrgNr956fzLrWZWei503qveqrWpsfSN2xqLOjrPUGpdkU6dEhc8v1urD95 FNxCnbIcpOrLcMFX6WTyXpQj+RG8gv5gXxY+Jrb+IwEwIz/DZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLccCCo9v+K76V1MxZQjTosSwBhXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjRjYzMwMjEtZWM5My0z ZmRmLTkxY2YtNjlmOGI4MThmYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvyNRcmiMd02ZqRHMkYGXblLlDPG++U5Wvwn2R2mP6vzaXJqP/OQaac ATRm8YsPUQfwz9RElDH4l59o7vc1wjd3IHqMeGCxtaZOWmrZ5D8B01MVI0iDC1zV bi7xY/QpbsziEbZybGWic6YHzJOQFGWm+h1i55JSN3SCGloqUbHClKjz4Hg7N5G7 9Xy/Jle6ejzQggBSdpfbw0lCMJ2o06CLBtgMNfpCxj2JdXjaj7KmLYSFW83nQRyF 0uBIaBxhlyJNd0eKhY99yJ3nRkwo0OwcYeZR66PId1GsVI/fnRE+M9iM+MRBMjon keJtBJwCShPuZWBMjUnNnvuCONGV+ko= -----END CERTIFICATE-----Generated at Wed May 13 04:55:26 2026 by rpki-client