$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/0ea9e1cf-0128-3fd6-a058-5e7b286fec44.roa File: 0ea9e1cf-0128-3fd6-a058-5e7b286fec44.roa (raw, json) Hash identifier: ADHqECmhfrp488clfy8PEilBEXmtwErUfdPKd77S/qc= Subject key identifier: 02:5A:C5:45:CF:FB:D5:85:D0:5A:6C:BE:18:BD:83:47:1E:F6:85:5C Certificate issuer: /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Certificate serial: 010D0C9F4328584D27AA201A7F06CB76FC408180 Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/0ea9e1cf-0128-3fd6-a058-5e7b286fec44.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 399244 IP address blocks: 104.204.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:20:1a:7f:06:cb:76:fc:40:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=a8cc1b0f-5149-4053-8785-67cab79819ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ce:53:c6:0a:36:6c:d8:34:9a:be:9c:74:00: 89:b8:b5:75:46:44:88:d9:ac:8d:5c:c0:09:0b:6b: d3:76:29:33:9f:1e:4b:33:17:28:0f:d0:a6:a2:d6: 18:2f:3b:da:1f:90:e2:a8:a4:3e:65:fc:c6:9e:cb: e7:2b:6f:14:42:f1:3c:84:d4:d1:be:fe:80:db:49: 74:cf:03:28:7d:2c:ce:34:3b:6b:bd:6e:a2:53:a3: 22:91:18:e2:23:ba:dc:28:91:5e:30:36:db:4a:d7: c5:79:0e:91:13:f5:a0:c9:68:3d:f2:67:97:e5:51: 7b:23:5b:92:82:2a:3e:dc:4a:be:29:ef:d6:dc:e2: 27:5b:07:ce:2b:77:e3:fc:ed:38:af:9b:ac:4f:d3: 5b:4e:63:9a:a8:0c:7f:b7:dc:2a:c5:df:56:09:e4: 4b:4e:e2:b6:65:15:b8:67:45:4d:a9:0d:a7:55:14: d7:22:35:75:b4:82:76:d3:28:e7:ca:32:49:f7:4e: 09:35:4a:cb:14:88:54:ec:02:c4:bd:bc:a8:be:1b: e5:62:1a:e7:43:db:ac:96:ef:74:34:6c:d8:35:50: 80:33:6b:59:94:6d:62:6d:fb:e0:85:16:2e:76:23: 2f:c2:3f:5a:dd:91:b1:6f:41:a5:a0:57:2a:cf:7c: 41:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5A:C5:45:CF:FB:D5:85:D0:5A:6C:BE:18:BD:83:47:1E:F6:85:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/0ea9e1cf-0128-3fd6-a058-5e7b286fec44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl X509v3 Authority Key Identifier: keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer sbgp-ipAddrBlock: critical IPv4: 104.204.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:1a:d6:88:d9:fb:f2:68:3c:da:5a:5b:bd:4c:f9:0c:47:23: 23:1c:f2:04:e0:55:62:01:4f:1b:45:05:64:c2:ab:30:39:f5: 43:21:93:8a:45:05:ad:ee:ec:0b:68:20:c4:57:1a:fa:2a:f9: 99:33:87:81:f2:6c:e6:7b:de:c6:f7:3d:d5:0d:b0:e4:c8:ae: 0e:6f:19:77:82:58:68:59:44:39:53:21:84:26:e0:3f:47:ec: f9:c9:bd:6c:72:1e:e6:50:f9:57:46:f9:f9:3e:3a:90:7b:02: 04:57:fa:48:cf:c3:b9:f4:08:63:bc:98:8d:d1:81:43:da:b0: 74:82:b5:47:2a:6f:9b:8e:32:a1:f8:60:ae:08:24:3b:62:63: e3:f3:69:bc:50:c7:95:02:d1:75:3a:c8:89:cf:6f:4b:fc:93: ce:a1:ab:0b:04:fc:de:70:d2:c4:9d:37:af:c1:06:76:e0:a0: a4:2f:c2:6c:ea:8a:24:7a:e0:8d:64:8d:9d:c2:a4:40:d6:0d: 8b:7e:48:09:4f:70:82:54:a0:10:67:b8:c3:9c:2e:58:e7:23: 1c:cd:5a:cf:32:70:0c:57:c6:b3:dc:b1:20:2e:99:fd:e2:1e: f0:e4:fe:b0:55:de:71:0a:21:1e:92:13:13:c1:e0:9e:a3:f6: 6b:4d:c9:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqiAafwbLdvxAgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh MzhkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YThjYzFiMGYtNTE0OS00MDUzLTg3ODUtNjdjYWI3OTgxOWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM5Txgo2bNg0mr6cdACJuLV1RkSI2ayNXMAJ C2vTdikznx5LMxcoD9CmotYYLzvaH5DiqKQ+ZfzGnsvnK28UQvE8hNTRvv6A20l0 zwMofSzONDtrvW6iU6MikRjiI7rcKJFeMDbbStfFeQ6RE/WgyWg98meX5VF7I1uS gio+3Eq+Ke/W3OInWwfOK3fj/O04r5usT9NbTmOaqAx/t9wqxd9WCeRLTuK2ZRW4 Z0VNqQ2nVRTXIjV1tIJ20yjnyjJJ904JNUrLFIhU7ALEvbyovhvlYhrnQ9uslu90 NGzYNVCAM2tZlG1ibfvghRYudiMvwj9a3ZGxb0GloFcqz3xBMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJaxUXP+9WF0Fpsvhi9g0ce9oVcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvMGVhOWUxY2YtMDEyOC0z ZmQ2LWEwNTgtNWU3YjI4NmZlYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl MTU0YmEzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMzdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0a1ojZ+/JoPNpaW71M+QxHIyMc8gTgVWIBTxtFBWTCqzA59UMhk4pF Ba3u7AtoIMRXGvoq+Zkzh4HybOZ73sb3PdUNsOTIrg5vGXeCWGhZRDlTIYQm4D9H 7PnJvWxyHuZQ+VdG+fk+OpB7AgRX+kjPw7n0CGO8mI3RgUPasHSCtUcqb5uOMqH4 YK4IJDtiY+PzabxQx5UC0XU6yInPb0v8k86hqwsE/N5w0sSdN6/BBnbgoKQvwmzq iiR64I1kjZ3CpEDWDYt+SAlPcIJUoBBnuMOcLljnIxzNWs8ycAxXxrPcsSAumf3i HvDk/rBV3nEKIR6SExPB4J6j9mtNyVk= -----END CERTIFICATE-----Generated at Thu Mar 26 10:49:58 2026 by rpki-client