$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/b0204fe4-e9f9-39bd-9e9f-12d269d2c93e.roa File: b0204fe4-e9f9-39bd-9e9f-12d269d2c93e.roa (raw, json) Hash identifier: 0j2C0ydwMCYrfx7K2aol5rKbfRjZAWObmLMgVqSz8A0= Subject key identifier: 1A:52:A9:85:61:68:CC:E9:0C:82:B7:85:0A:44:4D:13:A4:3E:40:6C Certificate issuer: /CN=d84d90bc-9144-4684-9270-edf2e53d3879 Certificate serial: 010D0C9F4328584D237A2C64CBCBE7605A244C00 Authority key identifier: 9C:A3:EB:05:F2:7C:77:DC:14:D8:1E:03:7C:31:03:FA:8B:B5:12:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/b0204fe4-e9f9-39bd-9e9f-12d269d2c93e.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 5065 IP address blocks: 104.247.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/d84d90bc-9144-4684-9270-edf2e53d3879.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/d84d90bc-9144-4684-9270-edf2e53d3879.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:2c:64:cb:cb:e7:60:5a:24:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d84d90bc-9144-4684-9270-edf2e53d3879 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=6a06a013-bce8-414b-8969-2a495b508127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:60:bb:1d:69:c7:ca:54:0e:dd:f3:bf:d9:3f: c1:6e:7c:99:88:42:06:8b:ea:06:af:4e:1b:7d:a2: cf:15:32:90:05:8b:c3:da:87:28:3e:e8:76:75:6f: f2:1e:3d:9f:b1:62:32:64:40:43:30:33:e4:40:9f: 45:e6:58:4e:b9:e5:71:97:15:15:11:4a:3b:fc:ca: 8a:b7:50:8e:e0:01:3c:b2:d1:0f:c0:37:bf:1f:a6: f3:27:4a:de:e2:76:51:18:7c:78:40:a1:0a:99:d8: 29:de:23:82:20:0c:fc:ee:f2:2d:57:3e:e1:0c:38: 90:99:ff:a6:98:3f:7b:9d:97:40:85:a8:bd:cd:d7: 46:b3:a1:8a:5a:06:68:60:04:5c:09:19:da:0d:c3: 61:ac:0f:31:f4:60:43:2a:01:ec:54:34:f1:79:7d: d4:02:d7:e7:38:43:2b:37:94:97:91:af:89:2a:c4: fe:22:b8:73:3c:59:eb:43:58:a5:39:d7:5a:ad:02: 41:a5:b1:ba:af:25:15:6c:ce:40:3a:9a:c2:76:48: d1:20:83:21:40:61:6e:44:10:c1:0a:70:2d:4b:3f: 62:a8:b9:4e:a2:24:8c:20:dc:32:4d:d3:d5:c8:e4: 5c:74:58:9a:59:e0:d8:67:63:00:b9:28:b1:68:3c: 19:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:52:A9:85:61:68:CC:E9:0C:82:B7:85:0A:44:4D:13:A4:3E:40:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/b0204fe4-e9f9-39bd-9e9f-12d269d2c93e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/d84d90bc-9144-4684-9270-edf2e53d3879.crl X509v3 Authority Key Identifier: keyid:9C:A3:EB:05:F2:7C:77:DC:14:D8:1E:03:7C:31:03:FA:8B:B5:12:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879.cer sbgp-ipAddrBlock: critical IPv4: 104.247.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b7:4d:4e:c0:21:b7:51:39:1b:4e:02:73:ed:01:2d:e9:68: b5:c9:fa:70:ca:98:c2:7f:d3:08:88:a8:f4:cd:e8:13:89:cc: 32:97:86:65:f3:c9:bd:a5:c9:92:eb:09:36:e2:d0:18:18:09: 77:84:3e:d6:7c:f2:87:5c:d5:7a:41:01:ec:30:34:aa:41:61: 27:9c:1f:ca:15:ec:be:5a:32:61:0d:b1:43:14:d0:af:e1:55: 1b:43:91:9e:d2:0e:d7:db:09:1b:29:60:53:a1:91:ca:60:76: ab:98:58:96:5d:19:d1:81:21:3e:d3:fd:a8:14:fb:35:65:b4: 49:19:b8:95:2e:f6:ca:bc:a8:5c:8c:76:5b:0a:8c:0c:8b:45: 6d:52:4d:94:a1:47:9d:be:03:07:24:17:29:fa:8d:e1:22:b0: a3:42:df:04:b0:10:9f:eb:61:94:43:e0:cd:6d:80:82:5a:10: 68:31:27:fe:d2:2d:ec:40:0d:e7:ff:43:aa:5e:f0:a8:74:85: c7:2f:f6:66:29:7e:fc:dd:3a:af:dc:ca:4f:c2:f7:67:81:50: 22:39:77:e1:29:60:f8:e8:15:7a:27:83:d5:2f:48:47:2c:88: fc:ee:3a:a0:c6:2b:fa:30:99:a5:b6:83:1f:f8:f7:26:e7:6d: 4c:07:15:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeixky8vnYFokTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg0ZDkwYmMtOTE0NC00Njg0LTkyNzAtZWRmMmU1M2Qz ODc5MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NmEwNmEwMTMtYmNlOC00MTRiLTg5NjktMmE0OTViNTA4MTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWC7HWnHylQO3fO/2T/BbnyZiEIGi+oGr04b faLPFTKQBYvD2ocoPuh2dW/yHj2fsWIyZEBDMDPkQJ9F5lhOueVxlxUVEUo7/MqK t1CO4AE8stEPwDe/H6bzJ0re4nZRGHx4QKEKmdgp3iOCIAz87vItVz7hDDiQmf+m mD97nZdAhai9zddGs6GKWgZoYARcCRnaDcNhrA8x9GBDKgHsVDTxeX3UAtfnOEMr N5SXka+JKsT+IrhzPFnrQ1ilOddarQJBpbG6ryUVbM5AOprCdkjRIIMhQGFuRBDB CnAtSz9iqLlOoiSMINwyTdPVyORcdFiaWeDYZ2MAuSixaDwZCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpSqYVhaMzpDIK3hQpETROkPkBsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kODRk OTBiYy05MTQ0LTQ2ODQtOTI3MC1lZGYyZTUzZDM4NzkvYjAyMDRmZTQtZTlmOS0z OWJkLTllOWYtMTJkMjY5ZDJjOTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDg0ZDkwYmMtOTE0NC00Njg0LTky NzAtZWRmMmU1M2QzODc5L2Q4NGQ5MGJjLTkxNDQtNDY4NC05MjcwLWVkZjJlNTNk Mzg3OS5jcmwwHwYDVR0jBBgwFoAUnKPrBfJ8d9wU2B4DfDED+ou1EtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kODRkOTBiYy05MTQ0LTQ2ODQtOTI3MC1lZGYy ZTUzZDM4NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPdoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFm3TU7AIbdRORtOAnPtAS3paLXJ+nDKmMJ/0wiIqPTN6BOJzDKXhmXz yb2lyZLrCTbi0BgYCXeEPtZ88odc1XpBAewwNKpBYSecH8oV7L5aMmENsUMU0K/h VRtDkZ7SDtfbCRspYFOhkcpgdquYWJZdGdGBIT7T/agU+zVltEkZuJUu9sq8qFyM dlsKjAyLRW1STZShR52+AwckFyn6jeEisKNC3wSwEJ/rYZRD4M1tgIJaEGgxJ/7S LexADef/Q6pe8Kh0hccv9mYpfvzdOq/cyk/C92eBUCI5d+EpYPjoFXong9UvSEcs iPzuOqDGK/owmaW2gx/49ybnbUwHFcY= -----END CERTIFICATE-----Generated at Thu Mar 26 16:14:10 2026 by rpki-client