$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/bf32a41d-c41b-39f6-baf6-ab0c6fa8f238.roa File: bf32a41d-c41b-39f6-baf6-ab0c6fa8f238.roa (raw, json) Hash identifier: FXnD5ZWZvLAGYuu9CYOj7hC4kM9kqn6pibKsz/qaBBg= Subject key identifier: C9:FA:5A:A7:45:41:23:D0:6E:62:C0:EE:33:5C:19:64:B2:E3:CC:F0 Certificate issuer: /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c Certificate serial: 010D0C9F4328584DB4A58A96D66E1354C71B9E00 Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/bf32a41d-c41b-39f6-baf6-ab0c6fa8f238.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 393653 IP address blocks: 104.128.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:8a:96:d6:6e:13:54:c7:1b:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=c49f43be-3cf6-4386-951d-b5c139ba5b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:34:79:4b:7d:e0:bf:41:e8:b6:88:0c:30:25: 6b:10:1a:c8:45:ba:00:59:36:95:7a:02:d8:67:cf: 1f:ca:3f:db:27:b4:3c:f1:f6:7a:6f:92:c8:9f:1a: c7:e7:e5:fa:0d:73:dd:c9:cc:d7:7e:c7:c2:42:87: 08:22:f4:c1:af:69:60:7c:e7:ec:59:c4:08:50:8b: 24:3f:d4:85:5f:93:2f:d4:7c:5e:79:80:1a:d1:c7: cd:b0:54:f8:fc:02:8a:dd:49:01:9d:07:6d:57:8b: 19:0e:1a:1b:e0:86:6e:2a:ce:ba:56:29:86:7f:90: c6:b5:45:ea:d0:45:f5:bb:d3:0e:b7:34:f0:a4:dc: 53:ea:5d:f7:63:8d:ac:81:24:ab:27:51:e9:3c:9d: c5:4f:25:68:6b:8d:06:01:ba:2c:92:24:f1:75:a0: 47:84:23:f7:32:6f:82:23:59:c2:d9:42:ad:a4:05: ce:a7:bf:5a:bf:47:66:fb:72:8b:2f:36:cc:5d:2d: 50:ed:d3:f3:d1:ac:96:1a:31:90:2a:6a:21:c6:5d: c8:8b:4f:33:a5:57:d2:28:d9:5a:46:93:4f:ce:26: 86:f3:0f:86:16:d2:df:ab:84:7d:04:4b:57:9f:a0: cc:0c:b5:dd:ea:50:35:d6:18:3d:d4:d4:aa:f0:47: 3c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FA:5A:A7:45:41:23:D0:6E:62:C0:EE:33:5C:19:64:B2:E3:CC:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/bf32a41d-c41b-39f6-baf6-ab0c6fa8f238.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl X509v3 Authority Key Identifier: keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer sbgp-ipAddrBlock: critical IPv4: 104.128.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:48:c6:33:34:4d:df:72:15:b4:8f:15:2b:05:31:4a:46:e9: fa:c5:67:7a:0d:f6:61:62:80:ce:b6:65:a9:fa:00:78:6e:ba: c5:bc:e0:ec:15:7e:06:1c:7c:35:b2:af:9b:0e:8e:ec:b3:2d: 37:1e:27:d0:ab:1b:9e:13:eb:f6:f5:96:2b:9d:8b:d0:0b:2d: 41:09:7b:b7:be:bc:d9:5f:cb:01:8c:31:b6:50:4f:b2:9c:2a: 38:c8:f7:dc:1c:f7:89:70:ac:ed:7a:29:6f:52:00:5d:63:d7: 27:1c:c2:da:8c:3f:4b:5b:61:80:e1:0f:4a:d9:8d:cd:87:1c: 1c:dd:d3:f4:a9:b9:c2:aa:d2:73:be:88:6f:49:e5:56:c8:07: fd:df:9b:f0:82:42:44:86:f1:dd:56:50:a4:02:d5:70:4d:fe: 06:a4:e7:1f:63:bb:77:1c:97:54:f8:6c:53:01:3b:89:9d:72: 5d:10:2b:3e:5e:4d:ce:09:fb:f8:0f:7e:41:48:a6:58:91:13: 74:69:9d:22:61:f0:83:fe:ab:5b:c4:40:1b:91:3f:12:2c:1e: b9:35:52:a2:80:aa:5a:1f:5a:d1:7c:e7:56:50:ab:33:ff:7b: fa:f3:09:2a:73:8c:af:70:0d:7d:81:ab:d3:a1:ae:fb:13:6a: e1:98:0b:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pYqW1m4TVMcbngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzViMmU5YjUtZjFhYS00MWRlLThiZGMtNzA1OGU1OGVm ODFjMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk YzQ5ZjQzYmUtM2NmNi00Mzg2LTk1MWQtYjVjMTM5YmE1YjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTR5S33gv0HotogMMCVrEBrIRboAWTaVegLY Z88fyj/bJ7Q88fZ6b5LInxrH5+X6DXPdyczXfsfCQocIIvTBr2lgfOfsWcQIUIsk P9SFX5Mv1HxeeYAa0cfNsFT4/AKK3UkBnQdtV4sZDhob4IZuKs66VimGf5DGtUXq 0EX1u9MOtzTwpNxT6l33Y42sgSSrJ1HpPJ3FTyVoa40GAboskiTxdaBHhCP3Mm+C I1nC2UKtpAXOp79av0dm+3KLLzbMXS1Q7dPz0ayWGjGQKmohxl3Ii08zpVfSKNla RpNPziaG8w+GFtLfq4R9BEtXn6DMDLXd6lA11hg91NSq8Ec8SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMn6WqdFQSPQbmLA7jNcGWSy48zwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83NWIy ZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4ZTU4ZWY4MWMvYmYzMmE0MWQtYzQxYi0z OWY2LWJhZjYtYWIwYzZmYThmMjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzViMmU5YjUtZjFhYS00MWRlLThi ZGMtNzA1OGU1OGVmODFjLzc1YjJlOWI1LWYxYWEtNDFkZS04YmRjLTcwNThlNThl ZjgxYy5jcmwwHwYDVR0jBBgwFoAU56eLhm6ePsel2+WMY0Cly0mpS40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83NWIyZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4 ZTU4ZWY4MWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaICRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhIxjM0Td9yFbSPFSsFMUpG6frFZ3oN9mFigM62Zan6AHhuusW84OwV fgYcfDWyr5sOjuyzLTceJ9CrG54T6/b1liudi9ALLUEJe7e+vNlfywGMMbZQT7Kc KjjI99wc94lwrO16KW9SAF1j1yccwtqMP0tbYYDhD0rZjc2HHBzd0/SpucKq0nO+ iG9J5VbIB/3fm/CCQkSG8d1WUKQC1XBN/gak5x9ju3ccl1T4bFMBO4mdcl0QKz5e Tc4J+/gPfkFIpliRE3RpnSJh8IP+q1vEQBuRPxIsHrk1UqKAqlofWtF851ZQqzP/ e/rzCSpzjK9wDX2Bq9OhrvsTauGYC4c= -----END CERTIFICATE-----Generated at Wed May 13 15:00:58 2026 by rpki-client