$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa File: 2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa (raw, json) Hash identifier: fIxVLnNXnCmJiG6stzG8f1npMrQz5GSQkg54+q8em7U= Subject key identifier: 4C:05:92:38:24:C3:8B:0A:DC:2A:54:7D:0A:CD:4A:42:D6:7D:32:D1 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584DB7702EC42D7E4C3150E5D640 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 4540 IP address blocks: 104.151.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:2e:c4:2d:7e:4c:31:50:e5:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=a6057c0a-8aec-4b78-be90-53c6b09d547e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:41:fc:a3:17:2a:cb:b0:1e:9e:5d:cd:5a:4c: d4:1d:4f:01:9d:b3:f0:83:1f:13:8e:4f:92:c2:e2: 73:be:33:bd:21:70:a6:42:44:d7:7a:08:5f:29:37: ef:76:dd:a0:77:f7:fd:1a:0c:91:86:d0:1b:56:2a: d2:2a:7c:18:17:31:78:70:47:ad:7c:00:7c:f9:f8: da:9c:ea:ad:35:dd:b7:5c:dd:8a:17:42:2b:f5:09: 0c:c6:22:e0:79:ec:93:f5:b2:3d:d4:1d:c4:5f:00: fb:8d:19:e1:9c:e3:a1:ed:05:20:ea:1f:08:ac:1b: 75:2a:9c:85:94:88:1c:d4:b5:a4:d2:01:c5:01:ce: 74:e2:3e:c0:da:87:bc:b7:f2:50:10:78:d2:7a:67: 16:0a:9e:76:9f:ff:72:2c:81:a5:cc:e9:f2:64:35: 62:bf:a7:0a:c3:ef:5d:65:d3:ed:8f:40:84:13:4d: 68:e6:a4:6f:53:55:c6:0c:04:5b:1f:4e:b7:fd:5f: 17:28:59:80:7e:0e:3a:ed:ce:47:a9:93:f0:4f:a1: cf:47:40:14:5c:33:2c:d4:d5:39:84:31:ba:5c:85: a8:34:9f:0d:5d:49:4a:6a:35:a1:48:ff:71:43:14: 2d:4f:26:7e:89:9e:8c:2c:38:4a:c2:d4:79:00:cc: b5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:05:92:38:24:C3:8B:0A:DC:2A:54:7D:0A:CD:4A:42:D6:7D:32:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 104.151.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:10:a3:a8:92:57:f3:68:b8:4a:75:75:9a:ca:62:6c:37:6d: 52:18:31:9b:86:13:df:eb:70:8a:3f:5c:e7:d8:c8:06:2a:e4: 58:93:e5:77:8d:0a:fe:55:cc:7b:55:52:17:5f:48:be:90:f4: 9d:56:ee:fb:2f:26:15:6c:ee:6c:77:2e:20:4c:ca:40:00:98: 52:1f:a7:b4:aa:c8:11:6b:35:72:c1:52:d8:6d:d2:59:cb:50: 39:70:da:45:e3:f3:5a:f5:37:88:e3:d0:51:b2:a5:48:c9:14: 2d:29:e9:27:08:cc:f2:1a:f9:5b:2a:d9:e9:af:6b:12:cd:b0: 9d:bc:98:d5:d7:55:bb:ad:16:7b:8b:9d:63:61:07:cb:51:3f: f5:3e:02:e5:54:19:21:c1:8c:53:a8:a6:56:91:95:56:98:4c: 9b:dc:94:33:11:09:a0:d0:6c:a8:82:de:f4:1b:a8:06:5e:71: 30:82:19:15:04:51:bd:54:dd:4d:25:d4:ae:f6:42:c0:25:d1: 10:3c:32:4b:6b:c8:5a:68:99:0e:4f:ad:b6:ed:fa:11:00:0b: 7f:75:ef:29:30:d3:ba:4b:d0:a0:f6:ef:4e:59:55:06:15:08: 91:a0:a4:b9:74:28:76:da:b1:7d:40:73:f6:55:95:33:9c:ec: 40:7a:ab:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cC7ELX5MMVDl1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk YTYwNTdjMGEtOGFlYy00Yjc4LWJlOTAtNTNjNmIwOWQ1NDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEH8oxcqy7Aenl3NWkzUHU8BnbPwgx8Tjk+S wuJzvjO9IXCmQkTXeghfKTfvdt2gd/f9GgyRhtAbVirSKnwYFzF4cEetfAB8+fja nOqtNd23XN2KF0Ir9QkMxiLgeeyT9bI91B3EXwD7jRnhnOOh7QUg6h8IrBt1KpyF lIgc1LWk0gHFAc504j7A2oe8t/JQEHjSemcWCp52n/9yLIGlzOnyZDViv6cKw+9d ZdPtj0CEE01o5qRvU1XGDARbH063/V8XKFmAfg467c5HqZPwT6HPR0AUXDMs1NU5 hDG6XIWoNJ8NXUlKajWhSP9xQxQtTyZ+iZ6MLDhKwtR5AMy1SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwFkjgkw4sK3CpUfQrNSkLWfTLRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMjk0NmFjMjAtNTI5ZS0z YzhjLThkZmItNWJhZjQxZDBmMjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaJeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUQo6iSV/NouEp1dZrKYmw3bVIYMZuGE9/rcIo/XOfYyAYq5FiT5XeN Cv5VzHtVUhdfSL6Q9J1W7vsvJhVs7mx3LiBMykAAmFIfp7SqyBFrNXLBUtht0lnL UDlw2kXj81r1N4jj0FGypUjJFC0p6ScIzPIa+Vsq2emvaxLNsJ28mNXXVbutFnuL nWNhB8tRP/U+AuVUGSHBjFOoplaRlVaYTJvclDMRCaDQbKiC3vQbqAZecTCCGRUE Ub1U3U0l1K72QsAl0RA8MktryFpomQ5Prbbt+hEAC3917ykw07pL0KD2705ZVQYV CJGgpLl0KHbasX1Ac/ZVlTOc7EB6q1c= -----END CERTIFICATE-----Generated at Wed May 13 07:03:15 2026 by rpki-client