$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5ce7070a-d802-3402-9db0-a69cd8854a55.roa File: 5ce7070a-d802-3402-9db0-a69cd8854a55.roa (raw, json) Hash identifier: nF2IktGgVow6MCRqgZLX2luMjQ6hf0g2NDBZBRY4cfE= Subject key identifier: 43:9C:E9:C9:2B:22:69:06:31:6F:65:0E:19:E3:7B:17:0A:B9:87:1D Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D4A8FB7CA7262571F3EE25CA0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5ce7070a-d802-3402-9db0-a69cd8854a55.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 201106 IP address blocks: 104.253.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:b7:ca:72:62:57:1f:3e:e2:5c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=898957c3-b452-41d5-971b-65d66f99c1f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:83:a9:09:a5:92:60:0f:ca:e7:ba:b6:c5:07: a6:9e:4b:81:33:66:d4:75:b9:cf:a3:dc:3f:de:21: 9a:88:e9:0f:b6:b2:30:cd:0c:89:f0:05:40:d1:34: d0:e8:22:c4:ab:83:4a:3a:03:4b:5d:c7:5b:1e:e8: d7:be:5e:94:54:c1:40:2c:58:80:84:70:b8:54:02: 65:4a:c2:71:e4:56:43:f8:a4:b1:a0:f9:f0:a1:aa: 00:a5:12:01:fa:39:d4:99:d5:dd:78:b4:73:36:e8: aa:d9:6d:6a:9d:aa:7a:7f:02:59:39:42:9a:80:ae: 29:72:03:97:32:ed:3f:62:44:ff:9c:05:ab:c4:40: 91:20:c8:06:b7:d8:6d:92:a7:92:6e:e7:3b:9c:53: 16:76:77:e1:93:72:a1:9d:64:8d:c3:59:2a:3d:2a: 31:05:58:58:4f:80:15:d2:a5:83:82:16:7b:fe:fd: 15:da:cf:74:c7:25:67:c5:33:40:49:cf:49:74:3d: 20:9f:61:ab:18:a7:04:59:9a:a0:67:2a:f3:07:78: 0b:67:74:27:12:8c:2c:11:21:91:8c:d9:50:7a:35: d7:cd:de:fe:f0:90:e2:30:35:d1:43:c1:f4:f5:ff: a7:98:29:ab:4d:65:5a:19:a6:26:6f:76:1f:26:d4: 37:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9C:E9:C9:2B:22:69:06:31:6F:65:0E:19:E3:7B:17:0A:B9:87:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5ce7070a-d802-3402-9db0-a69cd8854a55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:12:9b:a0:69:3b:07:8a:c3:98:eb:6e:93:a4:2c:7f:ea:7c: d8:71:ab:d8:32:74:2d:fd:61:32:85:0b:1b:c6:26:75:69:9d: 1c:52:8d:41:fc:18:81:80:29:01:60:9a:6a:44:be:cb:12:06: b3:88:fb:3c:2c:ba:87:e9:26:a3:24:1d:bd:f5:4a:3f:c1:63: 5c:cd:a6:60:4a:33:96:02:83:71:b9:cb:ee:61:12:34:bb:81: 97:94:c6:c0:25:bf:a2:ed:9f:7c:83:04:6b:47:74:55:56:2b: 49:aa:9d:04:df:8f:4c:e9:18:d2:87:46:b9:d7:d2:68:02:13: f3:5e:f5:75:66:dd:c5:cd:32:1f:4f:04:93:bc:f6:1f:d5:f4: ef:bd:2a:30:20:d4:cd:a0:54:a7:cc:eb:7c:eb:d8:83:75:3c: 4c:33:33:c4:6c:84:ce:86:90:87:40:95:13:83:eb:bc:f6:30: b1:c6:38:b0:ca:85:40:b7:a9:98:0b:a1:95:f3:ed:6c:10:e0: ef:61:23:a0:61:88:7b:87:73:22:a6:92:cf:f3:51:6e:3e:1d: 81:f4:69:b0:13:7a:a2:4b:01:3e:f4:87:3f:c3:9a:ff:87:71: be:b0:b1:70:71:cb:30:5a:94:e9:fa:01:78:de:26:21:55:18: 20:0d:7c:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj7fKcmJXHz7iXKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk ODk4OTU3YzMtYjQ1Mi00MWQ1LTk3MWItNjVkNjZmOTljMWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIOpCaWSYA/K57q2xQemnkuBM2bUdbnPo9w/ 3iGaiOkPtrIwzQyJ8AVA0TTQ6CLEq4NKOgNLXcdbHujXvl6UVMFALFiAhHC4VAJl SsJx5FZD+KSxoPnwoaoApRIB+jnUmdXdeLRzNuiq2W1qnap6fwJZOUKagK4pcgOX Mu0/YkT/nAWrxECRIMgGt9htkqeSbuc7nFMWdnfhk3KhnWSNw1kqPSoxBVhYT4AV 0qWDghZ7/v0V2s90xyVnxTNASc9JdD0gn2GrGKcEWZqgZyrzB3gLZ3QnEowsESGR jNlQejXXzd7+8JDiMDXRQ8H09f+nmCmrTWVaGaYmb3YfJtQ3uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOc6ckrImkGMW9lDhnjexcKuYcdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNWNlNzA3MGEtZDgwMi0z NDAyLTlkYjAtYTY5Y2Q4ODU0YTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIISm6BpOweKw5jrbpOkLH/qfNhxq9gydC39YTKFCxvGJnVpnRxSjUH8 GIGAKQFgmmpEvssSBrOI+zwsuofpJqMkHb31Sj/BY1zNpmBKM5YCg3G5y+5hEjS7 gZeUxsAlv6Ltn3yDBGtHdFVWK0mqnQTfj0zpGNKHRrnX0mgCE/Ne9XVm3cXNMh9P BJO89h/V9O+9KjAg1M2gVKfM63zr2IN1PEwzM8RshM6GkIdAlROD67z2MLHGOLDK hUC3qZgLoZXz7WwQ4O9hI6BhiHuHcyKmks/zUW4+HYH0abATeqJLAT70hz/Dmv+H cb6wsXBxyzBalOn6AXjeJiFVGCANfFY= -----END CERTIFICATE-----Generated at Thu Mar 26 19:31:31 2026 by rpki-client