$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/49437856-3ddc-3e98-81e1-968ce4991274.roa File: 49437856-3ddc-3e98-81e1-968ce4991274.roa (raw, json) Hash identifier: UkUfq8el+vNwtN1cFH/ca9b+9UDonm7fjrkg8bQzLy0= Subject key identifier: FA:BD:FA:63:C7:C4:D2:92:7C:07:82:16:D2:A7:DC:F9:93:7F:AC:AD Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F4328584D2A74E7B7E3C4E7D087ADAB10 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/49437856-3ddc-3e98-81e1-968ce4991274.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 55293 IP address blocks: 104.255.192.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:e7:b7:e3:c4:e7:d0:87:ad:ab:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=9cd8b9ba-8fd7-4c71-b047-152c99758025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:93:69:05:65:d4:87:8f:ee:c0:b1:8b:13:4d: de:e9:1b:e4:b3:30:dd:83:06:1c:66:27:27:30:01: 2c:14:c5:2a:13:71:56:b0:f7:17:66:a7:ba:59:b8: df:09:f0:05:73:37:28:fe:b5:ce:3c:11:9b:86:86: 94:6f:aa:e3:70:fa:79:bb:9b:65:6e:77:75:b0:ea: 5c:14:56:da:8a:fb:24:2a:62:e1:73:9f:71:24:2c: 54:e4:57:68:9f:f6:7f:71:10:4a:b3:b3:1b:7e:d6: c4:e4:7f:9c:7f:26:1b:08:3c:81:4f:25:13:da:66: 98:45:ec:c4:ed:ec:9f:0a:2d:d9:28:68:7b:9c:c2: fc:fe:f4:04:60:7e:c4:dc:25:ac:11:9f:49:1d:96: a8:aa:2e:77:33:9d:33:f3:1f:d9:fe:b7:99:4a:77: 32:1b:1a:fd:85:1d:51:7a:68:b1:64:33:6b:51:93: 3a:20:13:f7:a8:39:56:68:4a:41:68:7f:b4:54:0c: 77:54:1e:9b:e3:c5:1d:d7:44:17:5e:35:97:22:91: f6:89:43:29:d9:68:8a:e1:16:4f:95:cf:d1:b1:6c: 67:41:56:19:2c:b7:01:17:c7:77:e2:42:5a:8f:27: 67:97:26:4c:48:bc:45:75:00:bb:f4:7a:2d:8f:85: eb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BD:FA:63:C7:C4:D2:92:7C:07:82:16:D2:A7:DC:F9:93:7F:AC:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/49437856-3ddc-3e98-81e1-968ce4991274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 104.255.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:a5:bb:fd:6f:ef:c2:0d:35:4f:50:00:6e:f4:4a:4f:64:5e: 4b:4d:5a:3c:a2:84:bd:f8:46:38:a2:47:16:d4:ec:bd:03:9d: c4:96:ba:2f:86:a6:81:c7:91:2c:c1:04:65:7f:87:9c:71:dd: 75:2d:30:ce:e0:c7:5a:dd:0f:42:90:ae:e7:0b:78:e5:b2:72: 9f:cb:3a:52:cf:47:d9:e8:b5:39:87:f4:14:d6:fd:8b:bf:15: 40:46:a9:b0:7e:73:d3:ba:87:c5:4a:c4:41:c1:09:c4:03:9d: b1:1c:bd:83:f7:fe:03:15:f8:53:b8:13:b4:c4:6c:66:a1:ee: 2f:c8:ed:87:fc:1b:15:7d:52:1d:06:38:c5:d7:d3:f1:be:36: c3:7a:d7:6c:a5:d0:44:99:04:a5:d5:ad:2d:99:c4:0a:35:ca: 8a:0d:0f:d1:6d:94:59:43:80:e9:e7:60:60:02:57:aa:34:27: 93:16:36:ba:d8:e6:e7:43:24:71:33:99:c0:cc:6c:c7:26:b4: 38:2a:46:b1:e6:ab:70:52:df:62:6d:df:e3:a8:c8:cc:0a:b0: e7:12:c2:70:62:58:bd:e9:4c:49:c5:b4:c4:53:68:c3:03:18: f8:26:e1:67:2f:9f:f9:d1:bc:27:0d:41:3b:9a:ba:59:37:d0: bf:2a:65:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOe348Tn0IetqxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk OWNkOGI5YmEtOGZkNy00YzcxLWIwNDctMTUyYzk5NzU4MDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpNpBWXUh4/uwLGLE03e6RvkszDdgwYcZicn MAEsFMUqE3FWsPcXZqe6WbjfCfAFczco/rXOPBGbhoaUb6rjcPp5u5tlbnd1sOpc FFbaivskKmLhc59xJCxU5Fdon/Z/cRBKs7MbftbE5H+cfyYbCDyBTyUT2maYRezE 7eyfCi3ZKGh7nML8/vQEYH7E3CWsEZ9JHZaoqi53M50z8x/Z/reZSncyGxr9hR1R emixZDNrUZM6IBP3qDlWaEpBaH+0VAx3VB6b48Ud10QXXjWXIpH2iUMp2WiK4RZP lc/RsWxnQVYZLLcBF8d34kJajydnlyZMSLxFdQC79Hotj4XrEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPq9+mPHxNKSfAeCFtKn3PmTf6ytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvNDk0Mzc4NTYtM2RkYy0z ZTk4LTgxZTEtOTY4Y2U0OTkxMjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSlu/1v78INNU9QAG70Sk9kXktNWjyihL34RjiiRxbU7L0DncSWui+G poHHkSzBBGV/h5xx3XUtMM7gx1rdD0KQrucLeOWycp/LOlLPR9notTmH9BTW/Yu/ FUBGqbB+c9O6h8VKxEHBCcQDnbEcvYP3/gMV+FO4E7TEbGah7i/I7Yf8GxV9Uh0G OMXX0/G+NsN612yl0ESZBKXVrS2ZxAo1yooND9FtlFlDgOnnYGACV6o0J5MWNrrY 5udDJHEzmcDMbMcmtDgqRrHmq3BS32Jt3+OoyMwKsOcSwnBiWL3pTEnFtMRTaMMD GPgm4Wcvn/nRvCcNQTuaulk30L8qZQY= -----END CERTIFICATE-----Generated at Thu Mar 26 23:44:41 2026 by rpki-client