$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0bfe351d-3e88-3edd-b950-e11a5eb35b94.roa File: 0bfe351d-3e88-3edd-b950-e11a5eb35b94.roa (raw, json) Hash identifier: cZ6VFFEUpgAcReO71cCSYrn94RhFSNv+XRudtY4pQUM= Subject key identifier: 57:07:64:0B:C7:5D:0F:8D:C0:54:3A:D2:EA:98:65:08:FD:53:54:F4 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584DAC45826AB6E7B05AFA550780 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0bfe351d-3e88-3edd-b950-e11a5eb35b94.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 11404 IP address blocks: 104.232.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:82:6a:b6:e7:b0:5a:fa:55:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=ef0e0830-8bc7-4e72-ab86-6c7531de13ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e8:f7:3c:e8:0b:ba:66:77:3b:9f:36:2e:5b: 0a:5e:dd:88:6f:cc:f8:1e:ee:22:af:b2:12:78:57: 5b:72:22:b0:c5:19:c5:45:72:b5:e3:3d:14:7e:3d: ec:ee:a6:11:bb:bb:49:e9:7e:84:22:13:c4:b7:7b: ce:e1:a6:69:04:c5:88:94:2d:1d:cc:b5:12:27:c9: 0b:96:b9:0d:75:13:56:bd:06:74:6c:4e:f9:d2:f8: 60:3c:de:08:09:a7:96:d3:6d:51:63:24:db:de:51: c8:b4:e9:3c:af:ef:20:1a:6f:53:67:59:ae:63:b2: 89:45:a7:fd:f4:25:4f:51:0c:cd:47:e2:cf:8a:a2: 4d:a5:36:99:6f:85:30:bd:f2:a5:27:1b:4e:e3:55: 32:9a:35:1a:af:9e:bc:d1:77:16:9d:47:64:5b:d2: b7:eb:62:6c:ae:a9:99:9d:86:4c:6b:f0:18:65:85: a0:69:28:75:31:da:aa:b8:71:ac:3e:4b:dd:b9:13: 86:3f:90:b6:08:6c:c0:57:73:51:e9:3c:20:f0:d5: c4:a4:c3:25:67:f5:c8:42:55:e6:52:b8:7f:58:d8: 32:aa:3b:27:9f:e8:cd:5d:5a:75:c0:52:9b:7e:30: 44:61:b3:12:2c:02:a5:b8:ad:b0:98:d5:df:e3:80: 2c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:07:64:0B:C7:5D:0F:8D:C0:54:3A:D2:EA:98:65:08:FD:53:54:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0bfe351d-3e88-3edd-b950-e11a5eb35b94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.232.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:c0:b3:09:55:6e:14:1c:e2:40:58:88:2c:f4:a9:06:70:ac: 43:ef:43:6e:cd:06:e1:14:03:fa:62:92:65:d2:f9:c6:bc:9c: 34:ad:ff:b7:37:d1:dc:7d:74:64:18:b1:99:d0:57:01:48:fd: d5:09:aa:ab:4e:8a:33:53:d5:02:35:d5:1b:1c:29:80:2f:2a: ef:8c:01:c0:f7:01:c5:f9:80:0e:b8:ac:3f:82:05:0e:b6:4b: 4e:b2:2c:10:12:2b:6c:cc:56:d7:b2:0e:1c:9b:93:fb:2c:50: 8f:ae:3d:00:20:2b:c4:b3:98:6e:e7:9a:29:88:f5:15:b5:a2: f0:6a:af:1a:2a:ee:2b:ee:63:0a:08:80:78:b0:aa:d5:2a:7e: 93:3b:e7:77:02:e0:72:08:89:11:48:8d:0e:52:83:8e:03:34: 95:68:93:0f:e2:c7:0a:34:5f:cc:e3:63:1d:5b:a3:c8:6f:c1: 0e:f8:77:cf:b6:37:6a:80:f6:cb:54:11:fe:61:4c:48:00:2c: af:3f:76:d0:e0:a9:26:ce:6d:0c:15:18:80:e5:5d:dc:5d:2c: 44:34:78:ea:d3:68:fc:a4:e5:02:b1:05:f6:41:6e:9e:05:a8: 0b:4d:6f:a3:c8:7b:47:25:37:ca:ca:b0:fa:1a:01:94:dc:30: f7:94:0d:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRYJqtuewWvpVB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk ZWYwZTA4MzAtOGJjNy00ZTcyLWFiODYtNmM3NTMxZGUxM2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuj3POgLumZ3O582LlsKXt2Ib8z4Hu4ir7IS eFdbciKwxRnFRXK14z0Ufj3s7qYRu7tJ6X6EIhPEt3vO4aZpBMWIlC0dzLUSJ8kL lrkNdRNWvQZ0bE750vhgPN4ICaeW021RYyTb3lHItOk8r+8gGm9TZ1muY7KJRaf9 9CVPUQzNR+LPiqJNpTaZb4UwvfKlJxtO41UymjUar5680XcWnUdkW9K362JsrqmZ nYZMa/AYZYWgaSh1MdqquHGsPkvduROGP5C2CGzAV3NR6Twg8NXEpMMlZ/XIQlXm Urh/WNgyqjsnn+jNXVp1wFKbfjBEYbMSLAKluK2wmNXf44AsWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcHZAvHXQ+NwFQ60uqYZQj9U1T0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMGJmZTM1MWQtM2U4OC0z ZWRkLWI5NTAtZTExYTVlYjM1Yjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaOhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnAswlVbhQc4kBYiCz0qQZwrEPvQ27NBuEUA/pikmXS+ca8nDSt/7c3 0dx9dGQYsZnQVwFI/dUJqqtOijNT1QI11RscKYAvKu+MAcD3AcX5gA64rD+CBQ62 S06yLBASK2zMVteyDhybk/ssUI+uPQAgK8SzmG7nmimI9RW1ovBqrxoq7ivuYwoI gHiwqtUqfpM753cC4HIIiRFIjQ5Sg44DNJVokw/ixwo0X8zjYx1bo8hvwQ74d8+2 N2qA9stUEf5hTEgALK8/dtDgqSbObQwVGIDlXdxdLEQ0eOrTaPyk5QKxBfZBbp4F qAtNb6PIe0clN8rKsPoaAZTcMPeUDV8= -----END CERTIFICATE-----Generated at Wed May 13 02:25:20 2026 by rpki-client