$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae67a0de-7e5b-4366-9901-6c83fac47b0b/5b0df316-9ef9-3270-b999-73c30555f12a.roa File: 5b0df316-9ef9-3270-b999-73c30555f12a.roa (raw, json) Hash identifier: 0ueUXx3SvPcltKWUuh28P+Me26vOoGW65z1+NYwBq6E= Subject key identifier: 42:70:B0:BC:7C:6E:B5:16:B2:7B:B4:1F:48:7D:CD:34:06:79:0E:A3 Certificate issuer: /CN=ae67a0de-7e5b-4366-9901-6c83fac47b0b Certificate serial: 010D0C9F4328584D422F8C6E458E9560EB72AA00 Authority key identifier: E4:45:C0:E7:03:12:70:8E:29:F5:A5:96:82:F9:D9:32:93:9E:09:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae67a0de-7e5b-4366-9901-6c83fac47b0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae67a0de-7e5b-4366-9901-6c83fac47b0b/5b0df316-9ef9-3270-b999-73c30555f12a.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 6652 IP address blocks: 104.204.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae67a0de-7e5b-4366-9901-6c83fac47b0b/ae67a0de-7e5b-4366-9901-6c83fac47b0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae67a0de-7e5b-4366-9901-6c83fac47b0b/ae67a0de-7e5b-4366-9901-6c83fac47b0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae67a0de-7e5b-4366-9901-6c83fac47b0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:8c:6e:45:8e:95:60:eb:72:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae67a0de-7e5b-4366-9901-6c83fac47b0b Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=afe68de4-23de-491d-8088-1eb9660536fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:43:b5:77:36:28:75:bf:7b:3f:af:36:3e:59: 30:d2:ef:e9:d8:55:b7:f4:39:17:d3:05:ff:89:5f: 7b:d6:27:60:57:3a:6d:48:39:63:6b:da:37:87:67: 61:30:e0:6d:4e:ad:14:52:02:44:c4:59:30:55:73: 0b:00:07:0b:e9:19:77:43:02:5c:d3:1a:b7:8c:e9: 42:74:0a:db:81:6e:98:25:ea:8f:01:d0:48:0b:22: 5b:df:e1:07:88:a3:e5:ba:32:9d:08:32:1a:a1:d6: d4:ec:88:33:38:cd:aa:1a:b4:a0:0d:cb:38:6b:89: 59:33:89:e3:18:c7:53:28:0f:ed:61:23:70:ee:75: 13:bf:b6:04:b9:bf:49:03:d3:33:0e:5f:f2:c2:04: ad:93:03:38:c6:fc:bd:ed:c2:35:88:f9:4c:d2:0b: ea:6d:95:05:e1:6f:f0:60:00:c8:4f:3c:5b:b9:6f: 97:5e:c5:b0:07:d2:f1:cc:95:9a:a4:ef:1e:f9:f3: 31:0d:e7:a8:7b:79:6d:63:89:85:d7:03:c0:4b:2a: d0:94:b4:e1:29:63:96:e9:22:45:3f:0d:29:fd:ac: c7:e3:66:f8:8f:e3:fa:b9:33:e8:f6:61:d7:02:25: df:ef:0c:f7:66:ff:93:a0:4e:36:54:33:c7:8d:f2: 4d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:70:B0:BC:7C:6E:B5:16:B2:7B:B4:1F:48:7D:CD:34:06:79:0E:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae67a0de-7e5b-4366-9901-6c83fac47b0b/5b0df316-9ef9-3270-b999-73c30555f12a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae67a0de-7e5b-4366-9901-6c83fac47b0b/ae67a0de-7e5b-4366-9901-6c83fac47b0b.crl X509v3 Authority Key Identifier: keyid:E4:45:C0:E7:03:12:70:8E:29:F5:A5:96:82:F9:D9:32:93:9E:09:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae67a0de-7e5b-4366-9901-6c83fac47b0b.cer sbgp-ipAddrBlock: critical IPv4: 104.204.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:9a:a0:71:e0:3e:20:85:74:89:87:d8:5d:cc:36:bb:7d:56: 68:17:56:a3:ed:c6:9e:21:13:93:f6:14:83:6c:5d:2d:79:11: 37:4a:cb:f1:06:b4:81:d5:97:7e:15:5f:fa:b7:1e:16:13:5b: 4f:1b:3f:01:b5:2e:d5:ab:5e:39:00:45:5f:d8:00:5f:4b:6f: 70:81:57:3d:c8:20:7c:69:f2:3a:52:ed:ba:bd:ef:fb:27:7d: 2a:df:b0:36:47:bb:fb:5d:4d:d7:fe:e8:cd:29:a4:74:8c:c5: 19:59:10:01:7e:0f:e6:8d:9a:05:b6:db:6c:49:87:8d:42:11: 6c:bf:7e:94:be:be:bf:6f:4d:52:ef:7d:e7:7d:74:bd:59:45: 45:49:4b:45:62:a5:63:d4:86:53:42:29:72:f6:66:9b:4e:33: 74:f2:64:23:32:31:7f:1b:24:31:2c:74:ae:6b:1e:8a:6b:a4: 98:ed:45:ca:2d:dc:a6:3b:9b:4f:85:fe:0a:40:e7:de:66:d6: e9:a1:bc:92:ac:94:ff:9a:a1:f0:a3:ce:b5:9c:1a:e6:28:70: 5b:93:18:10:92:d3:3f:5e:6c:e9:5b:5a:58:23:e0:cc:a0:88: 49:5f:17:db:eb:3f:b2:99:90:a6:a7:eb:8d:23:01:bd:e7:81: cb:66:5f:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL4xuRY6VYOtyqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU2N2EwZGUtN2U1Yi00MzY2LTk5MDEtNmM4M2ZhYzQ3 YjBiMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk YWZlNjhkZTQtMjNkZS00OTFkLTgwODgtMWViOTY2MDUzNmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUO1dzYodb97P682Plkw0u/p2FW39DkX0wX/ iV971idgVzptSDlja9o3h2dhMOBtTq0UUgJExFkwVXMLAAcL6Rl3QwJc0xq3jOlC dArbgW6YJeqPAdBICyJb3+EHiKPlujKdCDIaodbU7IgzOM2qGrSgDcs4a4lZM4nj GMdTKA/tYSNw7nUTv7YEub9JA9MzDl/ywgStkwM4xvy97cI1iPlM0gvqbZUF4W/w YADITzxbuW+XXsWwB9LxzJWapO8e+fMxDeeoe3ltY4mF1wPASyrQlLThKWOW6SJF Pw0p/azH42b4j+P6uTPo9mHXAiXf7wz3Zv+ToE42VDPHjfJNjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJwsLx8brUWsnu0H0h9zTQGeQ6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZTY3 YTBkZS03ZTViLTQzNjYtOTkwMS02YzgzZmFjNDdiMGIvNWIwZGYzMTYtOWVmOS0z MjcwLWI5OTktNzNjMzA1NTVmMTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWU2N2EwZGUtN2U1Yi00MzY2LTk5 MDEtNmM4M2ZhYzQ3YjBiL2FlNjdhMGRlLTdlNWItNDM2Ni05OTAxLTZjODNmYWM0 N2IwYi5jcmwwHwYDVR0jBBgwFoAU5EXA5wMScI4p9aWWgvnZMpOeCWIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZTY3YTBkZS03ZTViLTQzNjYtOTkwMS02Yzgz ZmFjNDdiMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaMzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaaoHHgPiCFdImH2F3MNrt9VmgXVqPtxp4hE5P2FINsXS15ETdKy/EG tIHVl34VX/q3HhYTW08bPwG1LtWrXjkARV/YAF9Lb3CBVz3IIHxp8jpS7bq97/sn fSrfsDZHu/tdTdf+6M0ppHSMxRlZEAF+D+aNmgW222xJh41CEWy/fpS+vr9vTVLv fed9dL1ZRUVJS0VipWPUhlNCKXL2ZptOM3TyZCMyMX8bJDEsdK5rHoprpJjtRcot 3KY7m0+F/gpA595m1umhvJKslP+aofCjzrWcGuYocFuTGBCS0z9ebOlbWlgj4Myg iElfF9vrP7KZkKan640jAb3ngctmX4k= -----END CERTIFICATE-----Generated at Thu Mar 26 12:05:49 2026 by rpki-client