$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa File: eff20afa-d256-340d-8b13-7a8f9e404a25.roa (raw, json) Hash identifier: nx0HEEWzEPP8jXA9/mZqha0iKY+H6HYXqwACpK7m5JU= Subject key identifier: 69:0A:AE:BC:8D:3F:17:5A:44:84:85:EE:1E:8E:5D:D6:D7:6C:BF:9B Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Certificate serial: 010D0C9F4328584DB1DACCB827CC043D48421200 Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa Signing time: Sat 02 May 2026 01:00:24 +0000 ROA not before: Sat 02 May 2026 01:00:24 +0000 ROA not after: Fri 31 Jul 2026 01:00:24 +0000 asID: 21559 IP address blocks: 104.238.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b1:da:cc:b8:27:cc:04:3d:48:42:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Validity Not Before: May 2 01:00:24 2026 GMT Not After : Jul 31 01:00:24 2026 GMT Subject: CN=e8a9b1d1-95e8-4d00-b4e4-3a22582b547c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:07:bf:b5:85:20:8b:36:d7:b3:86:01:04:7b: af:26:32:d3:b5:85:67:db:82:20:b4:c1:af:f5:9d: fa:18:0b:5c:16:9d:ca:85:34:e0:83:c3:e7:59:8a: 54:0e:20:cd:4d:e8:2a:7a:60:25:3a:ad:39:30:13: 3f:74:8b:32:cd:b7:92:8d:74:41:59:cd:63:4d:9c: 96:8d:35:c2:26:47:23:8f:29:e5:6d:52:eb:a2:1c: 35:f2:37:5d:aa:2c:28:78:5b:09:2d:ed:ba:c9:fd: 86:c1:e9:70:45:05:ae:64:64:7a:37:ca:6b:a1:d1: 00:19:2e:e9:02:d7:af:9c:32:b3:6e:6d:74:78:e8: 38:08:5b:71:61:cb:f8:13:34:f2:48:3a:ab:d5:23: 64:21:ae:ee:cd:5c:e8:c4:be:da:1d:c6:27:f8:09: c4:ac:6f:42:6f:d7:60:65:ac:b2:68:54:42:79:98: aa:44:02:d3:51:e5:3e:8c:89:ad:fa:b8:01:69:75: e3:0d:b5:15:bd:5b:8d:47:3f:51:80:73:fc:d6:da: 70:50:52:f9:54:1c:20:53:c3:32:6d:71:77:6a:bb: 11:a9:77:e7:c5:4e:5d:8e:f4:0e:4c:fe:b8:87:2c: 51:62:e8:54:96:d9:c2:d1:36:d1:c0:24:55:73:74: 17:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0A:AE:BC:8D:3F:17:5A:44:84:85:EE:1E:8E:5D:D6:D7:6C:BF:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl X509v3 Authority Key Identifier: keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer sbgp-ipAddrBlock: critical IPv4: 104.238.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:a7:4d:2f:a2:1b:68:81:3a:e7:16:53:70:71:ba:83:12:4d: 70:a8:fe:0a:ae:73:63:28:19:7c:7c:5c:43:71:3e:a2:4b:83: a1:da:cc:95:db:59:99:a3:76:79:fd:1c:27:a1:73:0f:78:37: c2:cb:62:cd:c4:e9:fb:30:b2:e6:08:de:67:1f:e3:d1:08:f2: 9d:25:89:f5:c7:3d:39:5e:ad:11:c9:15:5a:42:d0:05:18:49: 96:be:8b:db:22:55:41:95:64:9e:c4:0e:d0:4e:c6:67:e2:84: 25:69:3f:6d:72:26:36:64:fb:b0:53:04:a6:ef:0f:e6:e4:0a: 79:34:74:46:62:47:85:c6:cb:8e:ae:93:6d:c8:d1:d6:c2:3b: 3c:48:a8:fd:2a:e9:ee:d3:01:9e:cd:89:e6:68:65:1e:e1:20: 06:67:25:a7:9d:e2:e2:6b:14:32:f8:51:8f:15:0e:e4:51:fc: fe:a1:ed:f9:c6:15:36:b4:85:b9:01:90:69:ae:fb:10:af:f2: eb:4b:7a:7c:4d:6c:08:0f:84:3e:36:c2:38:75:3d:28:4d:0a: 8e:11:34:16:5e:65:f6:9b:0f:dd:03:eb:f0:66:88:8c:1a:29: eb:94:25:46:1f:10:90:4a:f4:c1:97:43:31:be:be:07:91:49: eb:19:99:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2x2sy4J8wEPUhCEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh YTNjMB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk ZThhOWIxZDEtOTVlOC00ZDAwLWI0ZTQtM2EyMjU4MmI1NDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQe/tYUgizbXs4YBBHuvJjLTtYVn24IgtMGv 9Z36GAtcFp3KhTTgg8PnWYpUDiDNTegqemAlOq05MBM/dIsyzbeSjXRBWc1jTZyW jTXCJkcjjynlbVLrohw18jddqiwoeFsJLe26yf2GwelwRQWuZGR6N8prodEAGS7p AtevnDKzbm10eOg4CFtxYcv4EzTySDqr1SNkIa7uzVzoxL7aHcYn+AnErG9Cb9dg ZayyaFRCeZiqRALTUeU+jImt+rgBaXXjDbUVvVuNRz9RgHP81tpwUFL5VBwgU8My bXF3arsRqXfnxU5djvQOTP64hyxRYuhUltnC0TbRwCRVc3QXhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkKrryNPxdaRISF7h6OXdbXbL+bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvZWZmMjBhZmEtZDI1Ni0z NDBkLThiMTMtN2E4ZjllNDA0YTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2 YmFlMGFhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaO7oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMKnTS+iG2iBOucWU3BxuoMSTXCo/gquc2MoGXx8XENxPqJLg6HazJXb WZmjdnn9HCehcw94N8LLYs3E6fswsuYI3mcf49EI8p0lifXHPTlerRHJFVpC0AUY SZa+i9siVUGVZJ7EDtBOxmfihCVpP21yJjZk+7BTBKbvD+bkCnk0dEZiR4XGy46u k23I0dbCOzxIqP0q6e7TAZ7NieZoZR7hIAZnJaed4uJrFDL4UY8VDuRR/P6h7fnG FTa0hbkBkGmu+xCv8utLenxNbAgPhD42wjh1PShNCo4RNBZeZfabD90D6/BmiIwa KeuUJUYfEJBK9MGXQzG+vgeRSesZmUE= -----END CERTIFICATE-----Generated at Wed May 13 08:54:12 2026 by rpki-client