$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/4da8ae0a-9cd3-393c-8e4d-a951f4ad360c.roa File: 4da8ae0a-9cd3-393c-8e4d-a951f4ad360c.roa (raw, json) Hash identifier: ieAFJJGzQaQOVxh67pqhoV+k7mjBGBHL7gVoO2DsGy0= Subject key identifier: 73:BC:E9:C8:66:85:7E:21:EF:59:10:9F:DB:73:BB:FF:8A:9B:9A:02 Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F4328584D4A8FA6319CE7B09BB7DAAE80 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/4da8ae0a-9cd3-393c-8e4d-a951f4ad360c.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 26512 IP address blocks: 104.244.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:a6:31:9c:e7:b0:9b:b7:da:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=653f479e-5a6a-41bd-a8be-4302426bdaf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5f:dd:cc:93:fc:58:9e:12:b4:56:1b:63:68: 3a:77:3e:0b:e6:22:eb:de:96:85:f2:aa:f0:bc:82: 66:a5:07:b4:41:d7:6a:5a:eb:01:e2:58:67:3f:f3: 12:df:e4:67:59:1f:c2:76:57:1f:7c:cf:ca:ee:df: 7e:e9:01:e3:14:d3:cf:02:dc:00:f1:fb:7e:d6:e9: 10:26:61:5e:1c:d4:72:1d:56:73:2f:b9:cd:17:8e: e3:e6:86:15:2a:0b:f6:83:ba:84:76:f2:bc:0c:43: ec:36:da:bd:3a:2d:94:c4:f9:18:91:91:c4:f6:82: 49:61:1e:e7:e2:47:75:75:d9:e4:15:21:ac:72:e0: e3:f6:73:31:68:4e:30:63:4f:01:78:ad:b8:27:03: 38:cd:cd:5f:0b:ca:8a:f4:c1:dd:34:b4:3a:e6:91: 0d:81:04:d2:0e:83:63:1d:03:61:4c:d3:c1:16:6f: 50:19:98:b0:4d:8e:46:8e:45:c3:8f:b9:e9:a4:87: c6:e2:b7:78:e2:8f:10:9c:53:b3:11:3a:03:8e:51: 3b:5e:dc:4d:a1:f7:db:0d:c7:bb:ae:17:19:df:c0: a8:48:70:1a:f4:49:52:2d:1c:5b:a4:a5:38:da:1f: 61:f2:ee:dd:06:39:28:32:fe:bb:bb:62:13:7c:58: 93:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BC:E9:C8:66:85:7E:21:EF:59:10:9F:DB:73:BB:FF:8A:9B:9A:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/4da8ae0a-9cd3-393c-8e4d-a951f4ad360c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.244.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:df:16:8e:a5:27:14:d6:96:fc:4d:89:db:bf:cb:f5:1d:e0: 19:2c:d5:a5:67:bb:8d:d8:73:95:28:da:6c:87:1e:46:94:0f: 5c:c3:73:98:0e:5d:61:7f:da:6e:49:92:81:8b:f6:f1:c5:5e: 43:1b:5b:d1:85:1e:de:a6:59:f1:a8:82:bc:a1:59:77:30:0a: 97:0a:67:76:ed:1a:f3:1b:74:ce:78:a1:e9:a8:88:fb:db:d8: 69:90:2a:48:ad:54:ab:16:99:8d:c3:23:c6:be:7c:b0:75:03: 6b:c6:f5:ef:88:81:b4:0f:cd:57:6e:fe:3f:ff:98:7a:4f:6f: 9f:20:98:22:61:b8:30:44:be:76:cb:28:b5:71:9a:63:c3:75: 6c:8f:94:cc:d6:f3:1c:3b:af:a0:95:12:86:42:1f:8c:10:b2: 93:4b:ee:e2:42:36:a0:42:51:c6:9f:39:7a:18:b1:78:52:eb: 90:c6:46:5c:84:05:ca:3a:a0:77:08:d9:43:17:24:2d:6c:3f: 52:dd:51:fe:d0:6c:ab:66:cb:17:bf:21:cb:fc:17:11:92:ea: ae:63:0c:c7:08:10:5b:65:97:ee:40:ba:a1:c0:88:b0:aa:77: 04:9c:08:e9:8d:01:73:f1:bd:db:d0:6c:5d:49:ed:f0:3d:28: ee:70:71:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj6YxnOewm7faroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk NjUzZjQ3OWUtNWE2YS00MWJkLWE4YmUtNDMwMjQyNmJkYWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF/dzJP8WJ4StFYbY2g6dz4L5iLr3paF8qrw vIJmpQe0QddqWusB4lhnP/MS3+RnWR/CdlcffM/K7t9+6QHjFNPPAtwA8ft+1ukQ JmFeHNRyHVZzL7nNF47j5oYVKgv2g7qEdvK8DEPsNtq9Oi2UxPkYkZHE9oJJYR7n 4kd1ddnkFSGscuDj9nMxaE4wY08BeK24JwM4zc1fC8qK9MHdNLQ65pENgQTSDoNj HQNhTNPBFm9QGZiwTY5GjkXDj7nppIfG4rd44o8QnFOzEToDjlE7XtxNoffbDce7 rhcZ38CoSHAa9ElSLRxbpKU42h9h8u7dBjkoMv67u2ITfFiTRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHO86chmhX4h71kQn9tzu/+Km5oCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvNGRhOGFlMGEtOWNkMy0z OTNjLThlNGQtYTk1MWY0YWQzNjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3fFo6lJxTWlvxNidu/y/Ud4Bks1aVnu43Yc5Uo2myHHkaUD1zDc5gO XWF/2m5JkoGL9vHFXkMbW9GFHt6mWfGogryhWXcwCpcKZ3btGvMbdM54oemoiPvb 2GmQKkitVKsWmY3DI8a+fLB1A2vG9e+IgbQPzVdu/j//mHpPb58gmCJhuDBEvnbL KLVxmmPDdWyPlMzW8xw7r6CVEoZCH4wQspNL7uJCNqBCUcafOXoYsXhS65DGRlyE Bco6oHcI2UMXJC1sP1LdUf7QbKtmyxe/Icv8FxGS6q5jDMcIEFtll+5AuqHAiLCq dwScCOmNAXPxvdvQbF1J7fA9KO5wcZs= -----END CERTIFICATE-----Generated at Thu Mar 26 14:17:53 2026 by rpki-client