$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/cb0085db-84a3-3eed-9a41-b2fb4a2b89f5.roa File: cb0085db-84a3-3eed-9a41-b2fb4a2b89f5.roa (raw, json) Hash identifier: yiZiuTsfk6CCNgphETnj81m9UduS2FSF85815U7J1pw= Subject key identifier: C3:03:20:21:BD:69:48:93:23:4B:0D:53:84:16:DD:97:89:FE:35:A4 Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F4328584D19B4B4FBF2D0B54D70F4E840 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/cb0085db-84a3-3eed-9a41-b2fb4a2b89f5.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 26512 IP address blocks: 104.244.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:b4:fb:f2:d0:b5:4d:70:f4:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=c1a8e276-1797-4261-ad06-cac7655320a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c8:a8:cc:f9:3a:4e:38:22:71:ae:77:75:01: 67:3f:07:61:77:7d:c4:01:63:d4:18:0b:6f:53:40: 89:c7:20:54:03:c5:e4:19:17:ed:84:66:a5:ce:90: 80:51:56:a1:00:d9:ef:0e:d9:eb:bf:81:7a:70:0b: e8:2e:74:10:a1:40:1f:2e:4a:66:c8:aa:9b:bf:8d: 03:c9:04:13:1b:af:ef:93:4e:97:68:70:57:b6:ab: 8d:8d:49:7f:04:69:90:04:0f:04:20:0e:e6:2e:68: 2e:c4:a8:b2:61:7f:2a:bb:8a:95:4d:16:a6:fb:db: 77:f6:c1:79:03:2b:cb:d7:96:be:47:68:83:98:8d: ae:45:4f:14:4f:6a:d4:56:ff:ac:46:02:5f:f5:55: e2:ea:8e:95:c8:b4:d8:c7:80:66:9a:d1:25:7a:8d: 84:04:be:21:40:22:ab:42:2c:24:6c:ba:ec:71:a8: 1f:33:ad:a3:2b:fd:1e:70:30:72:1c:63:e6:08:29: c7:7c:c7:ab:46:7d:34:64:21:f6:eb:da:47:7d:f3: 9d:2a:3d:d2:d6:04:cd:9a:92:0d:57:a0:fa:bb:b8: 94:cc:ac:5f:c2:b2:21:14:72:99:8c:ff:5c:46:53: 24:dd:8f:72:e8:f3:6f:b3:9c:b4:f3:9a:da:a1:18: cf:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:03:20:21:BD:69:48:93:23:4B:0D:53:84:16:DD:97:89:FE:35:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/cb0085db-84a3-3eed-9a41-b2fb4a2b89f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.244.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:07:fb:e4:90:db:c8:39:ad:12:fd:88:eb:58:76:20:df:ed: 88:a6:47:92:67:f0:48:a1:01:4d:5d:4a:c1:f6:e2:83:d1:78: 70:41:f9:5b:97:c3:9d:08:d0:58:f7:47:2a:73:9c:5c:f7:4a: e3:b6:bd:10:24:07:dd:22:4a:4b:6e:2e:e7:02:16:1f:ef:3a: 5e:a6:1e:ca:b4:a5:27:81:7e:a7:35:91:5d:e7:a5:b2:1a:15: f7:0e:c9:e2:42:a6:e0:75:62:a2:93:1a:3d:00:97:e0:ba:70: 91:a8:73:f1:88:c3:32:da:33:93:06:c6:fd:6d:22:7e:55:e0: c9:5b:78:31:84:61:39:c4:27:29:fe:2d:7b:b5:85:00:b8:dc: 7c:03:0c:fc:87:ef:5c:6b:41:6b:2d:5c:70:f5:12:3d:7c:c0: 42:88:f1:27:01:3f:e2:d2:d6:4b:12:7c:65:42:26:67:0a:cc: 88:75:83:52:37:97:18:e7:c3:b7:47:a5:5f:23:46:1f:3e:37: 2a:84:84:1c:1e:12:d4:87:4c:a3:72:93:1e:2c:8c:cd:c1:50: 8a:a9:51:8d:d3:0f:2b:f3:be:30:51:ec:7b:a8:0e:11:d6:30: 4d:36:a4:97:1c:e5:92:0b:72:9f:4b:f5:df:04:57:25:1a:4d: 2a:3c:71:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtLT78tC1TXD06EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk YzFhOGUyNzYtMTc5Ny00MjYxLWFkMDYtY2FjNzY1NTMyMGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMiozPk6Tjgica53dQFnPwdhd33EAWPUGAtv U0CJxyBUA8XkGRfthGalzpCAUVahANnvDtnrv4F6cAvoLnQQoUAfLkpmyKqbv40D yQQTG6/vk06XaHBXtquNjUl/BGmQBA8EIA7mLmguxKiyYX8qu4qVTRam+9t39sF5 AyvL15a+R2iDmI2uRU8UT2rUVv+sRgJf9VXi6o6VyLTYx4BmmtEleo2EBL4hQCKr QiwkbLrscagfM62jK/0ecDByHGPmCCnHfMerRn00ZCH269pHffOdKj3S1gTNmpIN V6D6u7iUzKxfwrIhFHKZjP9cRlMk3Y9y6PNvs5y085raoRjPrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMDICG9aUiTI0sNU4QW3ZeJ/jWkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvY2IwMDg1ZGItODRhMy0z ZWVkLTlhNDEtYjJmYjRhMmI4OWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPQTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8H++SQ28g5rRL9iOtYdiDf7YimR5Jn8EihAU1dSsH24oPReHBB+VuX w50I0Fj3RypznFz3SuO2vRAkB90iSktuLucCFh/vOl6mHsq0pSeBfqc1kV3npbIa FfcOyeJCpuB1YqKTGj0Al+C6cJGoc/GIwzLaM5MGxv1tIn5V4MlbeDGEYTnEJyn+ LXu1hQC43HwDDPyH71xrQWstXHD1Ej18wEKI8ScBP+LS1ksSfGVCJmcKzIh1g1I3 lxjnw7dHpV8jRh8+NyqEhBweEtSHTKNykx4sjM3BUIqpUY3TDyvzvjBR7HuoDhHW ME02pJcc5ZILcp9L9d8EVyUaTSo8cbc= -----END CERTIFICATE-----Generated at Thu Mar 26 14:18:23 2026 by rpki-client