$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/2bc43a93-0030-3c39-8b64-3f0f629703a2.roa File: 2bc43a93-0030-3c39-8b64-3f0f629703a2.roa (raw, json) Hash identifier: dTE6bxRJByfwy8Zkm0rXxFefQRKw9EGemZIYND4XxUs= Subject key identifier: 67:0D:53:02:E0:59:82:94:26:C7:FE:CF:60:10:01:F4:99:18:11:11 Certificate issuer: /CN=85ff82e4-cd37-45c6-b714-ab0a04927964 Certificate serial: 010D0C9F4328584D905A8E14B7FA3A5332DE9954 Authority key identifier: 5E:4B:BF:18:60:91:10:DF:CE:16:25:9B:8B:08:65:A9:1C:62:50:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/2bc43a93-0030-3c39-8b64-3f0f629703a2.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 397942 IP address blocks: 104.171.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:8e:14:b7:fa:3a:53:32:de:99:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85ff82e4-cd37-45c6-b714-ab0a04927964 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=61cbace9-3f21-40c0-9b18-126ad94e9aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7f:76:f6:40:8d:6e:7b:f5:6a:b2:fa:35:a3: 79:19:d5:1f:e7:af:6d:ae:1a:7a:20:65:dc:69:f9: 77:5d:ee:95:61:b4:e0:bc:bc:a4:04:1a:83:c0:ac: 9c:eb:ca:35:45:0b:14:5b:78:2f:26:34:5a:bb:fa: e7:77:aa:7f:c0:f7:f5:52:30:de:6a:fb:54:2b:80: 0a:19:d0:46:6f:0c:48:60:33:a8:8c:36:fa:b6:23: c7:43:88:7f:8f:21:e8:61:7f:b1:32:c8:f4:7b:0c: 55:a6:54:5f:c7:d0:9d:e0:c8:ce:ab:4a:b2:c6:5e: cf:66:30:dc:10:44:7f:cc:17:86:f1:9e:4b:1d:6d: b6:77:36:0c:de:d7:60:0e:d1:f8:04:27:0b:16:fd: 34:2e:39:d3:65:55:b9:5e:bf:59:27:f9:27:69:49: 31:76:62:96:7d:91:08:fc:4d:5c:ab:8d:a4:1c:3d: 3c:ab:ff:e5:25:91:b5:ff:ec:0e:9b:a4:1d:d9:a2: 89:12:ac:ac:8c:14:fe:4d:37:f7:89:bc:78:6f:1e: 91:80:43:c0:85:ad:17:7b:cd:d1:90:cd:f6:71:85: 99:b1:c7:73:7f:c4:7b:86:c6:a1:63:56:4d:ea:3b: 23:26:7b:37:22:e1:75:6a:62:0a:fa:da:51:bd:3a: 5b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0D:53:02:E0:59:82:94:26:C7:FE:CF:60:10:01:F4:99:18:11:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/2bc43a93-0030-3c39-8b64-3f0f629703a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.crl X509v3 Authority Key Identifier: keyid:5E:4B:BF:18:60:91:10:DF:CE:16:25:9B:8B:08:65:A9:1C:62:50:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer sbgp-ipAddrBlock: critical IPv4: 104.171.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:13:b6:19:2f:7d:d8:67:53:5f:02:4d:71:33:96:5e:53:64: 63:75:fd:f8:cd:a6:44:2e:f0:6c:36:3e:9c:d4:45:e1:a7:c9: 56:be:fc:2d:7a:3a:09:12:a4:81:1e:47:57:57:2a:d0:62:14: 7e:ce:f8:6f:ff:73:d0:46:ef:30:99:f4:ba:f5:f5:44:b5:b8: 01:7e:31:bf:d3:50:c7:a8:e4:c2:51:32:9f:6d:dd:76:ef:f4: ce:25:ac:80:39:10:63:31:82:51:33:00:43:3f:e3:22:0b:d9: 84:7f:f3:e0:a3:f7:6b:12:ef:37:50:be:bb:b4:93:3d:96:42: be:59:de:52:24:ac:4f:2b:df:e3:74:40:08:0b:96:f2:f3:d4: 93:2e:f3:cb:e0:37:ca:94:b8:81:7e:0f:fa:cd:b9:23:bb:75: 1b:c9:e8:26:e6:3e:69:b6:4c:64:ce:ef:15:1b:23:34:c9:94: 36:88:e4:a0:7e:e5:6f:79:f5:0d:f9:62:4c:c0:69:ef:f3:bc: e8:5f:9e:c5:10:62:96:79:36:dd:c7:84:5e:fa:1a:44:17:7e: 22:e9:f9:4c:29:b4:f7:e3:e7:7d:cb:a6:fb:a2:20:18:8b:45: c7:ab:24:0b:b3:10:f9:80:9b:79:ea:27:ae:52:98:9f:90:32: 4c:bf:d6:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWo4Ut/o6UzLemVQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVmZjgyZTQtY2QzNy00NWM2LWI3MTQtYWIwYTA0OTI3 OTY0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk NjFjYmFjZTktM2YyMS00MGMwLTliMTgtMTI2YWQ5NGU5YWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH929kCNbnv1arL6NaN5GdUf569trhp6IGXc afl3Xe6VYbTgvLykBBqDwKyc68o1RQsUW3gvJjRau/rnd6p/wPf1UjDeavtUK4AK GdBGbwxIYDOojDb6tiPHQ4h/jyHoYX+xMsj0ewxVplRfx9Cd4MjOq0qyxl7PZjDc EER/zBeG8Z5LHW22dzYM3tdgDtH4BCcLFv00LjnTZVW5Xr9ZJ/knaUkxdmKWfZEI /E1cq42kHD08q//lJZG1/+wOm6Qd2aKJEqysjBT+TTf3ibx4bx6RgEPAha0Xe83R kM32cYWZscdzf8R7hsahY1ZN6jsjJns3IuF1amIK+tpRvTpbJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcNUwLgWYKUJsf+z2AQAfSZGBERMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84NWZm ODJlNC1jZDM3LTQ1YzYtYjcxNC1hYjBhMDQ5Mjc5NjQvMmJjNDNhOTMtMDAzMC0z YzM5LThiNjQtM2YwZjYyOTcwM2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODVmZjgyZTQtY2QzNy00NWM2LWI3 MTQtYWIwYTA0OTI3OTY0Lzg1ZmY4MmU0LWNkMzctNDVjNi1iNzE0LWFiMGEwNDky Nzk2NC5jcmwwHwYDVR0jBBgwFoAUXku/GGCREN/OFiWbiwhlqRxiUBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84NWZmODJlNC1jZDM3LTQ1YzYtYjcxNC1hYjBh MDQ5Mjc5NjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaKvEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkTthkvfdhnU18CTXEzll5TZGN1/fjNpkQu8Gw2PpzUReGnyVa+/C16 OgkSpIEeR1dXKtBiFH7O+G//c9BG7zCZ9Lr19US1uAF+Mb/TUMeo5MJRMp9t3Xbv 9M4lrIA5EGMxglEzAEM/4yIL2YR/8+Cj92sS7zdQvru0kz2WQr5Z3lIkrE8r3+N0 QAgLlvLz1JMu88vgN8qUuIF+D/rNuSO7dRvJ6CbmPmm2TGTO7xUbIzTJlDaI5KB+ 5W959Q35YkzAae/zvOhfnsUQYpZ5Nt3HhF76GkQXfiLp+UwptPfj533LpvuiIBiL RcerJAuzEPmAm3nqJ65SmJ+QMky/1oA= -----END CERTIFICATE-----Generated at Wed May 13 13:36:50 2026 by rpki-client