$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/2889f330-85ba-347b-b6d5-8a0bd949df63.roa File: 2889f330-85ba-347b-b6d5-8a0bd949df63.roa (raw, json) Hash identifier: 9KYqHy90pIqE58fVYtHpJpgJwiIuTtTaCpkYO/JmNvc= Subject key identifier: FA:46:A2:03:09:DD:6B:65:C4:F2:48:AC:71:F5:A3:3F:E4:31:05:14 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584D4C4A2F06FADEADB9FCD79180 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/2889f330-85ba-347b-b6d5-8a0bd949df63.roa Signing time: Thu 26 Mar 2026 15:52:29 +0000 ROA not before: Thu 26 Mar 2026 15:52:29 +0000 ROA not after: Wed 24 Jun 2026 15:52:29 +0000 asID: 401776 IP address blocks: 104.241.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:4a:2f:06:fa:de:ad:b9:fc:d7:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Mar 26 15:52:29 2026 GMT Not After : Jun 24 15:52:29 2026 GMT Subject: CN=0d1e52ab-01d8-4893-aef6-7f3f96670f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4a:86:7d:39:3e:44:49:6c:21:73:16:29:2a: 71:c0:94:6d:4b:17:f7:1e:dc:0d:92:ac:10:09:7b: f7:95:bd:58:56:80:e6:4f:31:ee:d1:fb:7f:81:3f: e3:63:57:68:cd:26:70:90:1f:62:b0:a8:59:13:ad: 41:d6:3b:25:74:af:17:d5:b1:d4:5b:e3:7e:97:72: 5f:9f:e9:0b:19:d6:eb:ea:bc:47:d8:71:ae:80:7a: ca:05:2f:d3:8d:db:7f:84:17:db:da:ea:b5:e0:72: 24:01:9f:68:d0:70:e7:93:d6:76:12:37:74:ad:9f: 40:e4:db:d7:b9:7c:3c:fc:91:04:a7:80:5d:c1:19: 1b:ed:a8:6a:1e:91:f1:b9:5b:4e:3f:3e:df:57:50: 9d:ba:04:a1:f0:22:5a:f1:8e:15:9a:dc:be:91:c0: 16:8e:49:57:fb:31:27:68:d7:4e:10:b7:b9:b3:1b: 8f:ef:2e:cc:05:39:fd:be:b0:c1:c3:40:99:81:10: 6a:8f:13:7a:b4:8a:c0:4b:48:d1:8e:ee:9a:b3:d6: e4:ca:54:a8:4b:fd:6e:0c:f5:ad:10:06:2f:62:11: f7:8a:fb:3d:e9:20:ca:49:56:dc:47:c4:3d:66:9e: 24:15:f3:66:e6:86:9d:71:00:5f:71:31:70:89:51: 5f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:46:A2:03:09:DD:6B:65:C4:F2:48:AC:71:F5:A3:3F:E4:31:05:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/2889f330-85ba-347b-b6d5-8a0bd949df63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 104.241.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:05:6b:20:e5:04:42:77:46:09:a9:73:5f:83:48:7f:a9:cb: 01:a7:7f:51:ea:6c:b2:8e:4d:75:6b:a0:25:a2:92:96:29:b0: 4a:67:92:be:b3:0e:66:65:9c:33:0a:ce:1f:5b:89:5d:77:b9: ea:91:ea:91:fb:44:ec:b6:cc:a1:9a:4f:b2:bf:4f:6a:d9:00: fe:08:ca:e8:e5:9a:bb:09:65:5d:b2:8d:79:dd:76:75:98:08: c5:af:55:c9:72:8e:d5:0c:39:0c:cf:9b:91:14:a6:87:f3:66: c3:94:35:7e:0d:2a:11:f5:b3:9c:d7:35:f1:e2:58:c1:a0:03: d2:a3:eb:78:5d:fb:f4:e0:3b:13:c3:ec:f3:bd:8b:9c:39:42: 56:19:a6:c9:9e:37:6e:98:11:36:37:b0:96:b7:cc:36:35:aa: c6:80:12:2e:04:8f:1b:51:b3:32:cc:23:cd:39:6b:56:44:9c: 4c:61:7f:53:17:b0:de:38:a7:bc:1d:60:4c:00:ed:0b:fa:8d: 5d:7d:58:be:0a:4a:f7:44:b1:ea:e8:68:fc:33:5d:64:49:03: 2f:a3:da:ba:53:7e:93:d6:0a:4b:27:f3:68:63:a4:78:f8:52: 89:c2:65:e9:b1:86:88:29:c7:96:93:33:6d:b4:d3:c1:70:f3: 0b:cf:bc:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1MSi8G+t6tufzXkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDMyNjE1NTIyOVoXDTI2MDYyNDE1NTIyOVowLzEtMCsGA1UEAxMk MGQxZTUyYWItMDFkOC00ODkzLWFlZjYtN2YzZjk2NjcwZjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEqGfTk+RElsIXMWKSpxwJRtSxf3HtwNkqwQ CXv3lb1YVoDmTzHu0ft/gT/jY1dozSZwkB9isKhZE61B1jsldK8X1bHUW+N+l3Jf n+kLGdbr6rxH2HGugHrKBS/Tjdt/hBfb2uq14HIkAZ9o0HDnk9Z2Ejd0rZ9A5NvX uXw8/JEEp4BdwRkb7ahqHpHxuVtOPz7fV1CdugSh8CJa8Y4Vmty+kcAWjklX+zEn aNdOELe5sxuP7y7MBTn9vrDBw0CZgRBqjxN6tIrAS0jRju6as9bkylSoS/1uDPWt EAYvYhH3ivs96SDKSVbcR8Q9Zp4kFfNm5oadcQBfcTFwiVFfQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpGogMJ3WtlxPJIrHH1oz/kMQUUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMjg4OWYzMzAtODViYS0z NDdiLWI2ZDUtOGEwYmQ5NDlkZjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAFayDlBEJ3Rgmpc1+DSH+pywGnf1HqbLKOTXVroCWikpYpsEpnkr6z DmZlnDMKzh9biV13ueqR6pH7ROy2zKGaT7K/T2rZAP4IyujlmrsJZV2yjXnddnWY CMWvVclyjtUMOQzPm5EUpofzZsOUNX4NKhH1s5zXNfHiWMGgA9Kj63hd+/TgOxPD 7PO9i5w5QlYZpsmeN26YETY3sJa3zDY1qsaAEi4EjxtRszLMI805a1ZEnExhf1MX sN44p7wdYEwA7Qv6jV19WL4KSvdEseroaPwzXWRJAy+j2rpTfpPWCksn82hjpHj4 UonCZemxhogpx5aTM22008Fw8wvPvBw= -----END CERTIFICATE-----Generated at Sat Mar 28 12:05:53 2026 by rpki-client