$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/7328d350-a18c-3f29-847c-d151d2597c2b.roa File: 7328d350-a18c-3f29-847c-d151d2597c2b.roa (raw, json) Hash identifier: N2CHVGqcDVehohRPAh2K68XIhgsYxQs0IiEPYY2zw7E= Subject key identifier: B0:AC:56:77:08:BB:4D:23:22:9C:AD:DB:D0:72:A0:E9:BA:55:16:E1 Certificate issuer: /CN=1b7151e5-64cf-4efa-968e-47796f2f7523 Certificate serial: 010D0C9F4328584D492A6861029E95CB468DB200 Authority key identifier: CE:CA:18:2C:24:A5:DF:87:16:2C:E1:A2:FD:5E:B0:55:E0:7A:CE:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/7328d350-a18c-3f29-847c-d151d2597c2b.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 16995 IP address blocks: 104.218.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/1b7151e5-64cf-4efa-968e-47796f2f7523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/1b7151e5-64cf-4efa-968e-47796f2f7523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:68:61:02:9e:95:cb:46:8d:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b7151e5-64cf-4efa-968e-47796f2f7523 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=5677794c-d8f1-43bd-9b20-59c73c1964da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b6:6b:45:3e:34:d4:fe:35:51:c7:42:e0:ac: a1:10:f3:8a:96:0f:61:35:f0:a2:d1:4b:7b:73:dd: dc:41:b8:f8:a9:a5:da:be:b6:d1:bc:cd:30:d9:8b: 45:52:56:14:7a:3d:79:38:a5:c7:ab:dc:6a:af:6b: d3:c6:78:a0:84:f7:79:06:d1:bb:d1:58:cf:77:ce: 29:0b:e6:7d:4f:5b:11:05:4f:ff:94:ae:99:14:f4: 7f:ae:04:4a:7c:01:fa:12:78:00:a3:48:09:16:73: 02:2f:e9:11:2d:77:7a:cf:92:63:ba:0e:8e:c3:09: 0f:e2:a9:3d:4f:7d:49:ba:72:6b:ee:28:4e:dd:13: cc:a0:e1:48:58:27:a6:be:a3:33:53:e8:d3:ad:8d: b2:ea:10:40:2e:0e:f4:33:4c:b4:20:9f:c5:1f:53: 92:9c:5a:6a:3a:0f:47:23:17:c3:8d:a6:dc:f8:b5: 62:fa:87:23:a7:f8:da:51:76:4d:36:9c:27:6c:13: c8:5c:0f:e1:79:a6:5d:28:a5:2b:91:fc:6b:47:3c: 22:cc:1a:7d:bf:60:08:03:68:37:79:da:87:f9:9e: 0d:55:7f:bc:47:88:87:d0:68:e9:9a:5f:f1:18:e3: 04:3a:94:9b:8a:b5:ad:f7:ae:0d:6a:6d:e7:b2:78: 36:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AC:56:77:08:BB:4D:23:22:9C:AD:DB:D0:72:A0:E9:BA:55:16:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/7328d350-a18c-3f29-847c-d151d2597c2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/1b7151e5-64cf-4efa-968e-47796f2f7523.crl X509v3 Authority Key Identifier: keyid:CE:CA:18:2C:24:A5:DF:87:16:2C:E1:A2:FD:5E:B0:55:E0:7A:CE:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523.cer sbgp-ipAddrBlock: critical IPv4: 104.218.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:26:da:2b:a9:34:02:66:a6:54:cd:8f:5e:2e:5f:da:59:d3: cd:df:0d:a5:9c:c9:c4:1e:21:e6:ec:4f:13:f5:ac:46:9d:71: a5:64:1c:69:d5:48:8c:0e:d0:20:06:d1:16:fe:6f:e3:96:b7: 4f:65:01:56:eb:3b:71:26:32:10:69:96:88:ad:c0:27:bd:a4: 4e:fc:bb:67:7c:a9:99:ba:01:c9:29:f8:ed:09:e9:72:e2:fd: 93:6c:b7:26:ff:68:cc:08:47:3d:d6:23:ea:7f:37:97:fd:c6: f2:dd:4d:43:76:f4:b7:8d:2b:23:2e:58:28:87:50:4b:cb:b2: 80:a9:4a:be:04:7a:12:6c:9a:c3:75:f8:07:02:f0:b7:a1:cb: 8b:04:66:a9:80:a6:93:b9:d2:1e:91:c0:d3:fe:53:22:b5:0d: f9:29:38:1f:ac:1b:96:73:5a:df:9b:7f:c2:42:53:91:b1:f7: ce:d2:cd:ba:04:d6:7f:59:b5:2b:e3:a8:96:84:bf:2b:3e:11: c8:07:0d:2e:26:b2:6c:4a:35:ab:b0:33:ae:c0:68:87:b3:1f: e7:4c:24:d2:b0:56:c7:cb:03:62:22:5e:0e:43:09:73:b0:17: c6:f7:2d:87:6e:58:9a:95:19:a0:15:73:62:60:61:64:79:36: ef:4a:e6:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKmhhAp6Vy0aNsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI3MTUxZTUtNjRjZi00ZWZhLTk2OGUtNDc3OTZmMmY3 NTIzMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk NTY3Nzc5NGMtZDhmMS00M2JkLTliMjAtNTljNzNjMTk2NGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rZrRT401P41UcdC4KyhEPOKlg9hNfCi0Ut7 c93cQbj4qaXavrbRvM0w2YtFUlYUej15OKXHq9xqr2vTxnighPd5BtG70VjPd84p C+Z9T1sRBU//lK6ZFPR/rgRKfAH6EngAo0gJFnMCL+kRLXd6z5Jjug6OwwkP4qk9 T31JunJr7ihO3RPMoOFIWCemvqMzU+jTrY2y6hBALg70M0y0IJ/FH1OSnFpqOg9H IxfDjabc+LVi+ocjp/jaUXZNNpwnbBPIXA/heaZdKKUrkfxrRzwizBp9v2AIA2g3 edqH+Z4NVX+8R4iH0Gjpml/xGOMEOpSbirWt964Nam3nsng2pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCsVncIu00jIpyt29ByoOm6VRbhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYjcx NTFlNS02NGNmLTRlZmEtOTY4ZS00Nzc5NmYyZjc1MjMvNzMyOGQzNTAtYTE4Yy0z ZjI5LTg0N2MtZDE1MWQyNTk3YzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWI3MTUxZTUtNjRjZi00ZWZhLTk2 OGUtNDc3OTZmMmY3NTIzLzFiNzE1MWU1LTY0Y2YtNGVmYS05NjhlLTQ3Nzk2ZjJm NzUyMy5jcmwwHwYDVR0jBBgwFoAUzsoYLCSl34cWLOGi/V6wVeB6zrgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYjcxNTFlNS02NGNmLTRlZmEtOTY4ZS00Nzc5 NmYyZjc1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaNpUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMIm2iupNAJmplTNj14uX9pZ083fDaWcycQeIebsTxP1rEadcaVkHGnV SIwO0CAG0Rb+b+OWt09lAVbrO3EmMhBploitwCe9pE78u2d8qZm6Ackp+O0J6XLi /ZNstyb/aMwIRz3WI+p/N5f9xvLdTUN29LeNKyMuWCiHUEvLsoCpSr4EehJsmsN1 +AcC8Lehy4sEZqmAppO50h6RwNP+UyK1DfkpOB+sG5ZzWt+bf8JCU5Gx987SzboE 1n9ZtSvjqJaEvys+EcgHDS4msmxKNauwM67AaIezH+dMJNKwVsfLA2IiXg5DCXOw F8b3LYduWJqVGaAVc2JgYWR5Nu9K5uk= -----END CERTIFICATE-----Generated at Thu Mar 26 13:22:25 2026 by rpki-client