$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa File: 8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa (raw, json) Hash identifier: l8ybn5b2mUrLiKsP+K6Nc5vzfXhR9I7Pv30hi45ySJ0= Subject key identifier: C7:0D:C5:1F:45:76:5F:24:DB:B1:3A:53:D1:6D:9F:80:0F:B8:FD:5F Certificate issuer: /CN=25422be5-720b-40bc-8a4d-02579ec1bead Certificate serial: 010D0C9F4328584D44FA38A93A9C6721FEDFF300 Authority key identifier: CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 63447 IP address blocks: 104.245.200.0/22 maxlen: 22 204.107.204.0/24 maxlen: 24 2602:ff98::/36 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:38:a9:3a:9c:67:21:fe:df:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25422be5-720b-40bc-8a4d-02579ec1bead Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=3fb4fdb6-a9f5-4fd3-9dd8-3f2cfa43981b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:86:f4:28:b5:0e:b5:d8:c0:21:20:0a:62:33: db:27:d9:6e:91:f2:b3:e1:fc:a6:8b:7f:42:a6:6b: e7:85:f7:6d:23:dc:f7:8e:da:7c:11:59:ee:4a:e9: f0:c2:b8:99:ab:d7:8b:89:bf:e1:58:23:23:7e:a2: ab:7a:50:44:4b:6e:54:56:8f:fb:f0:34:db:19:2f: 3e:52:21:51:c8:7e:3a:81:77:85:0c:12:a6:19:3f: dc:19:df:2c:24:ae:0c:14:60:95:e6:ca:8f:53:dd: b6:25:37:af:61:69:38:15:0c:c2:d1:93:38:73:83: 22:22:fa:65:a7:ad:dc:db:b7:65:55:56:f2:01:82: 23:ad:6a:23:06:db:59:55:64:e8:c4:f3:e6:d2:e1: 17:af:fe:01:66:67:21:04:fe:5c:a1:e8:4e:4e:57: f7:11:4c:21:dd:51:ff:29:74:88:84:7f:dc:fe:ac: 50:83:e1:86:f1:40:66:57:4a:db:33:05:36:a0:04: 68:39:3c:c4:54:8e:83:7f:2d:01:85:5a:3b:0f:61: c5:f8:6d:b7:df:6d:b8:e0:39:5b:47:c8:10:5a:fe: bc:51:ee:92:bf:07:24:29:95:d4:f7:81:ee:c4:25: f0:62:e7:ba:55:15:d4:73:5f:40:dd:c1:3c:a8:5f: 26:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0D:C5:1F:45:76:5F:24:DB:B1:3A:53:D1:6D:9F:80:0F:B8:FD:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.crl X509v3 Authority Key Identifier: keyid:CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer sbgp-ipAddrBlock: critical IPv4: 104.245.200.0/22 204.107.204.0/24 IPv6: 2602:ff98::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:80:15:02:25:f7:a2:bd:b0:60:40:4e:2b:74:56:f6:9d:bc: a6:ba:9e:ba:e4:fc:dc:5d:b5:3d:de:2e:66:33:0a:05:1c:29: 05:ac:02:c3:e7:6b:e9:69:66:8e:cf:ca:72:da:88:7f:55:80: 33:5d:f2:46:6b:26:78:c3:f1:cd:c5:db:01:63:9a:fe:af:95: 71:c2:03:c3:9a:5e:50:53:c8:19:28:b6:53:d9:d2:20:81:64: c3:06:8c:eb:35:6b:fc:b2:7b:c5:1f:af:56:c3:e1:b5:a5:e7: 21:94:cb:8b:ec:6d:9b:1a:f7:20:25:63:07:95:63:64:13:89: 73:52:f7:ec:29:f1:58:a9:89:a0:b6:3d:ea:9f:45:16:ba:ab: b1:66:c5:46:99:9f:75:ea:e9:4a:f8:f1:6c:38:99:3f:fc:f0: 07:02:dc:a5:ee:f1:37:99:3c:ba:7f:5f:62:ce:10:57:c0:97: 61:6a:10:2f:2f:9a:05:16:74:9c:d9:fc:47:b9:e1:c7:78:9f: c9:b1:ff:7a:87:95:1f:1b:f9:c1:ba:fa:0a:ef:90:3a:d5:04: e8:19:67:54:08:58:85:9b:ff:1d:c3:65:11:25:d2:4a:fe:c3: 1c:7e:94:d3:71:52:5f:04:15:ac:0e:57:20:1f:7c:03:fd:33: 21:5a:bb:2d -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE1E+jipOpxnIf7f8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU0MjJiZTUtNzIwYi00MGJjLThhNGQtMDI1NzllYzFi ZWFkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk M2ZiNGZkYjYtYTlmNS00ZmQzLTlkZDgtM2YyY2ZhNDM5ODFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYb0KLUOtdjAISAKYjPbJ9lukfKz4fymi39C pmvnhfdtI9z3jtp8EVnuSunwwriZq9eLib/hWCMjfqKrelBES25UVo/78DTbGS8+ UiFRyH46gXeFDBKmGT/cGd8sJK4MFGCV5sqPU922JTevYWk4FQzC0ZM4c4MiIvpl p63c27dlVVbyAYIjrWojBttZVWToxPPm0uEXr/4BZmchBP5coehOTlf3EUwh3VH/ KXSIhH/c/qxQg+GG8UBmV0rbMwU2oARoOTzEVI6Dfy0BhVo7D2HF+G2332244Dlb R8gQWv68Ue6SvwckKZXU94HuxCXwYue6VRXUc19A3cE8qF8mMwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFMcNxR9Fdl8k27E6U9Ftn4APuP1fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yNTQy MmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3OWVjMWJlYWQvOGE1YzBlOTAtZWM2Yi0z YWM4LTg1ZDctOTA4Zjg4MGU3MDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjU0MjJiZTUtNzIwYi00MGJjLThh NGQtMDI1NzllYzFiZWFkLzI1NDIyYmU1LTcyMGItNDBiYy04YTRkLTAyNTc5ZWMx YmVhZC5jcmwwHwYDVR0jBBgwFoAUztKXLUcr1PnAkCBw26y6O9ViY2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yNTQyMmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3 OWVjMWJlYWQuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQCaPXIAwQA zGvMMA4EAgACMAgDBgQmAv+YADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCwgBUCJfeivbBgQE4rdFb2nbym up665PzcXbU93i5mMwoFHCkFrALD52vpaWaOz8py2oh/VYAzXfJGayZ4w/HNxdsB Y5r+r5VxwgPDml5QU8gZKLZT2dIggWTDBozrNWv8snvFH69Ww+G1pechlMuL7G2b GvcgJWMHlWNkE4lzUvfsKfFYqYmgtj3qn0UWuquxZsVGmZ916ulK+PFsOJk//PAH Atyl7vE3mTy6f19izhBXwJdhahAvL5oFFnSc2fxHueHHeJ/Jsf96h5UfG/nBuvoK 75A61QToGWdUCFiFm/8dw2URJdJK/sMcfpTTcVJfBBWsDlcgH3wD/TMhWrst -----END CERTIFICATE-----Generated at Thu Mar 26 23:50:04 2026 by rpki-client