$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/272e9b48-c4e2-30e5-bb6f-f5fc9613ab1b.roa File: 272e9b48-c4e2-30e5-bb6f-f5fc9613ab1b.roa (raw, json) Hash identifier: 38D6ANjpQRIMkwNIiJV3gEpNsPCpkN2x6XqiMa4yK8g= Subject key identifier: A3:80:3F:E1:40:69:27:A7:0C:F9:0A:96:52:93:25:4E:55:8A:35:8A Certificate issuer: /CN=a920645f-6928-416c-87e9-a0135e5720e4 Certificate serial: 010D0C9F4328584D9A200C8B4C3861F3E9682FC0 Authority key identifier: 0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/272e9b48-c4e2-30e5-bb6f-f5fc9613ab1b.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 13657 IP address blocks: 104.242.128.0/19 maxlen: 24 104.242.160.0/19 maxlen: 24 104.242.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:0c:8b:4c:38:61:f3:e9:68:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a920645f-6928-416c-87e9-a0135e5720e4 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=d983cf9d-3b9f-472f-9e9e-efaec91cf6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:22:dd:45:f9:e6:25:a1:fb:b8:0e:84:ba:ff: b5:30:76:1f:01:a2:66:4b:6e:b2:60:28:ed:cc:c3: ea:30:61:93:04:12:e3:b2:47:f3:f9:8c:09:96:d2: fb:e7:03:a8:f9:bc:a2:f5:cf:19:9e:a4:7d:b7:4a: 60:c7:5b:be:f4:88:41:e3:1f:a3:98:2c:6b:12:14: cc:c8:84:f5:c9:94:ff:f9:bc:f8:e3:9d:2d:48:6b: 55:da:79:5e:fb:69:e9:04:c4:85:75:fb:38:fd:aa: c5:cb:7a:ee:9d:5f:b2:cc:da:26:0c:9f:05:c3:47: f2:c8:dd:ce:7a:22:38:26:bf:98:d4:c3:57:a4:c7: 64:f1:e0:40:fb:6f:3f:72:ed:05:7e:e7:46:f0:60: f4:ea:af:d1:73:75:42:f9:4c:dc:e1:e4:7a:ef:63: 2b:70:2c:15:a4:05:36:64:4d:88:71:47:7b:01:46: d5:5a:83:83:7d:05:fa:a8:01:a6:06:f9:a4:5c:e3: 55:64:b2:7f:1d:0d:57:9b:9c:7e:7d:fd:72:ea:b7: a6:48:cb:55:47:b3:2c:84:8b:fe:08:7c:37:77:2b: 64:a6:76:b1:aa:93:ce:74:84:14:d6:53:06:e4:f9: f5:4a:36:15:3b:0d:5c:95:43:a7:e5:e8:68:7b:ae: a3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:80:3F:E1:40:69:27:A7:0C:F9:0A:96:52:93:25:4E:55:8A:35:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/272e9b48-c4e2-30e5-bb6f-f5fc9613ab1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.crl X509v3 Authority Key Identifier: keyid:0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer sbgp-ipAddrBlock: critical IPv4: 104.242.128.0-104.242.223.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:aa:0b:2c:9c:13:49:d7:e7:0d:2e:d3:87:ce:a9:e4:2a:02: f2:fa:fc:b6:b1:b7:fa:d0:68:2f:bf:ea:42:74:eb:3f:f3:5a: cd:c8:30:b8:76:ca:15:f7:ec:a7:84:a6:6c:e2:1d:16:ad:57: f2:13:ad:8d:c7:cd:57:2d:77:d6:be:32:df:6d:99:99:06:15: ac:cf:52:72:d8:6d:45:89:04:24:5e:09:fc:dd:89:ac:fd:98: ff:09:50:ff:c7:48:7c:b1:29:39:f6:5c:34:05:c8:a0:1a:b9: a3:a5:3f:74:c6:ce:3b:e0:b5:ba:57:de:c3:f7:5f:8c:36:1d: 58:7b:59:04:2d:8c:07:aa:a7:e9:b2:4e:c8:8b:9c:13:47:10: c9:56:4e:fd:2e:38:9c:70:69:56:9a:d5:b7:cd:df:54:70:c0: d4:70:20:f4:2c:b1:27:de:a0:b8:da:a6:9c:46:b8:eb:49:8d: 8d:52:c2:80:65:0c:ed:e6:ca:8a:9a:f4:b6:d9:3c:6f:e1:1b: 80:d3:4e:a4:37:13:ee:5a:d7:34:24:87:0a:b3:33:49:92:43: 49:3a:aa:20:e7:41:31:f1:59:56:44:1e:5d:9a:85:95:c8:de: be:3a:86:c4:b7:1b:c2:8a:e7:c9:23:ca:21:c4:42:22:35:41: b5:3e:96:6d -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE2aIAyLTDhh8+loL8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkyMDY0NWYtNjkyOC00MTZjLTg3ZTktYTAxMzVlNTcy MGU0MB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk ZDk4M2NmOWQtM2I5Zi00NzJmLTllOWUtZWZhZWM5MWNmNmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCLdRfnmJaH7uA6Euv+1MHYfAaJmS26yYCjt zMPqMGGTBBLjskfz+YwJltL75wOo+byi9c8ZnqR9t0pgx1u+9IhB4x+jmCxrEhTM yIT1yZT/+bz4450tSGtV2nle+2npBMSFdfs4/arFy3runV+yzNomDJ8Fw0fyyN3O eiI4Jr+Y1MNXpMdk8eBA+28/cu0FfudG8GD06q/Rc3VC+Uzc4eR672MrcCwVpAU2 ZE2IcUd7AUbVWoODfQX6qAGmBvmkXONVZLJ/HQ1Xm5x+ff1y6remSMtVR7MshIv+ CHw3dytkpnaxqpPOdIQU1lMG5Pn1SjYVOw1clUOn5ehoe66jvQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFKOAP+FAaSenDPkKllKTJU5VijWKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hOTIw NjQ1Zi02OTI4LTQxNmMtODdlOS1hMDEzNWU1NzIwZTQvMjcyZTliNDgtYzRlMi0z MGU1LWJiNmYtZjVmYzk2MTNhYjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTkyMDY0NWYtNjkyOC00MTZjLTg3 ZTktYTAxMzVlNTcyMGU0L2E5MjA2NDVmLTY5MjgtNDE2Yy04N2U5LWEwMTM1ZTU3 MjBlNC5jcmwwHwYDVR0jBBgwFoAUDno2lSOuiTEQhAW3fVJvX5GUSCkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hOTIwNjQ1Zi02OTI4LTQxNmMtODdlOS1hMDEz NWU1NzIwZTQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAdo8oAD BAVo8sAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAMqoLLJwTSdfnDS7Th86p5CoC8vr8trG3+tBoL7/qQnTr P/NazcgwuHbKFffsp4SmbOIdFq1X8hOtjcfNVy131r4y322ZmQYVrM9ScthtRYkE JF4J/N2JrP2Y/wlQ/8dIfLEpOfZcNAXIoBq5o6U/dMbOO+C1ulfew/dfjDYdWHtZ BC2MB6qn6bJOyIucE0cQyVZO/S44nHBpVprVt83fVHDA1HAg9CyxJ96guNqmnEa4 60mNjVLCgGUM7ebKipr0ttk8b+EbgNNOpDcT7lrXNCSHCrMzSZJDSTqqIOdBMfFZ VkQeXZqFlcjevjqGxLcbwornySPKIcRCIjVBtT6WbQ== -----END CERTIFICATE-----Generated at Wed May 13 09:14:06 2026 by rpki-client