$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/839f43fb-e65a-348f-8aa6-cb9e456a3c4a.roa File: 839f43fb-e65a-348f-8aa6-cb9e456a3c4a.roa (raw, json) Hash identifier: D8aDFGXXgeMpgoEZX2q1/3XsMcy1aKXMm7GB+oCtKQM= Subject key identifier: 40:AF:45:5E:DD:D5:45:55:67:64:AB:A4:9F:B0:5B:63:F5:81:FC:D7 Certificate issuer: /CN=d426c818-fe62-465f-8184-d4f8176e2692 Certificate serial: 010D0C9F4328584D2A74C541BF21DF66B137C5C0 Authority key identifier: F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/839f43fb-e65a-348f-8aa6-cb9e456a3c4a.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 6507 IP address blocks: 104.160.128.0/19 maxlen: 19 104.160.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:c5:41:bf:21:df:66:b1:37:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d426c818-fe62-465f-8184-d4f8176e2692 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=5178b2ea-0e1b-4ca9-a9a1-2692ec6bbb42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0a:c9:97:87:5d:8b:17:2a:9b:c3:7f:1c:8f: 56:de:0e:14:f7:ad:1c:7e:20:6a:7c:7e:19:01:e9: 00:bd:fc:ae:09:fe:ca:20:55:89:e7:a2:69:0e:e5: 23:7b:19:c1:9d:ee:60:3a:9f:dc:9d:50:fa:72:7d: dc:5c:aa:61:0c:2f:8a:b9:51:98:36:8f:c6:2b:b1: 78:a5:43:15:5a:c6:39:e8:b2:9e:d6:2b:ff:1f:71: ad:c3:f6:af:af:5e:ce:fb:47:b8:03:9d:a5:66:51: d5:d7:8a:c8:d9:a3:e4:3a:1c:96:37:7b:a9:7d:9a: 7b:a3:9c:f7:c5:b1:23:6f:24:44:a7:4e:8d:c6:cf: c5:2d:0a:17:aa:b4:6b:53:93:12:22:88:40:98:d5: 4a:57:0a:89:aa:09:96:d6:08:f6:f8:af:a2:d1:17: 03:e1:c8:80:8e:16:7c:03:b8:9d:6e:28:5d:c7:90: 47:84:6e:af:ad:e7:6d:8a:4f:f7:9e:40:11:35:9e: 2a:51:c9:85:9a:01:65:07:bb:1f:69:18:27:6b:3f: 5c:6f:b2:8c:22:08:a5:d4:f5:8f:66:75:7d:a0:02: f2:5c:68:87:10:bb:ab:9a:a2:60:39:7b:d7:68:cc: bc:74:c7:36:8c:c7:7f:23:41:9c:39:0d:78:77:f8: c8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AF:45:5E:DD:D5:45:55:67:64:AB:A4:9F:B0:5B:63:F5:81:FC:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/839f43fb-e65a-348f-8aa6-cb9e456a3c4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl X509v3 Authority Key Identifier: keyid:F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer sbgp-ipAddrBlock: critical IPv4: 104.160.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e6:02:1e:cc:3c:a2:06:82:25:8d:4c:68:71:52:92:de:01:5d: de:66:7b:96:82:39:bf:5a:dd:7e:56:7a:24:4c:14:82:8d:f5: cc:e9:4a:81:a6:74:6a:33:77:d2:1b:f3:7b:70:6a:d0:fa:24: e7:5a:ad:bf:ad:9c:b7:53:4d:35:0b:bf:11:54:a7:9f:a1:d4: 36:6b:2f:b8:e8:ba:a8:c2:13:dc:bb:cc:32:88:66:8d:0c:04: b8:18:33:f4:3b:0a:3d:e8:93:ee:d1:9f:d3:3d:5f:bf:c7:95: 9a:2c:fd:1e:64:f2:b8:f8:78:2a:8d:ea:2a:cf:72:cf:8c:55: 82:45:63:25:dc:4d:94:fc:6c:7e:f8:f5:04:1c:d4:8b:2b:5a: d5:af:fd:1d:99:74:40:0b:f3:28:13:3c:c0:a9:6b:df:c8:20: a6:d3:58:ac:48:17:a6:b4:4b:0e:a0:ed:48:bf:46:da:13:1b: 0f:a4:40:b9:47:3a:dc:b3:22:b8:7e:9d:96:48:b1:2d:21:d2: 9c:e7:38:5e:80:79:bf:fc:de:c3:b0:6e:49:ad:2c:fb:be:58: 67:23:6d:d9:88:21:cb:a5:67:a4:91:f9:75:92:fe:20:0b:21: 93:af:7e:1a:71:85:54:59:bf:14:f7:bd:42:8e:5b:cd:d2:85: 9d:83:8f:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdMVBvyHfZrE3xcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQyNmM4MTgtZmU2Mi00NjVmLTgxODQtZDRmODE3NmUy NjkyMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NTE3OGIyZWEtMGUxYi00Y2E5LWE5YTEtMjY5MmVjNmJiYjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgArJl4ddixcqm8N/HI9W3g4U960cfiBqfH4Z AekAvfyuCf7KIFWJ56JpDuUjexnBne5gOp/cnVD6cn3cXKphDC+KuVGYNo/GK7F4 pUMVWsY56LKe1iv/H3Gtw/avr17O+0e4A52lZlHV14rI2aPkOhyWN3upfZp7o5z3 xbEjbyREp06Nxs/FLQoXqrRrU5MSIohAmNVKVwqJqgmW1gj2+K+i0RcD4ciAjhZ8 A7idbihdx5BHhG6vredtik/3nkARNZ4qUcmFmgFlB7sfaRgnaz9cb7KMIgil1PWP ZnV9oALyXGiHELurmqJgOXvXaMy8dMc2jMd/I0GcOQ14d/jIJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECvRV7d1UVVZ2SrpJ+wW2P1gfzXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNDI2 YzgxOC1mZTYyLTQ2NWYtODE4NC1kNGY4MTc2ZTI2OTIvODM5ZjQzZmItZTY1YS0z NDhmLThhYTYtY2I5ZTQ1NmEzYzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDQyNmM4MTgtZmU2Mi00NjVmLTgx ODQtZDRmODE3NmUyNjkyL2Q0MjZjODE4LWZlNjItNDY1Zi04MTg0LWQ0ZjgxNzZl MjY5Mi5jcmwwHwYDVR0jBBgwFoAU8F+ppzkydlY4j5FgaWTWQCUOPLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNDI2YzgxOC1mZTYyLTQ2NWYtODE4NC1kNGY4 MTc2ZTI2OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaKCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOYCHsw8ogaCJY1MaHFSkt4BXd5me5aCOb9a3X5WeiRMFIKN9czpSoGm dGozd9Ib83twatD6JOdarb+tnLdTTTULvxFUp5+h1DZrL7jouqjCE9y7zDKIZo0M BLgYM/Q7Cj3ok+7Rn9M9X7/HlZos/R5k8rj4eCqN6irPcs+MVYJFYyXcTZT8bH74 9QQc1IsrWtWv/R2ZdEAL8ygTPMCpa9/IIKbTWKxIF6a0Sw6g7Ui/RtoTGw+kQLlH OtyzIrh+nZZIsS0h0pznOF6Aeb/83sOwbkmtLPu+WGcjbdmIIculZ6SR+XWS/iAL IZOvfhpxhVRZvxT3vUKOW83ShZ2Dj4c= -----END CERTIFICATE-----Generated at Thu Mar 26 09:23:52 2026 by rpki-client