$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/94391e38-13a0-316e-8636-2c41a89a777d.roa File: 94391e38-13a0-316e-8636-2c41a89a777d.roa (raw, json) Hash identifier: /wBScElToqqZizxoSEHxajiKyi5OHJ+eLYwU2TG3cy4= Subject key identifier: FD:4E:02:6A:90:01:8E:52:B5:8A:A2:88:91:16:71:D8:13:0A:0A:A3 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4FA7172F0F7AFD1143C870 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/94391e38-13a0-316e-8636-2c41a89a777d.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 104.129.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:a7:17:2f:0f:7a:fd:11:43:c8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=5d1be916-06a4-43f0-9dbc-cd3abdeaadbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7c:cd:d9:b3:f8:ef:74:6b:a7:67:86:e6:4e: af:b9:51:8c:c5:64:a5:7e:a8:bb:85:4e:03:0b:d9: 5c:5f:a0:75:55:a2:27:1f:28:59:61:fe:e5:61:07: 1e:92:90:3b:1f:2a:4b:b4:10:c6:89:84:8f:cb:3a: 83:b5:6f:cb:16:6a:86:bb:fc:7a:f3:37:78:15:87: 18:d0:97:51:b8:6c:81:93:26:3e:ce:49:c4:7d:b5: 1f:79:b4:9e:02:47:bd:cd:eb:3a:b0:79:5c:05:2f: 80:16:7e:03:00:37:dc:af:2c:ee:05:62:e9:4e:0f: 40:0a:87:37:44:d5:af:47:69:f2:a4:76:3f:d1:ef: 53:18:27:ea:f1:28:0d:c3:10:a8:82:e1:1f:1e:f5: 54:e6:4e:66:52:cb:52:50:e5:fb:59:b9:39:90:ce: db:90:ad:50:40:fe:13:1d:da:91:fe:41:89:98:07: fe:d8:24:c2:eb:7e:ba:08:2f:f4:d1:a2:fe:72:89: 6d:5c:31:f9:06:6e:86:59:f5:ec:91:15:bb:7c:61: 54:9b:af:4f:c5:87:58:3b:77:e2:d9:1f:ea:5d:c8: da:b7:38:19:3d:2e:0a:d7:fc:df:a9:fa:d8:a7:ea: 27:e8:85:ad:1c:e5:5c:b5:0b:f3:0d:e7:d8:ed:1f: e9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4E:02:6A:90:01:8E:52:B5:8A:A2:88:91:16:71:D8:13:0A:0A:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/94391e38-13a0-316e-8636-2c41a89a777d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 104.129.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:c5:ab:4b:a0:f4:8b:6a:a3:50:5e:01:03:6c:16:b0:92:08: 07:e6:5c:14:6a:db:14:67:31:d0:78:35:93:8e:30:88:97:a8: d9:fb:ab:3e:54:74:f8:94:14:7e:8b:01:1c:1e:34:a3:86:13: 52:bd:95:39:c1:f0:a7:fa:40:5f:a1:46:d1:40:5d:83:11:ed: 9b:41:4e:30:4c:62:cf:0b:e3:6c:9f:15:d2:24:1b:da:a8:11: d7:82:d0:6f:d2:2e:ef:3c:d8:f4:06:d6:24:5c:87:a6:3d:45: 31:5a:17:cb:78:f3:f6:e8:fe:cf:15:a0:da:b9:53:e1:17:c3: e1:13:89:7c:16:63:47:b5:58:58:b9:05:e1:de:4c:cb:05:c9: 83:17:fb:bf:31:4d:30:e5:43:7f:5e:a8:64:9b:b1:66:b7:fe: ce:29:ec:3d:ea:1a:c2:62:f1:0e:43:7d:7e:79:09:19:37:55: 87:85:ac:62:05:ae:f1:61:92:27:60:30:6d:e4:43:e4:bd:d1: 14:0a:82:c4:05:e2:2b:bc:83:f4:36:ee:15:51:ca:d2:95:cf: b4:cd:06:a2:c4:c2:f3:08:3f:99:d3:f9:48:5d:b2:fc:5a:8d: d7:5f:32:4a:9f:20:0b:ef:48:64:59:59:98:b7:88:1b:b5:9e: 62:60:ad:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6cXLw96/RFDyHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk NWQxYmU5MTYtMDZhNC00M2YwLTlkYmMtY2QzYWJkZWFhZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXzN2bP473Rrp2eG5k6vuVGMxWSlfqi7hU4D C9lcX6B1VaInHyhZYf7lYQcekpA7HypLtBDGiYSPyzqDtW/LFmqGu/x68zd4FYcY 0JdRuGyBkyY+zknEfbUfebSeAke9zes6sHlcBS+AFn4DADfcryzuBWLpTg9ACoc3 RNWvR2nypHY/0e9TGCfq8SgNwxCoguEfHvVU5k5mUstSUOX7Wbk5kM7bkK1QQP4T HdqR/kGJmAf+2CTC6366CC/00aL+coltXDH5Bm6GWfXskRW7fGFUm69PxYdYO3fi 2R/qXcjatzgZPS4K1/zfqfrYp+on6IWtHOVctQvzDefY7R/pGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1OAmqQAY5StYqiiJEWcdgTCgqjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOTQzOTFlMzgtMTNhMC0z MTZlLTg2MzYtMmM0MWE4OWE3NzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIHMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTFq0ug9Itqo1BeAQNsFrCSCAfmXBRq2xRnMdB4NZOOMIiXqNn7qz5U dPiUFH6LARweNKOGE1K9lTnB8Kf6QF+hRtFAXYMR7ZtBTjBMYs8L42yfFdIkG9qo EdeC0G/SLu882PQG1iRch6Y9RTFaF8t48/bo/s8VoNq5U+EXw+ETiXwWY0e1WFi5 BeHeTMsFyYMX+78xTTDlQ39eqGSbsWa3/s4p7D3qGsJi8Q5DfX55CRk3VYeFrGIF rvFhkidgMG3kQ+S90RQKgsQF4iu8g/Q27hVRytKVz7TNBqLEwvMIP5nT+Uhdsvxa jddfMkqfIAvvSGRZWZi3iBu1nmJgrbQ= -----END CERTIFICATE-----Generated at Fri Apr 17 20:55:15 2026 by rpki-client