$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/bb7e42ee-468b-3653-9334-615b6977fa9b.roa File: bb7e42ee-468b-3653-9334-615b6977fa9b.roa (raw, json) Hash identifier: QYhJ7skaIHPpUGW/W0Eainfr/ds/uCH7YXE/5/euCfY= Subject key identifier: 1B:68:61:70:26:AD:C9:BA:E4:AB:E1:32:82:A1:DC:09:E5:08:80:2D Certificate issuer: /CN=2775f7c3-c238-47d5-98c9-835a28d9095e Certificate serial: 010D0C9F4328584CAE572DD13C20389A5DF78200 Authority key identifier: D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/bb7e42ee-468b-3653-9334-615b6977fa9b.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 401104 IP address blocks: 104.167.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:2d:d1:3c:20:38:9a:5d:f7:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2775f7c3-c238-47d5-98c9-835a28d9095e Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=a0403639-673a-414d-a12f-619550815b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e1:22:19:5e:b7:b0:16:61:d3:24:9a:c5:5e: 46:40:21:0b:e1:d1:b6:3b:48:aa:af:ad:c4:97:7d: 5e:fa:73:12:90:8c:b3:76:24:7d:b4:e6:5f:0a:70: 51:fe:f0:43:af:0d:ac:4d:54:1f:ae:7b:a5:bd:34: b5:59:55:82:e3:e6:79:7d:5f:9a:c2:9c:29:40:f9: 32:89:31:a8:3d:c6:90:22:48:8d:14:74:c2:26:e7: 81:88:a0:b3:95:32:21:b4:a8:4e:8c:ff:89:4a:13: 44:09:6c:be:00:f7:4a:40:b2:f4:82:d1:de:aa:de: cb:1e:e3:dd:07:dd:62:23:70:41:f0:c6:51:30:0e: e2:72:93:0a:e8:40:51:51:70:07:a6:80:e1:78:89: 52:7d:69:7a:29:03:d4:50:ff:25:1d:4b:fe:13:b7: 18:13:56:98:24:d2:6b:18:00:1a:cf:b6:92:2b:98: 0d:2f:fc:69:4f:67:80:6d:fc:9a:fa:6f:de:b2:1f: 34:5d:d9:6e:fe:49:75:89:fd:ca:26:b5:1d:38:8b: 9c:52:25:06:55:c6:86:ed:c9:af:7f:53:04:ce:46: 4d:9b:d0:80:a4:7b:cf:fe:7e:26:e0:03:4e:33:ef: d4:08:67:1b:91:11:c6:d0:dd:e6:d2:15:ed:c2:04: f6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:68:61:70:26:AD:C9:BA:E4:AB:E1:32:82:A1:DC:09:E5:08:80:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/bb7e42ee-468b-3653-9334-615b6977fa9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl X509v3 Authority Key Identifier: keyid:D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer sbgp-ipAddrBlock: critical IPv4: 104.167.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:f5:81:9e:01:fa:df:93:bb:ec:be:5d:7e:1b:5d:d1:18:14: 1b:c9:a9:1a:47:38:83:0b:68:84:5a:10:2d:ce:95:8d:ca:30: 68:e7:67:f5:23:5e:16:11:aa:57:1b:d7:aa:fa:a7:99:c8:95: 71:ee:88:be:1d:2a:10:d8:6b:5c:c8:cd:05:aa:f8:c7:7f:cb: a1:fb:e2:4e:ab:54:b8:13:a5:87:d2:bc:7b:cd:ca:6a:2a:66: e9:77:23:21:f4:21:ea:4f:21:fa:79:58:17:8a:7b:f8:46:ce: 94:e5:34:74:64:14:91:1f:fe:1f:8c:52:43:9e:dd:8c:17:dd: ab:aa:b7:01:5b:d5:62:ae:88:03:b1:da:dc:ed:8f:f0:0c:cc: 1d:56:a3:2d:1f:28:f3:ae:bb:29:58:e2:4e:a2:c8:35:10:24: 20:24:b9:e6:4b:dd:59:8f:e8:71:8e:6c:3d:e4:cc:14:43:44: 48:d9:22:ba:a2:ed:83:d6:a9:02:34:8c:c6:ab:74:46:e1:2c: f7:43:90:84:67:c3:79:3f:6d:32:8c:d3:9f:37:5d:94:1a:9f: 37:b2:74:3c:9d:31:32:d5:c3:e1:58:2f:71:a4:ce:16:fb:6b: 43:3c:d3:6b:c1:bc:ab:c2:9b:00:53:be:b9:bb:9b:12:fb:bf: 2d:66:c8:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVy3RPCA4ml33ggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjc3NWY3YzMtYzIzOC00N2Q1LTk4YzktODM1YTI4ZDkw OTVlMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YTA0MDM2MzktNjczYS00MTRkLWExMmYtNjE5NTUwODE1YjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuEiGV63sBZh0ySaxV5GQCEL4dG2O0iqr63E l31e+nMSkIyzdiR9tOZfCnBR/vBDrw2sTVQfrnulvTS1WVWC4+Z5fV+awpwpQPky iTGoPcaQIkiNFHTCJueBiKCzlTIhtKhOjP+JShNECWy+APdKQLL0gtHeqt7LHuPd B91iI3BB8MZRMA7icpMK6EBRUXAHpoDheIlSfWl6KQPUUP8lHUv+E7cYE1aYJNJr GAAaz7aSK5gNL/xpT2eAbfya+m/esh80Xdlu/kl1if3KJrUdOIucUiUGVcaG7cmv f1MEzkZNm9CApHvP/n4m4ANOM+/UCGcbkRHG0N3m0hXtwgT2mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtoYXAmrcm65KvhMoKh3AnlCIAtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNzc1 ZjdjMy1jMjM4LTQ3ZDUtOThjOS04MzVhMjhkOTA5NWUvYmI3ZTQyZWUtNDY4Yi0z NjUzLTkzMzQtNjE1YjY5NzdmYTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjc3NWY3YzMtYzIzOC00N2Q1LTk4 YzktODM1YTI4ZDkwOTVlLzI3NzVmN2MzLWMyMzgtNDdkNS05OGM5LTgzNWEyOGQ5 MDk1ZS5jcmwwHwYDVR0jBBgwFoAU0STfzH9bgNKN7P7ujM9SM461IUQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNzc1ZjdjMy1jMjM4LTQ3ZDUtOThjOS04MzVh MjhkOTA5NWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABT1gZ4B+t+Tu+y+XX4bXdEYFBvJqRpHOIMLaIRaEC3OlY3KMGjnZ/Uj XhYRqlcb16r6p5nIlXHuiL4dKhDYa1zIzQWq+Md/y6H74k6rVLgTpYfSvHvNymoq Zul3IyH0IepPIfp5WBeKe/hGzpTlNHRkFJEf/h+MUkOe3YwX3auqtwFb1WKuiAOx 2tztj/AMzB1Woy0fKPOuuylY4k6iyDUQJCAkueZL3VmP6HGObD3kzBRDREjZIrqi 7YPWqQI0jMardEbhLPdDkIRnw3k/bTKM0583XZQanzeydDydMTLVw+FYL3Gkzhb7 a0M802vBvKvCmwBTvrm7mxL7vy1myPg= -----END CERTIFICATE-----Generated at Mon Mar 2 14:07:30 2026 by rpki-client