$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1414f136-8e5f-33be-a48e-615e862a5b02.roa File: 1414f136-8e5f-33be-a48e-615e862a5b02.roa (raw, json) Hash identifier: 3oRdBNJyemWHxW8iLYRDM5FSlfQ2xaFBSnfA4gHsjvE= Subject key identifier: AF:C3:24:A6:33:2D:01:75:A1:EC:3C:CA:93:1B:A5:A4:72:DF:8B:54 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D59EA70CA89C46DA9AA73DE80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1414f136-8e5f-33be-a48e-615e862a5b02.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 9009 IP address blocks: 104.250.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:70:ca:89:c4:6d:a9:aa:73:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=524fb5c8-1244-41b2-85ba-ef903b6a0750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:3e:ea:15:08:b1:29:47:df:d4:f2:36:fc: f8:06:04:f8:e5:89:d2:60:b3:98:8a:5d:38:c7:ed: 76:03:e8:85:c0:49:8f:93:64:2f:ae:a5:b5:a8:b5: 4c:10:56:ff:cb:bf:96:a4:d6:a6:99:e7:35:f9:ae: 17:a7:44:26:11:57:58:7c:e4:52:ba:61:6d:1b:a6: 6a:9d:79:2f:34:a0:2d:2d:a8:05:7f:fc:24:43:07: ba:1c:5e:53:84:87:96:40:02:77:4d:df:b5:24:3c: 0d:7e:74:17:d7:c7:12:29:3b:78:63:05:d4:bc:4e: 09:02:6f:20:86:59:bc:f8:85:d0:5f:34:f8:75:0c: 77:c5:46:49:5b:04:23:09:34:71:a8:36:49:87:8a: 90:c3:b7:f8:cc:18:85:96:16:90:60:19:1d:cf:4d: d3:c2:a5:d8:8b:3d:f2:35:a8:4f:19:97:53:b5:7c: d7:41:0a:ad:b7:0a:52:8d:3d:03:29:28:8b:d1:f1: 6d:df:bf:8d:39:c3:af:6c:b6:83:d9:c5:8c:28:ea: a4:6f:89:bb:23:f1:be:82:02:84:f3:7c:1b:da:22: 95:48:65:fd:b7:14:3d:16:68:8f:07:c6:e7:13:82: 76:7a:bb:49:29:7c:89:5f:d8:dc:f6:96:a3:77:25: 33:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C3:24:A6:33:2D:01:75:A1:EC:3C:CA:93:1B:A5:A4:72:DF:8B:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1414f136-8e5f-33be-a48e-615e862a5b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:aa:30:87:85:e6:2d:17:e0:fd:5f:8b:dc:25:ae:96:c7:06: b3:eb:3d:c0:f6:82:19:b4:06:41:4b:11:bf:e6:67:80:c1:98: 20:bd:e1:19:e7:65:9b:9f:bd:64:db:e3:8c:a5:6d:24:9d:25: d7:9c:cf:30:5c:1a:42:1a:ed:a4:a3:80:18:01:8a:e0:b9:b7: 47:93:90:a6:ab:7b:cb:d2:7e:1c:96:89:63:4f:8a:9f:3c:18: 4d:8a:d9:9a:42:02:33:6d:25:2b:45:6d:38:31:9c:c3:5d:a0: c9:1a:a7:47:8e:8b:cd:86:52:b9:b4:dd:57:f0:5a:c2:8e:17: 86:27:92:de:06:a5:83:9d:e6:20:b4:6e:6d:44:6b:50:77:02: 7a:bb:3f:0b:c9:53:a2:d6:83:d3:8d:f0:62:78:c4:2e:73:17: e5:58:fa:d5:7d:17:2d:85:68:b8:36:e6:cb:bd:bd:93:44:48: 13:3d:75:82:ce:35:ab:2e:31:e0:8c:75:2e:0e:48:ee:46:68: eb:15:84:13:cb:4c:ff:47:73:f3:7f:56:a5:fe:dd:7f:f2:86: 50:e4:c1:9a:41:c8:da:a7:2f:63:02:88:0f:ad:87:8d:7e:b0: 2d:f8:46:f2:13:00:3b:e9:a0:7c:b6:5a:df:51:58:1d:8b:bc: a5:9a:bb:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6nDKicRtqapz3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NTI0ZmI1YzgtMTI0NC00MWIyLTg1YmEtZWY5MDNiNmEwNzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzg+6hUIsSlH39TyNvz4BgT45YnSYLOYil04 x+12A+iFwEmPk2QvrqW1qLVMEFb/y7+WpNammec1+a4Xp0QmEVdYfORSumFtG6Zq nXkvNKAtLagFf/wkQwe6HF5ThIeWQAJ3Td+1JDwNfnQX18cSKTt4YwXUvE4JAm8g hlm8+IXQXzT4dQx3xUZJWwQjCTRxqDZJh4qQw7f4zBiFlhaQYBkdz03TwqXYiz3y NahPGZdTtXzXQQqttwpSjT0DKSiL0fFt37+NOcOvbLaD2cWMKOqkb4m7I/G+ggKE 83wb2iKVSGX9txQ9FmiPB8bnE4J2ertJKXyJX9jc9pajdyUzoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/DJKYzLQF1oew8ypMbpaRy34tUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTQxNGYxMzYtOGU1Zi0z M2JlLWE0OGUtNjE1ZTg2MmE1YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPq+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWqMIeF5i0X4P1fi9wlrpbHBrPrPcD2ghm0BkFLEb/mZ4DBmCC94Rnn ZZufvWTb44ylbSSdJdeczzBcGkIa7aSjgBgBiuC5t0eTkKare8vSfhyWiWNPip88 GE2K2ZpCAjNtJStFbTgxnMNdoMkap0eOi82GUrm03VfwWsKOF4Ynkt4GpYOd5iC0 bm1Ea1B3Anq7PwvJU6LWg9ON8GJ4xC5zF+VY+tV9Fy2FaLg25su9vZNESBM9dYLO NasuMeCMdS4OSO5GaOsVhBPLTP9Hc/N/VqX+3X/yhlDkwZpByNqnL2MCiA+th41+ sC34RvITADvpoHy2Wt9RWB2LvKWau/k= -----END CERTIFICATE-----Generated at Fri Apr 17 05:02:50 2026 by rpki-client