$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/68676f75-73a9-3af9-b8a2-d3b50750b1f0.roa File: 68676f75-73a9-3af9-b8a2-d3b50750b1f0.roa (raw, json) Hash identifier: Kl+wIfSH8UUnfwJKOExcFKj4kvcOKbn5fa2UrKrA1o4= Subject key identifier: 26:DD:0F:4D:99:76:E5:E8:37:56:4E:3A:A1:13:83:47:28:68:44:AA Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D7E31D077E4162FA74D22EC80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/68676f75-73a9-3af9-b8a2-d3b50750b1f0.roa Signing time: Mon 13 Apr 2026 12:53:48 +0000 ROA not before: Mon 13 Apr 2026 12:53:48 +0000 ROA not after: Sun 12 Jul 2026 12:53:48 +0000 asID: 138195 IP address blocks: 104.250.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7e:31:d0:77:e4:16:2f:a7:4d:22:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 13 12:53:48 2026 GMT Not After : Jul 12 12:53:48 2026 GMT Subject: CN=fb39c01b-7556-40e4-b080-d18af663c1b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d6:51:18:d3:09:04:83:d7:cf:3f:54:db:6d: 24:82:32:f1:1d:1b:3a:41:c7:a5:42:8c:f4:2b:2e: 7b:54:7d:ea:0e:f8:c6:e3:7f:39:5a:9d:98:90:d9: cb:a9:c9:64:ff:83:c8:b7:3b:8c:b9:34:ad:0c:b2: c7:2d:5c:57:3b:d6:2c:dc:2d:75:15:20:6d:6e:ab: 1a:f3:4d:c5:a1:7e:21:ad:65:cf:f3:70:40:dc:8d: 3f:34:b4:52:fd:e9:86:5e:9c:05:a9:9d:ee:93:0f: 81:17:23:bb:05:86:5e:da:41:62:97:0a:47:a4:d7: f4:86:07:06:7e:c4:1c:a7:12:48:0b:10:35:73:b0: 86:0f:7b:2b:36:d2:18:cf:0a:88:ad:a4:76:92:5c: 3d:62:14:bd:7f:b9:20:89:90:68:11:9e:f8:e8:ff: 72:c5:fa:c5:6d:dc:21:cc:65:34:b9:22:17:2f:6c: 1f:74:e1:87:cb:70:e7:12:56:86:4a:a1:7c:8d:89: b2:d5:7a:fa:59:0e:e6:84:e5:2c:2d:63:66:15:13: 70:92:51:23:0c:75:12:de:83:4f:65:ea:67:33:2b: 99:c4:c2:70:e4:b0:22:1a:c4:e1:38:9d:98:74:f9: b1:f3:db:ac:ca:33:27:d9:48:8f:75:f3:67:cd:0f: 6f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:DD:0F:4D:99:76:E5:E8:37:56:4E:3A:A1:13:83:47:28:68:44:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/68676f75-73a9-3af9-b8a2-d3b50750b1f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:0d:2e:05:af:28:98:81:c1:00:3b:83:9d:4e:2d:b7:e1:9c: a9:5b:e1:75:73:00:3f:d8:b2:db:0c:e8:f8:da:d7:c5:03:88: 72:a3:26:a6:b5:6a:04:1b:3d:fd:af:71:c2:9a:b7:99:c9:a8: 8f:96:67:90:e2:67:88:be:d9:7a:a0:96:db:09:db:be:f2:ca: 2f:60:4e:81:8c:7c:66:7b:29:59:df:1f:8a:26:88:6d:81:35: c8:e0:45:3b:c6:b2:0d:4c:76:ab:dc:33:05:36:79:41:6e:81: e6:ba:87:e3:03:d4:82:85:68:e5:24:3e:65:df:a5:96:79:ee: 21:33:a8:dc:70:cd:28:bd:5f:86:ff:f7:18:32:91:cc:17:91: 5a:47:63:21:53:3b:4b:f2:3b:53:3e:fe:a7:f1:ad:68:f1:55: 67:b0:af:3a:fb:34:42:21:e6:a0:5c:9a:2d:36:96:7a:ac:fd: ee:c1:78:de:fe:b2:e0:9d:ef:50:0c:58:e6:c9:b1:35:f4:9d: a2:10:22:0b:93:76:98:a9:2f:b1:d0:f9:a9:44:0e:35:89:07: 60:f0:91:de:64:e1:f2:80:9b:ca:7e:20:43:26:5e:51:b5:58: f8:aa:73:64:61:f7:fe:f0:c4:72:8e:dd:6b:57:9b:06:bd:47: 88:26:52:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1+MdB35BYvp00i7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQxMzEyNTM0OFoXDTI2MDcxMjEyNTM0OFowLzEtMCsGA1UEAxMk ZmIzOWMwMWItNzU1Ni00MGU0LWIwODAtZDE4YWY2NjNjMWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitZRGNMJBIPXzz9U220kgjLxHRs6QcelQoz0 Ky57VH3qDvjG4385Wp2YkNnLqclk/4PItzuMuTStDLLHLVxXO9Ys3C11FSBtbqsa 803FoX4hrWXP83BA3I0/NLRS/emGXpwFqZ3ukw+BFyO7BYZe2kFilwpHpNf0hgcG fsQcpxJICxA1c7CGD3srNtIYzwqIraR2klw9YhS9f7kgiZBoEZ746P9yxfrFbdwh zGU0uSIXL2wfdOGHy3DnElaGSqF8jYmy1Xr6WQ7mhOUsLWNmFRNwklEjDHUS3oNP ZepnMyuZxMJw5LAiGsThOJ2YdPmx89usyjMn2UiPdfNnzQ9vBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbdD02ZduXoN1ZOOqETg0coaESqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjg2NzZmNzUtNzNhOS0z YWY5LWI4YTItZDNiNTA3NTBiMWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgNLgWvKJiBwQA7g51OLbfhnKlb4XVzAD/YstsM6Pja18UDiHKjJqa1 agQbPf2vccKat5nJqI+WZ5DiZ4i+2XqgltsJ277yyi9gToGMfGZ7KVnfH4omiG2B NcjgRTvGsg1MdqvcMwU2eUFugea6h+MD1IKFaOUkPmXfpZZ57iEzqNxwzSi9X4b/ 9xgykcwXkVpHYyFTO0vyO1M+/qfxrWjxVWewrzr7NEIh5qBcmi02lnqs/e7BeN7+ suCd71AMWObJsTX0naIQIguTdpipL7HQ+alEDjWJB2Dwkd5k4fKAm8p+IEMmXlG1 WPiqc2Rh9/7wxHKO3WtXmwa9R4gmUng= -----END CERTIFICATE-----Generated at Sun Apr 19 09:19:17 2026 by rpki-client