$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4cee8cb-e264-3ac5-aaac-af9e5feb058f.roa File: a4cee8cb-e264-3ac5-aaac-af9e5feb058f.roa (raw, json) Hash identifier: Mqo3TOxjRouVckoPVX3V4+5qgxIwatPhV1NwlCdxNzg= Subject key identifier: 55:1F:60:E8:A5:71:F4:D7:7F:B3:02:4E:23:DB:B8:9E:AB:B6:A6:3C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D6CF6F61206D82AF889FA8900 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4cee8cb-e264-3ac5-aaac-af9e5feb058f.roa Signing time: Tue 07 Apr 2026 08:46:28 +0000 ROA not before: Tue 07 Apr 2026 08:46:28 +0000 ROA not after: Mon 06 Jul 2026 08:46:28 +0000 asID: 212238 IP address blocks: 104.250.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:f6:f6:12:06:d8:2a:f8:89:fa:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 7 08:46:28 2026 GMT Not After : Jul 6 08:46:28 2026 GMT Subject: CN=8b0fb7c0-dc70-4e6c-88e6-34fb60e934fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:79:84:fc:38:87:97:9d:aa:21:04:4c:a3:48: e9:94:25:4e:86:11:50:c5:3b:47:f1:2f:fe:5e:9c: 89:88:d8:57:6a:ac:71:21:83:dc:b9:b7:f5:ea:94: 4f:d4:26:df:75:09:1b:86:1e:c8:51:68:7e:da:7b: 6e:bb:3b:54:ee:8d:7e:ac:08:64:7a:d5:c6:18:57: 10:08:5c:10:09:43:c0:3a:ef:bb:df:57:b1:78:a4: be:65:8a:05:4a:09:e9:fd:41:be:60:7d:c3:6d:f7: 5b:d3:bc:d8:32:eb:4e:2c:86:0b:a4:b9:57:be:c1: 7f:97:b1:fb:b2:4d:2c:ca:b6:7c:96:9a:f7:e5:2f: 4f:45:54:68:04:03:0a:12:a1:a1:1c:85:13:72:c8: 21:08:1d:d6:c9:1e:a1:e1:6e:72:94:ca:98:65:96: c8:c5:e1:c4:74:21:a8:df:15:57:6c:0e:6c:8e:9f: 68:77:0d:12:e6:72:6a:be:a6:6b:04:6d:f4:54:ae: 08:ce:c4:fa:bc:40:c0:43:42:73:3b:5e:ce:9c:38: 83:7f:12:62:b9:8b:36:4a:2c:5d:3b:13:f0:a2:05: e2:7f:9e:4d:04:95:bb:87:4e:66:ad:39:fd:bf:6c: 2f:24:06:c9:5e:0e:9a:48:f4:f6:de:18:8d:10:b8: 8a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:1F:60:E8:A5:71:F4:D7:7F:B3:02:4E:23:DB:B8:9E:AB:B6:A6:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4cee8cb-e264-3ac5-aaac-af9e5feb058f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:2d:87:fa:e9:39:3d:42:04:59:a0:37:3c:bf:16:6c:0b:2a: 2b:bf:f2:0f:ba:5b:b1:c3:67:36:57:e2:05:18:37:64:f3:c0: ca:91:78:89:bb:f2:b2:38:0a:ba:1f:bb:44:d1:a9:7c:4f:17: a1:00:7f:f7:6f:8e:9b:78:e2:f2:b2:7d:6b:ef:4a:ae:1f:bb: e3:aa:78:d1:03:bf:94:7d:26:b6:3c:2f:1b:33:a1:9a:00:fe: 21:79:65:c6:11:49:7e:13:f9:e1:f1:f3:d8:d1:3a:46:60:5c: bd:65:40:0d:f5:f8:d9:d6:5b:d0:a9:9d:c8:8a:8d:f3:eb:0c: 41:78:0d:19:35:9f:00:a8:7e:a6:53:c2:f8:61:ca:b4:3d:97: 68:cb:b2:f9:2b:f1:9d:31:a2:dd:79:30:98:28:84:b2:f0:9d: 8a:d5:00:2b:a9:48:c6:e7:d1:70:2b:c8:24:11:3d:a2:6f:a3: b0:30:6f:bd:84:26:7b:4a:f7:16:3b:d1:7d:10:50:b6:4e:59: 8a:59:c3:c0:57:27:55:28:13:84:a9:35:9d:b0:66:38:b9:cb: 87:d0:ee:a7:60:d6:af:81:9f:54:a6:8a:68:44:2c:93:1a:49: ad:b3:ab:76:b0:1a:34:44:39:32:ca:e5:db:ff:6a:af:44:56: d1:aa:e9:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1s9vYSBtgq+In6iQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQwNzA4NDYyOFoXDTI2MDcwNjA4NDYyOFowLzEtMCsGA1UEAxMk OGIwZmI3YzAtZGM3MC00ZTZjLTg4ZTYtMzRmYjYwZTkzNGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXmE/DiHl52qIQRMo0jplCVOhhFQxTtH8S/+ XpyJiNhXaqxxIYPcubf16pRP1CbfdQkbhh7IUWh+2ntuuztU7o1+rAhketXGGFcQ CFwQCUPAOu+731exeKS+ZYoFSgnp/UG+YH3Dbfdb07zYMutOLIYLpLlXvsF/l7H7 sk0syrZ8lpr35S9PRVRoBAMKEqGhHIUTcsghCB3WyR6h4W5ylMqYZZbIxeHEdCGo 3xVXbA5sjp9odw0S5nJqvqZrBG30VK4IzsT6vEDAQ0JzO17OnDiDfxJiuYs2Sixd OxPwogXif55NBJW7h05mrTn9v2wvJAbJXg6aSPT23hiNELiKowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUfYOilcfTXf7MCTiPbuJ6rtqY8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTRjZWU4Y2ItZTI2NC0z YWM1LWFhYWMtYWY5ZTVmZWIwNThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkth/rpOT1CBFmgNzy/FmwLKiu/8g+6W7HDZzZX4gUYN2TzwMqReIm7 8rI4Crofu0TRqXxPF6EAf/dvjpt44vKyfWvvSq4fu+OqeNEDv5R9JrY8LxszoZoA /iF5ZcYRSX4T+eHx89jROkZgXL1lQA31+NnWW9CpnciKjfPrDEF4DRk1nwCofqZT wvhhyrQ9l2jLsvkr8Z0xot15MJgohLLwnYrVACupSMbn0XAryCQRPaJvo7Awb72E JntK9xY70X0QULZOWYpZw8BXJ1UoE4SpNZ2wZji5y4fQ7qdg1q+Bn1SmimhELJMa Sa2zq3awGjREOTLK5dv/aq9EVtGq6X0= -----END CERTIFICATE-----Generated at Fri Apr 17 09:28:56 2026 by rpki-client