$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa File: bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa (raw, json) Hash identifier: s+uMrS5wGJPWEklgqnHIuo68M0XYzHcZjG2xoSos5hk= Subject key identifier: 27:8A:C0:AD:5F:80:AD:CC:E2:71:9C:E2:15:79:E6:B8:32:24:7C:77 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CB551F080ACB26435DF464240 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 212238 IP address blocks: 104.243.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:f0:80:ac:b2:64:35:df:46:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=0c9b3db6-006e-441d-b988-f40003a4f132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9b:b5:01:50:5c:b8:8d:1a:f8:65:3b:95:31: 5a:f0:53:7d:ea:70:5c:e3:0b:04:e0:95:8d:8d:20: 56:88:9d:c0:31:4a:db:a9:ca:f7:02:e0:0a:de:c9: 51:ca:a5:9f:6c:a8:25:e9:86:0e:1e:ea:c9:cf:22: 2c:59:1e:36:3d:cb:8e:74:4d:81:d6:1b:e4:ea:1a: 17:aa:eb:0d:d1:85:c0:62:a4:e3:21:d2:71:26:41: 8b:a9:31:79:13:c7:58:c6:b2:37:9c:7a:d5:9a:07: c8:a6:5d:fb:c4:01:4f:51:fc:75:a5:ef:dc:2f:00: e0:31:60:bc:a8:a0:04:30:75:8d:76:0f:31:9b:7a: c8:9a:ec:c0:6c:06:cc:4f:ee:46:8b:74:ed:54:97: 1b:b6:cd:7e:09:7d:b3:7a:c7:c0:70:07:fb:07:6b: ef:72:75:28:78:0e:ea:94:b5:56:a0:8d:5c:78:3b: 7f:77:1d:d3:fa:29:ee:5a:f9:be:b4:db:a0:cf:9c: 2b:1d:3e:62:56:8d:f4:54:55:fc:b7:b2:86:0a:4c: 5c:7a:35:8f:e5:68:da:14:3b:03:dc:5f:f4:1f:7b: bc:43:aa:2e:05:dc:18:35:dd:f8:8b:c0:b1:c3:44: 1b:f4:4b:dc:e1:86:86:70:71:d6:7e:61:e4:ee:9b: b3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8A:C0:AD:5F:80:AD:CC:E2:71:9C:E2:15:79:E6:B8:32:24:7C:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:1a:80:36:48:0e:9a:c3:5b:a4:6c:d0:10:cb:3f:c5:76:a4: f4:c2:53:62:8d:69:ab:d4:6a:86:f9:69:3e:99:fa:96:72:9d: ae:9e:e2:4d:39:45:e7:c9:4d:13:d5:cc:73:77:05:bd:68:88: 89:33:f9:05:7d:29:84:7d:66:11:88:3b:eb:84:e4:5a:4b:ea: a9:3b:25:26:ad:48:de:42:a1:b8:a6:94:62:f3:a9:c3:33:ce: ec:58:7f:35:b1:9c:4b:5e:64:09:03:5e:56:13:8c:05:99:23: 2b:c6:f1:39:97:bf:d9:51:30:aa:bc:e0:ff:09:42:82:c5:b5: b9:ae:83:01:0e:31:cd:04:86:6e:6f:8a:f8:e1:56:19:75:9b: 56:f6:b9:67:58:0b:9e:2a:2a:ee:88:64:ed:b9:0d:f2:ad:70: 50:e5:51:30:e1:50:77:4f:f9:54:10:76:14:58:75:40:e5:ac: 64:e9:13:da:f4:a7:01:15:6d:11:71:30:61:0d:e2:8b:53:61: 05:45:c1:b3:b3:d8:09:9d:b0:07:11:ec:fb:58:f8:e6:cc:00: 4d:7d:6f:b6:e7:be:6d:f0:a5:00:92:5f:89:61:ae:21:b6:dc: 98:22:69:3b:a8:f5:91:5c:19:26:fd:81:3b:d1:13:fd:d2:10: b2:9f:09:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UfCArLJkNd9GQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk MGM5YjNkYjYtMDA2ZS00NDFkLWI5ODgtZjQwMDAzYTRmMTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJu1AVBcuI0a+GU7lTFa8FN96nBc4wsE4JWN jSBWiJ3AMUrbqcr3AuAK3slRyqWfbKgl6YYOHurJzyIsWR42PcuOdE2B1hvk6hoX qusN0YXAYqTjIdJxJkGLqTF5E8dYxrI3nHrVmgfIpl37xAFPUfx1pe/cLwDgMWC8 qKAEMHWNdg8xm3rImuzAbAbMT+5Gi3TtVJcbts1+CX2zesfAcAf7B2vvcnUoeA7q lLVWoI1ceDt/dx3T+inuWvm+tNugz5wrHT5iVo30VFX8t7KGCkxcejWP5WjaFDsD 3F/0H3u8Q6ouBdwYNd34i8Cxw0Qb9Evc4YaGcHHWfmHk7puzmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeKwK1fgK3M4nGc4hV55rgyJHx3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmY2NjFmZGYtNzQ3YS0z ZTQ3LTg5YzMtYjFjYmMwNjRjN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEagDZIDprDW6Rs0BDLP8V2pPTCU2KNaavUaob5aT6Z+pZyna6e4k05 RefJTRPVzHN3Bb1oiIkz+QV9KYR9ZhGIO+uE5FpL6qk7JSatSN5CobimlGLzqcMz zuxYfzWxnEteZAkDXlYTjAWZIyvG8TmXv9lRMKq84P8JQoLFtbmugwEOMc0Ehm5v ivjhVhl1m1b2uWdYC54qKu6IZO25DfKtcFDlUTDhUHdP+VQQdhRYdUDlrGTpE9r0 pwEVbRFxMGEN4otTYQVFwbOz2AmdsAcR7PtY+ObMAE19b7bnvm3wpQCSX4lhriG2 3JgiaTuo9ZFcGSb9gTvRE/3SELKfCWg= -----END CERTIFICATE-----Generated at Mon Mar 2 00:31:15 2026 by rpki-client