$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ca6afc52-88c7-3ce6-8f05-8fdea0e0e339.roa File: ca6afc52-88c7-3ce6-8f05-8fdea0e0e339.roa (raw, json) Hash identifier: 99stUGPCF2Avr8RC2kl/EvrofAI4BwmqaEyHhimLdVE= Subject key identifier: FF:97:69:94:42:B5:8B:B4:64:A0:BD:94:F8:8D:9A:92:12:74:3E:C0 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CBCC40D554B035161FC6AAE00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ca6afc52-88c7-3ce6-8f05-8fdea0e0e339.roa Signing time: Tue 03 Feb 2026 06:01:38 +0000 ROA not before: Tue 03 Feb 2026 06:01:38 +0000 ROA not after: Mon 04 May 2026 05:01:38 +0000 asID: 201813 IP address blocks: 104.243.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bc:c4:0d:55:4b:03:51:61:fc:6a:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 3 06:01:38 2026 GMT Not After : May 4 05:01:38 2026 GMT Subject: CN=62207e70-54a1-4d76-9970-c9211b962bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:56:22:49:95:12:72:a0:db:b5:28:ab:84:af: 0d:93:2f:af:54:b1:a3:48:1c:cb:f4:dc:f6:5b:1b: 67:78:4e:ad:9e:b5:e6:9c:10:85:04:9a:1d:99:7a: 39:97:e1:33:c4:ec:49:b5:12:4c:96:c8:61:c3:b6: 69:ab:53:37:48:76:60:43:ce:31:7a:58:2e:ce:3a: 6a:27:56:a3:13:76:07:fc:50:dc:79:c0:c5:92:16: 7e:b3:2f:57:17:c4:d7:84:26:67:3a:e5:a1:b5:cf: 5c:b3:7e:83:0c:d6:f9:d9:cc:bd:15:85:39:ea:9b: 64:c2:d3:20:d7:70:25:bc:ca:6a:c6:7d:c7:8e:fe: a4:e1:06:bf:75:f5:15:f6:55:50:f1:21:f4:65:d3: 81:f2:07:e8:ff:1a:4c:1d:c9:51:17:a8:f7:42:96: 33:1d:fd:fb:d7:61:b9:91:d8:b9:39:b5:89:df:83: cf:fe:22:47:ec:d0:19:95:21:a5:18:5f:e4:72:87: ac:d2:77:de:41:3f:48:f2:1c:b8:0a:1a:ca:e8:d0: 2f:4f:38:ee:bc:06:d5:be:7e:9e:7e:e7:b7:b0:c1: 59:09:35:2b:6a:73:07:28:e8:35:1f:36:50:dc:24: 12:e4:2e:5b:8a:04:25:cc:00:03:e8:73:51:74:d2: da:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:97:69:94:42:B5:8B:B4:64:A0:BD:94:F8:8D:9A:92:12:74:3E:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ca6afc52-88c7-3ce6-8f05-8fdea0e0e339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:3e:c6:4c:66:00:38:5d:a4:c4:62:d0:e7:7d:1f:20:e5:f7: a5:0e:ac:46:ea:24:b7:35:90:d6:40:bf:bb:92:c9:60:4b:66: a6:a6:a9:c6:08:a4:76:f9:7e:91:9c:3e:fe:51:95:3b:6c:29: 31:2b:bf:4f:4c:82:9c:6b:a4:b3:2e:cd:3a:43:b7:5e:ef:cd: 05:21:96:e4:61:62:a8:9a:4e:07:6e:72:50:be:02:32:b6:d7: 59:6b:99:16:61:a5:9d:1d:0d:7f:c8:60:d2:ff:0e:03:7a:b5: f5:83:ea:b2:37:e8:ed:da:44:e2:f4:a7:04:07:49:ea:44:9d: fb:2c:80:9a:b8:6f:93:89:88:78:c1:2f:50:cb:88:08:42:d3: 8b:d4:73:43:da:85:8d:32:6b:59:4b:a0:00:5b:1b:25:30:37: af:d7:ee:f5:c8:8b:fb:34:f4:00:77:01:ed:f4:47:62:bb:f3: 34:5a:6e:fe:5f:26:cc:eb:77:97:40:8a:b8:e0:fc:d2:d1:b2: 5a:3f:17:ce:91:2d:0e:d3:9c:e0:86:c2:35:b1:fd:68:fb:f3: 71:bc:1d:3d:da:da:db:f1:0b:f3:b3:cd:2f:24:7d:a4:6a:5b: 6b:78:43:dc:14:95:fe:f5:7c:80:2f:d8:48:b8:b5:56:fb:40: e3:c8:01:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy8xA1VSwNRYfxqrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDIwMzA2MDEzOFoXDTI2MDUwNDA1MDEzOFowLzEtMCsGA1UEAxMk NjIyMDdlNzAtNTRhMS00ZDc2LTk5NzAtYzkyMTFiOTYyYmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1YiSZUScqDbtSirhK8Nky+vVLGjSBzL9Nz2 WxtneE6tnrXmnBCFBJodmXo5l+EzxOxJtRJMlshhw7Zpq1M3SHZgQ84xelguzjpq J1ajE3YH/FDcecDFkhZ+sy9XF8TXhCZnOuWhtc9cs36DDNb52cy9FYU56ptkwtMg 13AlvMpqxn3Hjv6k4Qa/dfUV9lVQ8SH0ZdOB8gfo/xpMHclRF6j3QpYzHf3712G5 kdi5ObWJ34PP/iJH7NAZlSGlGF/kcoes0nfeQT9I8hy4ChrK6NAvTzjuvAbVvn6e fue3sMFZCTUranMHKOg1HzZQ3CQS5C5bigQlzAAD6HNRdNLaBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+XaZRCtYu0ZKC9lPiNmpISdD7AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvY2E2YWZjNTItODhjNy0z Y2U2LThmMDUtOGZkZWEwZTBlMzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4+xkxmADhdpMRi0Od9HyDl96UOrEbqJLc1kNZAv7uSyWBLZqamqcYI pHb5fpGcPv5RlTtsKTErv09MgpxrpLMuzTpDt17vzQUhluRhYqiaTgduclC+AjK2 11lrmRZhpZ0dDX/IYNL/DgN6tfWD6rI36O3aROL0pwQHSepEnfssgJq4b5OJiHjB L1DLiAhC04vUc0PahY0ya1lLoABbGyUwN6/X7vXIi/s09AB3Ae30R2K78zRabv5f Jszrd5dAirjg/NLRslo/F86RLQ7TnOCGwjWx/Wj783G8HT3a2tvxC/OzzS8kfaRq W2t4Q9wUlf71fIAv2Ei4tVb7QOPIAYo= -----END CERTIFICATE-----Generated at Sun Mar 1 16:23:26 2026 by rpki-client