$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/0aedd38f-4456-3641-9de0-c6d0c9a9f771.roa File: 0aedd38f-4456-3641-9de0-c6d0c9a9f771.roa (raw, json) Hash identifier: gb6nf9DUu7yyUfYqYULNu4CBO5p1jbmc6f4gv4tt52o= Subject key identifier: 80:C3:82:C6:A4:F2:F1:60:86:D7:A1:68:62:84:5D:D3:DF:1F:CA:7A Certificate issuer: /CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b Certificate serial: 010D0C9F4328584CAAF3D644DD5F32CC002F01A0 Authority key identifier: CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/0aedd38f-4456-3641-9de0-c6d0c9a9f771.roa Signing time: Tue 27 Jan 2026 20:53:21 +0000 ROA not before: Tue 27 Jan 2026 20:53:21 +0000 ROA not after: Mon 27 Apr 2026 19:53:21 +0000 asID: 21713 IP address blocks: 104.160.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:f3:d6:44:dd:5f:32:cc:00:2f:01:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b Validity Not Before: Jan 27 20:53:21 2026 GMT Not After : Apr 27 19:53:21 2026 GMT Subject: CN=e1603d3d-abc0-46aa-86ae-c9fca6d1e20d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9b:65:dc:9e:14:23:85:b2:63:60:aa:aa:ee: 5f:6f:14:21:d3:4c:77:67:fb:c1:c3:93:d2:00:19: 87:16:b6:ed:5f:6b:21:51:a6:5d:52:ae:6e:f8:0f: dc:52:4c:76:06:90:d5:80:79:10:57:b2:de:19:8e: 52:59:6e:48:3c:cb:10:ca:14:0d:f1:a5:5d:cc:f3: d4:8d:7e:d8:57:2f:28:ca:92:cd:80:e0:a3:2e:88: 80:9f:a6:ef:39:14:4f:fe:64:7c:5d:5e:88:2e:45: 7d:39:a6:0f:26:d1:1a:e0:41:1b:bf:db:30:44:ee: b6:32:71:5d:2c:87:3b:1a:28:b0:8d:e8:b6:85:36: 91:30:92:db:c6:4c:97:9c:4d:55:fd:2d:da:f6:92: 4a:17:8e:87:da:3d:4b:a9:bd:ef:35:81:e9:ac:c7: fd:0f:2e:0d:5a:93:02:f4:eb:03:ed:29:92:7a:81: c1:89:65:f4:2c:73:d8:60:c2:9d:99:54:8d:e0:22: 40:e0:d7:0e:f1:e2:57:2b:5a:da:ed:ab:78:e7:db: 04:de:e8:3b:c7:47:f5:68:5c:a0:ce:08:15:8e:7e: 3d:6d:6a:c5:f3:e5:09:2f:e7:66:b6:ed:35:b7:e0: c1:46:cb:4c:41:f8:e1:fc:e7:9d:86:1f:e1:d4:9c: 20:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C3:82:C6:A4:F2:F1:60:86:D7:A1:68:62:84:5D:D3:DF:1F:CA:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/0aedd38f-4456-3641-9de0-c6d0c9a9f771.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl X509v3 Authority Key Identifier: keyid:CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer sbgp-ipAddrBlock: critical IPv4: 104.160.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:64:e8:bf:06:7a:74:ca:77:d0:ac:e1:25:63:54:28:b1:1f: f4:7c:00:04:0c:62:e7:ae:e1:bf:b1:c0:2b:ef:03:19:42:a6: 11:d5:13:a1:b3:99:74:96:95:3c:1a:01:43:d3:8c:57:75:8e: 82:75:9e:70:5e:0b:bb:f1:ca:91:97:e9:c3:af:e0:08:e3:04: 5f:bb:ab:ae:3a:5e:f3:f4:54:37:60:96:50:9e:73:16:89:52: 7d:d6:57:12:bf:77:b4:41:6c:8b:d6:9b:d7:0e:16:ea:00:9d: 9e:9d:5a:70:1b:10:00:06:ec:21:5d:2b:23:e4:a5:81:5c:bf: 4a:1a:e0:1e:cb:e3:3f:a7:f9:75:b4:b5:7f:7f:8d:bb:fc:54: 56:eb:ba:7d:27:c5:ce:3a:f3:33:db:28:3b:ca:6b:0c:49:b0: d6:32:0e:c8:af:6a:ee:2a:10:fb:65:cb:bc:e0:2d:09:07:33: d9:9a:14:a2:40:11:d7:73:08:1a:0f:d2:2e:f2:83:44:64:56: c2:69:3f:b6:3d:9d:0b:b7:65:a7:a9:e8:6f:7f:e3:53:95:92: dc:f8:b1:58:ba:2f:2f:35:2d:f5:ea:40:32:dc:4e:ca:c1:f1: dd:a8:4b:78:48:0d:f1:92:40:87:16:ed:18:4f:8a:e9:d4:37: 9f:32:2b:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyq89ZE3V8yzAAvAaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDkzMWU3MTctYzFkMS00ZGQ4LTg2M2QtNWMwNmZiNzZm NDdiMB4XDTI2MDEyNzIwNTMyMVoXDTI2MDQyNzE5NTMyMVowLzEtMCsGA1UEAxMk ZTE2MDNkM2QtYWJjMC00NmFhLTg2YWUtYzlmY2E2ZDFlMjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJtl3J4UI4WyY2Cqqu5fbxQh00x3Z/vBw5PS ABmHFrbtX2shUaZdUq5u+A/cUkx2BpDVgHkQV7LeGY5SWW5IPMsQyhQN8aVdzPPU jX7YVy8oypLNgOCjLoiAn6bvORRP/mR8XV6ILkV9OaYPJtEa4EEbv9swRO62MnFd LIc7Giiwjei2hTaRMJLbxkyXnE1V/S3a9pJKF46H2j1Lqb3vNYHprMf9Dy4NWpMC 9OsD7SmSeoHBiWX0LHPYYMKdmVSN4CJA4NcO8eJXK1ra7at459sE3ug7x0f1aFyg zggVjn49bWrF8+UJL+dmtu01t+DBRstMQfjh/Oedhh/h1JwgKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDDgsak8vFghtehaGKEXdPfH8p6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80OTMx ZTcxNy1jMWQxLTRkZDgtODYzZC01YzA2ZmI3NmY0N2IvMGFlZGQzOGYtNDQ1Ni0z NjQxLTlkZTAtYzZkMGM5YTlmNzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDkzMWU3MTctYzFkMS00ZGQ4LTg2 M2QtNWMwNmZiNzZmNDdiLzQ5MzFlNzE3LWMxZDEtNGRkOC04NjNkLTVjMDZmYjc2 ZjQ3Yi5jcmwwHwYDVR0jBBgwFoAUzkL+cRFxw0kbjbZ7dOQfT+KR3owwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80OTMxZTcxNy1jMWQxLTRkZDgtODYzZC01YzA2 ZmI3NmY0N2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaKAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdk6L8GenTKd9Cs4SVjVCixH/R8AAQMYueu4b+xwCvvAxlCphHVE6Gz mXSWlTwaAUPTjFd1joJ1nnBeC7vxypGX6cOv4AjjBF+7q646XvP0VDdgllCecxaJ Un3WVxK/d7RBbIvWm9cOFuoAnZ6dWnAbEAAG7CFdKyPkpYFcv0oa4B7L4z+n+XW0 tX9/jbv8VFbrun0nxc468zPbKDvKawxJsNYyDsivau4qEPtly7zgLQkHM9maFKJA EddzCBoP0i7yg0RkVsJpP7Y9nQu3Zaep6G9/41OVktz4sVi6Ly81LfXqQDLcTsrB 8d2oS3hIDfGSQIcW7RhPiunUN58yK+Q= -----END CERTIFICATE-----Generated at Mon Mar 2 10:45:06 2026 by rpki-client