$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/4fd2deb2-4eb7-31d5-941b-417d5bef3ced.roa File: 4fd2deb2-4eb7-31d5-941b-417d5bef3ced.roa (raw, json) Hash identifier: d/N5wnMF5W+88rJFPL0Cr76crn8iuZ0FP+PD/Vd28T4= Subject key identifier: 70:6A:B9:14:EA:93:55:D3:89:62:9F:4A:0B:9A:3D:76:D3:63:A4:0A Certificate issuer: /CN=613bdd67-74b5-4268-96e7-b3cbb049d7aa Certificate serial: 010D0C9F4328584C99670F284D7335AE91F7A5C0 Authority key identifier: 40:4E:D7:BD:F4:3E:F6:0C:7D:D8:0C:9D:2F:FF:08:A7:F4:62:65:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/4fd2deb2-4eb7-31d5-941b-417d5bef3ced.roa Signing time: Wed 21 Jan 2026 14:00:38 +0000 ROA not before: Wed 21 Jan 2026 14:00:38 +0000 ROA not after: Tue 21 Apr 2026 13:00:38 +0000 asID: 46960 IP address blocks: 104.255.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:99:67:0f:28:4d:73:35:ae:91:f7:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=613bdd67-74b5-4268-96e7-b3cbb049d7aa Validity Not Before: Jan 21 14:00:38 2026 GMT Not After : Apr 21 13:00:38 2026 GMT Subject: CN=f934e9c3-a4fa-4162-a40c-4a21397fbd47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:93:57:a7:45:ac:c3:85:3c:47:5f:d7:4c:cd: 47:57:c9:e8:3b:c4:43:a4:9e:9a:ef:68:80:e1:0f: bd:10:01:9b:6a:68:4d:f8:a8:b5:02:5b:12:51:b6: 00:3d:36:34:55:6b:59:12:1f:fe:57:8c:5b:44:72: c0:bd:99:45:ba:6f:37:f9:02:e6:5c:26:c6:be:7c: 52:6d:f9:1d:e9:94:12:42:ca:8b:30:e0:6f:23:bd: 49:55:e6:33:bb:64:a1:5e:65:a5:c7:cf:e0:00:c3: 75:25:2c:1a:50:ff:78:e5:4c:e3:e0:f6:a2:78:aa: 36:a1:46:e8:d6:10:31:52:5b:75:d8:de:ea:71:5e: 2e:2a:99:9e:74:c5:0d:2d:1d:85:e0:40:a1:77:82: d5:05:e4:2c:b5:05:c9:5e:5a:b0:85:7d:7d:ad:0e: 9d:e4:07:5f:e3:6b:c1:55:f7:a5:a4:61:14:50:d7: cb:0d:a9:33:a6:3e:34:b4:fb:a7:f7:15:32:46:57: 34:b3:1b:8d:c6:cb:42:38:5c:6d:42:57:82:87:d6: 22:62:d8:01:9b:50:c1:5f:f8:75:d8:65:a6:f1:71: c3:15:a6:9e:b5:c4:7f:9c:a1:7a:7b:78:10:a9:56: 30:ad:23:a1:25:46:22:cb:cd:c9:05:6b:33:66:d3: bc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6A:B9:14:EA:93:55:D3:89:62:9F:4A:0B:9A:3D:76:D3:63:A4:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/4fd2deb2-4eb7-31d5-941b-417d5bef3ced.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.crl X509v3 Authority Key Identifier: keyid:40:4E:D7:BD:F4:3E:F6:0C:7D:D8:0C:9D:2F:FF:08:A7:F4:62:65:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer sbgp-ipAddrBlock: critical IPv4: 104.255.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:0d:b5:f4:d5:ea:99:e3:e6:71:6a:1b:15:21:a4:21:0a:c9: 6a:a1:40:b9:f5:25:54:50:9a:2a:16:e6:ea:9c:7e:55:82:c0: e3:02:35:09:84:53:44:1e:f3:3b:5e:84:b1:2e:11:49:6b:34: 06:77:ce:90:da:f3:14:c9:2e:62:2c:89:f9:27:91:35:ed:93: 83:d1:db:35:c1:e7:4a:c8:b5:ce:a1:95:e3:55:05:e1:bd:b0: 3d:25:38:1e:14:b0:75:20:ca:fc:c9:27:ad:d9:41:c7:80:0e: af:8c:6c:f0:9e:d4:16:7d:7d:3a:50:38:cf:81:98:25:83:27: 0b:ac:4e:9b:72:0b:57:b1:3a:d4:40:92:27:2a:5e:8f:cc:5e: fb:87:39:93:52:f6:4a:b6:f4:d6:fd:6d:aa:77:79:fb:0b:5d: 34:b6:33:50:e4:f1:f3:0e:d7:71:95:48:0b:56:42:72:84:90: c1:b5:25:52:8b:31:c9:52:5a:27:57:8d:66:7d:8f:53:cc:55: 02:46:f1:21:fd:55:7f:da:cd:9f:c6:17:db:30:cd:55:6b:8e: a7:3c:de:23:32:b8:15:1b:9b:5b:ea:a5:8b:3b:a0:6f:d4:36: 04:b2:8f:a3:32:e4:33:e7:c2:33:89:1a:71:d6:c2:8d:f0:f3: 13:c0:1d:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyZZw8oTXM1rpH3pcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjEzYmRkNjctNzRiNS00MjY4LTk2ZTctYjNjYmIwNDlk N2FhMB4XDTI2MDEyMTE0MDAzOFoXDTI2MDQyMTEzMDAzOFowLzEtMCsGA1UEAxMk ZjkzNGU5YzMtYTRmYS00MTYyLWE0MGMtNGEyMTM5N2ZiZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45NXp0Wsw4U8R1/XTM1HV8noO8RDpJ6a72iA 4Q+9EAGbamhN+Ki1AlsSUbYAPTY0VWtZEh/+V4xbRHLAvZlFum83+QLmXCbGvnxS bfkd6ZQSQsqLMOBvI71JVeYzu2ShXmWlx8/gAMN1JSwaUP945Uzj4PaieKo2oUbo 1hAxUlt12N7qcV4uKpmedMUNLR2F4EChd4LVBeQstQXJXlqwhX19rQ6d5Adf42vB VfelpGEUUNfLDakzpj40tPun9xUyRlc0sxuNxstCOFxtQleCh9YiYtgBm1DBX/h1 2GWm8XHDFaaetcR/nKF6e3gQqVYwrSOhJUYiy83JBWszZtO87wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBquRTqk1XTiWKfSguaPXbTY6QKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82MTNi ZGQ2Ny03NGI1LTQyNjgtOTZlNy1iM2NiYjA0OWQ3YWEvNGZkMmRlYjItNGViNy0z MWQ1LTk0MWItNDE3ZDViZWYzY2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjEzYmRkNjctNzRiNS00MjY4LTk2 ZTctYjNjYmIwNDlkN2FhLzYxM2JkZDY3LTc0YjUtNDI2OC05NmU3LWIzY2JiMDQ5 ZDdhYS5jcmwwHwYDVR0jBBgwFoAUQE7XvfQ+9gx92AydL/8Ip/RiZXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82MTNiZGQ2Ny03NGI1LTQyNjgtOTZlNy1iM2Ni YjA0OWQ3YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkNtfTV6pnj5nFqGxUhpCEKyWqhQLn1JVRQmioW5uqcflWCwOMCNQmE U0Qe8ztehLEuEUlrNAZ3zpDa8xTJLmIsifknkTXtk4PR2zXB50rItc6hleNVBeG9 sD0lOB4UsHUgyvzJJ63ZQceADq+MbPCe1BZ9fTpQOM+BmCWDJwusTptyC1exOtRA kicqXo/MXvuHOZNS9kq29Nb9bap3efsLXTS2M1Dk8fMO13GVSAtWQnKEkMG1JVKL MclSWidXjWZ9j1PMVQJG8SH9VX/azZ/GF9swzVVrjqc83iMyuBUbm1vqpYs7oG/U NgSyj6My5DPnwjOJGnHWwo3w8xPAHfI= -----END CERTIFICATE-----Generated at Mon Mar 2 10:50:47 2026 by rpki-client