$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/4fd2deb2-4eb7-31d5-941b-417d5bef3ced.roa File: 4fd2deb2-4eb7-31d5-941b-417d5bef3ced.roa (raw, json) Hash identifier: SG/DOL/JYIcL1rK08ULlfW6JVRQmdlZs69HsEzGelG8= Subject key identifier: 7C:3A:4A:24:BB:6C:F6:8F:78:BE:E3:46:59:39:4E:9A:56:2A:5D:5B Certificate issuer: /CN=613bdd67-74b5-4268-96e7-b3cbb049d7aa Certificate serial: 010D0C9F4328584D7A052EC2A08D2C2537971600 Authority key identifier: 40:4E:D7:BD:F4:3E:F6:0C:7D:D8:0C:9D:2F:FF:08:A7:F4:62:65:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/4fd2deb2-4eb7-31d5-941b-417d5bef3ced.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 46960 IP address blocks: 104.255.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:2e:c2:a0:8d:2c:25:37:97:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=613bdd67-74b5-4268-96e7-b3cbb049d7aa Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=7502ef2b-cc01-419b-be13-ba724d7e1dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b1:88:a9:5e:53:df:4d:4c:21:bf:2f:01:79: 1c:f2:5b:e3:6b:8f:9d:ea:c8:35:9e:75:21:bd:e6: 0b:3b:83:24:1d:94:46:79:4b:f3:93:9f:78:46:85: e5:ea:6a:56:20:8e:c3:d9:a6:4e:85:30:73:a2:07: d7:95:70:92:c5:e7:2d:5e:4f:e6:c6:d6:be:91:af: e7:9f:15:7b:6a:82:c1:be:39:80:dc:1b:28:c7:04: db:5e:a2:f8:97:70:3c:fa:1d:50:19:9d:af:a1:43: 69:0f:df:4c:1f:e7:c5:2e:ab:72:26:e2:e6:f9:7f: ff:fe:53:ff:64:2b:9e:b5:6f:a9:bb:1c:80:7b:60: a5:5e:a8:88:e1:2f:d1:49:87:83:d2:a8:33:94:03: d5:5d:69:08:9b:6f:65:44:fc:2d:08:1c:2f:ab:16: f4:d8:18:1e:ce:f0:f3:aa:84:35:5b:6e:1a:e7:24: 87:0b:51:bc:5f:a8:42:03:56:4f:aa:9d:5c:18:8b: 85:3c:e4:ae:34:6c:34:8e:06:15:3d:ad:cc:de:c1: 75:69:37:0a:56:cb:56:07:e4:4f:60:59:48:db:d0: f1:d2:58:95:cf:73:86:16:ed:14:62:4e:f3:42:57: ea:e0:b0:07:f7:1c:4a:fd:29:92:3c:f0:26:04:06: a3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3A:4A:24:BB:6C:F6:8F:78:BE:E3:46:59:39:4E:9A:56:2A:5D:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/4fd2deb2-4eb7-31d5-941b-417d5bef3ced.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.crl X509v3 Authority Key Identifier: keyid:40:4E:D7:BD:F4:3E:F6:0C:7D:D8:0C:9D:2F:FF:08:A7:F4:62:65:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer sbgp-ipAddrBlock: critical IPv4: 104.255.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:65:a1:fc:db:b1:7a:5a:d6:f1:7e:d0:4a:d0:80:94:12:7d: 45:53:db:1b:26:e8:f5:62:c9:39:5f:8b:2c:8e:fa:91:dc:b9: 7c:1d:bf:33:94:dd:47:cb:eb:a6:e2:c5:cd:3c:cd:d9:6d:e0: d9:53:8c:ae:a1:1f:15:98:92:9c:81:e4:a1:a0:7a:88:95:0a: 30:40:f1:5a:9e:48:68:63:87:43:89:84:e8:e7:94:ab:dc:8e: 7b:2a:4e:85:d8:c3:b2:dc:c0:66:63:e7:f6:99:79:15:2d:b8: 70:74:a7:a3:2b:8d:a3:4a:c0:eb:28:9c:95:34:2f:2e:4b:bf: cf:43:e6:9c:f7:35:ab:76:9f:54:8f:9a:42:a3:87:1b:97:b6: 7f:fb:b3:a9:7e:85:aa:a0:32:b7:d0:ea:b4:0a:0e:49:3a:d4: c9:e8:23:1d:e4:d7:39:b7:32:d4:64:fb:5d:da:22:87:0a:8e: 25:6b:79:c8:c9:b7:59:51:fa:1f:b0:cc:4d:71:f1:4a:f4:ca: a4:28:ba:eb:48:bb:ea:a7:a4:d0:e4:7b:09:5d:47:f4:c4:89: 91:61:fe:aa:54:c6:54:8b:8d:72:fc:8e:fb:b0:20:b8:46:46: ec:0c:e3:5c:d4:93:96:29:25:b5:2e:ad:97:ab:8f:62:1f:85: af:f9:cb:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BS7CoI0sJTeXFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjEzYmRkNjctNzRiNS00MjY4LTk2ZTctYjNjYmIwNDlk N2FhMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk NzUwMmVmMmItY2MwMS00MTliLWJlMTMtYmE3MjRkN2UxZGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLGIqV5T301MIb8vAXkc8lvja4+d6sg1nnUh veYLO4MkHZRGeUvzk594RoXl6mpWII7D2aZOhTBzogfXlXCSxectXk/mxta+ka/n nxV7aoLBvjmA3BsoxwTbXqL4l3A8+h1QGZ2voUNpD99MH+fFLqtyJuLm+X///lP/ ZCuetW+puxyAe2ClXqiI4S/RSYeD0qgzlAPVXWkIm29lRPwtCBwvqxb02BgezvDz qoQ1W24a5ySHC1G8X6hCA1ZPqp1cGIuFPOSuNGw0jgYVPa3M3sF1aTcKVstWB+RP YFlI29Dx0liVz3OGFu0UYk7zQlfq4LAH9xxK/SmSPPAmBAajOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHw6SiS7bPaPeL7jRlk5TppWKl1bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82MTNi ZGQ2Ny03NGI1LTQyNjgtOTZlNy1iM2NiYjA0OWQ3YWEvNGZkMmRlYjItNGViNy0z MWQ1LTk0MWItNDE3ZDViZWYzY2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjEzYmRkNjctNzRiNS00MjY4LTk2 ZTctYjNjYmIwNDlkN2FhLzYxM2JkZDY3LTc0YjUtNDI2OC05NmU3LWIzY2JiMDQ5 ZDdhYS5jcmwwHwYDVR0jBBgwFoAUQE7XvfQ+9gx92AydL/8Ip/RiZXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82MTNiZGQ2Ny03NGI1LTQyNjgtOTZlNy1iM2Ni YjA0OWQ3YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxlofzbsXpa1vF+0ErQgJQSfUVT2xsm6PViyTlfiyyO+pHcuXwdvzOU 3UfL66bixc08zdlt4NlTjK6hHxWYkpyB5KGgeoiVCjBA8VqeSGhjh0OJhOjnlKvc jnsqToXYw7LcwGZj5/aZeRUtuHB0p6MrjaNKwOsonJU0Ly5Lv89D5pz3Nat2n1SP mkKjhxuXtn/7s6l+haqgMrfQ6rQKDkk61MnoIx3k1zm3MtRk+13aIocKjiVrecjJ t1lR+h+wzE1x8Ur0yqQouutIu+qnpNDkewldR/TEiZFh/qpUxlSLjXL8jvuwILhG RuwM41zUk5YpJbUurZerj2Ifha/5y7A= -----END CERTIFICATE-----Generated at Sun Apr 19 11:48:20 2026 by rpki-client