$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/b040a988-fc2f-3b79-b962-453ddd2ae85a.roa File: b040a988-fc2f-3b79-b962-453ddd2ae85a.roa (raw, json) Hash identifier: C+kfVG/Ta44Xg+LPY0Jw0ow0MUjcajM4ZwBjZ9aYo0A= Subject key identifier: 2C:B1:61:2D:F8:AA:A5:19:88:0C:85:D9:4B:07:30:C4:C5:F3:29:6A Certificate issuer: /CN=657b5e5f-0699-429f-8c83-a39c9a7a0322 Certificate serial: 010D0C9F4328584D65152FD2FA56CEE562180780 Authority key identifier: 85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/b040a988-fc2f-3b79-b962-453ddd2ae85a.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 16676 IP address blocks: 104.243.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:2f:d2:fa:56:ce:e5:62:18:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=657b5e5f-0699-429f-8c83-a39c9a7a0322 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=acbdac4e-60a8-495e-889a-6a721d0e5895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4b:ce:ee:88:76:e9:e3:4b:f1:84:78:e1:66: 8a:0c:b0:16:2b:bb:4a:f7:58:23:7c:47:cd:66:d0: 55:2f:07:ed:bd:b4:37:2a:cc:18:a1:47:dc:7a:0b: 1e:5d:ae:5d:ed:8a:35:f8:ad:9b:91:3c:37:0b:f5: 00:1c:29:8e:a7:0d:a8:90:0d:17:87:47:fd:8d:50: 87:66:98:63:50:d8:fe:dd:83:ca:58:cc:e8:2e:1f: d3:60:16:32:12:b6:34:62:03:89:c0:59:ef:81:f3: bd:f8:ec:17:31:84:f4:ee:72:63:54:ab:a8:18:ab: 83:97:bf:0b:8b:1d:a0:e9:28:9f:2d:9f:d2:d2:78: c1:88:24:c3:cb:b7:75:8d:c8:5d:b1:b9:6e:ff:27: 49:5a:33:18:03:e5:34:24:70:d1:01:49:fc:d7:b6: 6a:7f:53:21:08:55:71:86:02:e4:9d:90:ea:6a:1d: 5c:50:e4:79:be:e5:0d:cf:74:81:99:06:5e:48:31: 5a:d8:73:16:69:81:74:39:b5:96:97:a9:89:b1:ec: f7:a3:47:e0:59:51:01:ab:03:51:e9:8a:0b:5a:cb: 2b:ea:7e:cd:f3:ac:9f:bb:30:de:fd:2c:77:f6:75: b2:a8:9e:2d:49:fb:f3:aa:ae:4a:b6:1f:cb:86:4b: ae:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B1:61:2D:F8:AA:A5:19:88:0C:85:D9:4B:07:30:C4:C5:F3:29:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/b040a988-fc2f-3b79-b962-453ddd2ae85a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl X509v3 Authority Key Identifier: keyid:85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer sbgp-ipAddrBlock: critical IPv4: 104.243.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:3b:d5:35:9d:df:71:d7:23:25:b6:0f:93:92:c0:33:74:f2: db:24:b4:6d:33:b5:74:33:05:b9:f2:3f:07:aa:c8:14:62:d4: b4:68:c8:76:0e:d0:fc:0e:82:77:56:d0:3a:e1:e5:73:c3:11: d9:36:da:9e:e3:8b:70:6c:bf:03:d2:fd:be:b0:da:be:c8:1e: b6:c3:f1:ce:26:1f:85:2f:85:be:db:90:d8:fd:1b:e2:ab:fe: c2:a0:24:49:19:fd:bb:0c:9d:c0:41:3f:6d:07:a4:5f:65:8a: 65:06:ba:ce:45:bb:41:c7:65:63:78:60:27:ea:a2:a4:a3:ec: e2:6b:66:89:f1:c1:06:f5:07:f9:b8:b7:ed:5e:b3:74:39:58: 07:bd:ef:ab:58:43:6d:55:87:ed:9a:d5:6b:17:29:d0:ec:9d: 1f:48:78:bb:bf:6c:da:e0:38:02:33:2e:88:90:6a:6f:c4:8b: d1:fb:80:bd:98:7a:eb:9f:e0:78:2d:9f:2c:c6:8a:af:28:61: a4:7f:6a:9e:90:6c:44:53:24:1e:de:c2:6c:a8:4d:e3:c0:37: d2:24:bd:ba:17:5b:a8:1c:ff:bd:ac:aa:fd:06:b7:bf:2c:3d: f2:07:c7:e2:ad:e2:4d:33:8b:96:48:7e:55:73:47:70:eb:9c: 19:a8:5f:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFS/S+lbO5WIYB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU3YjVlNWYtMDY5OS00MjlmLThjODMtYTM5YzlhN2Ew MzIyMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk YWNiZGFjNGUtNjBhOC00OTVlLTg4OWEtNmE3MjFkMGU1ODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kvO7oh26eNL8YR44WaKDLAWK7tK91gjfEfN ZtBVLwftvbQ3KswYoUfcegseXa5d7Yo1+K2bkTw3C/UAHCmOpw2okA0Xh0f9jVCH ZphjUNj+3YPKWMzoLh/TYBYyErY0YgOJwFnvgfO9+OwXMYT07nJjVKuoGKuDl78L ix2g6SifLZ/S0njBiCTDy7d1jchdsblu/ydJWjMYA+U0JHDRAUn817Zqf1MhCFVx hgLknZDqah1cUOR5vuUNz3SBmQZeSDFa2HMWaYF0ObWWl6mJsez3o0fgWVEBqwNR 6YoLWssr6n7N86yfuzDe/Sx39nWyqJ4tSfvzqq5Kth/LhkuusQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyxYS34qqUZiAyF2UsHMMTF8ylqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82NTdi NWU1Zi0wNjk5LTQyOWYtOGM4My1hMzljOWE3YTAzMjIvYjA0MGE5ODgtZmMyZi0z Yjc5LWI5NjItNDUzZGRkMmFlODVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjU3YjVlNWYtMDY5OS00MjlmLThj ODMtYTM5YzlhN2EwMzIyLzY1N2I1ZTVmLTA2OTktNDI5Zi04YzgzLWEzOWM5YTdh MDMyMi5jcmwwHwYDVR0jBBgwFoAUhSb8rQNqMi+Cj148GAC/WbmIDswwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82NTdiNWU1Zi0wNjk5LTQyOWYtOGM4My1hMzlj OWE3YTAzMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc71TWd33HXIyW2D5OSwDN08tsktG0ztXQzBbnyPweqyBRi1LRoyHYO 0PwOgndW0Drh5XPDEdk22p7ji3BsvwPS/b6w2r7IHrbD8c4mH4Uvhb7bkNj9G+Kr /sKgJEkZ/bsMncBBP20HpF9limUGus5Fu0HHZWN4YCfqoqSj7OJrZonxwQb1B/m4 t+1es3Q5WAe976tYQ21Vh+2a1WsXKdDsnR9IeLu/bNrgOAIzLoiQam/Ei9H7gL2Y euuf4HgtnyzGiq8oYaR/ap6QbERTJB7ewmyoTePAN9IkvboXW6gc/72sqv0Gt78s PfIHx+Kt4k0zi5ZIflVzR3DrnBmoX7Q= -----END CERTIFICATE-----Generated at Fri Apr 17 23:43:12 2026 by rpki-client