$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/42afc059-5ef8-345d-9eb0-509cf5658724.roa File: 42afc059-5ef8-345d-9eb0-509cf5658724.roa (raw, json) Hash identifier: 0fLGlVmY9ceMR88IAAO2FyRPhpZFNSKw79wy4D8h1yI= Subject key identifier: F9:00:F2:E1:3C:01:81:5D:BB:9C:B6:52:6F:ED:25:BF:FB:CC:2C:C2 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584E016B30194D7739469906FE80 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/42afc059-5ef8-345d-9eb0-509cf5658724.roa Signing time: Sat 30 May 2026 13:00:10 +0000 ROA not before: Sat 30 May 2026 13:00:10 +0000 ROA not after: Fri 28 Aug 2026 13:00:10 +0000 asID: 931 IP address blocks: 104.249.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:01:6b:30:19:4d:77:39:46:99:06:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: May 30 13:00:10 2026 GMT Not After : Aug 28 13:00:10 2026 GMT Subject: CN=9fbe9fc1-8abc-48c4-9373-b6e08e23b148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d3:ef:60:11:31:8c:6f:e0:21:b2:ba:66:c0: 6a:3e:5b:46:41:1c:85:ef:44:ba:c5:76:29:b0:e0: 52:62:81:cd:3d:2a:54:7c:ec:6b:88:62:32:d4:79: de:62:c1:54:c3:62:5d:f3:87:a0:1d:6a:28:f8:b9: 39:ce:f2:60:cb:c6:d4:38:fa:a0:19:16:bd:fa:af: 1f:ab:31:7e:2f:6d:a6:91:27:2e:d5:cf:1e:25:96: ef:15:fd:0d:b1:bc:ff:c7:7a:2f:7c:68:18:e9:62: 87:7f:0d:78:13:f8:00:2f:e1:22:2c:18:ac:53:be: 23:93:e8:2a:cf:2f:63:c9:f4:ee:9c:4d:27:2b:c0: 50:43:e7:63:12:83:e2:14:dc:9f:7b:d8:40:55:66: 4f:07:ab:8a:dd:f4:4a:21:d6:09:4b:07:9d:e0:7b: 1c:80:31:2c:e4:11:5b:aa:9d:1c:17:56:67:7f:76: 9e:eb:e4:f1:20:85:ff:df:63:d3:6f:1a:4e:9f:94: d5:39:5c:53:85:2b:00:9d:14:82:da:70:f0:b7:e9: 23:6d:c6:7b:09:57:a4:6a:e9:39:58:ed:4b:f2:1d: ba:43:d5:cd:47:70:15:22:a4:bc:9b:ed:23:5a:37: 03:13:a4:b3:9c:21:0f:70:71:51:2a:bb:7d:24:81: a3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:00:F2:E1:3C:01:81:5D:BB:9C:B6:52:6F:ED:25:BF:FB:CC:2C:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/42afc059-5ef8-345d-9eb0-509cf5658724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.249.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:32:83:fe:3e:07:15:27:1d:7e:98:0e:81:33:63:e6:06:e1: a5:f6:23:5e:3e:c2:6f:99:26:54:f5:9e:ed:42:a4:fd:b6:ca: df:80:44:3f:16:1a:4d:47:2f:1f:1d:f3:fa:f3:28:ec:8a:36: 5f:59:b1:53:a5:89:f2:15:18:92:a2:85:fe:e1:2f:f4:37:fd: 9f:d3:a9:d1:14:4c:00:a9:e0:9b:68:d8:55:3b:92:89:6e:ff: 42:3e:d1:85:a3:2a:50:3a:aa:18:5f:f2:6c:5c:6c:42:a7:19: a4:56:01:e1:d7:46:b3:1c:df:9c:44:f9:c9:ce:bb:65:74:cd: b2:3e:2a:a7:06:09:48:99:45:b4:54:e9:47:6d:28:59:5b:b1: 08:93:7c:d0:e4:25:fa:ae:3e:1c:8f:1e:5c:40:53:a2:7f:8d: f3:d4:e8:d0:9b:1b:f3:60:03:f0:ce:3d:50:f6:79:af:60:db: b0:1d:74:5e:5c:8d:97:d8:44:ee:1e:50:44:fe:1a:3e:69:1d: 7f:9d:01:fe:34:9a:c3:40:34:02:46:15:52:95:43:5d:46:cf: f2:1b:98:00:23:46:7e:a1:87:52:50:bd:9a:52:64:76:02:13: eb:f8:83:34:ff:14:0e:4e:d4:ff:62:a8:85:82:d8:34:74:d6: 92:7a:79:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4BazAZTXc5RpkG/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDUzMDEzMDAxMFoXDTI2MDgyODEzMDAxMFowLzEtMCsGA1UEAxMk OWZiZTlmYzEtOGFiYy00OGM0LTkzNzMtYjZlMDhlMjNiMTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdPvYBExjG/gIbK6ZsBqPltGQRyF70S6xXYp sOBSYoHNPSpUfOxriGIy1HneYsFUw2Jd84egHWoo+Lk5zvJgy8bUOPqgGRa9+q8f qzF+L22mkScu1c8eJZbvFf0Nsbz/x3ovfGgY6WKHfw14E/gAL+EiLBisU74jk+gq zy9jyfTunE0nK8BQQ+djEoPiFNyfe9hAVWZPB6uK3fRKIdYJSwed4HscgDEs5BFb qp0cF1Znf3ae6+TxIIX/32PTbxpOn5TVOVxThSsAnRSC2nDwt+kjbcZ7CVekauk5 WO1L8h26Q9XNR3AVIqS8m+0jWjcDE6SznCEPcHFRKrt9JIGjWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkA8uE8AYFdu5y2Um/tJb/7zCzCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNDJhZmMwNTktNWVmOC0z NDVkLTllYjAtNTA5Y2Y1NjU4NzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcyg/4+BxUnHX6YDoEzY+YG4aX2I14+wm+ZJlT1nu1CpP22yt+ARD8W Gk1HLx8d8/rzKOyKNl9ZsVOlifIVGJKihf7hL/Q3/Z/TqdEUTACp4Jto2FU7kolu /0I+0YWjKlA6qhhf8mxcbEKnGaRWAeHXRrMc35xE+cnOu2V0zbI+KqcGCUiZRbRU 6UdtKFlbsQiTfNDkJfquPhyPHlxAU6J/jfPU6NCbG/NgA/DOPVD2ea9g27AddF5c jZfYRO4eUET+Gj5pHX+dAf40msNANAJGFVKVQ11Gz/IbmAAjRn6hh1JQvZpSZHYC E+v4gzT/FA5O1P9iqIWC2DR01pJ6efc= -----END CERTIFICATE-----Generated at Sat Jun 13 21:46:39 2026 by rpki-client