$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/bc9d9c23-b44e-3c4b-b81f-6c7d18ed6d9f.roa File: bc9d9c23-b44e-3c4b-b81f-6c7d18ed6d9f.roa (raw, json) Hash identifier: XcLSriB1TkOuywM0C5SOoS8r6xQbX21Jly/QpXt5ndM= Subject key identifier: 2A:D9:5A:C6:C5:62:6D:91:22:E1:99:6A:54:3F:23:D3:D5:74:99:B9 Certificate issuer: /CN=c98d46fd-3b1c-46a7-b369-35b753e6c60e Certificate serial: 010D0C9F4328584D5234FDB029CD415970108D10 Authority key identifier: 1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/bc9d9c23-b44e-3c4b-b81f-6c7d18ed6d9f.roa Signing time: Sat 28 Mar 2026 18:44:38 +0000 ROA not before: Sat 28 Mar 2026 18:44:38 +0000 ROA not after: Thu 21 May 2026 14:52:44 +0000 asID: 26077 IP address blocks: 104.255.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:fd:b0:29:cd:41:59:70:10:8d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98d46fd-3b1c-46a7-b369-35b753e6c60e Validity Not Before: Mar 28 18:44:38 2026 GMT Not After : May 21 14:52:44 2026 GMT Subject: CN=aecd2345-e1bf-454f-8b31-2e2018a3a9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fc:28:cb:49:15:1f:6e:6f:68:36:1b:77:7b: 14:36:08:07:3e:b6:07:fc:c5:39:ad:a0:c5:98:ef: a7:97:12:ed:76:4e:eb:60:72:1b:10:67:f1:b3:3f: c9:5f:20:22:42:3d:eb:42:2d:57:a4:25:a7:8d:50: 2c:45:bd:34:74:f1:3c:9f:95:13:41:67:6a:d6:91: 7a:a1:61:11:94:aa:40:52:96:10:c9:69:4f:86:d2: 34:b2:2b:03:bf:e6:ee:64:80:ae:cf:8f:cc:65:14: a8:07:ea:b7:9a:f5:18:5f:b9:95:e7:dc:13:bb:02: 1f:26:2f:ef:a9:bf:6c:cd:df:7f:05:59:ae:84:8e: ed:8a:32:8b:8f:1f:c5:48:1b:ab:88:be:a8:0a:5a: 5d:6f:4c:57:a6:2a:86:94:9f:b3:b6:80:98:57:60: fd:62:1f:16:d2:c5:28:53:86:c1:6d:54:fc:e1:16: 5c:48:4e:9a:46:d5:7e:50:81:d2:b9:99:97:c3:73: 96:90:66:dc:4c:45:d4:1a:8c:9f:aa:48:31:d1:03: ee:9e:4b:45:7a:dd:30:21:a3:fa:62:62:74:8a:47: 4f:0d:c2:b9:53:1e:45:7c:ae:c5:22:e3:91:0f:ff: b5:0d:c4:12:7d:1d:74:60:8c:56:a6:5e:22:a9:55: 2b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D9:5A:C6:C5:62:6D:91:22:E1:99:6A:54:3F:23:D3:D5:74:99:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/bc9d9c23-b44e-3c4b-b81f-6c7d18ed6d9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.crl X509v3 Authority Key Identifier: keyid:1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer sbgp-ipAddrBlock: critical IPv4: 104.255.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:58:c0:d0:cc:cf:2d:cb:0d:d2:e1:e7:68:ba:cb:f8:04:0b: 25:9e:aa:f1:d8:d9:40:c4:78:72:4f:e3:32:5f:cf:60:49:e6: ac:47:31:d9:4a:ce:d7:a3:8c:a4:4d:6c:6f:fd:93:7a:64:7f: 01:2f:26:c2:0d:b9:a2:69:8e:74:19:c0:52:6d:1d:fd:9a:96: 79:cd:3c:5e:e9:e2:09:32:a5:8e:d2:1b:4e:d6:b0:78:06:f7: e3:71:4d:7b:df:97:32:a7:fb:1c:2e:b2:4e:51:1b:df:b3:8d: 5c:a9:0a:85:c2:24:58:e0:47:83:6c:d1:32:88:2b:e8:ee:13: 86:e3:f6:84:1a:f6:b0:c5:d8:3d:0c:f0:35:91:22:ab:1c:e9: fd:0e:cf:61:a6:31:fc:8b:de:06:79:76:3a:7e:11:1d:5e:3b: 03:dc:d4:02:21:8b:fd:69:9b:57:22:67:5b:93:6e:39:92:3c: 41:04:80:ea:83:6e:8b:ce:7e:7a:67:98:cd:82:80:06:58:a0: e0:c7:36:8f:d4:a2:0d:36:bb:35:9f:0a:dd:d8:6e:eb:59:17: 55:98:73:19:3e:4d:8d:87:03:93:e2:13:39:e6:af:d4:30:57: fe:c7:14:fb:b6:02:df:a3:c6:b0:35:0f:4b:ec:ef:8d:82:01: 9c:a5:f6:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SNP2wKc1BWXAQjRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk4ZDQ2ZmQtM2IxYy00NmE3LWIzNjktMzViNzUzZTZj NjBlMB4XDTI2MDMyODE4NDQzOFoXDTI2MDUyMTE0NTI0NFowLzEtMCsGA1UEAxMk YWVjZDIzNDUtZTFiZi00NTRmLThiMzEtMmUyMDE4YTNhOWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPwoy0kVH25vaDYbd3sUNggHPrYH/MU5raDF mO+nlxLtdk7rYHIbEGfxsz/JXyAiQj3rQi1XpCWnjVAsRb00dPE8n5UTQWdq1pF6 oWERlKpAUpYQyWlPhtI0sisDv+buZICuz4/MZRSoB+q3mvUYX7mV59wTuwIfJi/v qb9szd9/BVmuhI7tijKLjx/FSBuriL6oClpdb0xXpiqGlJ+ztoCYV2D9Yh8W0sUo U4bBbVT84RZcSE6aRtV+UIHSuZmXw3OWkGbcTEXUGoyfqkgx0QPunktFet0wIaP6 YmJ0ikdPDcK5Ux5FfK7FIuORD/+1DcQSfR10YIxWpl4iqVUr7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrZWsbFYm2RIuGZalQ/I9PVdJm5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jOThk NDZmZC0zYjFjLTQ2YTctYjM2OS0zNWI3NTNlNmM2MGUvYmM5ZDljMjMtYjQ0ZS0z YzRiLWI4MWYtNmM3ZDE4ZWQ2ZDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYzk4ZDQ2ZmQtM2IxYy00NmE3LWIz NjktMzViNzUzZTZjNjBlL2M5OGQ0NmZkLTNiMWMtNDZhNy1iMzY5LTM1Yjc1M2U2 YzYwZS5jcmwwHwYDVR0jBBgwFoAUGjV+Z895QlcO2thDy7EV6h3WAw4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jOThkNDZmZC0zYjFjLTQ2YTctYjM2OS0zNWI3 NTNlNmM2MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5YwNDMzy3LDdLh52i6y/gECyWeqvHY2UDEeHJP4zJfz2BJ5qxHMdlK ztejjKRNbG/9k3pkfwEvJsINuaJpjnQZwFJtHf2alnnNPF7p4gkypY7SG07WsHgG 9+NxTXvflzKn+xwusk5RG9+zjVypCoXCJFjgR4Ns0TKIK+juE4bj9oQa9rDF2D0M 8DWRIqsc6f0Oz2GmMfyL3gZ5djp+ER1eOwPc1AIhi/1pm1ciZ1uTbjmSPEEEgOqD bovOfnpnmM2CgAZYoODHNo/Uog02uzWfCt3YbutZF1WYcxk+TY2HA5PiEznmr9Qw V/7HFPu2At+jxrA1D0vs742CAZyl9lE= -----END CERTIFICATE-----Generated at Fri Apr 17 19:56:33 2026 by rpki-client