$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a9ce6493-d2ac-33d0-ad7d-b84e32dc4665.roa File: a9ce6493-d2ac-33d0-ad7d-b84e32dc4665.roa (raw, json) Hash identifier: BlD8qWkVf11llVzHqo6mTKrlNyU6H7SVOt1TwvZtCGc= Subject key identifier: 96:25:49:65:35:8E:CA:1A:E9:BA:D3:53:A6:52:14:06:E4:57:F9:AA Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584CB121D91A6992460F8DA5E600 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a9ce6493-d2ac-33d0-ad7d-b84e32dc4665.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 9009 IP address blocks: 104.253.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:d9:1a:69:92:46:0f:8d:a5:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=b8a6594c-3521-4668-8638-e172c49cfd18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5b:7b:1a:25:9e:94:d1:2c:0e:3d:53:b0:72: 2f:01:28:28:43:df:03:5f:45:fc:fb:bc:9b:a8:ff: 37:e3:76:4f:59:fd:8f:02:b6:aa:46:be:a9:b9:28: 52:3e:24:45:74:3a:01:99:8e:98:53:1d:fb:5f:e7: e0:0d:72:a3:8d:45:b7:cb:57:d0:eb:ab:bf:b1:b7: 59:22:dd:8f:66:8c:03:bd:00:49:2e:a3:fc:1b:3d: f2:b3:59:1a:43:fe:37:bd:af:3a:bb:e4:8c:f9:fa: 4d:ca:ec:e7:05:d6:96:ce:27:5e:11:23:fb:ef:e0: 76:9f:c9:1a:79:95:56:b8:ab:23:09:21:1f:3d:71: 85:ef:01:55:4d:5a:54:df:5f:7f:65:90:d0:f4:c9: f3:28:b5:74:f0:a0:da:c3:45:36:8b:ed:48:9f:dc: 96:c4:80:34:c7:60:1e:1e:28:89:3f:72:a5:92:77: 25:87:68:d6:7a:8f:d3:43:fe:64:62:02:0b:0e:ff: b0:d1:71:cf:64:a8:01:3c:85:e5:ec:71:03:60:80: 39:7d:8e:0f:54:da:3a:bb:93:56:7c:0d:85:86:78: ad:03:de:ed:4d:76:9f:04:32:09:c6:2e:32:fc:9f: 1f:25:c4:d8:b5:cf:00:ff:62:2a:b3:8a:6d:6c:1e: ba:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:25:49:65:35:8E:CA:1A:E9:BA:D3:53:A6:52:14:06:E4:57:F9:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a9ce6493-d2ac-33d0-ad7d-b84e32dc4665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d7:f1:cf:fa:e1:76:61:6c:c0:f5:4c:ad:40:e6:d8:ed:db: 8e:2b:43:69:91:c5:61:df:03:e7:52:e6:21:4d:ae:1a:4b:b8: 0f:b7:0b:23:3b:fb:25:cb:87:51:c0:dc:75:bf:90:38:9b:1c: 19:e3:b9:30:f5:f4:95:f0:01:c6:80:f1:3b:4e:bc:8e:46:a2: be:c5:0b:39:9d:38:42:1b:e5:9f:7c:0d:25:e8:f0:bd:b3:56: 97:34:1b:a7:4d:34:dd:4e:e4:05:d9:44:f4:1f:54:1a:47:b7: 77:ab:7b:eb:af:c0:6e:39:87:a2:41:05:8b:44:e5:e6:61:d9: 51:6f:a4:02:cc:26:57:4f:f1:14:99:05:d4:d9:8b:2b:17:48: 68:65:8e:89:ef:d0:a8:a0:e0:1e:34:93:0a:0c:22:b3:92:f8: c4:32:4d:2a:fe:af:89:5d:9a:5c:60:a8:0a:c0:05:1f:83:a1: fe:84:3a:f1:84:19:4c:7e:fd:a7:89:5a:13:ec:3d:0f:fd:66: f4:11:6b:3a:a4:8c:f0:1f:d6:1f:05:ea:ed:c6:dc:15:98:34: 5f:f4:02:b8:5a:99:7c:39:ce:a5:8f:a2:53:8d:4c:61:72:a2: 7a:46:7f:44:77:59:10:b9:ec:22:3e:61:9f:5f:51:d2:3f:fb: c2:85:b7:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIdkaaZJGD42l5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk YjhhNjU5NGMtMzUyMS00NjY4LTg2MzgtZTE3MmM0OWNmZDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFt7GiWelNEsDj1TsHIvASgoQ98DX0X8+7yb qP8343ZPWf2PAraqRr6puShSPiRFdDoBmY6YUx37X+fgDXKjjUW3y1fQ66u/sbdZ It2PZowDvQBJLqP8Gz3ys1kaQ/43va86u+SM+fpNyuznBdaWzideESP77+B2n8ka eZVWuKsjCSEfPXGF7wFVTVpU319/ZZDQ9MnzKLV08KDaw0U2i+1In9yWxIA0x2Ae HiiJP3Klknclh2jWeo/TQ/5kYgILDv+w0XHPZKgBPIXl7HEDYIA5fY4PVNo6u5NW fA2FhnitA97tTXafBDIJxi4y/J8fJcTYtc8A/2Iqs4ptbB66zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYlSWU1jsoa6brTU6ZSFAbkV/mqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTljZTY0OTMtZDJhYy0z M2QwLWFkN2QtYjg0ZTMyZGM0NjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7X8c/64XZhbMD1TK1A5tjt244rQ2mRxWHfA+dS5iFNrhpLuA+3CyM7 +yXLh1HA3HW/kDibHBnjuTD19JXwAcaA8TtOvI5Gor7FCzmdOEIb5Z98DSXo8L2z Vpc0G6dNNN1O5AXZRPQfVBpHt3ere+uvwG45h6JBBYtE5eZh2VFvpALMJldP8RSZ BdTZiysXSGhljonv0Kig4B40kwoMIrOS+MQyTSr+r4ldmlxgqArABR+Dof6EOvGE GUx+/aeJWhPsPQ/9ZvQRazqkjPAf1h8F6u3G3BWYNF/0ArhamXw5zqWPolONTGFy onpGf0R3WRC57CI+YZ9fUdI/+8KFtwk= -----END CERTIFICATE-----Generated at Mon Mar 2 11:24:46 2026 by rpki-client