$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e40645c3-454c-317e-84fa-4c338bdf3679.roa File: e40645c3-454c-317e-84fa-4c338bdf3679.roa (raw, json) Hash identifier: zoYe+A9rDqmcFAJ2zpgjltM9mcC4dXFSgU9tF3eIl+A= Subject key identifier: BA:AE:00:7B:2D:EF:A8:B0:B7:D0:34:50:41:A0:37:C6:C5:48:AF:24 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D04E244904A851797F5D9A500 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e40645c3-454c-317e-84fa-4c338bdf3679.roa Signing time: Sun 01 Mar 2026 02:00:31 +0000 ROA not before: Sun 01 Mar 2026 02:00:31 +0000 ROA not after: Sat 30 May 2026 01:00:31 +0000 asID: 57043 IP address blocks: 104.253.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:e2:44:90:4a:85:17:97:f5:d9:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 1 02:00:31 2026 GMT Not After : May 30 01:00:31 2026 GMT Subject: CN=bfec23fb-ef17-4bb5-9e8f-9298adbadc0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c6:d0:43:13:3d:49:60:13:e8:71:e9:60:d7: 58:e4:57:10:9b:58:9f:1a:23:9a:55:79:6b:dd:8c: 9d:9a:93:29:6c:2d:1f:cd:02:d2:a3:df:d4:38:35: 7b:97:e9:ba:52:e1:4e:78:80:03:1f:ff:90:e7:11: c0:14:9e:92:2d:4d:97:85:c4:7e:6d:4d:9d:89:77: 41:0c:21:62:d2:17:79:ae:ee:a9:f7:58:a4:5a:ef: ad:08:4d:38:e8:04:47:c2:3d:70:d7:37:96:d8:23: af:08:0f:50:cf:fe:67:a8:43:48:1d:bd:96:fd:8d: 96:e7:ef:89:f1:60:8a:b5:1b:5f:a9:70:00:32:26: 35:46:2a:c9:57:c2:93:44:8d:23:db:47:74:c7:fc: d8:2a:b0:67:d1:31:a7:b1:e2:59:bb:97:98:31:78: c2:eb:07:60:fb:28:da:c6:54:b1:d5:f9:05:e7:ef: dc:28:e4:a6:bb:d7:20:99:fc:1e:3a:70:33:de:d6: 18:57:7b:08:2c:55:61:2a:5a:55:03:e5:55:36:a9: ab:9e:84:1f:25:ba:ae:30:a5:30:7c:4d:33:68:5b: e7:6e:b4:0c:fe:9b:f4:48:62:61:b9:90:81:69:5f: 89:5d:46:69:a6:69:38:ff:09:43:aa:71:0a:e5:19: 07:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AE:00:7B:2D:EF:A8:B0:B7:D0:34:50:41:A0:37:C6:C5:48:AF:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e40645c3-454c-317e-84fa-4c338bdf3679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:aa:c4:26:f8:87:3d:4e:cc:7f:97:f3:e2:32:ec:25:40:86: aa:eb:0a:70:7c:66:3e:11:51:37:b0:8a:35:eb:5d:aa:a5:87: 65:8f:18:3f:65:1d:37:8d:87:3a:53:96:0d:18:99:d7:9e:a6: 97:21:a7:1b:d0:75:74:35:76:e3:91:51:54:59:f2:22:2a:55: 73:47:e9:67:6f:6e:5b:76:e6:4e:f3:eb:4f:4a:06:05:7f:4f: 5c:4f:ef:af:90:b6:ae:9b:77:b6:72:f9:7f:25:3f:5f:91:e5: 5b:01:46:a5:ba:02:22:0b:c7:ce:b1:7a:4f:bf:51:99:2a:c5: ed:87:2b:e7:6d:e9:b9:31:61:19:a4:58:18:af:94:44:6f:2c: cc:60:6e:8e:29:43:7f:5e:0d:7d:b6:34:a2:ee:71:46:5f:5c: ae:83:0c:25:82:38:3c:a2:d5:11:7d:24:a4:0c:ce:57:fb:08: 0f:bd:02:1c:6f:9f:e4:a8:7f:81:61:88:82:bd:a4:68:b0:7a: cd:05:b8:8d:5b:80:5f:98:c7:f4:98:5b:7c:c6:52:99:ee:a0: 7c:10:8c:27:91:9b:5b:9b:39:8e:83:92:51:88:4b:e0:3e:ca: 8b:a2:bb:0a:2a:c7:1e:ad:a7:38:bb:73:45:74:21:cb:2f:68: 5d:06:70:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0E4kSQSoUXl/XZpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk YmZlYzIzZmItZWYxNy00YmI1LTllOGYtOTI5OGFkYmFkYzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8bQQxM9SWAT6HHpYNdY5FcQm1ifGiOaVXlr 3YydmpMpbC0fzQLSo9/UODV7l+m6UuFOeIADH/+Q5xHAFJ6SLU2XhcR+bU2diXdB DCFi0hd5ru6p91ikWu+tCE046ARHwj1w1zeW2COvCA9Qz/5nqENIHb2W/Y2W5++J 8WCKtRtfqXAAMiY1RirJV8KTRI0j20d0x/zYKrBn0TGnseJZu5eYMXjC6wdg+yja xlSx1fkF5+/cKOSmu9cgmfweOnAz3tYYV3sILFVhKlpVA+VVNqmrnoQfJbquMKUw fE0zaFvnbrQM/pv0SGJhuZCBaV+JXUZppmk4/wlDqnEK5RkHUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLquAHst76iwt9A0UEGgN8bFSK8kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZTQwNjQ1YzMtNDU0Yy0z MTdlLTg0ZmEtNGMzMzhiZGYzNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+qxCb4hz1OzH+X8+Iy7CVAhqrrCnB8Zj4RUTewijXrXaqlh2WPGD9l HTeNhzpTlg0YmdeeppchpxvQdXQ1duORUVRZ8iIqVXNH6Wdvblt25k7z609KBgV/ T1xP76+Qtq6bd7Zy+X8lP1+R5VsBRqW6AiILx86xek+/UZkqxe2HK+dt6bkxYRmk WBivlERvLMxgbo4pQ39eDX22NKLucUZfXK6DDCWCODyi1RF9JKQMzlf7CA+9Ahxv n+Sof4FhiIK9pGiwes0FuI1bgF+Yx/SYW3zGUpnuoHwQjCeRm1ubOY6DklGIS+A+ youiuwoqxx6tpzi7c0V0IcsvaF0GcEY= -----END CERTIFICATE-----Generated at Sun Mar 1 21:09:39 2026 by rpki-client