$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/0a195f08-4197-3058-bb05-b1878af3700a.roa File: 0a195f08-4197-3058-bb05-b1878af3700a.roa (raw, json) Hash identifier: axIZkaFa3BMyZC9S/eL1dtB6OBd1eCvc9paiw8Ck3vc= Subject key identifier: 80:01:DD:46:A7:5A:EA:D0:BB:AF:33:AD:D5:B0:43:3D:B8:1C:F5:05 Certificate issuer: /CN=647216b7-a938-45d2-8264-7d448a4eaad9 Certificate serial: 010D0C9F4328584D0217A367F8FCA50C05517680 Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/0a195f08-4197-3058-bb05-b1878af3700a.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 398143 IP address blocks: 104.204.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:a3:67:f8:fc:a5:0c:05:51:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=23676e6f-98e7-4c82-95cd-f50f34f00898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e7:04:e8:fe:3d:e9:ef:b6:1a:4e:a0:19:2d: 19:16:12:44:f0:81:cf:b2:08:ed:57:22:91:ed:0a: 26:44:32:59:2f:bb:98:a8:ee:ee:0e:24:bb:b8:f4: d9:4a:e0:33:67:f4:cd:38:a3:0d:a9:12:9d:a9:92: 61:93:8e:89:86:3d:d5:58:6d:25:9f:72:71:32:44: 48:e1:f2:56:30:a4:95:6b:2b:c8:09:27:5c:a7:b4: 6e:b5:cf:45:ed:38:e3:81:0f:f6:fe:4b:1c:2b:7f: c4:31:c7:72:85:cc:e5:be:48:9f:23:23:eb:92:59: 51:6f:77:1a:7b:52:b5:4e:db:2f:09:23:ef:69:ef: 24:7f:8c:18:c0:39:6d:6b:7b:c0:9a:63:8a:11:11: 7d:bf:52:54:ac:13:46:1b:30:54:ab:d2:49:35:a2: 0b:5d:0b:da:be:c7:16:24:b6:04:e6:60:c4:6a:50: 4f:f0:0b:d6:c6:ed:6d:92:5f:5f:be:c2:44:e4:2f: c9:ba:19:11:57:b0:cd:af:67:76:f4:c9:f3:72:ad: 14:c4:c0:f8:a2:a4:7d:a8:ec:89:7a:0d:fe:91:52: c5:ea:ab:ae:89:38:57:43:ad:3f:fb:05:88:64:9f: b0:ec:55:d5:e8:d9:b9:f5:db:d0:c0:63:f3:14:97: fe:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:01:DD:46:A7:5A:EA:D0:BB:AF:33:AD:D5:B0:43:3D:B8:1C:F5:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/0a195f08-4197-3058-bb05-b1878af3700a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl X509v3 Authority Key Identifier: keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer sbgp-ipAddrBlock: critical IPv4: 104.204.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:7f:e2:c5:54:d2:c9:f3:b2:5f:dd:7d:43:bd:8c:14:7f:4e: a9:bf:1a:97:76:3a:84:08:2a:2a:fa:7c:66:ee:b0:ed:96:dd: bf:a7:b8:df:38:63:c4:69:4e:3d:82:e5:bb:84:6c:69:f2:05: d2:ae:28:5b:21:44:be:17:b7:d8:83:df:a3:30:3c:7c:1f:90: 1a:0f:7b:39:0c:c1:52:4b:86:4a:08:99:fb:99:35:a9:d1:db: 32:58:ee:ed:da:4f:c4:a3:dd:7e:af:58:94:01:5b:0b:cb:92: bf:a1:45:ea:bc:e7:fa:77:ba:82:b9:55:16:ee:eb:d3:7e:2c: 20:2f:85:84:11:28:ca:5d:5a:5f:29:32:6c:30:cf:d6:4f:36: ab:10:84:50:97:6f:d2:50:2d:3e:0c:c4:06:30:26:31:9d:d4: 95:1b:36:11:2c:6b:cf:52:d5:98:71:f9:ca:a0:72:bc:65:e3: 1f:40:4d:19:ad:be:27:21:c6:c8:61:40:a1:52:03:f7:0a:22: 8f:36:75:d2:17:ef:19:3d:4c:18:17:a8:95:7c:43:65:81:17: 63:d4:54:34:87:51:ea:f5:33:ac:61:e0:73:c2:2c:c0:1a:9e: 01:56:e4:b8:f3:ee:d0:d5:e0:b4:c0:14:36:1f:25:16:66:28: 89:cf:12:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF6Nn+PylDAVRdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ3MjE2YjctYTkzOC00NWQyLTgyNjQtN2Q0NDhhNGVh YWQ5MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk MjM2NzZlNmYtOThlNy00YzgyLTk1Y2QtZjUwZjM0ZjAwODk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+cE6P496e+2Gk6gGS0ZFhJE8IHPsgjtVyKR 7QomRDJZL7uYqO7uDiS7uPTZSuAzZ/TNOKMNqRKdqZJhk46Jhj3VWG0ln3JxMkRI 4fJWMKSVayvICSdcp7Rutc9F7TjjgQ/2/kscK3/EMcdyhczlvkifIyPrkllRb3ca e1K1TtsvCSPvae8kf4wYwDlta3vAmmOKERF9v1JUrBNGGzBUq9JJNaILXQvavscW JLYE5mDEalBP8AvWxu1tkl9fvsJE5C/JuhkRV7DNr2d29Mnzcq0UxMD4oqR9qOyJ eg3+kVLF6quuiThXQ60/+wWIZJ+w7FXV6Nm59dvQwGPzFJf+FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAB3UanWurQu68zrdWwQz24HPUFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDcy MTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0OGE0ZWFhZDkvMGExOTVmMDgtNDE5Ny0z MDU4LWJiMDUtYjE4NzhhZjM3MDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQ3MjE2YjctYTkzOC00NWQyLTgy NjQtN2Q0NDhhNGVhYWQ5LzY0NzIxNmI3LWE5MzgtNDVkMi04MjY0LTdkNDQ4YTRl YWFkOS5jcmwwHwYDVR0jBBgwFoAUIvIMhMMKGr3ejeHfHF8TeMPZRF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDcyMTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0 OGE0ZWFhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaMzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZ/4sVU0snzsl/dfUO9jBR/Tqm/Gpd2OoQIKir6fGbusO2W3b+nuN84 Y8RpTj2C5buEbGnyBdKuKFshRL4Xt9iD36MwPHwfkBoPezkMwVJLhkoImfuZNanR 2zJY7u3aT8Sj3X6vWJQBWwvLkr+hReq85/p3uoK5VRbu69N+LCAvhYQRKMpdWl8p Mmwwz9ZPNqsQhFCXb9JQLT4MxAYwJjGd1JUbNhEsa89S1Zhx+cqgcrxl4x9ATRmt vichxshhQKFSA/cKIo82ddIX7xk9TBgXqJV8Q2WBF2PUVDSHUer1M6xh4HPCLMAa ngFW5Ljz7tDV4LTAFDYfJRZmKInPEmI= -----END CERTIFICATE-----Generated at Mon Mar 2 18:25:07 2026 by rpki-client