$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/10f6258f-0624-366b-b770-20e51ad3c4d0.roa File: 10f6258f-0624-366b-b770-20e51ad3c4d0.roa (raw, json) Hash identifier: /7Li9UjJSAX2KRk5xIwhZTtZp9v/R8VHngB4a6DoUxM= Subject key identifier: D3:D1:97:DD:5A:19:BD:17:3F:03:FE:45:10:EB:E4:9A:56:A9:BC:01 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584D7A05158F1746E9F15AD84980 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/10f6258f-0624-366b-b770-20e51ad3c4d0.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 53730 IP address blocks: 104.238.248.0/24 maxlen: 24 104.238.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:15:8f:17:46:e9:f1:5a:d8:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=81fb63b3-c910-4d66-ba19-8d75bea99ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3b:d5:99:9e:9a:05:53:ab:4d:aa:89:12:06: 88:22:e9:98:ae:fd:8e:ba:d1:6c:bd:66:2a:b9:9e: c3:86:d2:07:6d:ef:f8:02:20:c5:90:96:86:41:56: 55:86:f3:6c:bd:92:80:44:c5:45:22:3e:55:41:2b: 2f:53:13:23:02:c6:b1:53:ce:af:f5:c8:17:78:13: 6a:ec:a4:aa:e5:6f:38:4c:b9:ba:53:f7:41:13:31: cc:9a:bf:00:42:c7:2a:e7:a1:89:5e:b8:da:8e:1d: 6a:4a:ba:c9:ec:b5:cf:7b:c5:ab:53:7a:27:04:43: f6:a9:3d:ea:5a:ab:1b:9d:7d:a5:85:9c:ca:8a:a7: 85:5a:58:08:a0:19:26:f5:4c:e8:2c:ad:90:77:3e: ee:3f:0c:16:ca:5a:2d:a2:23:90:50:84:10:96:3e: f7:21:17:69:2d:6a:07:52:df:e3:d3:05:f1:f6:d8: d6:5c:50:e8:55:15:02:42:1e:10:7a:84:5d:b8:0f: cb:3a:c0:ee:c7:30:85:e8:1a:7f:22:a3:c2:85:e6: 5b:32:c9:e4:a8:8c:1c:9a:a2:fd:b1:8c:a3:17:75: 36:be:39:73:b7:6d:ff:d6:31:bc:f6:2e:de:bb:6a: 9c:cd:b2:6e:86:2f:0f:dc:49:8e:38:5b:a9:df:ed: 32:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D1:97:DD:5A:19:BD:17:3F:03:FE:45:10:EB:E4:9A:56:A9:BC:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/10f6258f-0624-366b-b770-20e51ad3c4d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 104.238.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d6:49:f3:f7:b7:67:31:b5:08:a8:f4:e7:d7:e9:af:20:9c: 73:39:73:d9:3e:6b:91:2a:07:f0:3a:5a:fe:fe:4c:0d:44:c6: 12:d7:0c:e2:03:8f:58:2d:38:9d:fc:cb:c3:61:96:a8:0b:85: aa:1f:e8:09:bd:4c:ca:0e:a8:41:f1:49:1b:72:86:46:2f:db: b6:90:2e:04:2c:8d:18:25:94:5e:49:25:1c:71:69:a8:28:a4: ed:df:40:26:22:f2:b5:97:ec:6d:c0:4c:ba:14:f2:88:b6:b0: 37:e2:29:08:bb:cd:0b:24:ec:28:fa:6f:c7:c2:1b:72:04:cf: 6c:2a:85:9b:bc:55:ee:d1:00:f3:6e:31:64:5c:5d:4b:ec:d9: e9:28:33:eb:ac:2e:09:2e:16:86:89:b2:80:7a:e8:cd:61:a2: a4:58:ca:27:ad:7f:49:56:b4:49:02:cb:9a:a3:73:dc:30:49: 1d:97:25:93:9d:0a:d7:52:fc:5a:0e:ac:17:8c:c6:d4:9b:80: 6f:3a:b0:85:8f:a5:00:cf:64:0d:63:69:83:f8:82:72:82:f1: 4e:39:91:a1:13:3a:50:05:bc:ed:e4:f4:0d:94:a4:e0:e0:74: cf:66:05:b4:bd:dd:13:3a:f1:10:16:f4:91:32:02:48:8a:b4: 4f:ab:97:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BRWPF0bp8VrYSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk ODFmYjYzYjMtYzkxMC00ZDY2LWJhMTktOGQ3NWJlYTk5ZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjvVmZ6aBVOrTaqJEgaIIumYrv2OutFsvWYq uZ7DhtIHbe/4AiDFkJaGQVZVhvNsvZKARMVFIj5VQSsvUxMjAsaxU86v9cgXeBNq 7KSq5W84TLm6U/dBEzHMmr8AQscq56GJXrjajh1qSrrJ7LXPe8WrU3onBEP2qT3q WqsbnX2lhZzKiqeFWlgIoBkm9UzoLK2Qdz7uPwwWylotoiOQUIQQlj73IRdpLWoH Ut/j0wXx9tjWXFDoVRUCQh4QeoRduA/LOsDuxzCF6Bp/IqPCheZbMsnkqIwcmqL9 sYyjF3U2vjlzt23/1jG89i7eu2qczbJuhi8P3EmOOFup3+0yhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPRl91aGb0XPwP+RRDr5JpWqbwBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMTBmNjI1OGYtMDYyNC0z NjZiLWI3NzAtMjBlNTFhZDNjNGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaO74MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnWSfP3t2cxtQio9OfX6a8gnHM5c9k+a5EqB/A6Wv7+TA1ExhLXDOID j1gtOJ38y8NhlqgLhaof6Am9TMoOqEHxSRtyhkYv27aQLgQsjRgllF5JJRxxaago pO3fQCYi8rWX7G3ATLoU8oi2sDfiKQi7zQsk7Cj6b8fCG3IEz2wqhZu8Ve7RAPNu MWRcXUvs2ekoM+usLgkuFoaJsoB66M1hoqRYyietf0lWtEkCy5qjc9wwSR2XJZOd CtdS/FoOrBeMxtSbgG86sIWPpQDPZA1jaYP4gnKC8U45kaETOlAFvO3k9A2UpODg dM9mBbS93RM68RAW9JEyAkiKtE+rlwA= -----END CERTIFICATE-----Generated at Sat Apr 18 00:04:52 2026 by rpki-client