$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/54ea31e2-f508-38e4-965e-d1d16af3f58e.roa File: 54ea31e2-f508-38e4-965e-d1d16af3f58e.roa (raw, json) Hash identifier: fGkhPzC7Xq/mrIbtoytPwZxB+FHSDJK1uIaqPcqxGNY= Subject key identifier: 82:ED:05:D0:DE:98:AC:08:25:5B:9E:0E:E1:6E:8E:72:88:80:F1:CA Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584D6C0FAF8036649AC3E89A3A80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/54ea31e2-f508-38e4-965e-d1d16af3f58e.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 19437 IP address blocks: 104.254.235.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:af:80:36:64:9a:c3:e8:9a:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=7c602d31-dc8c-4e70-b926-1c85463c13fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0d:4e:05:ea:de:bf:62:2b:bc:cd:7d:41:35: 09:c4:01:55:04:6d:d1:56:ad:19:c0:f3:7f:dc:d0: 45:c4:ec:a8:c1:be:ef:65:06:72:ff:d7:03:6a:55: 47:6a:e8:0a:02:a6:91:e9:27:9e:58:1d:6d:99:70: 69:a9:62:78:e5:ec:f9:ee:18:23:c0:06:f3:c6:b6: 22:7e:22:d6:cc:e8:df:0a:80:c2:0d:03:5b:30:58: 14:52:0e:c2:1f:f9:4d:1d:6b:95:64:08:da:74:c6: 56:bd:ea:35:2e:b2:29:60:88:7c:2c:3f:46:6c:97: 14:bb:93:01:6d:14:8f:c2:c2:b3:49:b7:5a:b4:c0: 3d:3f:81:f4:f1:b8:4a:33:d6:b7:08:83:72:af:12: 14:0e:4c:f6:ec:0a:7c:3b:dc:58:7b:0d:1f:55:a0: 32:7c:20:1d:13:56:85:b8:5f:63:ea:ae:2c:22:04: 29:98:6d:61:7a:e1:05:0d:34:63:19:07:7e:9e:0f: 5d:f3:d6:37:d6:26:be:5a:46:b2:0e:52:b4:dc:12: 23:b3:e1:b1:bc:f9:4d:da:98:96:c5:dc:23:cc:9a: 2e:88:9c:ed:13:11:3b:7b:26:22:f1:ff:10:38:19: d7:c9:eb:30:59:3c:d1:7a:d8:0f:92:b9:ec:50:2e: a9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:ED:05:D0:DE:98:AC:08:25:5B:9E:0E:E1:6E:8E:72:88:80:F1:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/54ea31e2-f508-38e4-965e-d1d16af3f58e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 104.254.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d1:17:32:81:7b:b8:f7:1f:bc:e9:0b:22:4a:c9:a0:e4:8a: a1:1a:a8:64:be:12:73:35:16:20:36:20:55:f1:33:b7:8b:fb: fa:1a:ad:7c:e4:2b:d3:51:7f:0d:79:0a:3d:65:49:6b:dc:0e: 9f:b1:b6:b8:52:e1:bb:3c:b8:68:e5:d6:83:7d:9f:85:d0:6a: 3b:3d:fc:69:3c:05:52:31:0f:48:97:0b:e7:4f:fc:2c:0e:e4: 5d:e9:35:0a:25:2f:99:dd:8b:28:81:83:6a:0b:14:39:39:46: 9a:ef:a5:2e:0a:f3:7e:9c:45:14:3b:ea:15:9e:86:2b:bd:26: 74:2a:04:e5:32:e3:72:1b:f4:24:f4:07:ff:4a:d5:54:7f:5b: 06:8e:75:bf:74:f7:54:12:f7:54:80:e4:b1:24:e4:73:76:e7: 29:c1:55:b3:8c:4e:40:30:7a:fb:00:c7:bc:ff:a8:e5:0e:11: 66:d8:7d:c9:85:c1:57:f8:78:ca:72:a9:f7:9b:02:97:b4:0e: 44:2c:b2:4d:7c:0c:d0:40:30:23:3e:74:4d:f8:7e:e3:69:26: 5a:81:36:59:ca:28:64:39:8a:b2:62:b5:8a:98:d1:67:38:14: af:60:3b:24:60:26:49:a8:e7:54:f7:df:e2:ab:69:54:bc:a5: 32:a5:d2:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD6+ANmSaw+iaOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk N2M2MDJkMzEtZGM4Yy00ZTcwLWI5MjYtMWM4NTQ2M2MxM2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw1OBerev2IrvM19QTUJxAFVBG3RVq0ZwPN/ 3NBFxOyowb7vZQZy/9cDalVHaugKAqaR6SeeWB1tmXBpqWJ45ez57hgjwAbzxrYi fiLWzOjfCoDCDQNbMFgUUg7CH/lNHWuVZAjadMZWveo1LrIpYIh8LD9GbJcUu5MB bRSPwsKzSbdatMA9P4H08bhKM9a3CINyrxIUDkz27Ap8O9xYew0fVaAyfCAdE1aF uF9j6q4sIgQpmG1heuEFDTRjGQd+ng9d89Y31ia+WkayDlK03BIjs+GxvPlN2piW xdwjzJouiJztExE7eyYi8f8QOBnXyeswWTzRetgPkrnsUC6p2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILtBdDemKwIJVueDuFujnKIgPHKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNTRlYTMxZTItZjUwOC0z OGU0LTk2NWUtZDFkMTZhZjNmNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP7rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArRFzKBe7j3H7zpCyJKyaDkiqEaqGS+EnM1FiA2IFXxM7eL+/oarXzk K9NRfw15Cj1lSWvcDp+xtrhS4bs8uGjl1oN9n4XQajs9/Gk8BVIxD0iXC+dP/CwO 5F3pNQolL5ndiyiBg2oLFDk5RprvpS4K836cRRQ76hWehiu9JnQqBOUy43Ib9CT0 B/9K1VR/WwaOdb9091QS91SA5LEk5HN25ynBVbOMTkAwevsAx7z/qOUOEWbYfcmF wVf4eMpyqfebApe0DkQssk18DNBAMCM+dE34fuNpJlqBNlnKKGQ5irJitYqY0Wc4 FK9gOyRgJkmo51T33+KraVS8pTKl0q4= -----END CERTIFICATE-----Generated at Sat Apr 18 01:41:52 2026 by rpki-client