$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/dfbfc770-f1dd-38f6-8858-4800cd01515c.roa File: dfbfc770-f1dd-38f6-8858-4800cd01515c.roa (raw, json) Hash identifier: xiF2/yD07rG+HR+N3IZOUNfevVDnJJ0P46mbQJ6Cmbk= Subject key identifier: 16:D0:FC:23:48:A1:21:BE:DE:66:2A:D7:C1:30:79:CE:78:9D:D5:20 Certificate issuer: /CN=9ed327a2-62ee-4bd2-be90-1cf122db3819 Certificate serial: 010D0C9F4328584D4D5A9C3EC265321B74429880 Authority key identifier: CA:67:09:F5:E9:84:71:C3:8D:ED:F6:A7:3A:EE:E2:99:24:9C:B9:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/dfbfc770-f1dd-38f6-8858-4800cd01515c.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 11796 IP address blocks: 104.241.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/9ed327a2-62ee-4bd2-be90-1cf122db3819.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/9ed327a2-62ee-4bd2-be90-1cf122db3819.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:9c:3e:c2:65:32:1b:74:42:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ed327a2-62ee-4bd2-be90-1cf122db3819 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=fc06aa6f-199d-47a4-8a4b-ccadb0166060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0c:6c:76:fa:f9:a5:e7:0c:84:7c:55:8d:0b: 9b:5f:11:ec:9d:63:7c:e9:a7:8a:a0:32:ef:34:fa: 4e:98:c6:67:db:7d:87:3a:e8:69:b4:3b:0a:ef:7f: 6f:03:e7:dd:b1:17:b8:e8:ad:82:6a:e0:bf:9a:56: 1b:74:61:aa:65:1a:1a:f8:4e:16:7c:a5:f3:a4:12: b9:18:9b:dd:f5:f0:b0:af:9b:38:ff:43:37:52:77: 85:a9:60:92:02:14:cd:23:cc:36:30:e3:99:fe:4a: 6b:d1:60:0a:de:b1:1d:0b:3d:03:24:e9:06:36:40: 08:72:ff:b2:a6:a7:a9:be:d3:65:39:6b:ba:b6:4d: 32:cc:46:1c:94:95:d3:69:fd:c9:91:50:83:b7:38: 9a:f0:f9:d7:95:2f:03:5f:58:1a:41:c0:3f:2c:4c: f0:a1:16:17:d5:d4:01:83:e0:1c:03:92:1d:f9:68: 09:04:9d:4b:dd:d2:3d:18:a7:e7:e7:24:27:67:66: 19:04:c1:f3:c6:7d:c8:55:ff:8e:25:b3:ef:77:5c: be:6a:ba:8d:31:65:88:27:10:a0:bd:22:62:f2:f8: 6d:b5:ab:70:3e:9c:04:3e:40:5d:ce:3a:0d:b0:11: 5f:7e:83:c8:2a:d8:08:1e:aa:f1:af:75:3b:e1:c5: b8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D0:FC:23:48:A1:21:BE:DE:66:2A:D7:C1:30:79:CE:78:9D:D5:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/dfbfc770-f1dd-38f6-8858-4800cd01515c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/9ed327a2-62ee-4bd2-be90-1cf122db3819.crl X509v3 Authority Key Identifier: keyid:CA:67:09:F5:E9:84:71:C3:8D:ED:F6:A7:3A:EE:E2:99:24:9C:B9:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819.cer sbgp-ipAddrBlock: critical IPv4: 104.241.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:5c:4e:c9:41:42:46:ca:ce:5c:d0:12:d5:02:ff:81:ef:e4: 37:be:78:70:5f:dc:4d:c0:04:8e:ce:98:e7:0f:be:1c:62:be: 05:5a:69:52:21:89:e4:ff:04:7c:14:37:4f:4e:8a:75:91:84: 2c:4c:1f:32:c9:85:51:2c:85:f0:14:65:90:ac:68:9a:9e:27: 6f:d8:9a:bd:00:6f:42:74:6f:c3:f2:b5:0a:d9:ca:35:0c:ad: 9c:9a:25:6e:42:e1:92:fe:f9:66:7d:4b:53:00:a0:66:42:d7: 1b:71:cc:b5:7b:e0:c9:72:c4:0f:89:38:5e:d3:c6:31:aa:69: cc:0c:ca:d2:ae:1d:be:29:90:5f:b0:1d:a3:e6:cd:c6:e5:b6: ab:ec:6c:cf:17:b3:f4:ab:46:70:a7:87:08:62:b2:56:4d:a8: 2c:6f:60:12:18:d7:a4:97:f7:98:f4:b5:a6:c3:36:42:b2:4c: 76:04:47:aa:3d:75:69:72:ba:30:4e:be:f8:24:7a:6a:4d:2b: 86:d0:e9:b3:ef:0b:c5:41:55:d2:bd:81:76:4a:a6:24:13:45: 80:54:40:30:cb:61:db:9d:51:15:19:ca:26:7c:89:eb:fb:88: 69:e3:f4:5f:6f:8c:a3:49:0e:2f:91:85:5a:02:3c:2d:e9:d7: 6b:fd:f2:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWpw+wmUyG3RCmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWVkMzI3YTItNjJlZS00YmQyLWJlOTAtMWNmMTIyZGIz ODE5MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZmMwNmFhNmYtMTk5ZC00N2E0LThhNGItY2NhZGIwMTY2MDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQxsdvr5pecMhHxVjQubXxHsnWN86aeKoDLv NPpOmMZn232HOuhptDsK739vA+fdsRe46K2CauC/mlYbdGGqZRoa+E4WfKXzpBK5 GJvd9fCwr5s4/0M3UneFqWCSAhTNI8w2MOOZ/kpr0WAK3rEdCz0DJOkGNkAIcv+y pqepvtNlOWu6tk0yzEYclJXTaf3JkVCDtzia8PnXlS8DX1gaQcA/LEzwoRYX1dQB g+AcA5Id+WgJBJ1L3dI9GKfn5yQnZ2YZBMHzxn3IVf+OJbPvd1y+arqNMWWIJxCg vSJi8vhttatwPpwEPkBdzjoNsBFffoPIKtgIHqrxr3U74cW4IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbQ/CNIoSG+3mYq18Ewec54ndUgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85ZWQz MjdhMi02MmVlLTRiZDItYmU5MC0xY2YxMjJkYjM4MTkvZGZiZmM3NzAtZjFkZC0z OGY2LTg4NTgtNDgwMGNkMDE1MTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOWVkMzI3YTItNjJlZS00YmQyLWJl OTAtMWNmMTIyZGIzODE5LzllZDMyN2EyLTYyZWUtNGJkMi1iZTkwLTFjZjEyMmRi MzgxOS5jcmwwHwYDVR0jBBgwFoAUymcJ9emEccON7fanOu7imSScuZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85ZWQzMjdhMi02MmVlLTRiZDItYmU5MC0xY2Yx MjJkYjM4MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaPHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlcTslBQkbKzlzQEtUC/4Hv5De+eHBf3E3ABI7OmOcPvhxivgVaaVIh ieT/BHwUN09OinWRhCxMHzLJhVEshfAUZZCsaJqeJ2/Ymr0Ab0J0b8PytQrZyjUM rZyaJW5C4ZL++WZ9S1MAoGZC1xtxzLV74MlyxA+JOF7TxjGqacwMytKuHb4pkF+w HaPmzcbltqvsbM8Xs/SrRnCnhwhislZNqCxvYBIY16SX95j0tabDNkKyTHYER6o9 dWlyujBOvvgkempNK4bQ6bPvC8VBVdK9gXZKpiQTRYBUQDDLYdudURUZyiZ8iev7 iGnj9F9vjKNJDi+RhVoCPC3p12v98mw= -----END CERTIFICATE-----Generated at Fri Apr 17 12:56:58 2026 by rpki-client