$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/cebdec51-99ad-378c-9ad6-936ea7e7b823.roa File: cebdec51-99ad-378c-9ad6-936ea7e7b823.roa (raw, json) Hash identifier: TN4iieKcgXcZ7WUgud/xV8KykjAdAlxBf603oUXYqe4= Subject key identifier: 60:8D:14:BB:F4:59:C1:DB:C7:3A:1B:DD:5D:1F:DB:2A:23:9E:CB:51 Certificate issuer: /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Certificate serial: 010D0C9F4328584CCD0CA1A531813426DCFC0480 Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/cebdec51-99ad-378c-9ad6-936ea7e7b823.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 19740 IP address blocks: 172.84.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:a1:a5:31:81:34:26:dc:fc:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=e7fa9e98-0354-43af-91e9-70570e252eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:06:d8:41:07:3a:c1:d2:46:4d:10:3c:c2:b0: c9:b9:d6:3c:68:10:fd:7c:9a:70:ec:14:df:13:55: ff:26:a3:8d:fc:3b:59:af:ad:d2:52:8a:ac:85:04: d7:23:e6:c8:3f:7c:78:fa:60:17:32:e2:49:39:a0: c2:43:27:02:f5:49:51:29:54:4e:ec:6e:87:06:cc: 46:a8:74:e7:28:dc:ce:86:4f:0e:4d:df:7a:ed:f6: c9:e1:62:1f:7d:71:78:69:5e:93:43:77:20:f9:93: db:85:12:6d:8b:8b:0f:76:c5:4f:1a:74:04:12:f7: 1a:11:39:76:89:b5:0f:fc:74:d3:b3:14:d6:cf:98: a6:46:99:30:eb:54:6a:a9:71:0a:26:62:90:0b:04: 9b:79:e9:8f:f5:5c:16:be:8c:5f:b0:62:0e:47:da: ff:5d:23:d1:87:c2:19:59:04:cb:58:62:63:c3:27: 44:57:2b:d8:b0:6c:5a:e1:b6:26:1f:e6:5f:a0:ef: 53:e8:be:94:d1:cd:fc:cb:20:44:ef:06:f2:4f:49: 6e:90:59:32:f2:c7:57:cf:34:3d:10:5b:63:1e:81: c4:66:e0:44:44:f3:b6:c8:57:4c:a7:2b:99:76:14: 25:f0:b6:8e:62:a1:0e:ad:74:c5:fc:a9:b6:14:1f: 54:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8D:14:BB:F4:59:C1:DB:C7:3A:1B:DD:5D:1F:DB:2A:23:9E:CB:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/cebdec51-99ad-378c-9ad6-936ea7e7b823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl X509v3 Authority Key Identifier: keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer sbgp-ipAddrBlock: critical IPv4: 172.84.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:66:14:62:1c:ad:3e:5d:aa:be:1b:ee:fb:4b:7d:05:65:70: 38:f3:8b:bd:8a:25:5a:cc:0a:4f:e7:8a:e8:0a:c3:d4:c4:09: e7:02:5e:01:e8:85:47:71:6d:0e:ec:97:5c:ae:d4:29:52:ae: fa:b5:a7:09:e7:80:f0:d8:c2:03:9c:51:45:88:9c:69:56:a8: d5:c7:23:05:ba:22:5f:c7:ac:69:a4:3a:09:04:f8:a6:20:48: 7b:58:54:cb:f5:83:a4:28:27:64:36:1a:97:c2:d7:2d:49:f8: fe:9a:d2:9e:bf:00:d0:55:fa:e9:84:98:9b:c0:6d:c0:0e:37: ed:24:07:8f:4b:bb:7e:88:51:a7:25:58:83:16:fa:df:24:68: 98:f9:df:12:ce:a7:6d:67:5c:31:8a:3e:6d:fe:d4:9c:40:89: c6:1a:46:5a:22:ba:0f:03:a7:1e:9d:6a:75:bb:40:23:8c:93: 63:72:75:bb:b9:51:a7:8e:59:be:35:34:ae:9a:af:c5:78:83: 84:3f:c6:57:2c:c5:ae:d1:85:7a:c0:50:18:15:cd:22:b2:77: 5d:df:d6:0c:0c:dd:bd:f1:0e:25:9f:2f:c5:fd:41:ab:53:05: bf:0d:b5:ea:b1:7f:db:d1:f5:b0:d3:d0:d7:50:39:47:d1:66: 87:d4:00:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDKGlMYE0Jtz8BIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz NGQ2MB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk ZTdmYTllOTgtMDM1NC00M2FmLTkxZTktNzA1NzBlMjUyZWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAbYQQc6wdJGTRA8wrDJudY8aBD9fJpw7BTf E1X/JqON/DtZr63SUoqshQTXI+bIP3x4+mAXMuJJOaDCQycC9UlRKVRO7G6HBsxG qHTnKNzOhk8OTd967fbJ4WIffXF4aV6TQ3cg+ZPbhRJti4sPdsVPGnQEEvcaETl2 ibUP/HTTsxTWz5imRpkw61RqqXEKJmKQCwSbeemP9VwWvoxfsGIOR9r/XSPRh8IZ WQTLWGJjwydEVyvYsGxa4bYmH+ZfoO9T6L6U0c38yyBE7wbyT0lukFky8sdXzzQ9 EFtjHoHEZuBERPO2yFdMpyuZdhQl8LaOYqEOrXTF/Km2FB9UxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCNFLv0WcHbxzob3V0f2yojnstRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvY2ViZGVjNTEtOTlhZC0z NzhjLTlhZDYtOTM2ZWE3ZTdiODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0 YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1 MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2 MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5mFGIcrT5dqr4b7vtLfQVlcDjzi72KJVrMCk/niugKw9TECecCXgHo hUdxbQ7sl1yu1ClSrvq1pwnngPDYwgOcUUWInGlWqNXHIwW6Il/HrGmkOgkE+KYg SHtYVMv1g6QoJ2Q2GpfC1y1J+P6a0p6/ANBV+umEmJvAbcAON+0kB49Lu36IUacl WIMW+t8kaJj53xLOp21nXDGKPm3+1JxAicYaRloiug8Dpx6danW7QCOMk2Nydbu5 UaeOWb41NK6ar8V4g4Q/xlcsxa7RhXrAUBgVzSKyd13f1gwM3b3xDiWfL8X9QatT Bb8Nteqxf9vR9bDT0NdQOUfRZofUAJY= -----END CERTIFICATE-----Generated at Mon Mar 2 14:42:40 2026 by rpki-client