$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/891439fd-34b5-3a59-98cf-17456b30b05b.roa File: 891439fd-34b5-3a59-98cf-17456b30b05b.roa (raw, json) Hash identifier: tQ/xMXXFgkD6MiM7f6BTHm2z77C3frBnQXX1rl51usE= Subject key identifier: F0:52:8C:1B:81:F3:71:B3:77:F4:74:5F:FE:BF:72:FC:D3:2A:66:41 Certificate issuer: /CN=ce57877c-89ad-4d14-9b2c-3fbd440b003b Certificate serial: 010D0C9F4328584D746FCC007CC9551DE4874200 Authority key identifier: EE:8F:89:26:87:2F:B3:3A:F5:F1:46:8F:13:B6:F1:C6:1F:12:56:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/891439fd-34b5-3a59-98cf-17456b30b05b.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 32003 IP address blocks: 104.243.144.0/20 maxlen: 24 199.38.168.0/22 maxlen: 24 2606:780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ce57877c-89ad-4d14-9b2c-3fbd440b003b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ce57877c-89ad-4d14-9b2c-3fbd440b003b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:cc:00:7c:c9:55:1d:e4:87:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce57877c-89ad-4d14-9b2c-3fbd440b003b Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=7ba1336a-11a0-40c7-ae65-dda94a3fb7af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:10:32:99:65:bf:b3:6c:cc:28:77:5c:95:63: e1:64:c8:04:cc:12:b4:87:1f:8e:b8:b1:60:1f:a5: 3e:4d:87:f9:dd:ef:67:bb:d0:59:5a:9e:9d:65:61: bc:5f:35:67:2b:01:d7:b5:23:46:98:89:1e:fe:66: d5:e3:dd:95:f8:00:0d:df:c9:be:f9:3d:88:d1:00: 27:b4:b4:02:02:52:09:8f:e9:e3:67:de:d4:d1:0c: b7:0e:bf:01:74:b1:1d:c0:86:05:70:97:a7:31:1e: 1f:a6:fd:db:90:cf:6f:92:8d:e7:ab:40:f5:c2:c0: 25:fc:e7:85:a7:15:69:ab:0c:4a:8a:a4:e4:8f:77: f3:88:be:c2:78:7f:35:ee:7c:d3:97:89:64:b4:9f: cb:6a:27:c3:dc:30:54:10:91:b4:d2:0d:77:2d:ee: 07:4b:ff:49:71:99:de:db:57:40:9c:e7:33:c3:4c: 4b:65:8f:75:62:61:24:53:c1:cf:a3:48:c8:de:b4: 60:31:e5:b4:b7:3a:92:ec:b5:29:db:57:86:27:89: 54:21:7e:fc:ea:52:26:4d:6d:6c:ab:c6:2c:0a:cc: 5a:20:ad:5f:04:a3:b6:6e:54:75:e0:64:b2:7f:02: 2b:74:f2:04:a0:d7:6d:8e:60:79:6c:d5:e5:c2:6c: 21:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:52:8C:1B:81:F3:71:B3:77:F4:74:5F:FE:BF:72:FC:D3:2A:66:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/891439fd-34b5-3a59-98cf-17456b30b05b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ce57877c-89ad-4d14-9b2c-3fbd440b003b.crl X509v3 Authority Key Identifier: keyid:EE:8F:89:26:87:2F:B3:3A:F5:F1:46:8F:13:B6:F1:C6:1F:12:56:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer sbgp-ipAddrBlock: critical IPv4: 104.243.144.0/20 199.38.168.0/22 IPv6: 2606:780::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:f4:03:ac:08:db:63:e9:22:12:30:ce:62:5d:33:61:6d:a8: 14:6c:af:5f:82:d7:ab:84:08:02:fc:73:d0:87:a1:23:ea:a7: 57:99:ab:3d:f4:8f:9a:65:8f:6b:b1:15:1c:5e:f8:84:1a:4d: 61:a6:ec:3c:89:fb:63:08:1d:ab:b0:6e:b5:d4:4b:11:00:ee: f2:95:ef:4d:50:5c:f2:e1:3b:4c:ff:26:7e:2d:96:51:bd:8b: 75:42:7c:f5:14:35:b7:35:3f:e7:17:f8:38:c4:af:fb:b5:cb: 4b:f3:62:66:cc:8e:01:1e:27:1d:46:6b:31:f1:e2:4f:cd:cb: 0e:80:18:99:a0:93:14:62:92:5b:b2:39:cf:a7:92:8a:25:99: 86:85:43:57:f2:f2:d6:2d:81:a5:c1:2a:67:c2:b2:59:7a:5a: 2e:3d:b4:34:bd:b5:58:d2:f4:34:97:e8:23:37:2d:44:8a:ce: 0f:1b:cc:a2:b4:e6:cd:58:bf:d8:e4:de:c8:f8:59:85:22:9f: 05:e8:51:65:2a:b5:c1:73:aa:0b:50:2a:7e:70:54:83:67:6b: 5f:88:c2:86:32:44:3b:2e:2e:3c:32:77:6e:87:24:9d:fc:5f: 8c:11:00:8b:49:cf:66:b2:3b:be:9f:5d:49:21:06:24:e5:56: ae:89:cf:90 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE10b8wAfMlVHeSHQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U1Nzg3N2MtODlhZC00ZDE0LTliMmMtM2ZiZDQ0MGIw MDNiMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk N2JhMTMzNmEtMTFhMC00MGM3LWFlNjUtZGRhOTRhM2ZiN2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RAymWW/s2zMKHdclWPhZMgEzBK0hx+OuLFg H6U+TYf53e9nu9BZWp6dZWG8XzVnKwHXtSNGmIke/mbV492V+AAN38m++T2I0QAn tLQCAlIJj+njZ97U0Qy3Dr8BdLEdwIYFcJenMR4fpv3bkM9vko3nq0D1wsAl/OeF pxVpqwxKiqTkj3fziL7CeH817nzTl4lktJ/LaifD3DBUEJG00g13Le4HS/9JcZne 21dAnOczw0xLZY91YmEkU8HPo0jI3rRgMeW0tzqS7LUp21eGJ4lUIX786lImTW1s q8YsCsxaIK1fBKO2blR14GSyfwIrdPIEoNdtjmB5bNXlwmwhcQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFPBSjBuB83Gzd/R0X/6/cvzTKmZBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZTU3 ODc3Yy04OWFkLTRkMTQtOWIyYy0zZmJkNDQwYjAwM2IvODkxNDM5ZmQtMzRiNS0z YTU5LTk4Y2YtMTc0NTZiMzBiMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2U1Nzg3N2MtODlhZC00ZDE0LTli MmMtM2ZiZDQ0MGIwMDNiL2NlNTc4NzdjLTg5YWQtNGQxNC05YjJjLTNmYmQ0NDBi MDAzYi5jcmwwHwYDVR0jBBgwFoAU7o+JJocvszr18UaPE7bxxh8SVkQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jZTU3ODc3Yy04OWFkLTRkMTQtOWIyYy0zZmJk NDQwYjAwM2IuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEaPOQAwQC xyaoMA0EAgACMAcDBQAmBgeAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD70A6wI22PpIhIwzmJdM2FtqBRs r1+C16uECAL8c9CHoSPqp1eZqz30j5plj2uxFRxe+IQaTWGm7DyJ+2MIHauwbrXU SxEA7vKV701QXPLhO0z/Jn4tllG9i3VCfPUUNbc1P+cX+DjEr/u1y0vzYmbMjgEe Jx1GazHx4k/Nyw6AGJmgkxRikluyOc+nkoolmYaFQ1fy8tYtgaXBKmfCsll6Wi49 tDS9tVjS9DSX6CM3LUSKzg8bzKK05s1Yv9jk3sj4WYUinwXoUWUqtcFzqgtQKn5w VINna1+IwoYyRDsuLjwyd26HJJ38X4wRAItJz2ayO76fXUkhBiTlVq6Jz5A= -----END CERTIFICATE-----Generated at Fri Apr 17 20:56:45 2026 by rpki-client