$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/d040ec9d-d8f4-31f2-a2d8-fd6142194dea.roa File: d040ec9d-d8f4-31f2-a2d8-fd6142194dea.roa (raw, json) Hash identifier: SfkrPB1g2VPYGRcnS7QFjNpPY566PUT39c8QI+kEGC4= Subject key identifier: A6:AF:77:6F:1E:19:4A:5B:CC:50:FD:4A:AC:37:CA:31:40:40:D0:78 Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Certificate serial: 010D0C9F4328584D07ACFC69C43092D69936C780 Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/d040ec9d-d8f4-31f2-a2d8-fd6142194dea.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 6208 IP address blocks: 104.238.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:fc:69:c4:30:92:d6:99:36:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=d6e63c10-624f-4468-b69c-adecd7e31bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:71:b3:9f:88:ea:1f:e2:38:87:91:45:8e:32: 44:a8:37:29:c4:22:4e:58:9c:ad:65:61:f9:a8:da: 97:5b:3e:82:82:4e:9a:5d:12:2e:f4:de:41:62:a8: f4:a3:a6:e5:3a:af:65:f5:dd:63:09:ca:98:74:d4: 35:e9:fb:e7:93:ef:3a:51:02:5e:0a:02:b1:48:a0: 81:60:f9:6b:97:13:2d:eb:ac:56:9e:c8:58:de:ec: 30:88:dc:41:22:4c:0f:84:60:e9:06:ee:b7:aa:6b: ee:30:4a:f0:8f:0e:91:6e:a5:a4:b4:49:b2:53:8b: 15:6f:b4:6c:4d:81:83:38:14:65:e6:27:0b:21:e9: d5:98:af:35:cc:17:18:09:da:34:b3:18:01:f8:b1: 42:0e:bc:a4:41:74:15:6d:f6:fc:7f:02:b9:8b:53: ba:9e:92:39:77:0b:cd:bf:b2:2e:03:60:67:62:9a: d4:d5:11:db:83:9c:43:16:da:29:7c:03:c5:a3:cf: 32:61:6e:0d:e0:1e:3c:4e:c5:34:6d:98:b2:db:bb: 04:18:11:96:df:af:36:e4:8c:4d:63:81:a8:12:0d: d8:5b:80:31:12:bb:f6:3c:ce:9c:c5:88:0a:c4:5a: 3e:33:7f:81:00:e5:ad:ef:b6:1a:13:dd:2a:9e:95: 0a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AF:77:6F:1E:19:4A:5B:CC:50:FD:4A:AC:37:CA:31:40:40:D0:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/d040ec9d-d8f4-31f2-a2d8-fd6142194dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl X509v3 Authority Key Identifier: keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer sbgp-ipAddrBlock: critical IPv4: 104.238.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:6e:62:36:e5:03:e0:1e:ca:e0:0a:06:80:bf:6b:1b:10:dc: da:46:82:8a:a8:ed:70:96:5d:19:61:4c:3b:69:de:a9:1d:34: 9c:61:e4:a2:5c:af:4e:a4:8f:9a:46:13:8b:a0:39:40:5d:eb: 08:6b:0f:3d:99:f7:2f:ba:c2:a4:51:fc:13:2d:45:6b:ee:f2: 98:b8:63:d0:7b:2d:c2:15:5e:19:bb:a6:4a:bd:7d:6a:81:79: 03:09:3e:01:08:3f:8a:ea:6d:d3:22:47:ba:88:1e:39:c4:b9: 43:29:0c:21:00:4a:a9:8a:a3:56:fe:11:8f:00:1b:c7:aa:ad: 16:48:34:58:49:cc:9b:d1:2c:82:b8:c0:30:2a:3a:a4:30:95: f4:55:20:1e:2c:ce:14:9b:e0:e8:70:af:39:6a:01:be:be:8b: 54:ca:a0:c2:3c:d8:5c:f4:0f:ca:08:0b:a8:54:c2:8e:b4:d1: af:7a:9b:bd:0e:47:00:2f:3b:f0:50:6e:78:85:a9:64:80:f6: 18:04:e7:f7:ad:ad:cd:b9:44:95:0c:ac:23:1a:c0:fb:8a:6a: 97:ab:6b:ae:ed:5e:2f:d9:2e:69:07:b8:ce:de:74:e4:69:4e: 3a:aa:22:10:5d:40:8a:cb:18:3d:18:b6:53:58:18:4d:76:14: 39:63:4c:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrPxpxDCS1pk2x4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh YTNjMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk ZDZlNjNjMTAtNjI0Zi00NDY4LWI2OWMtYWRlY2Q3ZTMxYmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnGzn4jqH+I4h5FFjjJEqDcpxCJOWJytZWH5 qNqXWz6Cgk6aXRIu9N5BYqj0o6blOq9l9d1jCcqYdNQ16fvnk+86UQJeCgKxSKCB YPlrlxMt66xWnshY3uwwiNxBIkwPhGDpBu63qmvuMErwjw6RbqWktEmyU4sVb7Rs TYGDOBRl5icLIenVmK81zBcYCdo0sxgB+LFCDrykQXQVbfb8fwK5i1O6npI5dwvN v7IuA2BnYprU1RHbg5xDFtopfAPFo88yYW4N4B48TsU0bZiy27sEGBGW36825IxN Y4GoEg3YW4AxErv2PM6cxYgKxFo+M3+BAOWt77YaE90qnpUKqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKavd28eGUpbzFD9Sqw3yjFAQNB4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvZDA0MGVjOWQtZDhmNC0z MWYyLWEyZDgtZmQ2MTQyMTk0ZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2 YmFlMGFhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO7CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACluYjblA+AeyuAKBoC/axsQ3NpGgoqo7XCWXRlhTDtp3qkdNJxh5KJc r06kj5pGE4ugOUBd6whrDz2Z9y+6wqRR/BMtRWvu8pi4Y9B7LcIVXhm7pkq9fWqB eQMJPgEIP4rqbdMiR7qIHjnEuUMpDCEASqmKo1b+EY8AG8eqrRZINFhJzJvRLIK4 wDAqOqQwlfRVIB4szhSb4OhwrzlqAb6+i1TKoMI82Fz0D8oIC6hUwo600a96m70O RwAvO/BQbniFqWSA9hgE5/etrc25RJUMrCMawPuKapera67tXi/ZLmkHuM7edORp TjqqIhBdQIrLGD0YtlNYGE12FDljTCs= -----END CERTIFICATE-----Generated at Mon Mar 2 14:37:08 2026 by rpki-client