$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa File: eff20afa-d256-340d-8b13-7a8f9e404a25.roa (raw, json) Hash identifier: GGdWXksvzIB0DaF9Kd/COtMyscVsvaaCTb7DXnLPX9U= Subject key identifier: 84:13:9D:EE:67:62:3F:97:4F:68:6E:86:64:E5:DC:76:3C:6F:DD:67 Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Certificate serial: 010D0C9F4328584CD13CACE22A22E4C60B5B6580 Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa Signing time: Tue 10 Feb 2026 14:00:41 +0000 ROA not before: Tue 10 Feb 2026 14:00:41 +0000 ROA not after: Mon 11 May 2026 13:00:41 +0000 asID: 21559 IP address blocks: 104.238.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d1:3c:ac:e2:2a:22:e4:c6:0b:5b:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Validity Not Before: Feb 10 14:00:41 2026 GMT Not After : May 11 13:00:41 2026 GMT Subject: CN=0bc0158c-9ad9-40b1-ade2-2a8a87cbfeba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:73:ea:f8:48:30:eb:23:af:9b:23:6c:7a:14: 0e:ae:b6:6f:8f:02:13:2d:dd:50:fc:12:97:da:65: 81:f4:7d:53:bf:b0:9d:17:90:86:7f:9f:e1:3d:1b: 74:76:65:4e:48:8d:fb:61:37:18:a7:c1:11:67:9d: 71:cd:15:c0:34:ab:ed:28:ee:48:bd:cd:30:e1:ad: e7:e3:e2:5e:9b:36:ef:ae:40:0f:54:b1:08:08:e0: ce:e4:24:5d:29:ab:9b:23:ea:93:dc:e4:b8:c2:11: fb:bb:e5:1a:15:4f:c5:34:4e:57:24:c4:89:35:7c: 9c:aa:3f:dc:80:53:0a:a0:ad:22:34:b7:9e:65:ca: e3:38:4a:fa:4e:9f:f4:38:ef:f8:eb:99:d8:32:09: a6:24:c7:0f:09:91:e8:b5:e5:cf:1d:61:85:8f:06: 87:bf:32:38:50:92:4e:a6:7a:c5:10:d6:52:55:51: 3f:b6:e8:40:33:76:b2:06:36:76:e8:1b:0a:a6:9f: 28:a1:e1:fd:45:9c:34:34:22:c5:6a:fe:5e:89:69: 9f:41:76:cb:78:07:d0:a6:b8:bc:a2:8b:4a:ab:e8: 10:e5:32:96:36:64:5b:e8:d4:96:c7:b6:7e:c4:9e: de:d8:8e:96:5d:70:23:bb:6e:10:21:8f:4a:ce:1c: 0f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:13:9D:EE:67:62:3F:97:4F:68:6E:86:64:E5:DC:76:3C:6F:DD:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl X509v3 Authority Key Identifier: keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer sbgp-ipAddrBlock: critical IPv4: 104.238.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:41:72:cf:fa:a1:7b:68:e7:ad:77:7f:86:3b:d4:e2:a6:fd: cf:13:2f:51:ba:7f:e4:b2:26:f4:20:ce:c8:61:2a:57:fe:2a: 39:70:19:fb:99:9d:f9:31:45:3c:c8:f1:95:96:ba:9d:06:7c: 3a:a4:17:f6:74:0b:14:24:0d:a9:a4:ca:a3:8e:cb:19:77:c2: 88:78:ac:7b:29:61:91:aa:f5:38:8c:00:bf:0d:a7:bc:c0:87: 82:50:4e:a3:52:50:8d:33:6b:4a:7c:44:34:49:ad:25:6b:8d: b0:8f:2c:12:17:a0:a6:74:de:07:49:8c:13:78:c3:fe:d1:e7: 70:5d:4c:60:83:aa:94:15:9d:5b:29:4d:a5:21:e4:1e:f0:8b: 38:fc:ca:4e:4e:6a:f9:2f:8e:0d:ba:69:78:9f:ec:b6:00:de: 51:93:f2:5f:55:8b:03:86:1c:6b:25:45:ed:d3:a1:2c:f5:5a: d8:b9:5b:24:48:f9:a8:e4:ad:75:d1:10:7c:03:60:71:5f:b7: bb:ea:2a:0c:2f:53:6c:77:8d:07:3c:e3:25:fe:cd:40:f4:33: 6f:46:8a:cf:0c:2b:c3:ef:e7:be:1a:f1:40:57:12:e9:cb:5f: 05:78:68:47:85:57:e1:a8:73:ac:72:e6:01:75:c3:fb:8c:27: 92:f8:ec:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzRPKziKiLkxgtbZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh YTNjMB4XDTI2MDIxMDE0MDA0MVoXDTI2MDUxMTEzMDA0MVowLzEtMCsGA1UEAxMk MGJjMDE1OGMtOWFkOS00MGIxLWFkZTItMmE4YTg3Y2JmZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXPq+Egw6yOvmyNsehQOrrZvjwITLd1Q/BKX 2mWB9H1Tv7CdF5CGf5/hPRt0dmVOSI37YTcYp8ERZ51xzRXANKvtKO5Ivc0w4a3n 4+JemzbvrkAPVLEICODO5CRdKaubI+qT3OS4whH7u+UaFU/FNE5XJMSJNXycqj/c gFMKoK0iNLeeZcrjOEr6Tp/0OO/465nYMgmmJMcPCZHoteXPHWGFjwaHvzI4UJJO pnrFENZSVVE/tuhAM3ayBjZ26BsKpp8ooeH9RZw0NCLFav5eiWmfQXbLeAfQpri8 ootKq+gQ5TKWNmRb6NSWx7Z+xJ7e2I6WXXAju24QIY9KzhwPlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQTne5nYj+XT2huhmTl3HY8b91nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvZWZmMjBhZmEtZDI1Ni0z NDBkLThiMTMtN2E4ZjllNDA0YTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2 YmFlMGFhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaO7oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClBcs/6oXto5613f4Y71OKm/c8TL1G6f+SyJvQgzshhKlf+KjlwGfuZ nfkxRTzI8ZWWup0GfDqkF/Z0CxQkDamkyqOOyxl3woh4rHspYZGq9TiMAL8Np7zA h4JQTqNSUI0za0p8RDRJrSVrjbCPLBIXoKZ03gdJjBN4w/7R53BdTGCDqpQVnVsp TaUh5B7wizj8yk5Oavkvjg26aXif7LYA3lGT8l9ViwOGHGslRe3ToSz1Wti5WyRI +ajkrXXREHwDYHFft7vqKgwvU2x3jQc84yX+zUD0M29Gis8MK8Pv574a8UBXEunL XwV4aEeFV+Goc6xy5gF1w/uMJ5L47Og= -----END CERTIFICATE-----Generated at Mon Mar 2 16:27:46 2026 by rpki-client