$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/1ffa4420-a77c-3233-b218-428b8ed4c452.roa File: 1ffa4420-a77c-3233-b218-428b8ed4c452.roa (raw, json) Hash identifier: mdWGdb3CxhVcDMRD62TuzO+K5e9vjfTMSZqeuYoOUXM= Subject key identifier: 96:41:24:66:40:7B:AE:9D:5E:31:87:6B:EF:16:F4:02:EA:A0:D4:B8 Certificate issuer: /CN=f52d9dd2-a206-4694-a550-d6639e33e9f6 Certificate serial: 010D0C9F4328584CC3474A220423BF8569F7DDC0 Authority key identifier: BD:E7:F5:54:80:A6:3B:0B:FE:B6:E6:EF:1E:0F:B3:18:E1:77:DF:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/1ffa4420-a77c-3233-b218-428b8ed4c452.roa Signing time: Thu 05 Feb 2026 14:00:40 +0000 ROA not before: Thu 05 Feb 2026 14:00:40 +0000 ROA not after: Wed 06 May 2026 13:00:40 +0000 asID: 40714 IP address blocks: 104.204.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c3:47:4a:22:04:23:bf:85:69:f7:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f52d9dd2-a206-4694-a550-d6639e33e9f6 Validity Not Before: Feb 5 14:00:40 2026 GMT Not After : May 6 13:00:40 2026 GMT Subject: CN=3e3bf48d-7015-4ac9-b263-ceffcbf56640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d5:36:72:8b:79:62:b4:1d:20:ff:34:5d:f3: aa:99:cf:26:61:c6:60:34:f4:8e:96:68:1b:b2:e7: 7c:df:09:ef:7c:e5:f2:3c:44:a8:39:fa:5f:1c:9c: 2b:f4:f4:b1:9b:14:a1:cb:fb:66:af:b7:69:3b:de: 73:65:9a:76:cf:3c:9a:48:09:56:17:9b:8b:64:5d: bf:b3:df:73:86:e3:fd:fa:6a:5e:7c:8a:18:e2:55: 60:0f:ad:7e:8b:ba:79:74:98:1f:f9:9d:0e:61:2f: 9e:0e:8f:e3:bb:00:ff:b5:db:93:81:6d:54:dd:a1: 99:8d:26:3f:c1:d1:85:fe:21:98:11:2e:81:43:30: c1:9e:5e:f3:40:b5:0b:b4:5d:5e:42:87:43:e4:24: 77:f9:04:7b:cf:40:fb:e8:64:55:bc:bb:46:f9:b7: ce:16:42:f5:6e:74:de:c2:6b:9e:ce:ed:08:93:3c: 30:f2:14:86:c2:f2:f4:05:32:f0:89:8d:b7:7c:14: ff:e7:7b:20:5e:62:23:5e:f9:36:9c:5f:f1:7f:35: be:92:f9:67:32:7b:60:87:d4:12:65:15:2f:b2:bd: 44:f6:14:e7:63:3b:8a:a7:72:a3:2b:02:a0:20:57: e0:ce:03:58:78:f9:12:46:0d:a5:53:05:c8:96:1f: 10:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:41:24:66:40:7B:AE:9D:5E:31:87:6B:EF:16:F4:02:EA:A0:D4:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/1ffa4420-a77c-3233-b218-428b8ed4c452.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.crl X509v3 Authority Key Identifier: keyid:BD:E7:F5:54:80:A6:3B:0B:FE:B6:E6:EF:1E:0F:B3:18:E1:77:DF:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer sbgp-ipAddrBlock: critical IPv4: 104.204.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:ef:a5:db:b2:e4:93:c7:bd:9b:b1:f8:82:65:06:c6:76:74: 96:d6:15:ad:8d:0d:f2:58:ca:c2:d3:f9:e8:19:f0:10:38:2c: 95:2c:27:54:71:63:d1:5a:fd:6d:14:85:1a:03:8b:8e:69:1c: 91:cc:81:82:9d:61:ce:c3:fb:0c:44:6c:5e:fc:55:9a:32:f9: 3e:e6:ab:5b:83:14:8f:77:7a:16:d3:7e:46:0e:64:ad:6d:92: 72:9e:ff:d3:bb:f2:25:da:1c:0b:21:52:89:9b:6f:66:66:6e: 67:15:65:ee:46:6b:71:31:65:b1:3a:90:49:8c:c6:1a:ce:92: 5c:6c:1c:1a:4c:7c:9f:b4:a2:1e:86:bf:58:01:7f:5e:0c:58: be:95:c4:04:4b:4d:f7:99:c5:87:68:83:00:1d:9a:41:28:80: 5e:9b:2d:4e:c4:ee:55:76:8b:bc:df:19:a4:fa:7b:10:3d:13: af:35:b0:c8:da:9d:62:96:43:40:00:dc:4a:b4:bc:5e:df:2b: fd:5f:08:29:1b:8d:dc:fb:17:83:32:7b:bc:6e:51:5c:71:ed: 3b:b9:83:13:b4:ed:df:9f:62:f6:af:02:f4:8f:e4:68:3a:81: 41:81:2a:d8:45:04:fe:4b:c7:c3:aa:69:c9:de:72:c5:84:b0: 56:1f:d2:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzDR0oiBCO/hWn33cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjUyZDlkZDItYTIwNi00Njk0LWE1NTAtZDY2MzllMzNl OWY2MB4XDTI2MDIwNTE0MDA0MFoXDTI2MDUwNjEzMDA0MFowLzEtMCsGA1UEAxMk M2UzYmY0OGQtNzAxNS00YWM5LWIyNjMtY2VmZmNiZjU2NjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztU2cot5YrQdIP80XfOqmc8mYcZgNPSOlmgb sud83wnvfOXyPESoOfpfHJwr9PSxmxShy/tmr7dpO95zZZp2zzyaSAlWF5uLZF2/ s99zhuP9+mpefIoY4lVgD61+i7p5dJgf+Z0OYS+eDo/juwD/tduTgW1U3aGZjSY/ wdGF/iGYES6BQzDBnl7zQLULtF1eQodD5CR3+QR7z0D76GRVvLtG+bfOFkL1bnTe wmuezu0Ikzww8hSGwvL0BTLwiY23fBT/53sgXmIjXvk2nF/xfzW+kvlnMntgh9QS ZRUvsr1E9hTnYzuKp3KjKwKgIFfgzgNYePkSRg2lUwXIlh8QuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZBJGZAe66dXjGHa+8W9ALqoNS4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mNTJk OWRkMi1hMjA2LTQ2OTQtYTU1MC1kNjYzOWUzM2U5ZjYvMWZmYTQ0MjAtYTc3Yy0z MjMzLWIyMTgtNDI4YjhlZDRjNDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjUyZDlkZDItYTIwNi00Njk0LWE1 NTAtZDY2MzllMzNlOWY2L2Y1MmQ5ZGQyLWEyMDYtNDY5NC1hNTUwLWQ2NjM5ZTMz ZTlmNi5jcmwwHwYDVR0jBBgwFoAUvef1VICmOwv+tubvHg+zGOF337kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mNTJkOWRkMi1hMjA2LTQ2OTQtYTU1MC1kNjYz OWUzM2U5ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3vpduy5JPHvZux+IJlBsZ2dJbWFa2NDfJYysLT+egZ8BA4LJUsJ1Rx Y9Fa/W0UhRoDi45pHJHMgYKdYc7D+wxEbF78VZoy+T7mq1uDFI93ehbTfkYOZK1t knKe/9O78iXaHAshUombb2ZmbmcVZe5Ga3ExZbE6kEmMxhrOklxsHBpMfJ+0oh6G v1gBf14MWL6VxARLTfeZxYdogwAdmkEogF6bLU7E7lV2i7zfGaT6exA9E681sMja nWKWQ0AA3Eq0vF7fK/1fCCkbjdz7F4Mye7xuUVxx7Tu5gxO07d+fYvavAvSP5Gg6 gUGBKthFBP5Lx8OqacnecsWEsFYf0uo= -----END CERTIFICATE-----Generated at Mon Mar 2 21:57:33 2026 by rpki-client