$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/ae7f1c55-02dc-32a9-b16c-7f8d4f9fe4fe.roa File: ae7f1c55-02dc-32a9-b16c-7f8d4f9fe4fe.roa (raw, json) Hash identifier: I+VY3aFngFyOEPLg493VQ4Nr4n0HncLcQLe2UG73iDE= Subject key identifier: B9:A9:DF:C0:E4:E9:2C:83:66:9C:19:20:7C:C9:F3:B2:67:67:3A:B9 Certificate issuer: /CN=8bf08e2b-3722-4799-800f-2ecf7a554b0f Certificate serial: 010D0C9F4328584D773A8330D74982E3F4A08980 Authority key identifier: 0B:A0:ED:10:56:8B:05:D9:58:04:69:EA:B7:47:7F:B1:43:E4:CE:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/ae7f1c55-02dc-32a9-b16c-7f8d4f9fe4fe.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 393667 IP address blocks: 104.244.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/8bf08e2b-3722-4799-800f-2ecf7a554b0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/8bf08e2b-3722-4799-800f-2ecf7a554b0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:83:30:d7:49:82:e3:f4:a0:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bf08e2b-3722-4799-800f-2ecf7a554b0f Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=44ab9709-11f4-45fe-883b-1f5e4bcd6168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:89:ed:60:7a:0e:16:74:b5:7c:c9:70:65:16: a6:5b:c4:a9:3d:37:dc:16:34:9d:0d:41:f3:7a:e4: 87:0d:7a:29:82:ac:fd:ba:b0:de:b9:99:a3:85:ac: b3:25:1b:73:3e:5a:cb:cd:51:df:34:4d:f0:21:71: dc:21:1e:db:01:8f:e6:0c:ca:57:f8:f3:fa:6d:f1: 16:48:39:ed:f2:ff:a7:e3:39:cf:39:58:f8:05:f2: 49:c1:26:20:ec:e6:15:f7:34:08:10:19:36:19:a3: e8:1b:c9:98:5e:81:d7:0e:e2:a2:07:1e:91:ea:b8: 4a:8f:26:b4:7b:5c:63:cd:c2:a6:80:93:49:24:c2: 4f:66:f2:9b:0d:b3:38:97:41:47:a1:da:42:5b:11: 21:bf:26:25:74:53:9e:9b:91:8e:2c:58:a2:8a:8a: 77:c8:3f:1f:fd:d3:72:2e:58:a9:40:97:50:91:6c: 2b:38:d5:34:65:99:62:99:c6:1a:34:b2:20:26:e1: 40:eb:99:7b:e5:d9:f2:58:7d:65:48:c6:bd:69:68: a3:92:36:af:7b:c1:99:b5:90:27:51:09:82:35:38: 9f:cb:dd:70:89:c5:03:d2:b6:b2:1a:a5:39:b5:96: cb:b6:41:84:7a:f6:c3:38:6b:8d:52:47:15:64:a9: 43:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A9:DF:C0:E4:E9:2C:83:66:9C:19:20:7C:C9:F3:B2:67:67:3A:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/ae7f1c55-02dc-32a9-b16c-7f8d4f9fe4fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/8bf08e2b-3722-4799-800f-2ecf7a554b0f.crl X509v3 Authority Key Identifier: keyid:0B:A0:ED:10:56:8B:05:D9:58:04:69:EA:B7:47:7F:B1:43:E4:CE:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f.cer sbgp-ipAddrBlock: critical IPv4: 104.244.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:a1:dd:da:5c:a7:3e:38:48:d6:3f:fd:81:72:c9:74:dc:0f: 22:71:92:47:d1:5f:d3:38:e9:21:83:c9:50:1c:f0:6d:22:88: d5:50:dc:e0:01:82:08:cb:4f:a0:c5:92:34:2f:51:21:fc:43: b7:73:26:b9:df:9f:ff:d6:59:04:8f:4b:ed:b2:ac:49:86:5a: c5:89:86:7a:d4:c4:98:84:49:74:13:37:0b:49:8d:f8:61:46: d9:0d:8d:70:c5:12:93:10:50:ca:e2:f3:a2:c1:f7:dd:95:55: 88:8a:7d:66:00:f7:1c:6c:54:7d:7f:67:f1:d2:58:a8:07:bf: 63:d0:1c:5f:16:19:c8:1c:6b:c5:6d:73:7a:3f:91:b3:45:a6: af:74:2e:c2:3d:2a:18:52:87:79:c5:84:34:54:03:97:77:ee: af:65:99:50:7a:b0:30:43:ee:f7:5a:32:ef:61:13:de:9c:3a: 52:55:ca:2a:71:38:df:b6:6e:9e:e6:43:86:ed:e1:97:18:50: 75:76:f1:c6:af:8a:6e:11:02:d4:1d:b7:9a:bc:85:88:bf:ad: 08:08:90:a9:05:bd:6f:0b:5f:17:fa:77:26:7b:01:56:aa:bd: cc:29:ed:0b:7a:23:bf:03:49:bd:1e:4f:91:cc:d5:02:81:db: 96:92:ff:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OoMw10mC4/SgiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJmMDhlMmItMzcyMi00Nzk5LTgwMGYtMmVjZjdhNTU0 YjBmMB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk NDRhYjk3MDktMTFmNC00NWZlLTg4M2ItMWY1ZTRiY2Q2MTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYntYHoOFnS1fMlwZRamW8SpPTfcFjSdDUHz euSHDXopgqz9urDeuZmjhayzJRtzPlrLzVHfNE3wIXHcIR7bAY/mDMpX+PP6bfEW SDnt8v+n4znPOVj4BfJJwSYg7OYV9zQIEBk2GaPoG8mYXoHXDuKiBx6R6rhKjya0 e1xjzcKmgJNJJMJPZvKbDbM4l0FHodpCWxEhvyYldFOem5GOLFiiiop3yD8f/dNy LlipQJdQkWwrONU0ZZlimcYaNLIgJuFA65l75dnyWH1lSMa9aWijkjave8GZtZAn UQmCNTify91wicUD0rayGqU5tZbLtkGEevbDOGuNUkcVZKlD2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmp38Dk6SyDZpwZIHzJ87JnZzq5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84YmYw OGUyYi0zNzIyLTQ3OTktODAwZi0yZWNmN2E1NTRiMGYvYWU3ZjFjNTUtMDJkYy0z MmE5LWIxNmMtN2Y4ZDRmOWZlNGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOGJmMDhlMmItMzcyMi00Nzk5LTgw MGYtMmVjZjdhNTU0YjBmLzhiZjA4ZTJiLTM3MjItNDc5OS04MDBmLTJlY2Y3YTU1 NGIwZi5jcmwwHwYDVR0jBBgwFoAUC6DtEFaLBdlYBGnqt0d/sUPkzu8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84YmYwOGUyYi0zNzIyLTQ3OTktODAwZi0yZWNm N2E1NTRiMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPQMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSh3dpcpz44SNY//YFyyXTcDyJxkkfRX9M46SGDyVAc8G0iiNVQ3OAB ggjLT6DFkjQvUSH8Q7dzJrnfn//WWQSPS+2yrEmGWsWJhnrUxJiESXQTNwtJjfhh RtkNjXDFEpMQUMri86LB992VVYiKfWYA9xxsVH1/Z/HSWKgHv2PQHF8WGcgca8Vt c3o/kbNFpq90LsI9KhhSh3nFhDRUA5d37q9lmVB6sDBD7vdaMu9hE96cOlJVyipx ON+2bp7mQ4bt4ZcYUHV28cavim4RAtQdt5q8hYi/rQgIkKkFvW8LXxf6dyZ7AVaq vcwp7Qt6I78DSb0eT5HM1QKB25aS/z4= -----END CERTIFICATE-----Generated at Fri Apr 17 12:45:54 2026 by rpki-client