$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d0d5c255-62d5-3841-a89f-c97638122db1.roa File: d0d5c255-62d5-3841-a89f-c97638122db1.roa (raw, json) Hash identifier: tI2T/ofgGtj1BOUByu/SF/iPoSyz+3En6OONYRdJFro= Subject key identifier: C9:A2:13:57:90:57:81:25:5A:E5:B2:73:4A:51:64:9A:56:6F:32:C7 Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb Certificate serial: 010D0C9F4328584CA5F6FC82C6C5F6BD8EAEDC80 Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d0d5c255-62d5-3841-a89f-c97638122db1.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 397373 IP address blocks: 104.152.222.0/23 maxlen: 24 104.255.168.0/21 maxlen: 24 155.254.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f6:fc:82:c6:c5:f6:bd:8e:ae:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=2d605470-90f8-4f49-9f1d-63efd99971de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:21:e9:81:e0:bd:cc:98:4c:a0:b4:cd:73:1d: 8c:b7:fa:92:44:ff:13:77:7a:ae:c2:81:91:af:fc: ab:da:56:37:2d:d0:17:30:f3:74:97:6c:86:a5:e4: d3:32:82:52:c7:47:ed:a6:79:b5:56:35:e5:81:ce: b5:10:4c:1f:75:aa:ed:ca:21:8a:ef:93:8a:25:fb: b4:38:9b:b5:c5:27:41:8a:39:8d:62:7c:49:13:11: 51:45:21:40:32:e4:ea:bf:87:74:93:76:63:50:e0: 83:17:ed:ed:13:82:12:11:93:28:e4:9e:f1:c0:73: b7:78:69:32:1d:b0:ad:71:d1:b4:d4:94:f1:d0:fa: 1c:eb:71:ce:7c:36:a6:71:6a:a2:10:a4:8b:a9:1a: d8:7f:4e:e8:f3:d9:c3:17:d6:3c:4c:e6:c4:e4:e3: e5:0d:a5:ef:4c:32:53:28:cf:15:5e:b1:b4:a0:c5: 71:88:3f:9c:43:ab:e6:6f:93:c2:4a:7e:7c:cc:2b: ac:6f:57:1d:57:65:02:dd:23:26:2b:ce:3a:03:ac: 32:6b:f8:3b:74:ed:7c:94:90:55:cb:39:a1:fd:91: 12:91:f1:cd:2f:16:7f:f3:40:4f:09:c9:c8:a0:bb: 15:b3:a8:4a:1c:aa:b8:c2:3b:08:f8:18:16:c2:85: d7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A2:13:57:90:57:81:25:5A:E5:B2:73:4A:51:64:9A:56:6F:32:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d0d5c255-62d5-3841-a89f-c97638122db1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl X509v3 Authority Key Identifier: keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer sbgp-ipAddrBlock: critical IPv4: 104.152.222.0/23 104.255.168.0/21 155.254.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:5d:5a:f7:47:dc:5a:fb:b5:9f:c4:e5:c2:cb:42:fc:34:ef: 35:37:97:09:d0:19:89:03:5e:e9:83:02:75:f7:1c:b3:e9:18: eb:df:d5:e1:ff:2b:0e:23:10:c6:30:bc:04:0e:ae:c5:4c:8c: 85:6f:d9:5a:ef:cf:e4:12:97:48:bc:db:7f:08:60:ed:42:6d: ad:e9:94:eb:06:17:17:04:45:a0:a1:0a:73:2a:78:41:d8:d4: 14:47:e5:07:a0:f4:8c:16:65:65:be:b8:0e:d7:ae:f5:af:1d: 4d:08:24:2f:c0:2d:08:98:31:9b:ce:d3:b8:26:0f:18:90:78: 38:c2:0d:15:1f:b1:41:d8:3e:4e:05:ed:5e:d9:5e:19:f8:65: 0e:19:ef:05:e0:2c:8a:18:f1:d5:0b:23:24:29:ba:cb:a6:3b: de:74:ef:94:34:a2:6c:40:a1:79:d0:bf:2a:4e:a4:e7:e6:25: b3:da:0a:7a:dc:4e:5f:88:b0:ab:bc:d6:06:cc:52:bb:c1:77: 2b:64:c8:bb:7c:a6:ca:cf:a9:52:45:24:5e:c8:7e:45:20:ad: 11:0b:7e:2b:e8:59:8a:4f:9e:70:c2:83:b9:4d:1e:26:b2:f1: 58:eb:84:68:21:46:4c:73:22:f6:67:8c:15:11:aa:67:ef:e8: 10:1b:39:6b -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEyl9vyCxsX2vY6u3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRiYzJiODctMjIzYy00MjgwLWE5YjMtNjM0ZTY2MTEx ZWViMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk MmQ2MDU0NzAtOTBmOC00ZjQ5LTlmMWQtNjNlZmQ5OTk3MWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCHpgeC9zJhMoLTNcx2Mt/qSRP8Td3quwoGR r/yr2lY3LdAXMPN0l2yGpeTTMoJSx0ftpnm1VjXlgc61EEwfdartyiGK75OKJfu0 OJu1xSdBijmNYnxJExFRRSFAMuTqv4d0k3ZjUOCDF+3tE4ISEZMo5J7xwHO3eGky HbCtcdG01JTx0Poc63HOfDamcWqiEKSLqRrYf07o89nDF9Y8TObE5OPlDaXvTDJT KM8VXrG0oMVxiD+cQ6vmb5PCSn58zCusb1cdV2UC3SMmK846A6wya/g7dO18lJBV yzmh/ZESkfHNLxZ/80BPCcnIoLsVs6hKHKq4wjsI+BgWwoXXMwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFMmiE1eQV4ElWuWyc0pRZJpWbzLHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NGJj MmI4Ny0yMjNjLTQyODAtYTliMy02MzRlNjYxMTFlZWIvZDBkNWMyNTUtNjJkNS0z ODQxLWE4OWYtYzk3NjM4MTIyZGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDRiYzJiODctMjIzYy00MjgwLWE5 YjMtNjM0ZTY2MTExZWViLzQ0YmMyYjg3LTIyM2MtNDI4MC1hOWIzLTYzNGU2NjEx MWVlYi5jcmwwHwYDVR0jBBgwFoAUPxjW1UuMY2iuDtn3fpgQlOXg7XowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NGJjMmI4Ny0yMjNjLTQyODAtYTliMy02MzRl NjYxMTFlZWIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBaJjeAwQD aP+oAwQEm/4QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEpdWvdH3Fr7tZ/E5cLLQvw07zU3lwnQGYkDXumD AnX3HLPpGOvf1eH/Kw4jEMYwvAQOrsVMjIVv2Vrvz+QSl0i8238IYO1Cba3plOsG FxcERaChCnMqeEHY1BRH5Qeg9IwWZWW+uA7XrvWvHU0IJC/ALQiYMZvO07gmDxiQ eDjCDRUfsUHYPk4F7V7ZXhn4ZQ4Z7wXgLIoY8dULIyQpusumO95075Q0omxAoXnQ vypOpOfmJbPaCnrcTl+IsKu81gbMUrvBdytkyLt8psrPqVJFJF7IfkUgrRELfivo WYpPnnDCg7lNHiay8VjrhGghRkxzIvZnjBURqmfv6BAbOWs= -----END CERTIFICATE-----Generated at Mon Mar 2 11:39:37 2026 by rpki-client