$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/94da6f54-9255-374b-a408-2e35886a522d.roa File: 94da6f54-9255-374b-a408-2e35886a522d.roa (raw, json) Hash identifier: ef2+q5yz3H4z6EU863PNGRXaAOGNmjfGzs60NQkCXx0= Subject key identifier: B9:D6:F2:9E:50:62:BB:1A:E5:1A:85:40:30:4F:5B:15:DF:45:0E:53 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584C6B56A125DA6A338E514930A0 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/94da6f54-9255-374b-a408-2e35886a522d.roa Signing time: Mon 05 Jan 2026 02:00:31 +0000 ROA not before: Mon 05 Jan 2026 02:00:31 +0000 ROA not after: Sun 05 Apr 2026 01:00:31 +0000 asID: 40948 IP address blocks: 104.152.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6b:56:a1:25:da:6a:33:8e:51:49:30:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Jan 5 02:00:31 2026 GMT Not After : Apr 5 01:00:31 2026 GMT Subject: CN=fce67b8b-9d02-4855-9136-03e5355007cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:69:b2:81:f5:ad:2e:6f:96:29:cc:25:2d:72: 5e:f0:4d:4d:69:a5:b7:ff:38:c0:98:ef:78:eb:c1: e8:8a:1f:10:fc:91:5a:43:1e:63:69:f2:07:2f:5c: 93:d4:6e:d2:15:2d:5a:26:c2:86:f1:fd:0e:ec:2b: ea:81:50:1a:6e:b8:87:d1:08:12:fa:4d:f1:4d:07: 54:9f:54:8c:52:ba:7e:da:be:be:46:31:3b:38:b2: 89:50:0d:24:6e:65:ca:24:cb:6f:8c:34:5c:9e:1b: 0a:79:65:78:6c:12:10:29:8c:51:cc:3e:02:10:5c: e0:3b:b8:37:b4:a1:20:e0:f4:1b:fb:95:d7:ca:1f: a2:86:44:4c:ce:ee:e0:c5:cf:f4:ac:03:49:2a:b6: d9:1d:19:50:fe:dc:b6:1e:a9:b3:a0:3b:c7:b4:7f: 68:b4:1b:2e:77:01:70:9c:3d:2d:86:c8:f6:f3:fb: 50:0d:5e:87:90:1a:6a:ce:93:5c:04:bc:cf:c9:b5: 1d:49:d6:7b:38:7f:4e:bd:26:b4:55:89:0d:1a:b4: 95:66:b4:f4:b5:64:dd:41:f2:98:99:ac:19:d1:9b: b8:86:4c:0b:5e:a1:24:31:a0:a9:ec:49:48:c9:0e: b1:06:79:9e:20:58:d6:34:b9:25:0c:98:b5:36:97: a8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D6:F2:9E:50:62:BB:1A:E5:1A:85:40:30:4F:5B:15:DF:45:0E:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/94da6f54-9255-374b-a408-2e35886a522d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 104.152.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:d4:9f:d2:bf:81:15:21:68:4b:d5:4e:25:f7:5c:1e:6e:00: e2:3e:f5:ac:53:88:40:25:66:50:ef:15:f8:60:ce:6a:79:fc: 90:64:2c:02:6e:9b:22:be:b1:1c:47:78:61:39:ef:2a:aa:7f: 74:f4:0b:76:3e:6e:92:12:ad:f8:58:8b:9d:f0:85:e6:b2:c9: f2:b4:48:cd:f9:53:95:f7:07:78:58:92:9a:05:8d:58:cf:97: 18:f8:55:b7:72:2c:5a:63:cf:c3:bb:80:7e:bb:28:c6:fb:7d: a3:1e:14:58:cd:6f:5c:cc:49:12:23:4b:a8:2e:9a:49:be:29: 33:d6:db:46:03:07:c2:7f:65:62:42:5d:9d:79:8c:85:39:ce: 4b:e2:7e:6b:08:9c:1b:20:00:b9:8a:2e:d5:75:ff:ef:b3:e3: 07:41:64:02:74:95:b7:51:f3:e3:fc:4a:1b:4f:1e:ec:ef:47: e3:e8:7e:4d:0c:f2:fc:56:5e:61:25:af:4a:26:4b:84:44:12: b7:27:a1:e4:eb:e2:c0:b4:5f:cc:15:aa:21:e2:30:70:2b:be: cc:ea:0c:c6:5c:84:90:9b:2b:15:8f:ac:e6:a9:4e:1c:ae:0b: 52:4a:88:f9:3e:e1:43:b6:05:29:e0:cc:46:6d:c6:81:57:0d: 72:31:89:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExrVqEl2mozjlFJMKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI2MDEwNTAyMDAzMVoXDTI2MDQwNTAxMDAzMVowLzEtMCsGA1UEAxMk ZmNlNjdiOGItOWQwMi00ODU1LTkxMzYtMDNlNTM1NTAwN2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42mygfWtLm+WKcwlLXJe8E1NaaW3/zjAmO94 68Hoih8Q/JFaQx5jafIHL1yT1G7SFS1aJsKG8f0O7CvqgVAabriH0QgS+k3xTQdU n1SMUrp+2r6+RjE7OLKJUA0kbmXKJMtvjDRcnhsKeWV4bBIQKYxRzD4CEFzgO7g3 tKEg4PQb+5XXyh+ihkRMzu7gxc/0rANJKrbZHRlQ/ty2HqmzoDvHtH9otBsudwFw nD0thsj28/tQDV6HkBpqzpNcBLzPybUdSdZ7OH9OvSa0VYkNGrSVZrT0tWTdQfKY mawZ0Zu4hkwLXqEkMaCp7ElIyQ6xBnmeIFjWNLklDJi1NpeooQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnW8p5QYrsa5RqFQDBPWxXfRQ5TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvOTRkYTZmNTQtOTI1NS0z NzRiLWE0MDgtMmUzNTg4NmE1MjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJjEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvUn9K/gRUhaEvVTiX3XB5uAOI+9axTiEAlZlDvFfhgzmp5/JBkLAJu myK+sRxHeGE57yqqf3T0C3Y+bpISrfhYi53wheayyfK0SM35U5X3B3hYkpoFjVjP lxj4VbdyLFpjz8O7gH67KMb7faMeFFjNb1zMSRIjS6gumkm+KTPW20YDB8J/ZWJC XZ15jIU5zkvifmsInBsgALmKLtV1/++z4wdBZAJ0lbdR8+P8ShtPHuzvR+Pofk0M 8vxWXmElr0omS4REErcnoeTr4sC0X8wVqiHiMHArvszqDMZchJCbKxWPrOapThyu C1JKiPk+4UO2BSngzEZtxoFXDXIxid8= -----END CERTIFICATE-----Generated at Mon Mar 2 14:38:36 2026 by rpki-client