$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/11f297f1-e2e1-3d90-99a4-085567eae50e.roa File: 11f297f1-e2e1-3d90-99a4-085567eae50e.roa (raw, json) Hash identifier: cGk8brNGizJW8A6NNCCj4vgjdC3VkjQqJIX3Hf3zxqw= Subject key identifier: FD:FD:D1:B8:21:7C:70:E3:E6:EE:8B:DE:65:CE:DF:F5:F4:96:24:94 Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F4328584D55BA48702808164F9C631DC0 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/11f297f1-e2e1-3d90-99a4-085567eae50e.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 201814 IP address blocks: 104.245.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:48:70:28:08:16:4f:9c:63:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=cd53b385-349d-4191-bb12-f32756628f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c8:fb:41:f6:d5:3a:b6:70:a0:c3:3a:8c:6a: c7:d3:fb:a1:f5:0c:7f:c8:66:91:0d:d4:a2:0d:dc: 08:f7:ca:b6:d3:62:74:57:29:23:6e:f6:75:1f:a0: f4:ea:e6:a0:86:ba:58:99:bf:59:21:8d:da:24:72: 45:97:58:10:34:61:b4:47:03:65:78:b7:44:89:b9: cf:f8:12:db:fb:a1:17:3f:f6:8c:63:cc:a5:ce:4e: bb:ad:46:a5:fe:3e:aa:47:6f:fb:3f:b4:7c:68:19: 2c:39:7f:c0:7a:48:61:cf:f9:ba:5c:3e:7c:3b:2e: ce:88:cc:36:2e:9c:b2:20:76:6e:fd:cb:02:a8:2b: cc:64:b6:c5:da:85:40:2f:c3:3a:7c:42:b0:0e:41: f1:69:4a:db:0b:07:b6:99:58:cc:9d:f7:56:1c:1c: 32:6e:57:3e:be:57:5d:68:32:1c:00:c7:29:55:cc: 20:56:58:6b:3f:35:2b:26:81:05:37:a1:c7:00:80: 39:30:66:c9:99:b0:4f:02:e7:20:6e:dc:86:d7:6f: 7b:05:7c:d5:c1:0e:eb:94:16:fd:82:12:5e:9b:fa: 6a:26:dd:64:23:c3:4a:19:d4:86:56:62:e6:a4:02: 36:7d:02:6f:fc:f0:06:d8:91:96:ce:ea:b2:d4:ba: 59:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FD:D1:B8:21:7C:70:E3:E6:EE:8B:DE:65:CE:DF:F5:F4:96:24:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/11f297f1-e2e1-3d90-99a4-085567eae50e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 104.245.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:46:59:3c:7b:0d:07:21:ab:01:bc:ca:29:50:28:99:27:d4: 8a:15:87:1f:55:b3:73:46:53:67:6a:ed:e4:fb:10:a2:a6:d4: 1e:21:1d:6c:05:ca:13:b3:74:52:ec:a8:b7:6c:b0:b4:d6:8b: d8:cd:a5:35:e9:01:c3:02:6e:b1:56:0f:c0:33:95:6f:ce:54: e4:c1:58:fa:0d:19:d8:0a:b8:cd:fc:c4:73:43:87:95:94:5b: ea:ab:07:79:a9:b0:54:a1:e2:37:c6:c2:e8:5a:4b:42:3b:be: d7:f2:d0:e0:23:b9:81:4b:04:4e:a0:86:f4:e7:67:cb:49:2c: d1:c7:ea:af:51:3e:4a:9d:e5:a7:e9:be:d3:db:47:b1:c1:7c: 11:8e:95:22:f3:25:88:b4:fa:2f:ea:95:55:ed:44:6b:25:63: 32:7f:4e:c2:52:10:d6:00:bf:cc:0a:fc:13:0e:48:40:77:f6: 17:70:38:1c:39:32:8f:d5:74:c7:f9:8b:ae:db:71:61:fa:e4: fb:01:40:76:77:18:e4:d7:87:da:2b:00:1e:08:37:53:15:61: fd:16:b7:36:f7:15:be:0f:bd:d4:de:e6:9e:67:3f:61:a6:3a: ec:d1:f4:96:29:1c:ca:bf:a8:cc:92:ef:c6:04:71:78:c5:6a: de:02:4a:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VukhwKAgWT5xjHcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk Y2Q1M2IzODUtMzQ5ZC00MTkxLWJiMTItZjMyNzU2NjI4ZjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsj7QfbVOrZwoMM6jGrH0/uh9Qx/yGaRDdSi DdwI98q202J0VykjbvZ1H6D06uaghrpYmb9ZIY3aJHJFl1gQNGG0RwNleLdEibnP +BLb+6EXP/aMY8ylzk67rUal/j6qR2/7P7R8aBksOX/Aekhhz/m6XD58Oy7OiMw2 LpyyIHZu/csCqCvMZLbF2oVAL8M6fEKwDkHxaUrbCwe2mVjMnfdWHBwyblc+vldd aDIcAMcpVcwgVlhrPzUrJoEFN6HHAIA5MGbJmbBPAucgbtyG1297BXzVwQ7rlBb9 ghJem/pqJt1kI8NKGdSGVmLmpAI2fQJv/PAG2JGWzuqy1LpZVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP390bghfHDj5u6L3mXO3/X0liSUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvMTFmMjk3ZjEtZTJlMS0z ZDkwLTk5YTQtMDg1NTY3ZWFlNTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPX1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARGWTx7DQchqwG8yilQKJkn1IoVhx9Vs3NGU2dq7eT7EKKm1B4hHWwF yhOzdFLsqLdssLTWi9jNpTXpAcMCbrFWD8AzlW/OVOTBWPoNGdgKuM38xHNDh5WU W+qrB3mpsFSh4jfGwuhaS0I7vtfy0OAjuYFLBE6ghvTnZ8tJLNHH6q9RPkqd5afp vtPbR7HBfBGOlSLzJYi0+i/qlVXtRGslYzJ/TsJSENYAv8wK/BMOSEB39hdwOBw5 Mo/VdMf5i67bcWH65PsBQHZ3GOTXh9orAB4IN1MVYf0Wtzb3Fb4PvdTe5p5nP2Gm OuzR9JYpHMq/qMyS78YEcXjFat4CSqo= -----END CERTIFICATE-----Generated at Fri Apr 17 11:23:46 2026 by rpki-client